
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json)
Hash identifier: K4SsnY/2GqqJQIdbxSPI3X2fR0TCK670OGPJvz1vRCQ=
Subject key identifier: D0:4B:6F:EA:38:A7:1C:B7:4D:D8:59:A3:32:14:49:C7:D9:A0:0A:3B
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 01A0C7EA89AF3C95BADBB68A5638D969498A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
Manifest number: 0892
Signing time: Tue 22 Sep 2026 07:00:31 +0000
Manifest this update: Tue 22 Sep 2026 07:00:31 +0000
Manifest next update: Wed 23 Sep 2026 07:00:31 +0000
Files and hashes: 1: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: tbX4XrxdtLYBXfu6SittOjXRdm1SPZIk3CuyfbbWz2o=)
2: 3MMGuyxk5BA1h4yKFwGuekYBWpE.roa (hash: qDDPw4rjqe8Of6FqTmZ8vNfrRu70pioyOFhkznkxbn0=)
3: 7PMwWghG1f2GH2kcgJJT1T19mKA.roa (hash: iSWM8zD4dnBfc8rm3hdCfD29wpDU7MXGImntX+CzTys=)
4: CUZDkD-NcFvyMKKqxpqKTImWldI.roa (hash: BjgaQINh/o8BqluKWpCRQpHRBGijPayFIzTWLEZZ+ZQ=)
5: Dhrq3603FXAC1wqjo20wzUmr4F8.roa (hash: 93F+LmWkBd0KITwFzxwwnm7wh1Nm582E0rUj/2gWiKA=)
6: DlLXddAis5e2NiYpDlPFgCC2fqQ.roa (hash: wChHj1a1SOAqKO2XbDKNiJzmDLWZ4VK+PUQtszQXCaA=)
7: aoX3qgSrCGpVmGI2-sNdQlbBEmo.roa (hash: fUASGNwLnomXxmckWPpEyeY/fBQ9vTiFVyQieAo28z4=)
8: cojKfvUL96n8v0NW6xv7i34QuKg.roa (hash: lYPKoP4F96eul1kxPLkPqkS5F4CgrEIREjfk+V+jg3o=)
9: f-9ciEqv18Kub9fxi8gMgTEDiN8.roa (hash: ys7Se75WP1iZvGd8oeyIka2FlXVNvmTKA8g4Bz+pUFE=)
10: pPL6_ILH_OSb0uend9BsYY1M5zM.roa (hash: uPRcSj9Qet/R5RDAAlJ1xCgadEw0HnsrDGUuZztgzUc=)
11: qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa (hash: DcaCDcXxQuFqUhYc0T6gyos8/cyyoYS+q0uMnwfEmhU=)
12: qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa (hash: Je87v5hgNV1x62aPiR7j/Cjy7ey6GNmVdBbyWoayWLE=)
13: rtaxspuDF4uli6my-kG3x-CfzyM.roa (hash: Mbr6HPYPHlUpdc2sSsGgV2VBSnLTCf311AToZ6BeZWw=)
14: sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa (hash: 97xAwvGhhXW1GC5fGvIVMkcoGK7MfJbMcwrs0H6Prc8=)
15: sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa (hash: t6MnFRdD+DMOOopxl5hauoDky6UirAHK0zqLM5bjQWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:89:af:3c:95:ba:db:b6:8a:56:38:d9:69:49:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Sep 22 07:00:31 2026 GMT
Not After : Sep 23 07:00:31 2026 GMT
Subject: CN=d04b6fea38a71cb74dd859a3321449c7d9a00a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:c6:90:6a:ec:ba:6a:95:bb:03:f2:b5:74:
16:7d:10:31:f5:91:7a:7f:cf:13:4a:15:fa:76:d2:
24:06:93:4c:40:4b:f5:5f:70:be:bf:a9:d3:47:00:
29:13:1c:14:93:79:e9:ae:03:33:90:2a:1b:54:8b:
a6:2a:34:cb:da:9e:50:35:a3:ae:e9:ad:76:3f:00:
08:e8:39:01:73:43:f0:14:01:7a:c8:7b:69:38:24:
3f:22:8d:88:de:5f:13:7d:a1:f6:0e:f4:e7:52:57:
e6:d8:19:26:71:b7:ff:08:d2:64:0d:c4:88:0c:74:
8e:3c:94:fe:4f:7c:10:5c:04:9c:f8:ef:ab:04:3e:
e8:b8:c3:25:19:15:f6:0e:59:5c:c7:23:77:f0:89:
ce:be:45:24:eb:6c:01:ac:48:a1:c1:26:6f:d8:22:
de:5c:87:7c:8d:40:89:d3:ab:3d:27:b0:15:39:00:
52:48:79:80:f8:69:f7:a3:bf:80:1a:28:76:b4:81:
36:1a:31:27:b5:70:c5:1e:6f:8d:9d:b4:af:91:89:
f6:df:03:16:99:19:71:b8:03:c8:68:ea:2e:d7:67:
0e:14:b9:37:a6:48:f1:7a:54:ef:be:57:41:a3:23:
28:36:7b:73:4c:3d:9d:82:7e:e4:af:89:3e:28:74:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4B:6F:EA:38:A7:1C:B7:4D:D8:59:A3:32:14:49:C7:D9:A0:0A:3B
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5a:1a:72:e2:86:2a:97:b5:ab:d1:47:2c:58:10:0c:fd:2c:
d0:b8:d6:e5:09:e8:1a:8c:31:32:39:2c:a5:e4:47:14:80:8d:
70:41:fa:13:78:fb:21:d3:10:64:df:b0:02:b8:96:cf:01:78:
42:2b:87:12:a8:f9:0a:cb:e7:38:e4:d1:f0:72:70:31:02:0c:
a0:10:51:c5:42:c0:71:0a:f3:14:1c:4e:fd:7a:39:45:1a:bf:
b5:bf:18:a8:3b:43:5b:68:b2:4f:1e:77:14:ed:1c:10:05:73:
18:a3:43:cc:2b:97:24:28:e6:08:5b:42:8d:2c:9b:b9:cd:c4:
0e:8d:87:3b:9c:7f:4e:79:eb:25:18:4b:16:37:8e:d8:67:db:
67:0b:c4:ea:77:24:18:5f:13:88:ad:7a:c7:a7:93:9e:7c:15:
7f:fc:99:d1:f6:27:b8:e7:c2:5d:38:04:e0:af:b3:71:cd:29:
36:66:64:c3:c8:6e:04:03:e6:6f:b6:1f:86:fa:6c:20:ea:93:
52:ed:6b:75:13:01:14:45:f2:1c:be:bf:17:c0:8c:89:89:2b:
04:1a:7f:14:38:f5:9f:05:e1:9f:1b:c8:ee:54:d8:94:ee:1b:
43:c2:0e:e3:4b:bd:bf:d2:d1:9d:5f:da:79:b9:07:b1:a0:da:
f9:51:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:32:00 2026 by rpki-client