
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
File: 0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json)
Hash identifier: hItxbb2athXiB2rHyAoB0phQ3DtXeTS8KM1Qdnamha0=
Subject key identifier: 55:3E:E2:B8:76:DA:98:D5:27:8B:7D:DD:00:75:A6:79:8E:DA:1B:BC
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 01A0E6D32588CDC2EDAFAE7F625657FE47BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
Manifest number: 17C8
Signing time: Mon 28 Sep 2026 07:03:12 +0000
Manifest this update: Mon 28 Sep 2026 07:03:12 +0000
Manifest next update: Tue 29 Sep 2026 07:03:12 +0000
Files and hashes: 1: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: egoESdBBDjlE6kx+ytqrC3IVvGbEXikqAt1k6dVuMm8=)
2: 8xUINwR_MZF2v4_Uc8NHq55tEu4.roa (hash: BeND2ovC8Tb4Nwoyh9HxRMDQdbkz3PoJwktwooDxVhk=)
3: 9yRC7zAUCj4WsEYWohBubnEg-To.roa (hash: BAP4Q9Aas18vDD1GYMHWN+ne8d9I+odSYSc4FqyAAMk=)
4: B2YoZgrpQEDb8UGkfFFcmk1C8WU.roa (hash: lrmThkzbXwEgonP8nGIi95OkJtxQ+u0aZhl33JVnnGg=)
5: HvxaqPnCVzCzJqdTxy9QM7dhpvo.roa (hash: jvJDycM8Kwx/kDrj1W5EYQK9WGSm7y5sJzrsu3gD7EA=)
6: KVWGAtNaDYuCLBDqyjhmNTSUsco.roa (hash: I+mYgzLuOkLdrV2nmEsQLkeZAGwvKj2fiTFinUQhLus=)
7: O4wX-zREvFToFPAF8_QrfeHlFV8.roa (hash: AuJD+oGrEuzjm5RNbgKhP3+ewZtfDa45xvNHgyGDnu8=)
8: Q5KjtFuA4b13GYFReAXac6ikxMM.roa (hash: C9lFOLqvB3UVVYIvZafTYRaPsoOOXhpw7/LoWS9f3HY=)
9: SigdKS7JtTEVYXgED4DdixD6OgM.roa (hash: NfamlOUNbIv4AqwK/fv2VF3gtE7JmiXqUNd8ZVZzSIc=)
10: T7CuE8sM8Qd3oo0RRa_h_Cc-W5M.roa (hash: ZWBCyQYdJoW8TuwkXaB5bNFnPnWKEyVuntW9B90XJeU=)
11: VtpjoWz0RdFNmkffYS2weF5bVAs.roa (hash: HVKb03zFb2eoY7pvE7f8ruqUNxZJTuKgQsAR9YLQhCs=)
12: ZJ56n3Y17TFJk-Tqc_ycphu8qgc.roa (hash: J+O1IkyhA+FTfPaWOGsyaFo/vFHRN64aMyNig4w0a6g=)
13: ZWqzQW9YD9i4oAqI2NU1KN-k8BA.roa (hash: m/dMgskCu/LRhEwHUxPFbSCbCpuefF8R5De3vG7ME3g=)
14: _1Ck2zOMmaEKy6jWTA2To4WXHOc.roa (hash: PosaMGaTcyPhx+0qx4rcwdvlDm/JVQKWlg+9OoGTG24=)
15: _XNB-uxfsS8Bg-aoGqYMaoc-YB4.roa (hash: +2E5bdIK9sFDQ0WQhkQrjROrGKFuw2mz7mQOzFxJQT0=)
16: _g5wGZfyMy3-AkUPnKNuMg5TWV8.roa (hash: lBSsBrgpgGHjUcWq8qlYBX3qnVmb+Y5QAoDDvYZngGA=)
17: aj3l0yv9XLpdil7kCp_8ryv10IE.roa (hash: PrL6FnkTyQ9oBvc6R+GpyIsFkpSpBE166q8B3+Lb9OA=)
