
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json)
Hash identifier: eLQ+vqw3QGcS+dmFMeRaWeH6/6akUYwqPsTXQvGvJVs=
Subject key identifier: 8A:8E:AC:DA:7D:CF:5C:B7:EA:10:6D:85:3B:AC:CB:B2:5E:10:A8:E1
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01A0C70EEA9002143C9AF0FF661EEEA5F25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
Manifest number: 108B
Signing time: Tue 22 Sep 2026 03:00:38 +0000
Manifest this update: Tue 22 Sep 2026 03:00:38 +0000
Manifest next update: Wed 23 Sep 2026 03:00:38 +0000
Files and hashes: 1: 02DR5VqiImR1ELzoMhmN2MgdJEw.roa (hash: A46KCkLXFpYgdMenUrWnd1pDGxM359G65Rk9wVjYrCI=)
2: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: K3AN7EEwt4Pb4k8G0jsG9z9MuyZCmuVBM1xWjJexTD0=)
3: 66ry_Oqrn2z2VQi36erLm_YTas8.roa (hash: 8++6k+ANwssYLtGuRElIJ17chl0LvEvv8esMVg7kfIE=)
4: 8P-jAkBcMOaRIUETkZOwY2giLXE.roa (hash: JFv+n+pyR4z+68wZuOFM0scuNRmrUJ1Wb5COfkBUH5E=)
5: BY4mDld_X8hCH3azNrIdkJUk3VU.roa (hash: 5iaX0LN1ARLgnFxwOqzDQkkekYgRLU/QkxFUY+A4X4w=)
6: KpUnWVUlULWTTS0J2TLqceBjzCk.roa (hash: 76AJtOxzTxnr9dKExR5Nj079cdfCs06aPInHb2LSvtc=)
7: Tz7ItZl-lHs7DNCXseXkPaZdXac.roa (hash: FcXx3w36kf6TRe3O05Cyb+nGwJit3nSqaoLBOCk0HGM=)
8: XD0N8YFQ7WEbeGPE05rrKKkxLe4.roa (hash: +5lcpcvEvIjJRLbDNnmCgfImKGp7O0W9Yg7RYSAvMGk=)
9: Xpfmc5Pj6g7rym3j_1LXYJ9AL1s.roa (hash: MovlI65q4mVYc3DNO4AqCJ9iCuS7hY789BB33mIixAc=)
10: b2A87lKXZV-LA0ZGDO4bCLP_qZk.roa (hash: fj4a7LJXRs7D1MouPdKAx8xun8DGteQiIPGE+YxQovY=)
11: eqwxW_73SsfybtamGFjU8BT6lss.roa (hash: eZIEEacqr0QeRaw//AWmV7fNo+uhUfn87QEEoeHj8N4=)
12: f8TG-bZI-Z4nSjLzL-HsS0C_Tf0.roa (hash: 0olqv2jmyhIPEjFWu6/XmLwOWBRD4BMaKAamfg5ymBE=)
13: fHiLAjeGI5fzHUJT-wjG-vUQaUc.roa (hash: b2nJsInyFTD4R4jnJKV9oymyFGug4tERm9L1VVzvdQU=)
14: gcxp-EWnfFLHMrONlRoutn-Z7U8.roa (hash: pfCAICQ/vVikMpFdMBXvwM28HdJs0Hi4u8HPJ1KDTPI=)
15: l1LATFY_vdostbB9Lz5ULV3obQg.roa (hash: g5dMlB8SMZ/AEHbTJXc8VAsuZMEmjzmc7YnjTo/UDz8=)
16: lmwUE6-sNDETCNSEMoLU5Q6laJU.roa (hash: 8qCzxJz2lk/vBKmrmfwaSNgolO5upfvcwLUosHTaWSo=)
17: pMRzd49PJuC_a8isaKVdx-y6R6E.roa (hash: vS6bWVrCBd2U3yUpSsw/bcztmwQtyHAUDWfNv8cokkA=)
