
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
File: advh59nofWhwGkA1p2xRv-zYjYE.mft (raw, json)
Hash identifier: 110MANrIwEvs9L0oW/k5j/6tFpV9+D1NwCkmKh1Qkjs=
Subject key identifier: 43:82:46:F6:E0:B5:95:72:7F:05:2F:9E:A3:54:90:93:42:D9:A4:D8
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 01A0E5F5DE38AC0F56C243BE210024353DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
Manifest number: 0811
Signing time: Mon 28 Sep 2026 03:01:30 +0000
Manifest this update: Mon 28 Sep 2026 03:01:30 +0000
Manifest next update: Tue 29 Sep 2026 03:01:30 +0000
Files and hashes: 1: 144YKZFeHUoWAh6egSqndWusFOM.roa (hash: JebAk5xxUlwF25bt/7wgP5P3eQrs43nqDPNiHs8sVDE=)
2: 2_5Pizr_dey_wsN1BXCTRJH3EG0.roa (hash: j9IlFbOau5bJeR6L12OLqIg9qpTzlR19TGig6zEhDF4=)
3: 5zy2Ulr79dbtTaE3OZs_6qr3UqE.roa (hash: EEAEVHUAhDuMxhb53Mdri68EpJGkXtEYX2cNgsYZpzc=)
4: 9pPf8N-xbMT9o8UBJiPr7d92dmo.roa (hash: QOYbkI9+2diJOwe6krK7d78idH2agB/NPLIUaIdszRQ=)
5: GzR_Gn9aMAHUr1ePa2ecaxR0bwU.roa (hash: 7i6X+85SPVw3sqcP1208MXkTesdemK8+2JulDhTtOgk=)
6: H-qQrCrAktzV-DbBsgXII5ecG6E.roa (hash: erbHrqWEc0I2T4g+aCnNjuIZqyQhXGo0pcfKHlJM7/M=)
7: KQt0bGNTmAqkKMpA808bq5qAorg.roa (hash: HfmKhmXTk452cgTDlSlUC3REiJ7+v52ou6kKwFAi23k=)
8: L5wbMaW6iLNCTWg3v6DA5hlTUEw.roa (hash: FzuvIo201WVt27BM5X7jwcOguZldBZloRPmtC7hcI1M=)
9: PLMbYZg-ZJoMJXEwD_dNPsS7CC8.roa (hash: KUJkUeg6zm3w35+L+38+PiwvNkQMV/2nX08/uGAy2lM=)
10: PPbDqXTI2oLfXrOdBjzamnjf-Is.roa (hash: exsR5Q3c8hhnVYhW0MoOSEpqsmdyDC5TxI3F+Ib3Uig=)
11: Rk3iX8TpkaQgD3TF-fnI9o7W7O8.roa (hash: bofsGduriRhR/R/BQsCSeddnTYoQ+RMoW3f7cBT+4OE=)
12: TnLBmBgQSFjNyZk9wLYLseWxWy8.roa (hash: L8Wqf5zUSRS3tMpgIljce/Plv8K5QgHIKFrd9mENn5A=)
13: UPYPtFt9hA7Fshl044W18IsW6iI.roa (hash: +/X5gYeSTMRTy1HrrsqCpkKxEcusQnKC9lCBav6Kbf8=)
14: XOJiaLeJCz3ytdO00WBq937piI0.roa (hash: v2vqT1L2zCbVq2R1hKoPt/8mcKtO7ZRpN5eQuLPaByE=)
15: advh59nofWhwGkA1p2xRv-zYjYE.crl (hash: gLrt3su7Xc9dRUomFKQt8TYVxlA5Tr8HQ1TXhXKAOCM=)
16: n4DxEm2C9DgfRdTFUEly40c3ySQ.roa (hash: EEKVIWMbLgevLDeloMM06tT9vww9YdjYKwtKyRl3ARE=)
17: paj8DkvX3JY5yJbmewavbftSsEU.roa (hash: oxEzRffKUATaKxFAdchv3n3r/z8Z9CRcjER0mcVzjBs=)
