
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File: fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier: 3EIUZCTkQE8NIAwpQnmi2aVJ6tHb5O6VE+6WqFV8cR8=
Subject key identifier: 7A:1F:ED:29:DF:2F:51:6B:87:62:F8:E0:B8:3B:9C:B7:08:EC:FE:C3
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 01A11B2C42C7525A0050EB8E40F29D6F8C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number: 1AB9
Signing time: Thu 08 Oct 2026 11:00:47 +0000
Manifest this update: Thu 08 Oct 2026 11:00:47 +0000
Manifest next update: Fri 09 Oct 2026 11:00:47 +0000
Files and hashes: 1: 5SEARh8FCEo871iB7G34fI2Kpe4.roa (hash: m8tzPmTHhc1WTCJBLsi032NvSAtwSGzKJid4Omy7Mh4=)
2: BBgeRSvbUJdniHYX4zOgCcL8ACY.roa (hash: PLe5zqvpsl1axyHkG+6mNC+e0kIU1k+pLvAFxSmrAmU=)
3: GINhKUhmBtKk0TkbBRxpcNSu6zI.roa (hash: AfFS2Kk3dLWfENSQf5EMy1ayLLvaFvbW7wW4mzMrY2c=)
4: GcjqtR6eaVf9zI7HkXKSnJA3w6w.roa (hash: A4MXiuxUupC9OPHA/5SoE0YyMSrNretsQcoN/Jow0+w=)
5: UxGBNLJORbA-dUtSWizJlzSR79A.roa (hash: iSbtbOdc4793QhhKCfmSFXrRr7lnZaOwHAQy1vMKWow=)
6: VI1RqKQ9FUKeH02MRHEork21o40.roa (hash: wdOOodFBuGweEJw4KzRpikC1wFqxQBn+ps1AczyBeZ8=)
7: Yu1zmysTEBKjL5YYLMMg4Z_eWEA.roa (hash: KRT9o5BiHue3+B57E9epeCM9JN4yPOhoqN4HYF+hLEU=)
8: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: 4OKw2AxdfBtPxwEC/C4Uq99l3ME7ec5FbO11ZleBB0c=)
9: gxHDLsArjTiXKEpHJWMyRpUv3cY.roa (hash: dCObsibTUgKigew1g86RJZOg/QuYkH7A+/+pCpHO7nk=)
10: nuyOFFadfRrO-PHC8XAHyHRujfs.roa (hash: /f8gp/JEgFhNhBZOt0Zfqqd/+VO8Z7hxkEAexMPxwQE=)
11: u1nf-Thyw228svKtPSH3GG9Q0kM.roa (hash: zfCV7njN88258Q8HEPbW3g+KPAWnYoYtUU7LB/pH0+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:2c:42:c7:52:5a:00:50:eb:8e:40:f2:9d:6f:8c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Oct 8 11:00:47 2026 GMT
Not After : Oct 9 11:00:47 2026 GMT
Subject: CN=7a1fed29df2f516b8762f8e0b83b9cb708ecfec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:6f:c4:40:c9:b8:6b:cd:0b:23:fd:20:b8:
08:ad:c7:59:46:c3:24:41:63:10:92:61:a4:7e:b3:
6a:12:d4:a5:da:6c:20:0c:06:90:b0:eb:ea:49:8b:
32:81:1f:c7:97:8e:01:61:1f:49:74:3f:bc:1c:ae:
d2:30:34:7d:3e:3a:a7:16:97:e8:0e:d1:dc:18:c1:
2d:b4:0f:c5:e0:9a:48:ca:d5:e4:96:90:43:3e:f2:
a6:26:e7:aa:28:8f:18:85:b4:cb:40:aa:fa:5b:b0:
41:ae:02:01:4a:4a:2d:9c:a9:87:27:1b:61:98:c2:
1b:f7:0d:f5:b8:31:8e:63:57:1f:91:e3:44:5c:73:
f1:53:ea:3f:0e:b7:f6:4b:5f:1c:c3:69:66:e5:95:
52:19:90:a5:22:20:f6:93:4a:95:8e:11:f8:db:74:
5d:c0:a2:67:69:74:4c:cf:03:8e:31:7d:9a:03:9f:
13:63:f4:09:3a:b1:66:90:2b:c5:d2:44:d6:26:55:
f5:fc:5f:0e:88:5b:ab:9d:ee:21:1f:7f:60:64:ca:
38:63:b2:63:96:41:2e:af:ec:e9:0a:ba:fc:03:13:
08:30:c8:56:bc:85:29:af:a7:d3:4c:55:f6:13:49:
a7:df:f9:35:99:9e:44:20:4c:29:50:13:11:64:13:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1F:ED:29:DF:2F:51:6B:87:62:F8:E0:B8:3B:9C:B7:08:EC:FE:C3
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:89:0e:1c:8a:64:e6:3c:ad:b5:be:3e:65:29:4c:b7:ea:36:
33:d1:f7:47:30:1d:ea:76:3b:b4:9c:24:52:5b:f0:1e:1c:30:
2f:bc:bd:85:85:3e:12:b2:cd:9a:a2:8e:66:53:ad:ca:29:31:
b1:bd:a4:c9:0e:f4:9c:ae:22:08:dd:32:89:f3:16:43:e1:f7:
66:41:25:a0:40:17:d5:c4:49:69:22:fd:15:4c:5a:1c:38:31:
83:95:c4:e5:66:7c:57:7b:02:86:2e:9f:dc:ba:df:e8:07:67:
08:bb:ec:87:b1:49:92:8b:5b:12:11:2a:e2:1f:49:a5:cf:7d:
78:3c:c6:5a:47:fa:3a:70:7a:4c:b2:8b:94:82:79:9c:2b:9f:
50:c6:8d:e5:f7:bf:a2:24:2b:93:62:d2:43:2d:19:f1:f9:9e:
25:a6:7f:00:9b:96:2d:62:a2:7b:d8:20:9c:15:1d:5d:c2:cd:
cb:2b:29:35:ee:ab:8e:ef:43:16:f8:e9:bd:34:77:27:8c:ee:
a6:6c:80:3f:d3:99:30:8d:1e:4a:78:29:d6:65:32:7f:68:3b:
54:5c:be:9c:34:d2:8f:b9:11:26:c8:3f:a4:d0:80:cf:93:8d:
25:8e:aa:5e:44:72:a2:3f:30:8b:ae:be:57:6c:12:5b:cb:26:
fc:c5:5a:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEbLELHUloAUOuOQPKdb4wpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2MzOWQxODk5ZTY5OWJmNTE3NzQxOGVlMzgxNDg5ZWRm
ZjQzODAwHhcNMjYxMDA4MTEwMDQ3WhcNMjYxMDA5MTEwMDQ3WjAzMTEwLwYDVQQD
Eyg3YTFmZWQyOWRmMmY1MTZiODc2MmY4ZTBiODNiOWNiNzA4ZWNmZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nxvxEDJuGvNCyP9ILgIrcdZRsMk
QWMQkmGkfrNqEtSl2mwgDAaQsOvqSYsygR/Hl44BYR9JdD+8HK7SMDR9PjqnFpfo
DtHcGMEttA/F4JpIytXklpBDPvKmJueqKI8YhbTLQKr6W7BBrgIBSkotnKmHJxth
mMIb9w31uDGOY1cfkeNEXHPxU+o/Drf2S18cw2lm5ZVSGZClIiD2k0qVjhH423Rd
wKJnaXRMzwOOMX2aA58TY/QJOrFmkCvF0kTWJlX1/F8OiFurne4hH39gZMo4Y7Jj
lkEur+zpCrr8AxMIMMhWvIUpr6fTTFX2E0mn3/k1mZ5EIEwpUBMRZBOGZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHof7SnfL1Frh2L44Lg7nLcI7P7DMB8GA1UdIwQY
MBaAFHw8OdGJnmmb9Rd0GO44FInt/0OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAt
MDYzZmNkZDNhMDU3LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAtMDYzZmNkZDNhMDU3
LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4kOHIpk
5jyttb4+ZSlMt+o2M9H3RzAd6nY7tJwkUlvwHhwwL7y9hYU+ErLNmqKOZlOtyikx
sb2kyQ70nK4iCN0yifMWQ+H3ZkEloEAX1cRJaSL9FUxaHDgxg5XE5WZ8V3sChi6f
3Lrf6AdnCLvsh7FJkotbEhEq4h9Jpc99eDzGWkf6OnB6TLKLlIJ5nCufUMaN5fe/
oiQrk2LSQy0Z8fmeJaZ/AJuWLWKie9ggnBUdXcLNyyspNe6rju9DFvjpvTR3J4zu
pmyAP9OZMI0eSngp1mUyf2g7VFy+nDTSj7kRJsg/pNCAz5ONJY6qXkRyoj8wi66+
V2wSW8sm/MVaBQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:55:19 2026 by rpki-client