
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File: IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier: tRxVjFs04qbs07llPH6gW7YEy+k9LT/IqOXtX1nlV+M=
Subject key identifier: 66:B4:99:9F:C6:70:26:93:27:18:C0:55:BE:0D:F6:FE:0B:C9:B6:10
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 01A0C96B7C230F9885B8909992156BC1A978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number: 1A77
Signing time: Tue 22 Sep 2026 14:00:59 +0000
Manifest this update: Tue 22 Sep 2026 14:00:59 +0000
Manifest next update: Wed 23 Sep 2026 14:00:59 +0000
Files and hashes: 1: 5OuAtNn0l8oe2em-i-_BkRqZL7g.roa (hash: vANhq4PdID8vPwTjDrBS+mXwABE8TzXjEn+JW1v5ExU=)
2: 7t8wgjK41lzapDs5jikBb5vTFhI.roa (hash: pNcEvtuu1o2hH2eMF61QKg8HYUfp8zz08CbYNkIzxoY=)
3: 9Ftjq_Eq-fyNHlW3WtWYGabPEOo.roa (hash: RROt5jRdMmps8oCVGgLhKd+7IXUEEDExlgWjv5fKF/c=)
4: CLa3JNQ78J4sBQQxh8GAqDQBO2U.roa (hash: Ptpr2OeA+6xL/czPzBtIc73Iw+siDZQ42cRR8gFjgKk=)
5: Ep3XVJ-_t23pza2fzpUEP6EDP9w.roa (hash: hoiisfSpISgCVFz1VXlgIuAWQt8MugVbvtDs45VkzlE=)
6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: Lj6cj9GS48CKA8jg0VX38ZvguJtZeAOKHow7QTdVrbk=)
7: LCWtZ049FoEMI5HAwHzYkDXlzb0.roa (hash: fito6QodYmgMrVei2hs3ovjCGv+4YYqwwa8c3/bKpq8=)
8: LRyKKJzTBliMx34ASYig8HFEXqY.roa (hash: HoiPjv5M2f1QZDzcqH+pau0FYK61g+kOdOsd3jsE6KY=)
9: N8_jgVETZSZgMZuy7Nmx901ELco.roa (hash: +zMjL/+nyqUTVAJWqSLmseSeJa4kcd3Eto/YmX3LSA0=)
10: QZOA4Cw_wJbFqn0TYzvO7eAmllA.roa (hash: urP1bJFXb+aibHUz3y+1eQjAxhXGlX3kRZlCoVkKq8U=)
11: VPsOpQzvuZLSVdRpUbPccqsH0HI.roa (hash: LNvdod+2moYgqIRIXig9MujeQAei+hV7OeUdz/G9T2c=)
12: VcaphQh4vHAVmPQId2jsNB2aQv4.roa (hash: 8e+QqZ403DJ8rCqJdp/PBd4JgkUk23mp8hqKweh0FDA=)
13: VrIgLz2PFQgd63beVRzJrL2SQBc.roa (hash: sXPs4ggxGfscBiESz3blqF00BOn9YaRW1W7ATtbBk3s=)
14: YEIy-4popFF63uiUMaqEq6MP2-k.roa (hash: gVX7vNZdK/HpIGkA/+EuEhyy05rdK5xmjj38Yi11muE=)
15: ZwVEwgiwITzzAorGck8VXul9oFU.roa (hash: qDVShcnTFlPrk8WY/vVUFbSS/IUCjtruta++I3zUCp4=)
16: _KdTD9Hfu5k6hVTondfZQJ_OxLo.roa (hash: 4TQXprbZCs5Jf+ifvEFuTZxSKFFhMf/XaJeUj1L8wlE=)
17: b5_puVoiaaK1luof_u2L7B-PTEE.roa (hash: Uuu9Wl4sZx9v7YzIOuwEsj+WuePom5BSk93dnj/mc9Q=)
18: fLzeZ00IYj-IxnoGIbn7t2eWUGI.roa (hash: YW5jkNHqF6tBgAJfKMQglVG8Rn1wn5A7xiLfsMA393U=)
19: j0nf_y6uB0VgXHQDlN6OhEbU5jU.roa (hash: SKADJBgkOhviqwy7f7gDKRZV4Zt1/yBSufcp/4OhY7k=)
