
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
File: 1m5HlK_Dorol0lKoVzR-1O6ua0A.mft (raw, json)
Hash identifier: qUvKmmWITAbvA9kJjxhVXbPbafNo6VFDOSspqkzIOsw=
Subject key identifier: 82:EA:9D:C0:24:CA:18:B9:DF:06:09:41:B0:D1:17:4C:E7:E7:3D:A7
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 01A0D7CCF10E1D0D3C941D8F398DB401FD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:02:07 +0000
Manifest this update: Fri 25 Sep 2026 09:02:07 +0000
Manifest next update: Sat 26 Sep 2026 09:02:07 +0000
Files and hashes: 1: 1P2qLpk9DiKKlSEE2a_XxSQ2VDE.roa (hash: vpK6DJzFGnXIL9dy0QXqYdh03cppRXx9vEZ+/QsVfPA=)
2: 1m5HlK_Dorol0lKoVzR-1O6ua0A.crl (hash: 3YAEj0l9OmlAnO6/OhyK8iOsNBO9m2eaLeFxxM8gU3o=)
3: 2-VpeMgr8WlOJ7qhVALa8xf34sA.roa (hash: iQSGWDL9tXr7gqFzhBNlU6VdCbvCnvQDAQmo6oV6nR8=)
4: 4ugcXWTew_-RTsexCcRaMYVlSJQ.roa (hash: 3pTb9i59TWEwdsk0USORPlbOcbLxAM6aj2enaiKbwk8=)
5: 6DknhXRMmWwk8an-W3o77qoUFZ0.roa (hash: A411sMGCpxf+MILpBK8VyggjVHx5ELsPnFwL7AqAOyw=)
6: 6wJo24JaEg4HCL13OwZyd_p8EuI.roa (hash: Ecy52IEyOsXieauOVtOGrI8MLaSGwR5ZywaJVjVouO0=)
7: 9irQNPunNfIHH8n7jSs2qp4O5Ds.roa (hash: ZPLXxK3+eVCaIYcd9/RsDXygDUinpe1JgVsrDl6w9EM=)
8: BI0vsV_pNzMBX3hoCNbiOQQ2Lj0.roa (hash: FTSWcIBrpAoN+BaWjFgyeHzR2aPhUIX+vxQU4l8lXDg=)
9: CJ4Ho0rK-wEVhXGKy5EoeUaAqF8.roa (hash: bi6qpQBcCAHeXpWf/tbi6W0Y+r+V6vixCToqurIcUo0=)
10: ELkpby9Bdj_JYA7C384OWbqpxJg.roa (hash: h31rtApWx4Vz7rykyNrBq0suf7t4VBJaPWG2PoGxA84=)
11: EV0Q-0czA2VSWO1Gk4vaYsMJ1AA.roa (hash: /6Yg37rQGMw7b7aHYe0qmGSvAz6Ym3IQkqAVWCha16Y=)
12: XcRInvJYcsn8LtFLNgtDJnMlA6w.roa (hash: 975sgmbb5YVMCQJ/ZuhSXOCDO/EGP3qD/sjyuljUer8=)
13: asO6fDu3xQ_k5_xoxqGkUmmCdiQ.roa (hash: KuqZv/NVMnD/Fd4vtymf7s80nLCEQdm+5RUgyn+ikB0=)
14: c7fV872rZD6th3xVaen9mG2oBpA.roa (hash: 2UMq0/v59ttMK2KDnJHhNgxit9sLmaqAfQZIeYzPFwE=)
15: csGRumIzLvV9if9_bIFsL3RnE3E.roa (hash: tiltBozvqFHHU3iwoERlFB04KrbLb6/sL/e85auuwKs=)
16: e7YLs7d9BooaEXjfhj35M1zCANk.roa (hash: 6kVp3Z3Ls+TJhmXsKC3JdMydn7wc1r4A0PwZJ8RWk5k=)
17: hYZbxMfDtkrJJ0OGSPR-AwqX4BI.roa (hash: FyvzqNs/DFqFEdYIOb+k/AxYw5XksOHLVMUkCECP37U=)
18: iQJFEogcmuEcf3e1YUWgCA2jhHs.roa (hash: R4DLgm0Woa+HAomEZejsM5VxONe5BX3yp63MRciIs1I=)
19: mln6aYemJ-VSaEKeRZGt2Vnrkyg.roa (hash: ZjbIzsTsUVGIXpBPiMvFezlvhGdIUwjt60oGvSVVS0Q=)
20: pyKDaObepnnTMaR3rq2Q59TpNcg.roa (hash: zk/m77Vze3pEZGmWk0C+TDK3TCT3ImHxAqVzukqevdY=)
21: sGKzNgSEW9ZR2UWfPjFfx7Y5i8s.roa (hash: 1FJzlm32YyhJ9vJsD7WZN63skJx2wuGv8LsAMhrOWKg=)