18: c_cnoepM2LH--kK93huc5LFtAGM.roa (hash: yf0pYWUbz2m2vPji81gl+P3qnDg6ATcYw6U5kY+PL4w=)
19: eVgfq36VRdQ-XOngEBCyoqvAPkI.roa (hash: +CVzb6eA5CbaFxZDloliVM6kDTn+ZGIaxtZcOdNZ3+w=)
20: hRBOq97yc0j5iPcr4gfDn3KJQyY.roa (hash: Xy2a29JOYTMfN3fVGwk03l3mrjFbTa3ns9VGhqHF9bU=)
21: n7vhvJ9MIGIgZBvpGwhhnNShRAQ.roa (hash: htARq6EX3Sp+hmNjOwGerogqy143+hwQcapChVQW1G8=)
22: oIIbuj2FHcGESIdrcnZdquUCmAw.roa (hash: IYUyIGj5ktu8xidYz/ZKK6vrmLnBBGD3Tn1bdnoOMEY=)
23: qa4AJBW86Czjko9NBPVz9ex8J2A.roa (hash: SNkj/qaNSHoPn945qKVgvTpVHs/z2BHkGTHMKbZzEpM=)
24: uaMX8OCYbSxBlbpnUENrRiTwaY0.roa (hash: AZg0zm8r8ZxZT3h6KfhtY2c5WsXYcVXS9ecTWb+mM/M=)
25: vBIP5l9f7rLOmxHW6g1Sox18wCU.roa (hash: RfnJ5Sz3BFVwYnK6CAz5XEIDTL6Yuu7HFULOecFrd74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 07:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d3:25:88:cd:c2:ed:af:ae:7f:62:56:57:fe:47:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Sep 28 07:03:12 2026 GMT
Not After : Sep 29 07:03:12 2026 GMT
Subject: CN=553ee2b876da98d5278b7ddd0075a6798eda1bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:bf:a7:44:26:93:9f:0a:69:c5:14:8b:6a:
45:19:78:df:06:7a:fe:42:c6:4a:1b:6d:2d:90:7b:
20:91:12:e0:3d:4f:e0:74:62:bc:0a:a0:8d:9c:19:
2f:32:05:c3:ee:70:62:de:4e:6d:85:82:5c:12:06:
b0:45:86:52:cd:c0:d8:4d:12:ee:c1:59:a7:ba:13:
27:9b:a9:5c:cf:5b:24:88:c9:7b:03:df:4e:28:17:
51:e9:fc:d7:9d:57:7e:21:e1:c4:52:3a:46:07:f6:
f4:32:62:3d:a2:e7:e2:a5:9d:8e:c7:16:21:97:72:
10:2f:b9:69:f5:0b:6c:fd:53:a3:c3:a8:38:aa:f9:
09:9d:ed:f6:7a:4d:06:40:39:e3:e2:7f:56:ee:67:
fd:0f:e5:d2:1c:7f:a4:8b:b0:61:80:44:ea:7e:59:
d9:35:1e:2b:2f:79:03:ed:7c:55:a6:c4:bc:e3:7f:
82:02:21:f8:68:66:9a:ab:45:bd:40:95:53:27:d5:
3f:3c:51:ce:45:74:19:d3:08:05:20:66:f4:1d:b2:
d9:be:c3:10:5f:46:9a:59:b8:7c:1a:81:95:6d:21:
c6:23:83:b7:27:68:6e:43:21:51:d2:cc:ea:0f:51:
db:b4:97:e7:5b:f9:1f:f5:17:71:aa:81:4d:08:80:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3E:E2:B8:76:DA:98:D5:27:8B:7D:DD:00:75:A6:79:8E:DA:1B:BC
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:53:13:89:8f:24:6f:24:be:55:71:da:45:cd:4b:f5:05:b4:
