
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json)
Hash identifier: LRvyT8fLXjabWgWQQQLwYIzRGqclF1FHkTvagpUtZmA=
Subject key identifier: EF:D9:7A:74:91:70:BA:0C:46:0E:11:F3:3C:F7:8A:07:C4:8E:F9:9A
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 01A0C256299260226FD709C4D6B343039871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
Manifest number: 1A79
Signing time: Mon 21 Sep 2026 05:00:21 +0000
Manifest this update: Mon 21 Sep 2026 05:00:21 +0000
Manifest next update: Tue 22 Sep 2026 05:00:21 +0000
Files and hashes: 1: 1--f8TOFOHJxy913_bnxbbB_I8Ps.roa (hash: wDKAE8eJy4a/Xju9oL+J32sQIgyfZxer9kQNnDKALh8=)
2: 1-jH0g_JDLp_7206NgV5uijHSTJE.roa (hash: LRjP11l8Yg7jbG4bbfhfNEvQDZIpDubQ+TvWhkwjrcQ=)
3: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: XdfUXBk3SzCulRwicuJpKBOJjz1mLXeO0w3QATPn+jA=)
4: 1-zOd1kumaIlRrXPMfMdhndo9duk.asa (hash: J313kMfLz/jeTLF4rt+b3BkZqWQAyhsRwo4qFMMY3+c=)
5: 3GG8eWEP0AsTR5hlJBndfjSVqXE.roa (hash: OqQ6t5k1StJuUPb2wymY353zmLAJ5m9iQ1cfSGHhatc=)
6: Ew6t29Ei1xqX6fCJJvzPjV0QQx8.roa (hash: JiMbHLWrOkAjKxV/HgN8hcqfDizA3AaG0pNVT8kgBVI=)
7: OS72UUjy1jIbO6SLm4_mGk1QjoA.roa (hash: JCjobLuVUg3x2yIR7Yj0jA3s02kdH2wYADkCYAZAm6M=)
8: hlYcdx1ybU4O_N_wWLe8kEQOPAA.roa (hash: g8sRkVv7AmG02gcDiKwncGvtRS2uuD1b8FmdkJIrmVQ=)
9: iY5E0iZ2YmwSRo1oZbuozkzcREs.roa (hash: XAB0LIhnvafntszSPTz4cfq/KAQxwohiu0F5a96UkOU=)
10: icspBYCC63q1vNy_EsXnZosS_IU.roa (hash: 3NUI/DqhsJ55TwYWG35Se4xjLYr3z+ZTAvaw34Ss74M=)
11: qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa (hash: MHfvuh3eLEasmU8bZ+QtTWQpVIX8pvTM+Puzp/lNHV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:29:92:60:22:6f:d7:09:c4:d6:b3:43:03:98:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Sep 21 05:00:21 2026 GMT
Not After : Sep 22 05:00:21 2026 GMT
Subject: CN=efd97a749170ba0c460e11f33cf78a07c48ef99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:8e:7c:c3:70:e5:5c:80:76:9f:d0:58:88:
95:1f:db:d9:57:3c:57:29:f7:72:1d:c0:65:41:93:
ed:11:36:17:8f:7a:b1:d3:9b:d9:ee:73:73:96:29:
6c:ae:63:a2:ee:bc:b0:f4:60:75:45:26:63:f1:a4:
81:43:47:b8:bf:af:74:0a:2a:ba:25:a6:03:c9:cc:
a6:50:b5:2a:71:fa:12:8f:0e:e3:86:24:f3:de:c2:
9f:92:ac:65:ed:98:bf:0f:75:b7:52:83:a6:b7:49:
bd:ac:25:ba:9a:1e:87:c6:b9:79:01:e4:a0:05:15:
6f:69:aa:21:eb:46:f9:1f:29:2e:da:d4:b7:6a:b5:
de:ca:26:9f:48:19:f8:9e:54:a5:52:6d:ba:8b:e0:
c7:ec:a7:3c:97:df:e1:24:61:ea:d7:7f:07:e7:37:
c2:d0:33:e3:10:a9:cb:9b:a2:37:9d:87:33:c0:48:
9d:a2:04:88:2c:21:55:c1:0c:0a:de:a4:d3:43:7f:
23:7c:2f:69:4a:28:7a:fb:42:5a:10:eb:ad:5b:84:
e0:5f:45:02:ba:d8:3c:e4:e2:fb:00:bb:6d:dc:4e:
d6:b8:9f:52:85:78:1b:69:da:6b:78:9d:f3:fc:36:
cc:19:20:b8:6c:c8:16:da:c5:83:17:3c:bb:0d:48:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D9:7A:74:91:70:BA:0C:46:0E:11:F3:3C:F7:8A:07:C4:8E:F9:9A
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:21:d2:0c:a0:a0:ac:61:1e:17:cf:ab:aa:be:0b:8c:cd:49:
54:72:ee:7a:cc:98:7f:52:82:90:03:18:cc:fa:78:80:9b:51:
85:c9:09:ee:3e:6d:eb:46:9c:b7:97:ff:66:cc:5d:1a:75:62:
33:b8:66:d3:4b:a6:55:22:6f:ba:8c:d9:a5:cf:5e:49:0a:18:
d4:5b:cd:77:f6:b7:2a:36:16:93:11:45:21:81:3f:b9:2a:a1:
dc:41:54:0d:e6:b0:aa:39:4f:dd:d7:54:0f:dc:06:e2:82:f1:
84:30:36:0b:ab:ab:0f:cf:1a:2a:99:ff:8b:2e:03:a6:38:f9:
85:3c:2c:81:7c:dd:d4:71:7b:29:f5:b8:c4:82:a3:29:71:a6:
9f:5c:d6:e1:65:21:7a:47:e4:30:94:f9:75:a0:93:30:cc:6c:
f2:f9:a3:38:6d:2e:0f:a3:db:6c:b7:1a:ac:9a:c6:c5:5a:0c:
6e:61:8c:88:79:8c:91:ff:a3:f1:6e:48:3c:9f:cd:75:ee:48:
63:fe:7f:bd:ed:e0:3b:28:6d:68:e9:b8:73:53:8c:64:df:a1:
37:91:5f:fe:af:f7:e5:be:fb:29:61:41:c1:74:94:1d:44:1f:
e9:3d:4b:76:22:de:86:0d:2f:63:3c:06:34:9f:9a:ff:55:fa:
88:cf:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:24:32 2026 by rpki-client