
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File: dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier: P4HMsDwW7wXa4VudNsGuUu9rqlXMhTMEvdACRoNjwmI=
Subject key identifier: 67:1A:FA:E0:D4:B7:9F:89:25:7A:67:F2:21:6F:DA:E1:88:0A:D3:DD
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 01A0CB904E78F6368A30FB247309B7F4B0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number: 1A90
Signing time: Wed 23 Sep 2026 00:00:27 +0000
Manifest this update: Wed 23 Sep 2026 00:00:27 +0000
Manifest next update: Thu 24 Sep 2026 00:00:27 +0000
Files and hashes: 1: 3lVoSteGkpKcde56m2WcsA8N-s0.roa (hash: 1XrtONYMpJVe4WnBQhEVaGnetVY+4paKXOigWmRK674=)
2: 72qqOl08Ng_75PrEX39wChvsHq8.roa (hash: wdAGiwDNclYEAAkLFN5CEwmjhcr+4EBdtbN76kXOOjo=)
3: AFJzhmH9R0mG2bUCJPJT6j8bKrw.roa (hash: EzibNTyau7BTPE7oIO9TUlGehtGq8uPVCAnORk3k9nM=)
4: HBckW3ER80MSeSiwpy-Z-q1qiGA.roa (hash: QBBHo4qiNBL+JHuv6YtHpt1D3ezGsz5yopdFgNvM84U=)
5: Jj6QniBhg0ekrss-TvVc94h0S2M.roa (hash: qf4l8DU2kkBt1QRzcva1hlT0ObLg86RVHmV+gl/DthY=)
6: M_Zrv0eTt-hhAHKM89cDFtPfvPI.roa (hash: 8QhFDfLhK8OB14NksFoRCKIZ2O0CQM/pbJL/g+vvAt4=)
7: Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa (hash: wtN9D7HevPrfH3K/IMhwZNny7MHPmsA5+nenLp6rWiU=)
8: b4ESO_pvGgCqVp88yRCz-5OoSf0.roa (hash: gzB0VXXq99U/xkP9oWFBiaWwqsbZ9lY1uOT5L1wm/Fk=)
9: dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa (hash: AKN2pF1PfbziQzZH+0SJyj3F9OOfW1sRqDb4wG8eZgw=)
10: dNznR1-S7vVnFASVh_hci4jZkMQ.roa (hash: zQ1QJ64mxnosKyQobzETFihGQBbENfar+9z/U7xN1lc=)
11: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: /eAFTWjWC1ifOPREAa2qS0cLW3D/s5HVesZBJW8SvXg=)
12: fUNqCWuIckYGiVfEbuqCIkLI6d4.roa (hash: 2XlV9ynqjk3ChcE4Iw5juKC67TwbxBsySYHKnmHonQo=)
13: j2x4B6ObPzHT8ea8R_EMWP2PPik.roa (hash: X9UYUryQZPrf+c81HDCEnwfx3vw9iA0hQ/eJMGoOoMU=)
14: lkbj_rHQ3odPB7yMiampsN-UZno.roa (hash: qptKUULvCznnpcjyPdRsDYHUthdNfWlbjNhIIyjJ/gg=)
15: mcWyzJOHr9Zx7r67vsArKVYzm-M.roa (hash: jPJa6OTo4Vh6SlUAyeSF3ybtpQx5852t+NVU3VYBCWg=)
16: p5-KSOQJoRc-a4h6VGwthwBmpAw.roa (hash: Oaku+ye04iIHVUwLwL5t3yBGhVH08pyoMvs2MjpbNqY=)
17: qrN-Uu0M-3HDr-76__U4MO8Jem0.roa (hash: F/0Bv+YLgCLY8hUXxBuIT6dqQV4aBe4yFDyDrHdklVY=)
18: sN7KZAb0tSBb8kQXanj5RVDo87M.roa (hash: sNtlv5Kfns7Qub92+PG+1MiYKqG3uVLYzRGiFbw3ks8=)
19: u3HM98A-Q9MDGyUnaURhtvW-lGU.roa (hash: orjD4qXj9t+4NhQVjT8wKDidu8IPZ4dL81G059Mpu9c=)
20: vbIqeSU0561jYPf76GOTQkgqkkU.roa (hash: I6pxxL2tdL5sG8uXzs35tb/DbPA84Se4ObiynAzOPa8=)