ff:61:b2:f7:e3:05:e0:9c:83:09:06:d6:ee:a8:61:e6:29:24:
45:1d:d7:b3:4f:98:4b:42:42:24:f4:76:f6:2f:0f:57:51:72:
d8:36:34:3f:37:5b:4d:c5:fa:86:88:4d:b8:72:b6:c8:34:d9:
ba:be:a5:0d:89:ed:17:5c:06:52:2b:d1:2a:8e:30:69:03:25:
7e:a7:ad:f2:67:86:8d:4e:23:b2:e7:98:25:de:05:db:43:f4:
e7:34:51:9b:a5:fe:8c:a3:3f:52:7e:5b:68:b3:09:4e:72:c6:
31:0d:e1:94:1f:62:63:d7:65:93:14:26:d0:2d:8d:c7:a6:f4:
c4:21:5a:95:83:07:77:74:28:99:79:83:48:b9:7a:b3:73:2b:
35:e3:5a:c3:6a:7b:45:3d:d2:75:9d:18:09:87:19:4b:8a:6d:
a7:a7:75:43:92:b5:67:cd:ec:5f:0d:02:26:6b:08:7e:14:47:
d6:52:79:11:c5:d8:e1:a9:ab:46:98:22:5f:5c:98:20:3c:43:
66:39:91:5b:65:80:55:62:e1:36:c5:64:a1:b3:5c:87:7a:c8:
8f:dc:26:26:91:70:96:28:1b:6f:42:46:8f:d6:c6:2b:29:45:
78:07:9d:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDm0yWIzcLtr65/YlZX/ke7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw
MWFiNDEwHhcNMjYwOTI4MDcwMzEyWhcNMjYwOTI5MDcwMzEyWjAzMTEwLwYDVQQD
Eyg1NTNlZTJiODc2ZGE5OGQ1Mjc4YjdkZGQwMDc1YTY3OThlZGExYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNm/p0Qmk58KacUUi2pFGXjfBnr+
QsZKG20tkHsgkRLgPU/gdGK8CqCNnBkvMgXD7nBi3k5thYJcEgawRYZSzcDYTRLu
wVmnuhMnm6lcz1skiMl7A99OKBdR6fzXnVd+IeHEUjpGB/b0MmI9oufipZ2OxxYh
l3IQL7lp9Qts/VOjw6g4qvkJne32ek0GQDnj4n9W7mf9D+XSHH+ki7BhgETqflnZ
NR4rL3kD7XxVpsS843+CAiH4aGaaq0W9QJVTJ9U/PFHORXQZ0wgFIGb0HbLZvsMQ
X0aaWbh8GoGVbSHGI4O3J2huQyFR0szqD1HbtJfnW/kf9RdxqoFNCIDzHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFU+4rh22pjVJ4t93QB1pnmO2hu8MB8GA1UdIwQY
MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt
Y2Y5ZGM1YmFhYTc5LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5
LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFMTiY8k
byS+VXHaRc1L9QW0/2Gy9+MF4JyDCQbW7qhh5ikkRR3Xs0+YS0JCJPR29i8PV1Fy
2DY0PzdbTcX6hohNuHK2yDTZur6lDYntF1wGUivRKo4waQMlfqet8meGjU4jsueY
Jd4F20P05zRRm6X+jKM/Un5baLMJTnLGMQ3hlB9iY9dlkxQm0C2Nx6b0xCFalYMH
d3QomXmDSLl6s3MrNeNaw2p7RT3SdZ0YCYcZS4ptp6d1Q5K1Z83sXw0CJmsIfhRH
1lJ5EcXY4amrRpgiX1yYIDxDZjmRW2WAVWLhNsVkobNch3rIj9wmJpFwligbb0JG
j9bGKylFeAedng==
-----END CERTIFICATE-----
Generated at Mon Sep 28 16:43:14 2026 by rpki-client