
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
File: _dbuAQuZCjNzV1a0_i89PCZx3Z0.mft (raw, json)
Hash identifier: J23Get5fqD7QdWFjxt9THb726+NP9h18P/5h6nZ4Q6s=
Subject key identifier: 8D:B6:AD:93:3D:A3:D1:09:00:87:20:B3:10:C8:BA:49:4C:ED:BB:04
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01A0BFC33BB21680B37D796FC86E1529B3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
Manifest number: 0C19
Signing time: Sun 20 Sep 2026 17:00:38 +0000
Manifest this update: Sun 20 Sep 2026 17:00:38 +0000
Manifest next update: Mon 21 Sep 2026 17:00:38 +0000
Files and hashes: 1: 0V41IrPL9797nvcWEWG2FOZRVs0.roa (hash: 2ssmd6CA4RuDZaqZAWLQB4prRBUYd7qy+OjXYkfyY8U=)
2: 0mnvSdoOq2Np1ajRjxABIHng1iU.roa (hash: uW7MfVSOJl8bfntjxT5K/usy+W6G+cF+ATrwdjzTAsE=)
3: 0webfAWJBJhCymTfG1VV_l-6GdE.roa (hash: CU8VIzZUokgtCWuCy3VjIwnuAfnY5SJwkztl+JWVmLk=)
4: 2jmGEk4OVcICepreDNCO9eAT7tM.roa (hash: BFDa7KtVd8lP+Nx0xYbBnf+5dOJVnOedVDkc++Nuqto=)
5: 2mwrv0wD9Ii-22EalCpS3LzNa0I.roa (hash: yXx5oyiBSRzMOJnnZeVF3Q5wlRyj2BpyADDVZrn3lvk=)
6: 4pV68l2U_OBI_KTxAoUjIOcjUzI.roa (hash: B8v0b/yVI8T3veKWEXtdL1LMqczUDHMKi7SYPYiViEE=)
7: 6EvVe1iSCny24nuXxCceU1INn48.roa (hash: sr6pla8qayIY/DqIMDGG8xE9TOAtMeSL1wSO8tlpa+s=)
8: 6N99IBxeOoNouvWvldkTfkLCHBM.roa (hash: FPUrB9KogOAZBQW/PgPueBWp/lZvjFKhVmz9dPu6AUY=)
9: 8B2OpR0uRL2FMmC1O2ZU7nlPPyc.roa (hash: poPicSh/MHjn+zNOSYV7bGTSnbO9NymTUGa9CPZhEBE=)
10: 9_iEf91RWS6Or4zXi3xHqglPXuU.roa (hash: nfq16D2TXOKtFwSZlC1l0j0NZwkuSugZlNqjJes2gvs=)
11: 9euNyWZww10dUcwium3SKofSFMo.roa (hash: +JOKxowiMT05XyUwYWDe27B5gTyN5fMXDPrSBu4Dh0U=)
12: 9ynuhrMRe01fV95Cyr9pzp74us8.roa (hash: CPCA7Ls7etQTzU55irYgM6cXEy0L5hugJu12dcKcECk=)
13: ATMhPpa483CrpmIs3jmKf4Lfb9Q.roa (hash: A86PQ/iyszG+BWtmyVBkR/FpnfeQe0gn6PRItvHkIl4=)
14: BKueLsOieGAX9FvG3x_kc_Syo6Q.roa (hash: +P5r5MnLAE+8y6qPH4D2f3RLLlxkb9rqjIzieNdiiu8=)
15: C4VDDLP3JAcEGxzpnk2rLngwLKM.roa (hash: ezMl5H9+rFaX3DPnZBbhAph0MJGwxBItopj9xyJgOS4=)
16: DaRPtN-iRI4PSG8nc9VeuMuPHVs.roa (hash: XscIXOZDUssyO6/A3Rjz1yEV/LM4VTXT03e5bCTp2JI=)
