
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File: 1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier: PBSJx/7dSW5NSHZ7OPr0Zi0gLLpXbL1JW1so5iT8oRc=
Subject key identifier: 09:0F:4C:F7:8D:DE:9F:9A:0C:76:69:23:91:7A:E2:6D:CD:2C:37:88
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019A4F62877ECB2064682DFB12C2FE0350B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number: 067C
Signing time: Tue 04 Nov 2025 15:00:48 +0000
Manifest this update: Tue 04 Nov 2025 15:00:48 +0000
Manifest next update: Wed 05 Nov 2025 15:00:48 +0000
Files and hashes: 1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: 4Am5G1T+IhQRZ9jUD1eSF/wqR2eEo8/XdX3EzvFwQHA=)
2: 4B5PYdM6hdf5v3JY90vIhoxuYRA.roa (hash: x6z3BhGBnLNFh0GY5DMNa5IJcSovdTHd+CSiC4nFsn0=)
3: 7iFKRLth1Zm4UheUp7tUenlx6tU.roa (hash: y4tZzIay0AgtGP5YoKVVSCeeZFYasXEYu2JLlwWG/oU=)
4: 9B7naTDbTfBC3f0Su46QWyrhOAU.roa (hash: EuLTR97eLUOnyJBm+T95P0s0ZZVOErLTXd4saTTHgqg=)
5: Ej8KsK3ekpSAuBzyfoaBTrkE254.roa (hash: W6V0L2A/Di1Ma4bsmI96DmEyiw9w5QmMthcncjOX6q4=)
6: F3TFrLyovb8XvAopBK7JOYa2mwI.roa (hash: pEvX4onxvm1t0Llqu8JqybLkNG3FnmVsK+ePV2bdtbk=)
7: LZcNgygFBKx2IuLtD2ktQpXW4Ps.roa (hash: I7tPfrwHzB0UAJOseFDltlGuyXCQ69zHCcehJNGrXZI=)
8: M9m5ciKZUlugxrd6zs79XHL4dD4.roa (hash: 5TehzUmwbp1N2JUN9csCq1NNReNAH4jUA6HYU4FBVG0=)
9: Mb06qDf9rtzvzYCg0U7zkpiC6ow.roa (hash: xrftSxsmsKF+XldnXy9dslwB8tEYW7zhPs0yXnIxtKQ=)
10: OEVx3wt-afSCjQoq4CCBGEYZ0-0.roa (hash: RZxMVkxGx/ioX0a/f6t/tDg0YGbR5g3ZOXjOM4aJF6g=)
11: TB7Vm4gWWSiSIt6nLNjBHvK1zRI.roa (hash: mqf0wz3JRTRNuit3/84vfVWXJ5dDkzwNJrg38RSIvsc=)
12: TN5asrP-O_svuOzye5lJGogWzMo.roa (hash: rh9STD4IRIWTtIYMAcynIA4v5v5kpJ3eCDcSGZQerzs=)
13: V0NyGBzeNeiAwnkgDdus_1vA7a8.roa (hash: RKgBfoEec6XrdZ6UCnyyORQQ1M5776wgDHM2EvtO4bU=)
14: XnSGdaCJ3eKb4i-6Nu6dhvAlrx4.roa (hash: wQcutn0UQG9+UbR3j8U6CVNcG7YhBuHIXfvYXpQN+ao=)
15: Yw1DL4n3FWC67KL8P9tumDcnyZE.roa (hash: kPAh3h9z93w4ldeG3DZ18aXthzPwd8/sa1w8KSR09RU=)
16: krwPzjnTtCEOQgP9EXp1WO-kgx0.roa (hash: Jq2f8YMj3fJWLcxBtjZ9CHuZ6W1PxUoBmS3CD2sax2Q=)
17: rZ3f2ghlIlMmEeLut9WQeMpv_SI.roa (hash: /O3dwETcjlHRpfy4ApMsXsWCRk5nnssK+ipGTgIqiqA=)
18: svXrG3QIK1PSpFAJHEHHGRbfEO0.roa (hash: 7T2NVDjV6DcXy4mWtWp/NMapveCETPUIEEYMdpJqHYk=)
19: tfdAtKatow845W41MwNnVpLGgtg.roa (hash: uTfMLLKHQ5gluQZvH64MoBHxclcjq9Bv7RbosMqSlGA=)
20: uJPBnwCQe4pWBPSakttM1tJFVcw.roa (hash: SlkGHJE+y8/3ykMchDghQk+vAt9Ko0/kJI2Pi7OwLbY=)
21: uhML_oNbUvddVaM_8h0IgpoA3cc.roa (hash: C4c5Ksbcv3rZrM8/EsXQOZhZrBbQbFeY/G5HM2327Gc=)
22: yWS3DxYlEa286j-Oj-MizHyB7tQ.roa (hash: ThzwUBysD3Pp4+LTCcV1XKNGgsfv+MNlctzHUQSZ/t0=)
23: zAC2MLNJrmguNG5Jgx7gNvDzV-4.roa (hash: FC34BHiFfWv+RgcCSV025nDem+cRfaFiqLlBEcQFqPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:87:7e:cb:20:64:68:2d:fb:12:c2:fe:03:50:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Nov 4 15:00:48 2025 GMT
Not After : Nov 5 15:00:48 2025 GMT
Subject: CN=090f4cf78dde9f9a0c766923917ae26dcd2c3788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:c8:be:78:6c:0a:ec:2b:9f:10:ed:94:3b:
55:1f:b1:87:63:5a:db:b9:10:03:ad:f3:08:0d:3e:
38:19:a6:88:16:fc:8b:37:a1:49:73:6d:3d:50:55:
c1:c0:d2:7c:83:28:98:53:96:fb:d7:1b:f3:42:42:
1f:97:d1:fa:8b:21:a1:9d:09:fb:8b:01:73:57:60:
cd:5f:74:44:66:05:39:04:8b:aa:f0:78:49:ce:39:
14:d1:cd:74:38:86:8b:10:20:af:c6:1c:ff:36:a0:
92:8b:f8:fc:fe:ef:3c:fe:ed:ac:3c:a0:72:ae:e7:
8a:35:c1:2c:3b:af:25:ee:3a:d6:93:99:f4:94:82:
92:57:33:e4:29:43:cd:f8:87:35:ac:19:bf:aa:1b:
76:55:50:a2:46:79:54:74:ec:c9:0c:55:bb:53:7e:
c4:b3:c2:65:4c:e4:86:be:fd:e6:b1:be:f0:f8:ae:
62:2c:c1:cb:11:ac:9e:cb:bf:32:03:c1:c8:80:bb:
28:f4:92:1c:95:c9:6c:30:90:9f:29:93:ad:cf:bc:
c1:e9:6d:50:04:ce:a3:5b:ba:6c:fa:fa:8f:d7:c5:
d9:5b:3b:06:60:c5:ae:49:ef:b4:c0:1c:9b:58:e8:
23:77:9d:13:22:a6:b3:2d:a8:2b:4d:1a:8b:78:5b:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0F:4C:F7:8D:DE:9F:9A:0C:76:69:23:91:7A:E2:6D:CD:2C:37:88
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6c:5c:63:cb:f2:51:55:36:bf:15:c2:cf:c6:79:f0:8d:81:
2c:c6:a3:13:ba:9e:5c:c0:e7:d7:22:54:e4:6d:f5:80:0d:ce:
5e:e1:5c:10:eb:48:58:1d:ca:1d:cb:76:d4:3e:1d:b4:6e:8f:
06:77:e1:d9:86:c5:cc:ea:7d:e7:db:f4:8a:09:3f:86:ec:82:
96:55:50:45:cb:af:ba:90:a9:4a:69:77:af:c4:fd:f4:b7:34:
e1:f6:6c:41:40:78:a8:59:8d:0f:9a:33:fd:42:82:d9:de:c6:
bb:00:20:9e:ac:a4:ab:29:16:c7:d2:c0:dd:ce:43:1c:a2:47:
c6:b6:0c:80:a2:3d:2c:e6:45:ad:9e:42:67:40:05:49:85:fe:
ae:16:ee:f3:df:20:dc:31:30:02:6d:9a:15:ad:4c:6a:96:f8:
93:7d:a8:31:45:dd:05:4e:08:d9:82:cc:53:eb:25:19:96:9b:
3c:0a:8e:63:e4:f7:14:24:d5:1e:8f:a0:89:a1:36:18:98:91:
b1:81:b4:26:4c:f5:db:79:48:e6:e4:03:03:2b:54:92:99:e3:
39:2a:ed:da:a0:29:b5:c0:84:00:b3:ff:8e:92:ee:2a:3d:be:
9a:c4:64:02:0e:ea:d0:68:6c:e0:a7:28:ac:77:a8:e6:6e:b0:
d1:45:71:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYod+yyBkaC37EsL+A1C0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz
NTNkY2UwHhcNMjUxMTA0MTUwMDQ4WhcNMjUxMTA1MTUwMDQ4WjAzMTEwLwYDVQQD
EygwOTBmNGNmNzhkZGU5ZjlhMGM3NjY5MjM5MTdhZTI2ZGNkMmMzNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu/IvnhsCuwrnxDtlDtVH7GHY1rb
uRADrfMIDT44GaaIFvyLN6FJc209UFXBwNJ8gyiYU5b71xvzQkIfl9H6iyGhnQn7
iwFzV2DNX3REZgU5BIuq8HhJzjkU0c10OIaLECCvxhz/NqCSi/j8/u88/u2sPKBy
rueKNcEsO68l7jrWk5n0lIKSVzPkKUPN+Ic1rBm/qht2VVCiRnlUdOzJDFW7U37E
s8JlTOSGvv3msb7w+K5iLMHLEayey78yA8HIgLso9JIclclsMJCfKZOtz7zB6W1Q
BM6jW7ps+vqP18XZWzsGYMWuSe+0wBybWOgjd50TIqazLagrTRqLeFvWDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkPTPeN3p+aDHZpI5F64m3NLDeIMB8GA1UdIwQY
MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt
ODI3NmM4YWFjNTBlLzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl
LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsGxcY8vy
UVU2vxXCz8Z58I2BLMajE7qeXMDn1yJU5G31gA3OXuFcEOtIWB3KHct21D4dtG6P
Bnfh2YbFzOp959v0igk/huyCllVQRcuvupCpSml3r8T99Lc04fZsQUB4qFmND5oz
/UKC2d7GuwAgnqykqykWx9LA3c5DHKJHxrYMgKI9LOZFrZ5CZ0AFSYX+rhbu898g
3DEwAm2aFa1Mapb4k32oMUXdBU4I2YLMU+slGZabPAqOY+T3FCTVHo+giaE2GJiR
sYG0Jkz123lI5uQDAytUkpnjOSrt2qAptcCEALP/jpLuKj2+msRkAg7q0Ghs4Kco
rHeo5m6w0UVxxg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:59 2025 by rpki-client