
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
File: 9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json)
Hash identifier: opIwkDEjEPngo0J8uxZ5As3qfd9KM4NQ2ubpzMeXKc0=
Subject key identifier: 98:2A:2E:0F:25:14:03:86:5A:94:36:DC:27:1A:54:5B:E5:80:EA:A2
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 01A0C77C68AE064E973DF18DC05C7C2A8032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
Manifest number: 108B
Signing time: Tue 22 Sep 2026 05:00:14 +0000
Manifest this update: Tue 22 Sep 2026 05:00:14 +0000
Manifest next update: Wed 23 Sep 2026 05:00:14 +0000
Files and hashes: 1: 1-TEmL5jbsK3PrKD8j52WhCZ0qeI.roa (hash: VGXlZbSa6lTTDzWoioV4bwS7txIXqiiihar6C8uT+sc=)
2: 7C0V1hBB2j4Z0mWBIUgnztA_FKo.roa (hash: NHdUGwrw8MVcwcj4xNyKJAEIGlAjm+SSRTtlFS7q5aU=)
3: 7HQY9fTNwYAKnHQdVkUdWkP7cMo.roa (hash: 02qwEv7GDGKTAQsJKIO+MBvgNnjaQx6u58d0cZrljtQ=)
4: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: 3/IDFKJjD7HYsu9l2JTBzrvtWz/DxR/dxLbRCn4f71U=)
5: DvDmZHxr7NLVC2ShFbjqDWMVPSU.roa (hash: HGxEJ7LQfFiHhcT+DYcnCzFrTwYKp05D1m1E5DMnD6I=)
6: OUHOzLFqtWz2bbGyeYwSXrj00Uk.roa (hash: nlfqukJpNrtb/c5u87BSEisv1zmW8J3zLBOfs6U7Nrw=)
7: RZj6Q6dbNwuwz_b4LiYbYjt7s0Q.roa (hash: rZ5431yDGBLhE9MGa187xIN7yECgb8/EV3ZIyUsR8Xg=)
8: WSPBUC21vET1uaZZlnbFvCFRchE.roa (hash: 3N3I5TdJSWNVy1VYKwR1h9RK2xmp3aVZDnmQUt1fbBg=)
9: WzC3ng1LgvNoGeAWK-E4mAth79c.roa (hash: in7OVP806sec7BG3P2bRg0+XxW/GuztBYg8LKPCWtFc=)
10: b-KOOCgewsVhwidcvQfpRRWqU7I.roa (hash: X+AfcL5bK9mDooKI7JczwqJxSPkb+6057fPwNRB9rIo=)
11: sp7cckHOAVZ1urLLSuO5BmgV-dQ.roa (hash: YprGBhX6AZyr1/u6kF21WaMH+OCGQvlx5wwg1Z8Rfhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:68:ae:06:4e:97:3d:f1:8d:c0:5c:7c:2a:80:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Sep 22 05:00:14 2026 GMT
Not After : Sep 23 05:00:14 2026 GMT
Subject: CN=982a2e0f251403865a9436dc271a545be580eaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:a4:9a:e8:b5:fe:c4:c4:df:03:02:1f:69:
c9:c1:08:84:0b:ca:02:0d:bd:72:65:a9:ab:3b:d1:
c8:fa:68:3e:31:b3:f4:75:f3:23:d3:c9:c4:80:dd:
0d:1b:4b:9d:9d:5e:f2:98:38:d1:e9:fb:a1:cb:94:
ca:ae:04:47:a6:d5:65:a1:db:ea:20:ca:c4:1c:55:
71:28:43:4f:81:8d:aa:3f:1c:61:64:6a:e3:46:6c:
d0:47:91:c6:c2:fa:9c:6d:43:3b:1c:32:16:6d:0c:
3a:59:59:fe:7f:6e:b6:ca:43:19:e4:16:73:55:80:
c0:d1:ef:55:80:27:86:5e:28:bd:e8:8a:58:a7:6f:
fd:fc:7c:d6:b4:31:cd:09:d7:1e:48:b1:5b:19:29:
79:1b:ae:0b:71:d3:31:e8:de:ba:dc:ef:f9:65:2b:
fe:f8:47:5c:87:80:3a:59:95:bf:6f:13:bf:db:1d:
7e:06:ca:ac:7c:2f:8e:96:38:b6:88:ab:c2:56:ec:
7a:ed:8f:3d:f9:50:ef:37:9a:3a:e1:0e:a6:98:13:
2f:6b:78:57:c6:a6:e1:2c:7a:cb:d7:f8:b2:0f:17:
20:61:f2:b2:00:f7:63:24:3a:87:28:73:c7:1a:5a:
8e:41:bc:a0:42:52:82:8c:49:c4:a3:25:39:cc:2e:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2A:2E:0F:25:14:03:86:5A:94:36:DC:27:1A:54:5B:E5:80:EA:A2
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:30:65:f1:b7:49:6f:f8:e5:b8:cd:03:16:01:70:ba:18:ae:
ba:ed:5a:93:eb:8f:cd:a6:22:fe:07:2b:dd:05:17:68:ac:6d:
1f:9f:f9:f4:3f:cb:96:fb:22:28:39:23:1e:51:b5:c3:e9:e5:
01:68:d2:9b:17:3c:a4:b6:6f:60:53:d3:98:c0:08:f9:e5:79:
a1:e2:8f:02:f1:6e:bd:0f:0e:b6:21:86:8e:d8:fe:24:1f:7b:
3f:cc:52:d7:65:87:41:25:a7:2e:67:ed:0b:0d:d9:82:3f:7b:
98:be:ba:1e:77:2f:d9:65:88:00:d8:46:5b:24:0f:46:b3:7e:
4e:29:69:53:33:b6:a7:1f:03:94:71:d7:b2:30:a6:f6:af:62:
ae:a5:3a:02:00:43:a7:e1:27:03:2f:eb:20:3c:b7:a4:32:a3:
ea:8f:87:e3:c1:86:a8:3c:32:7b:25:fb:b6:76:0e:b8:74:23:
7f:1d:27:cb:be:20:d3:e5:a1:4e:c4:93:ef:7f:0f:1f:0c:b7:
3b:76:e2:c1:35:84:b7:dc:f1:d4:dd:e2:db:4a:29:7f:5e:ad:
5a:21:c9:fc:0b:b5:32:89:ba:62:3f:06:0c:51:e0:44:c1:61:
a2:72:5f:43:1b:34:f8:f0:b8:11:64:84:38:7f:14:d5:a3:e3:
5f:3d:35:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:30:32 2026 by rpki-client