
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier: dOlLHSaLToZZjCbIWyj4vwmLfUM/PNGPogvsmpYqN+8=
Subject key identifier: 9E:1E:02:5B:84:0E:33:89:BA:22:5A:7B:AA:C2:C3:71:0A:50:F1:EB
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 01A0D3832A03F81C54851A7D01FE48EA3F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number: 1A7F
Signing time: Thu 24 Sep 2026 13:03:03 +0000
Manifest this update: Thu 24 Sep 2026 13:03:03 +0000
Manifest next update: Fri 25 Sep 2026 13:03:03 +0000
Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=)
2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=)
3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=)
4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=)
5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=)
6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=)
7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=)
8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=)
9: MR0r-YpSmpXMsH4aFzpiE02h6bo.roa (hash: f4/OYvolIQCytH134KDQmcd51o3N0KRG0eWhuISvPcg=)
10: N3LKuwLRuVKYuFWiGYpHH9iTJDU.roa (hash: +3GE+YLKYRUGq2ir////J+cfvpEdtk9nror7A4YJdrQ=)
11: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=)
12: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=)
13: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=)
14: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=)
15: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=)
16: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=)
17: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=)
18: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=)
19: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=)
20: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=)
21: lh0U2VbssLYHQuI_GeDtu-78fs8.roa (hash: argvv+35DPV6sAk39FUkOQj04x5r0LiO2lKQbHUbgZU=)
22: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=)
23: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=)
24: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=)
25: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=)
26: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: O58CAstImKzRT0fj8G9ldRGrK4B30AerN2D+XkIgW0Q=)
27: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=)
28: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:2a:03:f8:1c:54:85:1a:7d:01:fe:48:ea:3f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Sep 24 13:03:03 2026 GMT
Not After : Sep 25 13:03:03 2026 GMT
Subject: CN=9e1e025b840e3389ba225a7baac2c3710a50f1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:26:0f:55:1c:c5:a8:44:88:80:cc:5f:23:
89:b5:c3:de:d6:66:81:5f:f4:86:49:de:cd:b7:07:
44:af:7a:1b:3e:37:f5:90:c7:e2:03:b5:2d:af:f1:
08:40:fd:4e:da:91:27:22:ef:23:0d:48:90:d4:4f:
a2:75:46:d8:3c:f4:ff:2d:22:6c:8c:d8:2b:1d:1a:
90:b6:d0:9f:43:96:d4:88:28:ff:42:7d:be:88:d4:
97:b4:82:f1:ac:40:a5:c4:3b:bc:e6:7b:03:3e:f3:
08:44:7c:f4:a1:82:af:8b:98:ee:52:5a:f9:d6:94:
f8:91:0a:4b:5c:e6:51:38:76:84:5d:40:55:66:60:
53:3f:b2:2d:ca:84:8a:3b:b2:77:f8:b6:3d:08:85:
88:db:e3:4b:04:b3:d5:40:44:6d:df:f3:12:fb:ab:
12:9d:1f:f2:91:0a:3b:ff:1d:0c:e9:90:d9:69:bc:
da:5c:95:f7:dd:46:4b:38:ca:f9:24:6a:96:e1:56:
d5:35:bd:f2:7b:fc:bb:11:8e:f5:ee:72:fd:ae:9e:
96:79:bb:99:43:a5:8e:36:01:ab:f4:ba:02:02:4e:
d5:c6:39:e2:65:9d:a0:35:c5:5a:a4:14:fc:53:43:
60:74:ef:e2:5b:d7:d5:08:ad:3f:30:3f:d5:ab:fe:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1E:02:5B:84:0E:33:89:BA:22:5A:7B:AA:C2:C3:71:0A:50:F1:EB
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ac:6e:3a:14:19:a9:f1:98:cb:b3:2d:01:95:bf:fb:76:22:
d6:de:1d:2d:1e:6a:37:9f:70:ab:8e:5c:54:5a:b9:44:19:88:
c6:d0:55:6b:47:02:25:81:56:30:9f:02:f6:e9:f5:32:4d:4e:
d1:3d:0a:29:98:32:3e:ff:94:d7:a0:43:af:d6:23:23:ed:27:
33:a4:a4:f9:6b:ae:5c:bd:3b:06:6c:48:e7:d8:b8:56:d8:79:
ff:bf:6b:2c:98:61:26:8a:16:88:b7:c7:e0:a5:da:af:50:24:
d1:a0:c9:f5:04:eb:11:73:b9:9c:28:dd:72:df:64:55:4d:b2:
37:59:08:2b:2c:ee:ad:1f:52:76:12:1f:f5:20:8b:a4:f8:c0:
cb:25:64:1c:97:5a:f1:8f:5d:58:66:6b:08:6c:fe:27:1d:9b:
c5:1c:78:31:5c:a4:23:5f:20:f0:47:04:74:e4:05:af:a7:99:
86:72:83:99:f8:6e:4f:a6:75:5f:a9:5a:d1:7e:e4:8a:f9:87:
01:96:61:f1:d2:32:da:93:4e:fa:41:f9:df:40:76:a1:01:74:
e1:f9:fa:c0:e0:be:b6:71:2b:6e:ee:f4:9c:c0:a3:e5:a4:97:
42:fe:31:44:72:f1:00:bb:f2:c3:18:b4:ea:6b:3d:a2:0e:ef:
2d:15:c7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:42:55 2026 by rpki-client