17: DsEZUka67hhfO45y0N6lQLEhbNg.roa (hash: LO/Q3S/bHcnl/lLseLM9cKTvP0KfkNsY1jmwaQR9rFI=)
18: GLUy85p7VAjXBh9Flqb-k7SxKms.roa (hash: KFpZaWuTqKAMlOo6VTrDxS2jbsfzEvFfCW6Kj5PqghI=)
19: JQyOnqpGNBPQEPAwlMww21vi4-w.roa (hash: jQkSRE1wjqlaqj1a5xqclo3SlJv480zaA7qkOH+fatU=)
20: Kbw2jQDKKUAch--LSnsiSysNhCo.roa (hash: pVoIQCTA6UweJb5TuDljAh9meCCtnKx5/7ZRkaiybCw=)
21: Kr1i-ZnySlSmq6BJp6qRWH4dkZo.roa (hash: zUSTD6UjYoCFyh+6Fa+acZar8+oT8zvNBGsiOc1YI1k=)
22: MOmZKC5S1ks3r4lhX7ECzDs0kVE.roa (hash: K2zRk3RmxZ15QcwuR8MLsUcx4p8qMykaf3Ogb1jzldU=)
23: NG9CUSktO1msekZw9a1EZVWAEs8.roa (hash: /FXKoISQTR9dI6X0WpRKq7Dp9cupm3YGG13vpCFZWMQ=)
24: N_2U4grFu5nxrIC9KlTuX1giSbM.roa (hash: hqGwhEQ2nYAefg3hkWNmS4mDHtwG/bdG2tIurSMQLtE=)
25: Pq1wHGL74BEeLVteAs5lNhrtrQM.roa (hash: qDOFqoYVDkkHM0mfgfSDEdkESOTUNO4RV11uRnuEsT8=)
26: Tr29gpXA1jmqDBgka1nUTKOJCJo.roa (hash: hh8K875PIUFVA9mwH3l4qIdJG1FDE5Nj1NE6V/fpg5s=)
27: TzY6AHJU7GxQ_2lGsteWo_Zu6VY.roa (hash: BR22m/9Pfevw9R3uzbROoQfrnEnpQGFkpw8PiR4jomE=)
28: VMVAg1mMGfwQjKGmhI2WJPLGw6g.roa (hash: sbJO9slojJrSc3KUrqgi5tvXF70X4AOB6i96b8KWC70=)
29: Va_MfV2xGChXe2w-ujnKmKCX7rA.roa (hash: SUriIB/QcSARZo6IB0o6EwANvwMVBodokTc+4FO4rlk=)
30: YXXUHYwrWBeSR2VG94NV5vqHNlQ.roa (hash: Gwnm4Vsq48kLU0hCIA+oRgHTCilqqqVQhr/04UYg0wU=)
31: ZdmVPyHws7wLbvYLCWlfPQr9mo4.asa (hash: x1rd8+Osm1ltcmtxto09G68w2nA+9BXwU0Gudv2yBt4=)
32: _dbuAQuZCjNzV1a0_i89PCZx3Z0.crl (hash: 8Vs1Iy9bdzBjgd/ksKC4VYzderMH5L4B2wr16Mg7ie8=)
33: _uhmDxy0bPKVDKE3_BuDsYOFfc8.roa (hash: Ej7uUDNCVZsLavhouVACJHkTzDzHQuvQQWR3StpOuic=)
34: bDqehv-L-gpmy2f6tCgYpNfSY8g.roa (hash: q/ItbJkPl3hPXHnLP+1Umv3w88TYukseKTWgdWG5dUk=)
35: i-hpQGQD_olSPkbON4yJ260Gn4k.roa (hash: VMX6kwlqgvD1HXkveYx6V7xEhwbg/d6QkZsoa+esubE=)
36: iOFBBEucpLe9YmdNyAo6szbNfu8.roa (hash: GDyyJB6XxA+2hW5dQo4bOWL/P6vz2lzwT7Z9ivIB5e8=)
37: jWjO8-wSvBOssXbwVdeDWOB3qHA.roa (hash: HFg6SCICEBCBfT3PeWcuYl6The082NB7uewpDCPBR9Y=)
38: jevtop49ZKMuRcRaPkGaEAbTEkk.roa (hash: QjyMRI/Mc8K1IMpgCKVrAsTAnEAdXqZBMcNfsE25sYI=)
39: k6vmeq6IbV4zyzVrF0zeQXlpc6c.roa (hash: F4dOSuK6+r+jv3VvsH55u1uhJuPtq3hth/malk/i538=)
