
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json)
Hash identifier: YbJ/waS4wIhgmFP3+0ymnwBGFkNHyVu3bUao6mbN9no=
Subject key identifier: FF:E7:53:14:EB:4E:92:F2:62:1F:87:AB:F5:8D:94:08:05:BA:78:9F
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01A1C2C20669D8792D9B21A161652A1A1359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
Manifest number: 1110
Signing time: Tue 10 Nov 2026 00:00:57 +0000
Manifest this update: Tue 10 Nov 2026 00:00:57 +0000
Manifest next update: Wed 11 Nov 2026 00:00:57 +0000
Files and hashes: 1: 02DR5VqiImR1ELzoMhmN2MgdJEw.roa (hash: A46KCkLXFpYgdMenUrWnd1pDGxM359G65Rk9wVjYrCI=)
2: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: ta2Ftyky4OtS1SehP3FNuT2FfVCQu1hC4PIJGOmq+gc=)
3: 8P-jAkBcMOaRIUETkZOwY2giLXE.roa (hash: JFv+n+pyR4z+68wZuOFM0scuNRmrUJ1Wb5COfkBUH5E=)
4: BY4mDld_X8hCH3azNrIdkJUk3VU.roa (hash: 5iaX0LN1ARLgnFxwOqzDQkkekYgRLU/QkxFUY+A4X4w=)
5: KpUnWVUlULWTTS0J2TLqceBjzCk.roa (hash: 76AJtOxzTxnr9dKExR5Nj079cdfCs06aPInHb2LSvtc=)
6: Sach14bdHlIK2UH0J3lQ2NMxP28.roa (hash: yPoSvJoCSm4E4Xf3Wz/qd7+O7r/XNwAzJU13TUZU3n4=)
7: Tp3iAYlWpBzKM8R4tN-VqpW4r3w.roa (hash: Xc83mkIVmwaowqosFrmOu3R3dm/XOXcYYwcGQpwmyao=)
8: Tz7ItZl-lHs7DNCXseXkPaZdXac.roa (hash: FcXx3w36kf6TRe3O05Cyb+nGwJit3nSqaoLBOCk0HGM=)
9: Xpfmc5Pj6g7rym3j_1LXYJ9AL1s.roa (hash: MovlI65q4mVYc3DNO4AqCJ9iCuS7hY789BB33mIixAc=)
10: b2A87lKXZV-LA0ZGDO4bCLP_qZk.roa (hash: fj4a7LJXRs7D1MouPdKAx8xun8DGteQiIPGE+YxQovY=)
11: cDj-WYm3s2vUGQquUFgEnX-uU98.roa (hash: NZWXGTq8PJkDkcOSpr8dMTKdRnbfPlcnYU1DrDx5K5w=)
12: f8TG-bZI-Z4nSjLzL-HsS0C_Tf0.roa (hash: 0olqv2jmyhIPEjFWu6/XmLwOWBRD4BMaKAamfg5ymBE=)
13: fHiLAjeGI5fzHUJT-wjG-vUQaUc.roa (hash: b2nJsInyFTD4R4jnJKV9oymyFGug4tERm9L1VVzvdQU=)
14: gcxp-EWnfFLHMrONlRoutn-Z7U8.roa (hash: pfCAICQ/vVikMpFdMBXvwM28HdJs0Hi4u8HPJ1KDTPI=)
15: l1LATFY_vdostbB9Lz5ULV3obQg.roa (hash: g5dMlB8SMZ/AEHbTJXc8VAsuZMEmjzmc7YnjTo/UDz8=)
16: lmwUE6-sNDETCNSEMoLU5Q6laJU.roa (hash: 8qCzxJz2lk/vBKmrmfwaSNgolO5upfvcwLUosHTaWSo=)
17: mYLN78ICJLHl7O9hLXw6VEbnnwk.roa (hash: t8gHECZIoYqrf13gRRy1nXbebHV2mNd1f9yJrfFQKGk=)
18: pMRzd49PJuC_a8isaKVdx-y6R6E.roa (hash: vS6bWVrCBd2U3yUpSsw/bcztmwQtyHAUDWfNv8cokkA=)
19: yeEWbOYgX_Oncu1Rzgm_LkCjWSg.roa (hash: SuLBsAyJ9wMKUX8JJrXZ9GO0IIZWlW+vtwNA4dWtXb4=)
