
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
File: r54n_4hNH_f0er0AUO0Q4B7c7fs.mft (raw, json)
Hash identifier: AjhFJ6SEbkO8BTtrAfzq7LCaAO0xbECimgvV6kcj9p0=
Subject key identifier: D3:78:32:F8:B7:04:86:C9:B1:9A:61:95:6E:6E:23:CE:8C:10:49:AB
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0BF553906696CC4106B91D92720A9A098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
Manifest number: 2D
Signing time: Sun 20 Sep 2026 15:00:28 +0000
Manifest this update: Sun 20 Sep 2026 15:00:28 +0000
Manifest next update: Mon 21 Sep 2026 15:00:28 +0000
Files and hashes: 1: 0U2VlsPI1ZtSc4ITKZMGcokM6wQ.roa (hash: xFxtfcP/uh1hT7HfqtefEkdADJqwVPsvw8okD6YODcA=)
2: 1EPj5oCsvEp1ETVvGrcTQxkCQms.roa (hash: f9+jGJesrY0olTfTtyOt2zp8nsGdbEcZJti7tdKfZHA=)
3: 6WBCdNue4P4Bwmh21ugyLAYysrY.roa (hash: 1x/adm6hhc5ZSirGrOu+HovN3knqn/HT/eVJrmt1yWE=)
4: ADM5z6EfT3aWecVckZ9ug4ndlFM.roa (hash: DIKoFYYPJwfVKkL4sbv2NF1MZFR1z2PkmKsW9iTkjvM=)
5: DOY9uvEMESG_CBAXCSTil8tUjqU.roa (hash: GcKQdemMAmtXK23rDUqm0T27HdRKJ8Tv/9Se0Lcmk2c=)
6: DZDtk5zAseX3RttCqx21h-tssJM.roa (hash: mP82NkPNH+Q37YwPsild1BBhqz68QqINOHKIZRAaZLY=)
7: W-E6RwiIlwVN51nQLz0Z6UDhiCw.roa (hash: ooVMUa7c7GGovMJnl3xX70044O30NEuriA3liyRtiuM=)
8: WWXCLp8AKAwMMTTDbtTkCEwqNIw.roa (hash: 0ZIMIlG8yYnukrtN0d2X8Yr+wlYVLsxn2KV6Qd+MwzI=)
9: Ztqr6j7l7h3hs1VNVXmX_PeO6y8.roa (hash: ALLvNYgYy+qfhyJjEdyh1rN26Jk0vmO2dzNitEKWBcE=)
10: bvJPyCtTjEYZUTPcqiqr3yGW6j4.roa (hash: 6FqO+UYLHBLINnmw7pNDg8JsJ+P1NlKcV6kUgmiIj0s=)
11: pWmBN6XzbhhFmh9y6uK3ktLPfY8.roa (hash: S3ZIgYSvYkA4xihDlIBYpMkW+s8XQVV2XP1qQm6PUc0=)
12: r54n_4hNH_f0er0AUO0Q4B7c7fs.crl (hash: 5lx/jczzn/P39x6Icjr9i2Ln+GaJunp7M/M0CCekMMI=)
13: w0O-kMgGBUcDGLexAQgVYIHLcjo.roa (hash: TRXl9gaFoL4wFP5f4b00/HYgYwNAPKtnEfhWKhcYOTs=)
14: yAMDwwHx0OJAnZOEGPwEurNTfPY.roa (hash: Y+CqGx1vipPpCzhVGqEMP2VXL6GpbNsaqynSE27ySgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:39:06:69:6c:c4:10:6b:91:d9:27:20:a9:a0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 20 15:00:28 2026 GMT
Not After : Sep 21 15:00:28 2026 GMT
Subject: CN=d37832f8b70486c9b19a61956e6e23ce8c1049ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:0c:a3:7f:56:c0:73:e7:8e:f0:cc:c4:24:
44:23:d5:13:20:07:a4:f8:62:21:e0:8d:05:e5:b6:
83:44:67:8c:3d:fa:18:c7:1a:2a:8f:85:0b:48:70:
8e:e7:61:ef:68:b9:7d:18:a3:b3:eb:8c:29:97:d0:
81:c5:aa:65:67:7c:72:4f:ac:9f:48:ba:87:cb:b7:
3f:77:cf:22:66:4f:fa:f5:09:bb:40:fb:24:f8:78:
ab:82:4b:53:41:29:c3:88:9e:b8:94:84:aa:46:3a:
93:d3:56:5d:66:9b:90:ff:05:06:fe:0d:d3:a0:d2:
25:e4:30:fc:f3:cc:a2:17:a3:33:62:79:36:92:58:
84:da:68:6f:b8:4b:03:51:84:2d:b4:43:1e:25:99:
51:4b:07:01:f0:b9:0c:da:73:1d:72:1e:7e:7f:60:
2e:1e:54:34:49:26:51:da:29:90:9c:7f:9e:6d:6c:
c9:6c:f3:67:55:9d:95:75:61:c6:12:ca:cc:a4:6e:
88:52:24:9e:fd:e2:26:ea:65:bf:3c:7c:f7:45:a5:
9d:16:0d:39:09:17:af:1c:ca:74:d4:ed:a8:57:4f:
ba:3c:86:62:8e:bf:d0:8b:bd:47:22:e2:7a:50:52:
22:1d:90:38:e9:95:e5:35:5a:81:1a:3b:68:fd:27:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:78:32:F8:B7:04:86:C9:B1:9A:61:95:6E:6E:23:CE:8C:10:49:AB
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f6:5a:61:c9:95:6b:85:fa:54:85:3b:1f:8f:c7:b2:bf:7c:
d8:57:1d:5c:1b:13:eb:a9:97:28:2e:4f:ce:4d:da:0b:60:d2:
01:d3:e9:31:28:54:8c:c8:4c:57:5d:3f:48:91:40:8d:1b:05:
59:97:36:44:9c:9c:90:af:46:5a:9f:f4:44:a0:74:21:7e:8d:
10:fc:c3:26:7f:c9:84:b0:48:c5:db:a9:25:30:82:83:39:a5:
92:09:ac:e0:33:b9:00:b4:f8:2f:93:12:c5:36:79:93:ce:00:
af:d2:a9:5c:66:a4:7e:78:ee:15:ef:54:78:0b:9e:e5:b5:56:
a2:e2:3c:4f:dd:60:11:56:53:72:ce:70:07:fc:04:7d:ce:57:
62:0c:de:a1:43:21:bb:9c:24:b3:c6:e5:5d:82:1a:1f:8c:47:
27:e9:9e:73:d6:a8:8f:89:38:64:24:6e:f3:0c:8e:bb:36:62:
e5:b2:f1:69:e4:b0:d8:c8:f9:3f:cb:21:e5:46:f5:82:03:50:
c9:48:2d:29:24:70:ed:a0:ed:7a:91:32:56:d0:4d:11:1c:9d:
27:5d:63:db:5f:da:cc:d6:61:2e:87:4a:09:f2:ea:73:b3:ac:
39:39:c0:6a:cb:3a:d7:61:f5:33:bf:c2:be:be:8b:d2:01:72:
b9:30:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:21 2026 by rpki-client