18: vNR9lGFOCfab6bTTp8G08FNVEf8.roa (hash: 4XTEzmqXelwK7Dpu3c2vtVcqR7va6XfQ3QnP6hRZaQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:f5:de:38:ac:0f:56:c2:43:be:21:00:24:35:3d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Sep 28 03:01:30 2026 GMT
Not After : Sep 29 03:01:30 2026 GMT
Subject: CN=438246f6e0b595727f052f9ea354909342d9a4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:e2:ad:f5:23:72:9f:a1:c7:83:bc:9d:ce:
20:7a:d0:12:27:30:8a:e4:4e:ef:ce:e8:e1:aa:03:
54:46:27:82:07:fd:bb:d3:f3:61:da:d9:c3:f0:0e:
68:0e:b6:49:bd:03:f5:82:d7:f7:47:5f:82:27:0e:
40:0c:96:0e:6e:1e:87:d5:db:24:21:59:fc:25:1f:
96:8b:0d:19:76:d8:37:1c:18:c6:65:c9:1f:3f:81:
c7:11:26:61:cc:6f:46:1d:4a:fb:f9:cd:21:bf:fc:
76:6f:ca:60:c0:74:c8:13:76:d4:db:ec:6f:8f:b7:
89:63:cf:71:28:7b:e8:cf:27:7c:4f:3e:80:0e:9a:
1f:11:5c:f7:e8:b7:d1:2f:40:5c:52:70:42:5d:dd:
9e:1b:87:bb:ac:b8:72:d4:87:51:c5:32:c5:0a:2e:
ee:47:ea:6a:29:f3:b1:25:62:f8:59:7d:d0:5a:95:
2c:a8:b5:91:99:02:a3:67:b4:e0:8c:0f:92:6e:1f:
ff:4c:52:0d:7d:ff:f4:03:21:eb:07:af:c2:ec:2b:
33:b8:56:13:b7:a7:64:01:bd:d1:7b:df:c4:24:2e:
ee:f2:7d:7a:d5:c1:84:31:18:82:c4:d5:d2:68:3e:
66:73:1a:37:85:45:c2:fb:34:36:eb:9f:7b:aa:eb:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:82:46:F6:E0:B5:95:72:7F:05:2F:9E:A3:54:90:93:42:D9:A4:D8
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d9:44:88:04:3f:91:3f:74:cd:f0:eb:23:fa:5c:f2:74:41:
f3:85:ad:86:7d:84:c2:cb:55:44:1b:0c:b1:5f:e6:40:40:61:
7e:a8:e6:81:8f:59:be:1e:29:d5:05:57:3f:49:93:f5:89:51:
3e:fd:82:c7:03:ed:b7:ad:fd:7c:3a:26:fe:92:4e:29:d9:04:
da:a7:21:87:8a:c6:9c:76:0b:ec:a8:66:b6:5e:77:92:e1:37:
f5:95:9b:ea:c4:80:a6:b3:1e:48:45:de:f2:21:51:30:7b:db:
b2:82:4f:02:86:1b:6b:12:e4:c1:8e:be:13:73:a6:74:2b:37:
46:a0:08:dc:a7:0d:78:89:09:8f:89:0a:89:5f:19:51:bf:a6:
f7:3c:aa:7d:ea:eb:a4:d9:4c:e5:c8:15:d1:a6:97:21:02:2f:
77:df:12:ef:18:e0:4b:37:db:83:6e:a9:99:43:be:8a:7e:14:
41:90:64:f5:36:5b:a9:47:5d:d0:90:79:ed:b4:29:d7:0e:fb:
70:42:64:ad:a7:26:49:c4:18:ba:be:61:2f:5d:31:1a:44:08:
1e:5d:3e:35:8e:d8:f4:53:70:ea:ca:6d:77:d3:af:29:02:08:
21:3b:c4:aa:6c:47:d1:fd:01:2a:b7:9e:ae:79:a8:e9:0a:99:
cd:b6:6d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:26:36 2026 by rpki-client