20: pMzwR3DaYSVoHUR1RGTsgZ23wm0.roa (hash: 6sMrJ/AtbSyiDYLE+mzWMFlpOxx6wBjmiT963p9LhmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:7c:23:0f:98:85:b8:90:99:92:15:6b:c1:a9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Sep 22 14:00:59 2026 GMT
Not After : Sep 23 14:00:59 2026 GMT
Subject: CN=66b4999fc67026932718c055be0df6fe0bc9b610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:41:a5:19:ff:7c:3c:e9:1e:81:cc:1b:fa:d8:
18:d5:b1:fc:6a:bb:ac:b0:72:d3:47:41:3b:73:12:
77:1c:4c:58:e8:7c:20:14:53:56:39:82:15:77:f2:
79:6f:9f:ac:57:38:47:05:2c:84:58:d7:50:bd:8c:
36:d7:f7:e1:99:d3:91:4d:a5:67:d1:9b:d0:6c:80:
97:fe:35:ed:51:fe:da:50:45:e2:1c:0c:17:47:d1:
13:99:2a:9a:6c:f4:dd:19:bb:25:78:b5:26:24:5a:
18:c1:ab:cf:fc:ac:36:a4:ea:ee:eb:97:c7:25:f7:
c9:a9:04:22:8b:d9:88:12:0b:f7:e3:a8:67:74:c0:
ee:4c:5e:dc:f8:68:43:56:cb:fb:6e:f8:65:b2:ab:
e5:5f:66:30:7e:b7:48:72:60:bc:1b:8e:86:75:63:
1f:40:c6:d0:e4:84:85:a8:99:d5:51:87:f9:47:15:
a6:63:3b:78:de:52:41:eb:cd:3a:50:e3:a3:b3:38:
80:bb:51:1e:66:87:48:3d:0f:4e:86:c5:b9:6a:73:
bd:31:4f:f1:1d:e6:c9:95:83:ab:00:89:5d:e8:71:
c8:18:a4:e0:fc:7f:af:66:fa:4e:33:f1:9a:28:e0:
e5:cd:58:28:04:56:46:4c:ab:4b:04:9f:94:9a:68:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B4:99:9F:C6:70:26:93:27:18:C0:55:BE:0D:F6:FE:0B:C9:B6:10
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a9:fd:dc:88:22:54:b3:54:6c:46:8d:c4:0d:3b:9c:a2:5d:
c5:98:af:63:63:9b:4a:a1:e8:7f:45:42:94:56:3e:60:fa:42:
b6:88:ef:2e:40:c5:dc:d6:6b:a0:4f:90:4d:93:e3:16:3d:75:
d3:e6:2d:45:51:af:95:31:4b:d4:ba:a5:f0:26:f1:e8:e0:73:
ca:cf:17:ca:23:1e:fa:24:6b:3a:6a:15:68:2f:72:65:2b:e7:
fc:5c:a8:d3:f6:b6:a4:bd:65:6e:e4:3a:93:51:56:f2:f5:f7:
eb:5f:ae:40:d7:53:34:a5:5d:ed:d5:a0:37:ca:c3:d3:92:24:
09:66:b1:aa:62:7d:fe:be:a8:7e:b0:24:66:13:25:9f:4a:be:
0f:ef:2b:92:96:9a:ea:02:d7:df:45:01:9e:73:af:77:d8:75:
92:d5:d4:76:dd:b7:03:db:0a:3e:dd:dc:2b:68:29:fe:01:7a:
57:0b:94:35:68:c5:3c:90:be:31:68:5e:02:2d:0e:57:38:9a:
fb:ed:83:68:34:e7:e1:07:2d:46:07:30:7e:47:c1:84:ef:f7:
f2:02:52:bf:a7:cd:f9:49:7b:b6:ad:76:e1:d6:7a:d9:67:00:
be:09:95:92:15:af:bc:14:6c:84:a7:f4:a1:56:82:77:0d:9f:
40:3f:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:53:04 2026 by rpki-client