40: lYdRv68QBXjRttIYgVZzJoyauyU.roa (hash: jql5Zexhye487EU51RRPsc6wqZg3movkURm8VfWxyu0=)
41: nU5CDN2WGtUSleKd7srRFrfbDEk.roa (hash: cwVMrEsXanlUoOBqTwjSGD/5fQxRrPQBN7g36AxdSMA=)
42: nfTwPQ3vFYQK-8uCHGxl0c1ZFos.roa (hash: RD1NNAQbVUTLFIC0p8IpyLnW0lNI6MJeVxWZuDg6dNQ=)
43: o4lWv0LTRgPVdk5_FDzu00CQE4o.roa (hash: TlyDKYcMYDLXc01RpmsEuHDeSoE/K+GLiN11uaTR1mI=)
44: oDeQkGiiDpeW8Fb417JF-HeUY68.roa (hash: RfpJKZvP9NXaT8zUBt4vh5O6YG2vInwoG0F+j91Wx8M=)
45: pIP-J3Hr0bjQHlp_icnps7koRX4.roa (hash: wHGf3sOGDCSkFAvYxU0RGmIHZCDG9ji0dNgVFOg+Lwk=)
46: pUzPMt6BClGR1jFtNbviU7uarko.roa (hash: sTTxUsOajdJkBsH0LES6qRuCFvwILKUemPpUZvl8VgA=)
47: qEMGytWik2DoEBSunWlsAAW5JgQ.roa (hash: +olxdTWs4qt18DJ1bRxrfArORMjXdrDBommXdamDh6U=)
48: qdsgnJLfsFWH33m2j8fQRH_oBc4.roa (hash: 14/o0pHoZE4Ok/K+TgqTI/JKDxsbxv6pE8FKQiS3VWI=)
49: qt-VylqqZXmuhP5jTDffqyTPIeQ.roa (hash: NBYMZ8I2bI+aHaT/8renW87P2lw9r3jn3jIl3tUx06Q=)
50: rDQ-WFv7FDAqr0cbI_4MO7hJii4.roa (hash: J39PyKLqvzHrXAZhA3OlBu2zPyXmjRuY84Ppooaj7xg=)
51: rKzCV3qhqu1jLwpYK4I2MJzM5sI.roa (hash: umG/JZ3YnlzuwNb541YIz1vycxqQQRaiCRUFhZzfyvQ=)
52: sB-L4JrKA9D3H7uMQdIKSAlPulA.roa (hash: NJvVl9eks4BHzKayTTKdpdPVy4jCLKYpuFF0TROWgBo=)
53: svwlxCw6x8aLg32dvOkpW_ij20A.roa (hash: WuukgvNZpJW0D6P5ULOewj5mtR4xQZ8fxZG033GhXZs=)
54: tIxWkdRjQM6AUyf4Fw_Xzyi3joY.roa (hash: jNYZxsHoHaK1jILM9/oCfLoPW92uI3bYlyUW81wDh3U=)
55: tVLBynseYuOMdYlyvWgVoSg2cm4.roa (hash: 7PKUWnEbOhh4JsQVjHSmYDZuYa3TgU9j80nH25oP8cc=)
56: ulFl9xA3_r04YuUSK9eoNoTFJKk.roa (hash: isVq8MJvxi135zQJ1rz5EGzvGDurQFrlBVCGVWBIULU=)
57: vRnOd3PnfHy_jU5pZ4WIsTYRCWw.roa (hash: 7FlXvhfa90lex347GsLnc36ToXN40osfZPSoD2JqSaU=)
58: v_QVsHcgrtNdRvUzZHUMbVBLqWQ.roa (hash: OPqb//I3XcXtiQdXp1SgTW0v2Oirred4OSIVhm80n00=)
59: vyQV9XKLquyOTEUcjaYGj-gmJlY.roa (hash: ZxbS06oju48UIMZkoTdqvqbm+RzA9DpQpzPigYDcfuY=)
60: zFna-BoaGJdoThTqDyocBjbxh7c.roa (hash: gtBmRdu7997d5OMFKSqKQSnnlDKzakUC2ak//FUPRGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:3b:b2:16:80:b3:7d:79:6f:c8:6e:15:29:b3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Sep 20 17:00:38 2026 GMT
