
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: Fatvk64w8h42EUhO3MqB9o1RQfxQ7dK62R8SdaR7Iis=
Subject key identifier: 27:D5:B9:9C:04:C8:06:8D:E4:23:F3:1A:A0:1B:95:4A:3A:86:CB:81
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0DC850182ED893B36F0FE7CF1D16436A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 1AC4
Signing time: Sat 26 Sep 2026 07:01:39 +0000
Manifest this update: Sat 26 Sep 2026 07:01:39 +0000
Manifest next update: Sun 27 Sep 2026 07:01:39 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (hash: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=)
4: I6-j-8BvQfa7uemDIhOjpDrfaIo.roa (hash: 4oPWEYVGarVF168W3qSKbbTkYi3cD0iLoXF1q+SMw64=)
5: ITVk_BbTGZGBY8i_CGHM-CWi2Nk.roa (hash: NotHge1XMsDsDTu5BSWNG9GRaLH4tUNLXybnZGu/knM=)
6: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: GkNiae+6n4u1o17+xNR9aLoOJs96gLB/Ke4bCSmTdyI=)
7: T-qUaTppWdjXOEe8zDVxP2wl2mU.roa (hash: BctL7i3w8G6/dn3DlfdZ96WAphGXQa+OTA6hPMPwVs4=)
8: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
9: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (hash: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=)
10: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
11: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
12: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
13: jwzq316YRIYxB2dWQOOXkN8ZJ50.roa (hash: 4AUyfiPaPdOkjAJK1elfVHLI1HzkuX68VSkqUCY1eNU=)
14: pFnqQ8OxY0QNC7HRy-4FkWixiwE.roa (hash: fU2bUXH43phXIA3gQxBK8wzLYma3/YTLay/lAz3pmTg=)
15: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
16: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=)
17: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:01:82:ed:89:3b:36:f0:fe:7c:f1:d1:64:36:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 26 07:01:39 2026 GMT
Not After : Sep 27 07:01:39 2026 GMT
Subject: CN=27d5b99c04c8068de423f31aa01b954a3a86cb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:60:98:fe:2e:d2:a3:8a:58:55:45:54:c3:
2f:73:e2:91:ee:3b:17:8c:74:ea:49:95:51:fd:c1:
d1:b6:56:e3:61:8d:22:40:f3:59:04:f7:29:56:da:
fb:f9:0d:20:19:d2:14:4b:37:60:95:ba:bd:61:68:
ef:41:bf:41:ca:77:aa:77:e3:58:52:94:7d:39:31:
79:83:61:6c:e9:38:ce:52:f2:d8:2f:4b:32:e6:59:
57:2d:10:35:cf:88:e9:71:19:b9:c4:75:92:51:24:
ee:32:0e:88:a2:b5:ef:7e:a0:9f:b2:50:a9:88:b0:
80:22:18:2e:65:ee:bb:2f:ef:8d:7b:53:85:56:89:
08:eb:15:94:e1:28:a5:b6:6b:b7:d7:75:cb:0c:f7:
3d:e4:99:cc:9e:66:6c:76:75:e5:b5:83:f3:77:f0:
72:14:d5:e6:32:d6:1f:05:b4:fb:79:a3:76:f5:1f:
64:c0:07:f7:27:da:4a:3f:0b:0b:d4:46:ad:a6:b5:
93:5e:56:f4:a2:e3:76:16:27:21:fd:e4:be:ca:2a:
08:53:eb:1d:4d:4e:74:85:52:9b:66:de:89:e1:43:
09:84:5d:ff:0f:8a:04:60:56:75:f3:83:de:78:ba:
de:80:82:26:0d:3b:29:27:dc:41:88:f4:f0:fa:e9:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D5:B9:9C:04:C8:06:8D:E4:23:F3:1A:A0:1B:95:4A:3A:86:CB:81
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7a:94:9a:6b:56:31:55:97:49:ea:93:b6:22:a7:50:b5:42:
3d:39:2d:77:fa:72:da:23:36:20:60:69:3e:8f:64:d3:36:ac:
38:62:90:69:5d:7c:2e:a1:0d:02:ba:f8:3b:6c:a0:f3:ac:3b:
87:2a:28:8e:30:87:c7:12:d7:49:98:0a:bd:ec:ea:67:9c:2b:
6e:e7:1f:87:fa:44:f9:8c:02:02:cb:10:15:c4:ef:c7:c8:93:
fe:20:c4:b6:c8:4b:5b:a5:45:78:be:3f:78:82:f4:5d:f7:24:
8d:05:f7:03:a4:29:1c:e2:43:d5:6a:5b:72:bd:ab:25:9a:63:
b5:a1:38:13:7a:02:40:49:f5:59:5f:18:a2:b1:5d:24:71:1c:
85:60:0f:3e:7b:fa:99:ec:98:09:09:61:eb:43:8f:1a:8d:4d:
05:fc:fc:20:00:40:c8:a9:6c:7f:b1:2e:8a:68:64:e1:97:60:
da:9b:56:81:1e:b7:3a:8c:54:a8:14:01:d5:53:a2:01:dc:37:
09:ee:8c:d8:89:89:23:71:66:01:18:3a:4d:a2:88:c7:02:32:
e1:85:35:52:bc:23:91:37:39:2d:d2:f7:8b:eb:d0:d0:20:d5:
10:44:63:35:2d:f5:8c:3f:f1:23:51:48:01:c9:36:a0:27:3e:
38:76:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:59:16 2026 by rpki-client