
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
File: evUSKXc6-RV-MXFg-dyADzgeCys.mft (raw, json)
Hash identifier: +lRv/jpqFS4tpE+vNQIGr4Edaa5fRlSXpoUxjQRBJMk=
Subject key identifier: D9:3E:88:DA:DA:07:D2:82:D6:58:02:85:71:B2:94:71:C4:5F:B9:1A
Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b
Certificate serial: 01A0BFC32FF2DE417DC853E60C5B7D102627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
Manifest number: 0311
Signing time: Sun 20 Sep 2026 17:00:35 +0000
Manifest this update: Sun 20 Sep 2026 17:00:35 +0000
Manifest next update: Mon 21 Sep 2026 17:00:35 +0000
Files and hashes: 1: 0JXzPsfQiwnhkAPuwUcoZ4TksqU.roa (hash: PLw1g8tEdu8DohzHWXzHrIGYzVNggXd55nUqO0fw1fA=)
2: HLXrwT45MTMa_mhCV00Hv0aHA2k.roa (hash: rkZE6mPZWfH9GMHGmnUqFvkyHWkjWIxlqyhyBnTw+1k=)
3: Kv2Ob7_hFEbgI_ftySsGnX4M3XQ.roa (hash: s+/q4sVi5Ud8SeTEnpw7PXXetnDgzT/C+VQ7Whvxsmw=)
4: LvZoa6Dyn3b8TsOgucX2IIHA2DU.roa (hash: txHAgVDu8eC+tRA2fpR62W+UF+dAIZZl7YAt2C2To5c=)
5: QcxSXFyqidHUk327u_nSMoqZheg.roa (hash: 4xwfEjK2GS0Bj8Odb8CMpXnbw4DAt7dP8ep7zLWLlyw=)
6: TGFfC8MsVtioSptjBohz0xvP3A0.roa (hash: Mv1j9mh4sO8DAuKoAT6/I6dcEMRxG28gweD0Pzi0ZKQ=)
7: VBa7pmCn8ime4P1CWdu0-bHF6pU.roa (hash: Zu7orNKKN0lHI4UfSn3mVOtovclqiBwC91Fgfm2M6m8=)
8: bGG4QXxgUzwoqqwAgB5WAK-Uxto.roa (hash: TEYIeaNaWOf9ouUEps9+2mmWqssPfLKwLjfKOLn+W1s=)
9: evUSKXc6-RV-MXFg-dyADzgeCys.crl (hash: 02W5T4J0qfQaza7hhLAU+oCRmBEDDEyzIIvpPwWM8tU=)
10: r-_3l2QQDk49Rp0j80drAiEu4kU.roa (hash: 0nT9J9nUi2CAiLfvcK69CvCos9Ne+xvHeMLkDsNE+kg=)
11: vcGQBCURbj2L-uTMuaODdad6bpM.roa (hash: 8edgli6gjAqsAbbauaZPwf+GB5AGSQnsq/FwGpi7vQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:2f:f2:de:41:7d:c8:53:e6:0c:5b:7d:10:26:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b
Validity
Not Before: Sep 20 17:00:35 2026 GMT
Not After : Sep 21 17:00:35 2026 GMT
Subject: CN=d93e88dada07d282d658028571b29471c45fb91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:a6:6c:ff:9e:18:19:f4:e0:59:7a:f0:40:
ff:04:1f:cc:73:79:37:8a:93:30:a9:b2:67:90:9b:
f1:c9:ea:de:0b:66:4d:99:aa:13:37:be:79:b1:b1:
14:08:48:7c:45:b3:a3:ec:94:c2:70:c3:5a:fa:1d:
83:35:d9:54:1c:03:9c:94:38:eb:d9:bd:23:98:64:
84:8c:fc:a4:8c:3f:59:11:31:7a:d8:47:fd:e8:d4:
a1:6d:1e:d8:09:c0:7b:f4:0b:c4:f3:15:67:fb:13:
aa:78:29:a3:7c:86:38:8f:13:c2:e2:49:a6:15:35:
63:bd:9a:f3:f0:72:7e:79:06:d8:73:48:c2:69:90:
0d:79:cf:43:50:a4:62:2b:cd:f0:57:2e:65:d3:88:
6e:dc:22:41:f0:54:16:d0:79:ad:28:04:37:5f:42:
47:f5:c9:35:41:03:c8:25:57:88:63:4d:49:32:a8:
21:e5:ea:81:6f:96:e3:5e:48:1e:3c:a4:d1:07:63:
10:f2:97:2b:24:be:07:98:37:f1:a9:70:29:15:e5:
66:62:ef:af:cc:08:13:7b:fb:7f:36:62:03:32:3a:
16:b7:35:1f:d8:79:d2:a2:16:95:30:2c:bb:74:40:
be:37:06:26:22:a3:09:40:ec:4d:fd:5d:2c:be:29:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:88:DA:DA:07:D2:82:D6:58:02:85:71:B2:94:71:C4:5F:B9:1A
X509v3 Authority Key Identifier:
keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:63:be:fc:1a:17:5b:92:d0:34:d2:54:93:dd:9a:a4:30:6b:
52:72:51:dc:2d:c4:73:0e:a9:47:6c:fd:1b:50:a4:97:f0:ff:
9c:8e:e4:a3:3f:96:45:e3:2f:c9:0f:8d:a4:f0:7b:7f:d5:17:
72:40:78:c7:20:88:d9:80:e1:a2:7d:e4:28:c4:d9:8b:a3:84:
06:7f:25:ab:74:82:73:6d:b5:3f:e4:26:44:c9:20:8d:3f:8e:
41:3c:77:6d:26:a1:1e:f6:66:0b:97:fe:96:c5:2f:c4:43:bb:
24:fe:f5:58:60:a1:42:c2:71:f3:b9:21:f7:30:f7:45:45:32:
67:5d:85:d1:4a:e9:5b:12:ba:4a:86:c8:2b:71:5b:a1:17:e3:
3a:71:d9:27:bc:24:18:5b:4b:a8:8c:96:f3:2a:62:4b:ee:98:
12:e2:1c:8c:a0:a7:96:6d:83:43:ab:1b:ce:41:07:52:ea:ed:
78:d4:cf:22:e2:53:a1:8f:11:c4:f7:38:c6:0d:e8:b8:13:ad:
c1:e6:0b:2c:7d:b5:a5:32:b6:52:2a:25:07:67:4c:81:b2:59:
32:a4:00:75:db:9d:0e:77:0a:96:8b:d6:31:cb:bf:ce:01:14:
eb:92:d7:ba:8d:1d:74:c0:7a:10:ce:d2:05:a1:eb:32:ce:19:
7f:2c:f1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:07:47 2026 by rpki-client