22: uNIlA6ca-2CQnlOgm_khWGK_KeQ.roa (hash: wR746BXfUg0EQqUZIqyYoo2UiBtxVdcw2McS7HbXvek=)
23: uybN8XjuaR7_GyDrHfvLIk95_f8.roa (hash: TamexhXZwR0ORnAXw/7R6+cGgQQii+1odd+58W95Efo=)
24: y4ib_LgrxEdhHHtEW83XhEfkxAA.roa (hash: aJQKzXEaHtvyQ8mVh2ttdf6AWDHmUy9MG03EsOsN3TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:f1:0e:1d:0d:3c:94:1d:8f:39:8d:b4:01:fd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Sep 25 09:02:07 2026 GMT
Not After : Sep 26 09:02:07 2026 GMT
Subject: CN=82ea9dc024ca18b9df060941b0d1174ce7e73da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:85:84:df:76:25:84:0f:b0:75:df:77:15:
8c:96:a9:98:70:3e:36:01:11:4e:76:b0:ec:db:58:
07:a6:fb:4a:14:cb:7f:27:60:3d:52:7c:0f:07:cc:
2c:f9:71:3d:bb:ec:11:3b:88:00:cc:ed:36:8d:50:
71:dd:83:0e:08:a9:f0:67:bb:19:15:fc:0b:cf:a7:
f0:fb:a6:e0:e2:45:25:5b:f6:64:d2:57:db:16:d2:
87:f9:c8:fe:4b:16:5c:c3:fa:85:03:ff:85:5a:d2:
6c:a6:47:84:a2:b2:88:17:bc:76:63:e4:e9:15:b1:
22:63:e1:0e:13:9f:82:77:f0:28:63:f7:fd:43:41:
06:6c:91:9f:b5:d9:10:17:5d:30:d0:e4:f7:ca:4f:
f7:76:12:91:48:9d:77:3b:d3:49:5f:8d:1c:fa:68:
37:f3:7e:ca:4c:db:f7:8b:35:2b:47:e9:4e:76:50:
cb:47:b6:f3:2f:fb:b6:f5:93:13:a5:56:f8:1f:10:
91:2c:a2:3a:3c:ed:d7:f4:75:f1:fa:4f:f3:03:14:
46:2b:25:d5:2b:86:84:02:93:4c:9a:c0:86:da:ca:
a5:2c:78:11:17:4d:39:8a:b9:45:a8:46:38:d7:d9:
f4:81:d8:42:37:77:e8:a0:63:0e:c6:9d:78:70:3d:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EA:9D:C0:24:CA:18:B9:DF:06:09:41:B0:D1:17:4C:E7:E7:3D:A7
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:17:b1:7a:b7:f6:2f:25:b7:93:56:e0:3e:d7:d9:8c:d7:10:
d7:91:67:31:74:98:eb:98:52:05:12:e2:a8:19:0a:b4:40:2a:
65:2a:96:c0:de:fe:fb:87:1a:c5:d3:2c:73:af:1d:e4:9c:ae:
fb:fc:8b:0e:df:27:82:99:b6:0f:36:a2:30:79:b7:30:ac:19:
dc:7e:68:ff:33:0e:df:a4:00:a1:4a:4b:e0:c7:ab:50:7e:d9:
06:01:14:13:65:b7:3b:81:d5:0b:50:d9:0b:4e:27:31:14:86:
d8:10:d8:92:0b:0e:46:34:0e:b5:33:73:74:b4:52:5e:85:e7:
ad:6d:ff:64:3f:31:c5:07:92:c0:0e:01:fe:36:10:0c:41:d3:
03:e1:72:ba:b6:e9:60:13:44:45:fe:e6:3c:c9:79:a2:90:cb:
23:5e:ab:05:92:37:6c:fd:f8:1f:07:b1:58:84:d0:d9:77:f1:
63:b7:9b:21:a8:6a:17:56:75:04:58:d8:98:85:5d:e6:20:9d:
51:05:01:a7:bb:44:4c:3b:cc:c4:30:0a:dd:cc:89:f8:a9:28:
88:4c:e2:78:6c:d3:9e:08:13:da:a4:af:33:ec:59:a7:3f:55:
df:c8:f1:b7:fb:4d:1e:93:29:f4:a4:ba:3b:0d:2a:c0:0a:88:
6d:84:74:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:09:13 2026 by rpki-client