
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json)
Hash identifier: WrN9teu7GOv6QbKGdrl3IjicD4xYeL4yE4IpsTELqgo=
Subject key identifier: 7C:F0:D0:FC:15:9F:1F:93:35:4E:F3:D5:11:7B:25:C3:51:52:98:24
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 019CAA21B187E2EB822BEFD24E9B05994C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
Manifest number: 1313
Signing time: Sun 01 Mar 2026 16:01:00 +0000
Manifest this update: Sun 01 Mar 2026 16:01:00 +0000
Manifest next update: Mon 02 Mar 2026 16:01:00 +0000
Files and hashes: 1: 2YKU1ZIr104Nr6byLvuW2x4k40c.roa (hash: l9Z0hvVVupcLg12X1S4oqYfEgu/uSu//ojVLo4Xl8BM=)
2: 3KesuWRJfnUsYbbl-ge3IpkL8Qs.roa (hash: Zv5Dd9dzLjrbiTpK79whstk1Qsbu6/8Gy06b3Qo3wrk=)
3: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: wlPy1B1auegG8Tv3xf8ORZB3i2YHo7vY53qvLaba6GA=)
4: JJNZOR6X4rY_GOThrdjQRSXeXBg.roa (hash: /dhiOwJGHBoTv3UZTiG0d0sePUV70qGDTkgPdoGx4eI=)
5: Lw3ZnV1VpPuaAVB3OVp8SnNyb-4.roa (hash: nBTM7MD83GgGqveTlO6ZbvL/71fYF0IUBTMvcU7YdJ8=)
6: R6Ix8lNiS_uYFTygWXMHCyCDc5o.roa (hash: Tz7QLxwy5GRJiJxjhaOPZOg+bzVuulgIR4QG/ALYYl0=)
7: R6KX3i1jslogvVjCDoWFT1Rmjjk.roa (hash: 2Q0Js/nufktkQ84upEIwC+0JGgqAMTLNlh1Y/K35COU=)
8: WKFrMc20v_3_nvwsEfVZ3pt8UJA.roa (hash: YVkbD8xPvWUS+BrYDoNJSYcp18Mk8k9LeJimBd71qQY=)
9: n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa (hash: VOHhyMAChKmkHQdwMvB1QhPPBG/k5oVzSZrLsHZLtHY=)
10: qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa (hash: CHN/ugJO85MgbT7e9ultnWAy3Ba/jHBvIHUKvsxGSz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:b1:87:e2:eb:82:2b:ef:d2:4e:9b:05:99:4c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Mar 1 16:01:00 2026 GMT
Not After : Mar 2 16:01:00 2026 GMT
Subject: CN=7cf0d0fc159f1f93354ef3d5117b25c351529824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:1e:a8:d2:1c:9d:57:91:4f:f1:5e:38:ac:
53:60:47:7b:28:4b:ce:6e:a6:22:99:80:d4:c1:cd:
a5:d5:9d:78:37:c4:e0:89:32:ec:58:d1:f8:8c:39:
ca:7a:7d:4c:42:80:a0:b5:64:fd:17:cf:9c:7a:06:
63:b9:61:65:30:4f:9d:e4:15:70:f5:eb:c2:84:2b:
5d:8c:30:58:a6:c7:2d:76:08:14:f0:b4:e2:78:7f:
40:e0:9c:9c:c7:62:20:56:ff:fb:83:b8:59:74:fb:
90:fe:37:65:dd:b6:f5:52:6b:cc:a1:eb:0b:87:e8:
d6:76:bb:d5:dc:98:a7:9a:3e:c2:3a:c2:e5:18:a6:
53:74:c9:9b:78:0d:dd:ae:9a:41:26:46:00:7c:c4:
9e:50:6f:d5:fe:a4:96:f6:17:10:9e:ee:6d:eb:e7:
e9:af:2e:c8:dd:2a:cb:53:2d:d3:18:ed:f8:cd:a9:
09:71:34:c4:a3:4e:e7:9a:ea:05:eb:60:4f:c7:82:
8b:0f:14:f1:d3:9e:e9:85:48:c2:53:ba:ed:ba:a1:
1a:5c:de:13:d9:38:b4:2e:a3:f0:fe:0a:8f:3a:8c:
3c:85:ad:21:7c:2f:4c:b6:32:24:ae:01:56:17:d7:
62:f3:41:6b:91:17:96:cc:ea:36:ba:8d:2e:3b:01:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F0:D0:FC:15:9F:1F:93:35:4E:F3:D5:11:7B:25:C3:51:52:98:24
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6e:a2:64:39:89:18:33:2a:0d:24:d1:e3:97:c6:e1:a0:62:
76:b8:7e:13:dd:be:75:76:c8:ae:6a:45:f4:a4:83:19:63:dc:
16:39:d7:cc:f2:da:32:3d:e3:c9:70:94:bb:5e:f2:22:dd:5a:
b3:da:af:23:fe:5e:15:08:23:50:27:d0:97:4a:9e:08:a2:9f:
d4:92:f4:bc:18:c9:70:9e:58:3f:26:ed:30:7a:0b:12:4c:8b:
6d:e9:09:d9:0f:7b:21:da:2c:80:32:42:8f:32:5a:c1:5c:8c:
7a:7d:3d:4b:4e:f1:33:a9:b9:ac:8d:79:dd:70:c5:b6:9a:77:
42:8c:5b:4a:f2:47:ac:5c:94:56:b4:5c:47:aa:62:53:56:d9:
48:39:db:bb:6d:e8:b9:a8:4c:9c:f7:47:08:b2:fe:d1:09:fc:
dd:14:10:8e:40:b6:98:f1:9e:b1:f2:a9:5a:42:ba:e9:78:65:
a6:08:3c:43:dd:3e:b7:5f:5f:84:78:76:1e:7d:43:ff:6d:39:
bf:9a:bd:14:ba:6e:77:ff:fe:a6:42:92:20:e8:ab:fa:f2:3d:
8d:19:e6:2b:34:0c:ad:2b:8d:40:2f:bc:61:bf:41:2b:5b:f1:
e6:55:f2:37:99:86:80:c7:2b:60:89:c9:d8:6f:b0:d7:38:01:
5d:6f:86:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:03 2026 by rpki-client