
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json)
Hash identifier: YdEzkl8JBWLLyPlETJHax+2Gge3rQwUI1kpL/s9Zvzk=
Subject key identifier: 1D:DD:7A:15:99:57:53:EE:E1:78:A3:B8:87:7B:BE:ED:DE:B6:B3:14
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 01A0BD671CF877545F3D9216973FCE2C8958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
Manifest number: 1642
Signing time: Sun 20 Sep 2026 06:00:46 +0000
Manifest this update: Sun 20 Sep 2026 06:00:46 +0000
Manifest next update: Mon 21 Sep 2026 06:00:46 +0000
Files and hashes: 1: 11YShjM6iG1lgHk0sBIwxGUI_MU.roa (hash: zv1LSj4scuwBiIwmG809DfMSYAbVZ65wSUdzZngzxuU=)
2: 4uhQK-ahMU-b686CpY3ebuHDcxA.roa (hash: jPmzy29N69ytvo0+nxFYwzpNOf0HZh68Epxb4V5zrHQ=)
3: 9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa (hash: ZYWDq0P6qMgiPXizLcgupz8/qvO2gFU/jwxMaGxycaw=)
4: Aldb8rVQEYH7AIYKbirLccTqxfk.roa (hash: xKeQuE6N5Er4acIg7kKR9Q2RvuXmil18lO24CsbXiP0=)
5: AygaSJoY4X-N8pcfdiWT-0OzTH0.roa (hash: GpuGRR+uDCRH0KzkkUeOxZxQXmqHI/G6tCUG41o6giA=)
6: Gz0_KsyuxF_Mtua-1HhemOuZcQg.roa (hash: IbzaI7YpmiRgkQae6jLRwhProyJ2PzVbvEcbQ3Zj2TA=)
7: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: mJqyWDPAdrWRdQeO4v/pijKAj21OfuOvhSkMUqkpr1U=)
8: _og34UxL66HAf1x6tJdapHB1KD4.roa (hash: MIlbN2zWAQQHEFQMrsU48v1H/MqxZJmHAhuOJZrCJMw=)
9: gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa (hash: r4RCM40eYHCKKFN/sAxepQztxTn6V46H7fRE/7G8fQU=)
10: lwmtxoWx5clkivlnh1Kh10qANc8.roa (hash: aox9Sa8RSdnqNanp7vV3UK2GlMEf/ITdwIirj370CTo=)
11: pUjgfHpSLJEroItVeYdePetGeno.roa (hash: 3GHGFzGCi0a87nJzoUGj4P1u3SwU6ateFJ0oPnoaNEM=)
12: vOyidTyiIS9RXt084gFh3QAi7BY.roa (hash: TBJz0+Ix8YJsKWxa0n0dLVQdi5WM4OAHaQ/OM30EBD4=)
13: ygZyjuYzflVbHgfVvcHOxvuu0E4.roa (hash: IH0YWQaBGEjd+Nsl8K72F6uJWsgW3OOY75p4PPRBdZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:67:1c:f8:77:54:5f:3d:92:16:97:3f:ce:2c:89:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Sep 20 06:00:46 2026 GMT
Not After : Sep 21 06:00:46 2026 GMT
Subject: CN=1ddd7a15995753eee178a3b8877bbeeddeb6b314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:d6:d0:4a:a5:8a:20:97:2c:8e:00:41:2a:
46:2d:96:a6:4c:e3:02:4d:11:4c:25:f9:d5:9d:d8:
1d:8c:91:79:36:80:ab:08:b6:94:1d:27:f5:0f:89:
e3:a1:cf:f4:dc:1c:a1:7f:24:46:4f:9c:60:6d:98:
b2:9d:51:f9:12:2d:f1:37:3a:5c:40:28:01:76:8d:
4e:2d:62:05:13:0f:bd:01:0a:10:7a:30:cd:0a:d6:
73:38:1c:ee:72:17:a0:28:71:c4:d9:07:98:27:57:
49:99:34:62:6c:97:f3:5f:05:6a:dd:36:6b:31:f3:
2c:e2:15:4e:c4:2a:4c:33:9c:a5:5c:9c:6a:f4:cb:
1d:ec:66:a2:30:bb:ad:5c:77:79:90:61:19:80:03:
cd:6a:eb:90:64:30:21:6d:76:36:2c:ba:a4:fa:cb:
df:56:b3:17:d6:87:52:4e:ef:29:07:6b:3f:08:1d:
e6:37:08:64:9f:2e:be:ee:03:3e:91:ee:0c:ad:a4:
04:8b:cd:28:6b:1d:d4:c5:b3:f3:22:4f:cb:c9:e0:
59:21:21:52:a0:ae:a9:80:ac:6e:60:a9:ce:70:10:
3f:43:ae:9e:36:1f:91:a2:3d:e7:0c:b9:f8:9c:b4:
32:d8:0a:71:1a:49:c9:30:de:9c:54:cf:f1:12:72:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DD:7A:15:99:57:53:EE:E1:78:A3:B8:87:7B:BE:ED:DE:B6:B3:14
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7d:e2:ce:32:f8:b9:00:88:87:ab:9c:db:68:e7:82:14:b6:
67:a5:79:bc:2f:1a:e7:74:3c:ef:98:8b:b8:63:3e:35:d0:c9:
b8:5b:5d:57:b4:46:57:22:33:ab:af:b3:e2:cd:4a:e8:f4:9b:
1d:fe:42:d3:b4:fd:fd:04:1c:66:7a:3c:24:cb:ab:79:eb:86:
35:5f:a3:5e:46:7a:b4:58:7f:c0:20:ab:ad:50:41:7f:89:29:
2a:65:0a:de:b0:84:24:41:c1:f4:f9:02:62:9f:5b:d8:1d:df:
e4:80:6b:cf:7f:cb:f1:ea:ee:16:a3:c3:5c:5a:40:72:0a:52:
39:5d:12:44:bc:b3:22:12:ca:20:ce:51:6e:33:11:c5:50:4b:
c8:18:23:00:59:43:a4:3c:4a:84:8b:ff:74:33:4a:fd:59:7a:
ee:8d:57:69:98:87:3c:a8:2e:3b:0d:5c:87:03:9b:59:a2:68:
dc:89:d3:30:4e:bc:1c:4a:59:54:4d:39:dd:c6:3f:15:2d:93:
39:15:dd:b6:79:f2:9b:2e:c7:88:e5:77:e2:56:cb:3f:9c:ac:
dc:10:17:fb:ef:04:7c:a8:c0:08:71:4a:70:72:68:11:3f:1c:
ce:94:5f:3d:9a:ec:1e:12:11:e6:f9:2b:5d:5d:15:bb:12:b3:
05:cc:ce:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC9Zxz4d1RfPZIWlz/OLIlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2
NTg4MWEwHhcNMjYwOTIwMDYwMDQ2WhcNMjYwOTIxMDYwMDQ2WjAzMTEwLwYDVQQD
EygxZGRkN2ExNTk5NTc1M2VlZTE3OGEzYjg4NzdiYmVlZGRlYjZiMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNXW0EqliiCXLI4AQSpGLZamTOMC
TRFMJfnVndgdjJF5NoCrCLaUHSf1D4njoc/03ByhfyRGT5xgbZiynVH5Ei3xNzpc
QCgBdo1OLWIFEw+9AQoQejDNCtZzOBzuchegKHHE2QeYJ1dJmTRibJfzXwVq3TZr
MfMs4hVOxCpMM5ylXJxq9Msd7GaiMLutXHd5kGEZgAPNauuQZDAhbXY2LLqk+svf
VrMX1odSTu8pB2s/CB3mNwhkny6+7gM+ke4MraQEi80oax3UxbPzIk/LyeBZISFS
oK6pgKxuYKnOcBA/Q66eNh+Roj3nDLn4nLQy2ApxGknJMN6cVM/xEnKcbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3dehWZV1Pu4XijuId7vu3etrMUMB8GA1UdIwQY
MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct
ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0
LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAan3izjL4
uQCIh6uc22jnghS2Z6V5vC8a53Q875iLuGM+NdDJuFtdV7RGVyIzq6+z4s1K6PSb
Hf5C07T9/QQcZno8JMureeuGNV+jXkZ6tFh/wCCrrVBBf4kpKmUK3rCEJEHB9PkC
Yp9b2B3f5IBrz3/L8eruFqPDXFpAcgpSOV0SRLyzIhLKIM5RbjMRxVBLyBgjAFlD
pDxKhIv/dDNK/Vl67o1XaZiHPKguOw1chwObWaJo3InTME68HEpZVE053cY/FS2T
ORXdtnnymy7HiOV34lbLP5ys3BAX++8EfKjACHFKcHJoET8czpRfPZrsHhIR5vkr
XV0VuxKzBczORg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:11:42 2026 by rpki-client