21: xFb3afKCHZ5K-TLErHfTSuMJKOU.roa (hash: 6l4PHj5QdfEodyTxnZX/6jrZVq4xk62zNf4EfjYJEmo=)
22: y2z9eC0pey0L-F8Me0uxP0CdRNE.roa (hash: ynALlANptr3j2opU4Eof0BTlyqYbPLK8fhfTetUFwTw=)
23: ygWs-sHzivtfoMPPnMV6aV1UCv4.roa (hash: KjRCKq03kFFE3PyzvTA3OcOazG7q6LPfF+mD7puBZ4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:4e:78:f6:36:8a:30:fb:24:73:09:b7:f4:b0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Sep 23 00:00:27 2026 GMT
Not After : Sep 24 00:00:27 2026 GMT
Subject: CN=671afae0d4b79f89257a67f2216fdae1880ad3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:0b:2a:80:31:b7:91:27:79:12:31:7e:be:
cb:c7:d4:b9:c7:14:3f:c7:a3:8a:c3:39:f0:ef:56:
15:57:f5:0d:47:19:c4:3d:1c:89:c9:63:b4:3d:4a:
09:5c:35:cb:c5:b1:91:35:77:93:91:df:4c:52:ec:
7b:22:4c:dc:6a:13:94:b6:0c:f7:36:f8:a0:a2:db:
c0:45:e3:d1:9e:71:de:c8:ef:bf:d5:a6:17:4c:58:
00:4d:09:4c:a5:e9:08:fd:65:af:de:32:37:5c:b2:
61:3c:7d:fe:05:b8:09:7b:65:a4:05:f0:4c:eb:41:
14:c9:d7:ad:35:09:b4:db:53:10:67:67:20:b1:51:
d1:0f:0a:f7:25:84:e9:13:45:9c:cf:13:69:ff:68:
f5:cd:3d:4c:69:78:eb:e7:41:28:b1:fa:01:ac:5b:
26:e0:66:95:95:c6:75:92:6f:b5:0c:06:81:36:08:
e9:45:13:56:a7:79:e9:42:55:5e:9e:72:82:6d:00:
c2:ad:d1:f7:3b:1a:e5:ab:df:7e:0e:ec:30:ac:82:
d8:9a:70:e3:e2:7c:ef:7e:71:ee:bb:9b:23:09:e5:
0c:fc:76:75:0b:a7:23:32:29:71:cf:4f:4b:a8:3a:
94:3d:f2:c3:4a:a3:80:a2:7e:49:08:56:f8:7b:16:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1A:FA:E0:D4:B7:9F:89:25:7A:67:F2:21:6F:DA:E1:88:0A:D3:DD
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a7:b5:fb:c5:02:cd:5f:ce:c4:09:e5:26:0a:d9:90:94:3f:
12:d9:00:ad:6e:8e:22:61:b6:c4:fa:66:09:10:6a:ea:b6:d5:
65:16:34:b4:d9:27:16:2a:f3:80:d3:2d:19:22:00:65:ff:3c:
88:20:ee:9b:3a:1e:22:98:a4:60:21:4f:9d:12:c8:b4:98:03:
0e:bd:9c:d2:ab:e7:31:bd:57:41:8a:fb:17:00:b6:47:23:d5:
04:87:a7:61:de:2e:3b:93:03:52:0a:d5:bd:90:e9:69:49:14:
20:70:38:df:12:91:9c:a1:ec:a1:e9:48:88:73:37:87:e3:43:
1d:ac:01:44:f1:42:8b:60:22:20:d0:48:f7:cf:98:cc:17:78:
37:bf:92:8f:0e:19:79:4a:84:da:47:fa:04:1a:08:dd:eb:ac:
1f:c1:4f:d9:a2:3e:15:64:12:35:14:26:bc:10:ab:8e:ae:f1:
15:9c:ff:25:94:d8:14:5d:fa:80:60:af:b8:0a:56:a6:09:58:
8b:4c:05:89:d2:23:35:1a:bf:f1:a6:95:96:5d:37:9c:27:ef:
f9:3d:ae:8a:58:14:e7:12:80:5c:e7:90:0b:50:97:ad:b7:50:
a3:da:08:37:a9:8b:b7:e5:9c:47:69:42:6b:a5:09:3f:9a:67:
b0:17:41:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:58:37 2026 by rpki-client