
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: FcAkCk7weynR6XDnsLwOJsA5Ss/fxtjjGQRQMakLneM=
Subject key identifier: 1A:73:59:86:C6:39:CB:BD:3B:07:E1:59:97:2A:89:73:68:09:C2:6F
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 01A0BEB12829D26F6B0A8681618FC112A670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 1A70
Signing time: Sun 20 Sep 2026 12:01:16 +0000
Manifest this update: Sun 20 Sep 2026 12:01:16 +0000
Manifest next update: Mon 21 Sep 2026 12:01:16 +0000
Files and hashes: 1: 044xYX9HsasQkNnZ6gNIrDun9Kk.asa (hash: QqGXRDWhRxy4fIleJhf8VPuBnT0lLwsILfpI5ZVk2bI=)
2: 21UC4Dg27lTwnVnoP-1hWx8Jrac.asa (hash: P5jYP5ImmwlHStzib0wGM6vyZuqyna1VWXgPkWJ521s=)
3: 3j6ITLuEAtzvq7lDDH-_99jLsyw.asa (hash: emyDEkQmvd9qMUG9y8IBKAbGI4wIM9zsTIQoNhtKSiU=)
4: 4blS8i-IvJFmYcw1UMVYU50adH4.roa (hash: PH25rQxOqMdKEUIOyGDzXkRgbKvHvrgDiCAwjxsY21M=)
5: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=)
6: FXZzLUTLI2bnJX3HE0iocMnGK24.asa (hash: 0jHNXzmBRRsiRYGYoiH0GyC90Hc/n11rPyQ1ORy1E6M=)
7: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=)
8: ONEBxRFqRY2aPMMFa_3ak7_LP04.roa (hash: 6sHhfn9wB3VfYGqWY+wewX0hRZU1FUHpsvmiMpmOan0=)
9: SpVJq_aWC8IH5JWeljASL-sUdR4.roa (hash: WWb4Srs1EjuxCuzB13EtjRKgil05qhr6qF6kWwF7M7g=)
10: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: 831glZEBA/PKepVl1FHSAx5b/0cbgQ842MWJSVZBkPg=)
11: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=)
12: lwxC-jH6X2q9Mt74lepdPD3W9EM.asa (hash: 4RgSfjSU8Flpmo/qpEf1hYBnqzjBw2dPRj3BdEOkib8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b1:28:29:d2:6f:6b:0a:86:81:61:8f:c1:12:a6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Sep 20 12:01:16 2026 GMT
Not After : Sep 21 12:01:16 2026 GMT
Subject: CN=1a735986c639cbbd3b07e159972a89736809c26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e0:78:55:fd:09:4e:78:1f:70:44:e1:69:4d:
7d:ea:7a:39:29:df:35:a2:bd:70:21:b0:23:ad:eb:
8b:bf:62:60:c7:20:a6:70:dd:5d:1c:40:c5:1f:b9:
b5:cb:0f:1e:85:87:ee:30:65:0f:51:52:f2:67:c8:
1a:82:57:d1:8c:d0:87:7a:41:ec:dc:07:74:3a:59:
4e:7b:6d:83:9a:49:c7:56:03:7b:48:3a:7c:41:e7:
43:d1:f9:66:2b:cf:d6:60:84:80:86:04:17:52:94:
78:71:4c:78:18:7e:8f:f6:f4:0f:7b:9c:86:9c:62:
60:00:88:1a:e8:52:05:63:a5:d5:4e:ef:42:24:ad:
c6:44:4f:4b:0c:39:50:a9:9a:3d:d1:98:72:be:67:
04:56:18:3a:b1:d5:55:6b:72:0e:f6:4d:a7:ed:8f:
db:0a:6f:2c:e0:22:32:ca:ea:c9:0f:93:59:d8:45:
f3:7e:1b:97:a2:7d:f9:a9:ea:1f:4c:5e:00:74:16:
bc:d0:74:49:ab:55:72:33:1a:13:fa:2b:50:cd:97:
41:80:47:17:e6:b4:c8:e7:0c:29:0e:4b:35:d1:b0:
56:2f:13:23:91:fb:03:01:d8:71:2d:f1:a3:fa:db:
0f:62:04:9a:0d:80:48:f2:40:c0:12:6f:1d:2a:49:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:73:59:86:C6:39:CB:BD:3B:07:E1:59:97:2A:89:73:68:09:C2:6F
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1f:95:bf:3d:0f:db:86:82:e0:ae:67:95:6b:8b:a5:ba:4e:
24:c6:44:a5:95:e6:8f:7c:c5:ca:20:d6:95:29:63:17:83:06:
a3:f2:29:89:3a:44:14:42:50:33:08:97:34:7a:97:7f:57:2e:
25:f3:c2:4f:93:9f:87:00:23:2f:d3:8e:6c:13:12:15:e2:b9:
b3:d4:7e:c0:67:f6:9f:a5:53:b9:02:9a:41:44:ba:84:e8:c7:
5c:46:3c:6d:fa:f6:39:11:34:79:b2:7d:45:1b:f8:5d:b2:73:
80:72:e6:1c:92:70:6a:c4:4f:fc:e6:24:87:a8:0b:2f:b3:73:
a9:34:61:83:7f:7e:f5:03:4d:41:d4:7a:de:b9:1e:b7:5b:db:
b9:f1:74:be:b3:c0:c2:35:b0:b1:c3:56:41:d0:57:5b:49:72:
b3:3a:b9:78:dd:00:c3:d5:a8:d4:b6:1b:6a:cd:95:71:a0:11:
4e:d2:3d:7f:ef:38:f0:0a:99:da:eb:39:20:98:b6:3e:fc:4d:
66:1b:90:e4:65:85:7a:af:93:cf:5e:48:b2:3b:da:4d:c5:4e:
4b:ed:81:aa:3b:f2:56:34:61:44:7a:88:c8:bc:1c:65:61:4f:
f4:f3:df:62:d1:8e:9e:3f:c2:67:8b:6e:91:2c:a4:51:e8:9c:
38:d5:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:17:04 2026 by rpki-client