20: yv4qQ4kbMxDaChIWUXDIpdTJyA4.roa (hash: 7MOA0YYmqmT4L3Npgm7U4y5ee3LRGCAg/F/T+5uuvBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:c2:06:69:d8:79:2d:9b:21:a1:61:65:2a:1a:13:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Nov 10 00:00:57 2026 GMT
Not After : Nov 11 00:00:57 2026 GMT
Subject: CN=ffe75314eb4e92f2621f87abf58d940805ba789f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:a2:00:68:41:48:ee:b1:ab:81:03:5b:5d:
b8:a5:15:27:6b:9f:75:d1:2c:a2:6d:f0:58:2e:83:
36:83:4d:e3:4c:b5:3e:b4:05:60:a4:33:62:c4:3d:
6b:04:86:04:5e:2e:b5:62:75:ed:2d:9b:f8:f9:c4:
25:92:1e:f8:c3:ae:6a:be:d4:e2:22:2e:af:cb:d1:
39:bb:3b:af:2a:d4:39:08:17:f4:fa:73:c3:d1:d8:
fa:45:54:9b:9e:6c:89:30:7b:b7:4e:b4:ea:1c:b8:
c6:1c:fa:73:24:b4:78:20:f5:dc:72:81:f3:3f:e8:
16:00:2e:fd:61:7f:a6:26:6d:6a:c7:58:62:23:e1:
f8:8c:d2:e6:f3:1f:a1:c1:2c:a0:6b:2e:c6:7e:b3:
78:50:cb:cc:77:89:ec:28:f0:dd:00:f5:a5:16:3f:
fc:02:ba:d8:21:dc:e2:f7:43:f4:7a:b2:22:f1:f1:
73:d9:a5:89:29:6e:0c:0d:6c:42:79:11:0b:3a:d2:
7a:62:7e:45:fe:8c:28:6f:5c:e5:2a:48:5e:bc:d4:
e4:e2:73:f2:47:2b:2d:57:0e:d1:3d:ba:52:ff:63:
87:d8:cf:5d:63:4a:e9:57:ea:c3:3c:19:d2:b7:59:
70:45:5f:6c:4e:6e:75:2e:17:35:fa:8b:37:c3:88:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E7:53:14:EB:4E:92:F2:62:1F:87:AB:F5:8D:94:08:05:BA:78:9F
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:02:b4:ab:f7:3d:70:d9:36:d8:f5:ce:df:97:e7:42:9a:b1:
db:51:88:81:12:8a:5d:dc:b0:76:17:7f:e9:14:71:3d:18:ae:
65:0a:1f:93:de:cb:dc:4e:0c:e8:bb:b0:14:6c:bb:2a:9f:07:
53:19:9e:90:00:11:fc:9c:a5:00:d5:ee:89:da:8b:0d:38:0d:
e3:cc:6d:37:0c:a9:84:c8:e5:17:f9:96:c5:d4:b9:d9:fe:b7:
f4:60:de:bb:8a:26:03:79:c4:dd:12:a6:1d:8a:7f:80:31:6c:
4d:4f:c0:25:c1:8d:3b:01:ac:fc:46:48:8d:65:ed:80:d8:16:
3c:2b:68:5d:b3:41:6d:61:18:fc:70:a5:d7:82:a2:22:84:68:
20:5c:48:2f:7e:a3:82:da:71:2a:2f:6e:4d:30:e9:98:f6:25:
41:1c:96:ba:72:c3:ff:c5:5f:dd:ca:cc:6f:e4:fb:5f:89:86:
7b:0c:f5:35:e0:5b:48:5e:ea:df:d4:fe:ff:17:66:df:58:90:
73:d9:77:d6:55:dd:e2:6a:83:e9:29:38:96:e3:30:07:cb:1c:
08:f5:37:c6:ef:20:1b:32:54:d2:5b:a6:44:89:ca:d5:19:35:
05:3c:cb:b2:b3:e5:ae:45:c9:58:b3:15:83:78:12:ce:b0:ad:
7c:be:59:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:03:56 2026 by rpki-client