18: yeEWbOYgX_Oncu1Rzgm_LkCjWSg.roa (hash: SuLBsAyJ9wMKUX8JJrXZ9GO0IIZWlW+vtwNA4dWtXb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:ea:90:02:14:3c:9a:f0:ff:66:1e:ee:a5:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Sep 22 03:00:38 2026 GMT
Not After : Sep 23 03:00:38 2026 GMT
Subject: CN=8a8eacda7dcf5cb7ea106d853baccbb25e10a8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:cc:1b:3d:bf:e1:6c:5c:08:ae:c6:ec:06:
14:16:a8:3b:40:9b:af:8f:e6:79:7a:22:78:c6:73:
37:72:ba:c3:5a:c6:91:30:04:c1:02:c3:f1:84:78:
cd:9f:e6:c6:b6:40:60:0c:af:1d:50:98:2d:0f:11:
f3:55:cb:b8:8e:10:d8:cc:fe:41:bb:e2:82:49:db:
b6:d7:cd:bc:0a:f4:0d:95:95:f0:2b:6c:3d:ef:db:
78:a4:9f:fe:a6:e7:31:b2:3d:f4:74:da:99:83:d4:
d6:d6:96:bd:4a:41:05:7d:8e:8c:97:32:20:75:d3:
f9:b6:ea:71:55:a4:02:05:c8:e6:c1:5d:40:bf:b1:
f8:1c:71:7e:20:76:1c:60:9a:f0:20:18:b0:ec:79:
8e:a7:b3:84:a2:ee:f0:09:5a:d9:25:01:37:57:ad:
55:b0:f1:90:95:88:6f:ce:32:a8:23:cc:fe:1c:36:
97:fd:4d:1f:4e:06:8f:4c:46:0f:b9:09:1d:8c:e9:
ce:3a:b1:c7:4a:83:cf:75:f2:f5:31:26:eb:0b:d2:
d7:78:be:f5:04:e1:d4:ea:a1:23:e7:78:cd:69:76:
90:09:ca:c5:50:48:9b:f9:a7:e1:e8:22:f7:a9:64:
5d:1e:ba:80:96:fd:c8:8d:77:8e:7e:7c:99:45:92:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8E:AC:DA:7D:CF:5C:B7:EA:10:6D:85:3B:AC:CB:B2:5E:10:A8:E1
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e9:77:ed:3c:7f:97:94:82:57:ee:c0:59:47:40:c3:38:25:
19:c9:c9:0a:7b:7a:92:56:e7:9d:5d:e9:e2:58:19:a1:3a:93:
a2:8a:31:72:c3:b0:23:f1:7d:53:b5:df:f8:85:90:77:e1:30:
f6:0c:6c:a0:15:c3:4c:65:b9:2a:ea:b7:7a:56:1f:5e:0f:6a:
3a:7f:ad:37:fd:2f:48:51:74:a6:36:ef:16:af:cf:cd:7a:f8:
80:44:76:7e:20:d0:66:94:a7:53:4d:4f:b5:3e:14:dc:a1:61:
b6:fb:d6:e9:25:04:62:6f:87:c4:e0:fb:b4:d9:15:d5:0b:03:
ed:3e:39:88:7a:e0:2a:5f:12:d8:b2:b7:c4:6a:30:14:b0:8a:
89:8a:48:47:43:02:72:3b:32:1c:fb:fb:d1:eb:61:c6:25:89:
e5:e3:d3:28:97:d3:26:6a:d9:08:c8:a5:dd:ab:ce:cc:48:5f:
d8:7a:08:db:7a:7f:0c:05:8e:eb:f1:9c:27:94:e1:24:a9:2c:
fd:e9:73:24:3c:d4:2c:f1:bd:ab:5c:ce:ef:cd:70:cd:66:a5:
9e:2b:41:fd:48:a3:3a:83:06:88:c9:dd:ef:31:2a:39:ab:72:
75:ca:bb:f6:45:08:c3:71:d6:f5:2d:d9:eb:57:bc:e6:da:fd:
6c:2c:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:29:58 2026 by rpki-client