Not After : Sep 21 17:00:38 2026 GMT
Subject: CN=8db6ad933da3d109008720b310c8ba494cedbb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:46:ab:19:34:22:77:6e:fe:6f:3b:7c:13:
b1:de:57:da:ed:2e:a0:46:31:7f:7f:ab:cd:b4:39:
0a:93:32:7b:ff:d0:f9:1e:82:f1:11:f2:5c:4b:3c:
c3:96:ae:b9:5d:ff:cc:4b:23:1d:da:8f:df:16:79:
ae:85:1f:73:f4:b3:1f:3b:02:ca:9c:34:1a:a7:60:
0b:10:aa:42:05:57:a6:ca:b4:d8:80:01:47:43:6b:
e7:38:70:fb:b1:97:ce:9f:bd:6a:b7:96:71:2d:29:
72:a5:4f:52:06:62:fd:d1:b4:22:2d:ef:2f:09:85:
8f:74:74:03:ca:92:70:a1:51:16:49:e5:42:b1:ae:
c5:a8:fa:59:49:cb:d7:59:e4:35:63:88:d7:40:76:
b0:41:64:c8:7a:03:d7:ba:3c:e4:bb:5c:4c:75:33:
f4:0d:14:ac:8c:34:b9:10:55:e1:8b:db:c7:f8:f2:
c1:47:7b:42:d1:3a:59:0f:d5:38:9d:92:a8:16:16:
c0:43:86:16:f9:79:2d:4f:ba:1c:d2:e0:f8:84:6d:
46:22:d7:26:66:f2:ff:15:72:fd:cc:17:c8:23:b5:
fe:29:6e:08:22:3d:d5:08:20:4c:1e:04:79:9b:fc:
69:70:76:94:e3:17:86:ba:a0:e4:6a:8f:09:62:33:
40:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B6:AD:93:3D:A3:D1:09:00:87:20:B3:10:C8:BA:49:4C:ED:BB:04
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c2:b7:d0:3a:80:98:de:02:1c:a4:fb:29:93:e9:6c:07:31:
38:0a:13:4c:36:23:08:ae:21:b8:ea:4b:fc:73:91:2a:ee:5a:
e3:0d:59:b4:74:d0:15:cc:b4:1b:a7:53:ed:9d:0d:b8:56:40:
c3:36:73:44:29:80:34:6e:3b:53:fe:02:9d:a4:3a:bb:cc:9d:
8c:ca:a1:1e:3c:9b:7f:07:aa:2f:73:f2:f5:2f:a7:48:f9:fe:
95:7d:3c:88:72:e0:3d:f2:93:3d:23:ab:52:c6:11:0a:95:2a:
f8:7e:f1:54:ee:da:9f:0c:3f:76:c9:c9:1b:be:4d:10:4d:54:
a2:64:3a:64:9b:ad:28:39:8e:0b:fa:54:3a:d3:c9:f9:43:de:
1f:8c:50:d8:74:1e:45:f0:60:aa:dc:d8:8b:3a:b1:24:8b:a2:
4f:64:6c:27:1c:6c:a9:30:b7:44:aa:c8:fb:94:a7:de:cf:c2:
c1:ae:a1:59:6d:65:90:8a:e5:b7:b6:f8:68:fa:68:a2:b2:3b:
24:4c:ee:e8:33:68:20:fe:15:e8:fd:0e:ed:88:84:9e:7d:81:
6b:fa:92:54:32:f0:0a:68:2f:4e:5f:3d:56:32:1f:62:34:b0:
3b:81:eb:b1:cf:b7:22:90:85:5b:82:ba:ac:dd:6d:f9:e6:40:
95:79:59:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:26:10 2026 by rpki-client