
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: 9/AR3mqC+mvcBKQwUSbsDrkGuZuOAIjwiuX6TCNFHYk=
Subject key identifier: FD:D5:85:67:0C:A5:B3:79:0B:DB:EF:10:9D:41:4B:5C:7C:05:4D:1E
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 01A0BCC213A7AA8D2A2F2ED8A7FCE1F18340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 1A6F
Signing time: Sun 20 Sep 2026 03:00:30 +0000
Manifest this update: Sun 20 Sep 2026 03:00:30 +0000
Manifest next update: Mon 21 Sep 2026 03:00:30 +0000
Files and hashes: 1: 044xYX9HsasQkNnZ6gNIrDun9Kk.asa (hash: QqGXRDWhRxy4fIleJhf8VPuBnT0lLwsILfpI5ZVk2bI=)
2: 21UC4Dg27lTwnVnoP-1hWx8Jrac.asa (hash: P5jYP5ImmwlHStzib0wGM6vyZuqyna1VWXgPkWJ521s=)
3: 3j6ITLuEAtzvq7lDDH-_99jLsyw.asa (hash: emyDEkQmvd9qMUG9y8IBKAbGI4wIM9zsTIQoNhtKSiU=)
4: 4blS8i-IvJFmYcw1UMVYU50adH4.roa (hash: PH25rQxOqMdKEUIOyGDzXkRgbKvHvrgDiCAwjxsY21M=)
5: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=)
6: FXZzLUTLI2bnJX3HE0iocMnGK24.asa (hash: 0jHNXzmBRRsiRYGYoiH0GyC90Hc/n11rPyQ1ORy1E6M=)
7: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=)
8: ONEBxRFqRY2aPMMFa_3ak7_LP04.roa (hash: 6sHhfn9wB3VfYGqWY+wewX0hRZU1FUHpsvmiMpmOan0=)
9: SpVJq_aWC8IH5JWeljASL-sUdR4.roa (hash: WWb4Srs1EjuxCuzB13EtjRKgil05qhr6qF6kWwF7M7g=)
10: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: za3hyRM/2bSgoSJTf/dk9k1l/qdZhzl/+/8UAuYeAYw=)
11: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=)
12: lwxC-jH6X2q9Mt74lepdPD3W9EM.asa (hash: 4RgSfjSU8Flpmo/qpEf1hYBnqzjBw2dPRj3BdEOkib8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c2:13:a7:aa:8d:2a:2f:2e:d8:a7:fc:e1:f1:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Sep 20 03:00:30 2026 GMT
Not After : Sep 21 03:00:30 2026 GMT
Subject: CN=fdd585670ca5b3790bdbef109d414b5c7c054d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:e0:be:96:bc:4d:8f:61:93:2e:d8:ec:30:
05:c6:d8:6e:5e:9a:55:34:15:c0:81:00:77:3f:0f:
ae:73:8f:4d:4b:92:60:0c:a6:b2:dd:5c:07:52:13:
c0:6a:b4:8e:14:ed:e2:e0:91:e5:3e:1a:41:60:d6:
5d:e0:4e:0e:45:89:cb:2a:6b:5c:72:e6:c1:7f:8f:
bc:39:b8:ca:9f:a1:54:e4:7c:c1:b3:b8:02:a6:32:
64:06:f8:02:ec:b4:6b:4b:d4:5a:e6:04:33:14:15:
70:6b:58:60:ba:a5:eb:4e:ba:09:ec:4a:18:54:ff:
f0:e5:7b:35:0a:d3:26:62:b6:a1:a1:99:00:f8:19:
2d:da:46:47:79:4f:e0:36:d3:33:dc:72:49:c2:c3:
ef:76:55:af:68:97:e8:8a:54:d1:20:78:3a:92:26:
15:91:9b:06:7c:8f:44:5a:90:6e:84:e7:fb:24:d9:
7a:50:3e:e6:f6:72:8c:1e:b4:73:fb:e9:68:dd:38:
fd:ab:2d:4c:30:b3:7d:24:d0:05:ec:88:3f:e0:d8:
10:bb:59:63:59:77:04:f1:5b:8b:1d:f9:40:f2:4a:
a2:a9:ae:71:84:7f:d8:2e:6f:2d:af:9f:09:57:c0:
83:3a:22:86:c5:80:a5:4f:70:fe:b6:a5:09:37:0b:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D5:85:67:0C:A5:B3:79:0B:DB:EF:10:9D:41:4B:5C:7C:05:4D:1E
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fe:90:93:00:7e:cf:7f:68:b4:86:90:1b:99:ae:52:ff:6a:
16:d9:0b:d5:ff:02:aa:bf:b7:ab:04:75:95:b9:d4:30:2b:4b:
6b:9b:a1:1d:c7:94:ba:f4:b7:38:35:da:79:50:6c:43:93:c5:
22:04:51:6c:53:08:65:37:86:b6:53:e5:62:f8:1b:10:bd:07:
6b:77:e8:fa:88:18:0b:10:f6:73:db:82:93:03:7f:94:18:9b:
c3:87:a4:ff:60:4e:5c:68:af:63:a2:2e:db:02:af:4d:ae:d9:
34:a0:f4:7a:05:aa:16:ce:fd:2c:61:6b:90:c8:49:a3:dd:ad:
e5:56:4e:55:ab:18:c9:d8:7f:f6:b4:d8:c1:64:b0:9d:cd:25:
6e:d9:08:ce:6c:9b:04:34:28:0f:c4:4e:f0:c5:53:7e:43:74:
2f:8d:3a:7b:68:be:96:0b:b7:29:b3:43:20:00:d8:68:e9:87:
dc:a0:bb:a6:1e:5b:ce:2f:f4:2f:03:d9:94:0b:da:aa:12:1e:
42:96:c1:01:1e:67:0e:a2:2f:72:1c:09:df:e5:c8:e4:c8:d1:
96:cc:f7:66:9a:85:02:97:c2:21:a8:70:5a:b2:e7:c0:2e:29:
d7:01:dc:30:34:51:6b:b5:9b:46:80:07:b5:82:0b:d0:d0:f3:
e7:22:ee:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:58:30 2026 by rpki-client