
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
File: dWEnxs1ONdmPCkujYs4nMWSXGUI.mft (raw, json)
Hash identifier: CgAFH59/PzHsnPwKt4kARzrJbMuZ8cylS8b3d1PnLkY=
Subject key identifier: 4A:45:1A:CE:76:C4:7D:4E:5C:4C:B4:25:0B:69:76:8F:5C:C9:93:DD
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 01A0C21FBF0D2E59178A1206872CA95D1022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 04:00:55 +0000
Manifest this update: Mon 21 Sep 2026 04:00:55 +0000
Manifest next update: Tue 22 Sep 2026 04:00:55 +0000
Files and hashes: 1: 8h95uNIDYG-Ufog2I8ZoKMaLcsw.roa (hash: hikhXEetfPVBAmxhlFb36D4+i8o25j1BVGOBTUWKg+M=)
2: C3YXK2axKQQL03NOSjgoGxmbHCY.roa (hash: 44/VCgOyO6dDefynF1MFpTO2jMMF5QpDbEm5R3D+USs=)
3: EIkyoQiaHQwFX0yl3QCnz70zobQ.roa (hash: TreOi4k2EXby9E21239vBZMbdO6JXQp6FeGHzvuMLWY=)
4: Ilstpn6LoODw0rzv1fqsnj_9Dh4.roa (hash: Mn8znbmN/J+MxRnhv+qVpqesl4iX9HnxtbZyYlBp8hE=)
5: JpHy1IXUR9emW8WRyQ9wKWFBPHY.roa (hash: C+pLi3vdcWv6cPyXKJcNebdYvfzTWmkMhrsFshVCZ5g=)
6: JuX1_oQdQQlBpU0uPBnvcWB93j8.roa (hash: FZzogSqVxmvRLnflYQZMrGV7lYMhQxxacof5gMp7tHc=)
7: JvxlDZVo3kDjpCcTuH9rQo7wYxc.roa (hash: 60TmXCWov36c+x54dXI2m7Kjji7w3A2ev0Z1f/72VRg=)
8: KI_KuOkM0mR_o_lboFwkN-bi1Fk.roa (hash: 14lNz1dQBEYnlCIOUgTsdTghcHSUoRp4iObiy4bcNE8=)
9: QAq5GlfcCx2uicmV2oYykBZI8X0.roa (hash: RYaoRoccHB52OTwDIZC5zlhORRPz3CEswpwYiOVL8sQ=)
10: VzIOsWVyN2BeULByH7QYq4dYbRU.roa (hash: 5im045bps89h9fEb8qZ1ReojgLd/qWfVKk9XBFUXXFk=)
11: YnaVL83EnDyPXsVJYrytnkQg5ug.roa (hash: Fnqs3WN0fegg9CdKzgXczrQTO3HUhiFCAXykCpf5Clk=)
12: ae6vfOe_UB5sL59_YmgnYrMvUjY.roa (hash: UYeEVkIJSbDL/qMMyz7MhtUKRqcR+Ervewhouno445k=)
13: dWEnxs1ONdmPCkujYs4nMWSXGUI.crl (hash: 2upq1KqJshSD3hV/MTouVnG+K/CFbDY8nIsh+2PIboc=)
14: f3cr88yivxk7Bgm731ewrTZYRmE.roa (hash: KBvRmTnbWWNTOespy+pTserzrz+QFhMRF5nah9piKuY=)
15: gzC5cDg-uB1dPX3dGsiEhW7fD00.roa (hash: vQbqEGTq2U/QqR6/EYIM8eMnRGnw756aRoerxRFX+wM=)
16: hRHkkew4RJW-M5MNhUrCKO9r6iI.roa (hash: xmNN9Qa+v5JHw+YLV1UBftvBMTaZmLQDrk6AQl6upks=)
17: hxrlkQurmLyBhkWbdwa67ZbnUzU.roa (hash: uuNXT/oBMFxKXMlVY9upAUC8wrIrJ/ZYSjthqsU91us=)
18: itsbDKOcLvYTL1wL-BLv0v4776c.roa (hash: ZEawOvc7lWqHf5H65rd92h3sAyZZNHxySs4Mwva3K5c=)
19: ktAcfwaispPfbZlu2PcWbivGiDc.roa (hash: ZS64/IqKl++bCkfIjOUrM7ABwkRqytdLrqhBUhYIiLo=)
20: lgcI0p4y-3yd0Er2Lcq9G4NDiZM.roa (hash: qVffLmVLe5PeGI04xzCYu2VBq+NWEXwG8HflD234N+Q=)
21: nwLLLJnWeUevVC1axaBKhwaHn44.roa (hash: 4NEbrk+ehdLN38/5gtivM/dLignUGaWU9EqjJiYFAxw=)
22: nxPePhL8tH3NJQt_EAwpwmwqNH8.roa (hash: 7XrZ+U4ErAZSq+9GdJTbU1fkc22bILilCayfqLewDgc=)
23: oXHroVFqrTFrT4dW-jOwSgxKgcQ.roa (hash: bWjEdLBfsFa6qTx3+Dfw2/yFPlyDQhUFTnCquJm018M=)
24: qw9D3bwHD-pnEIm3zYFhAcY1hDE.roa (hash: wdRWH9AxQCpUQD8h4pLTtws6prvHWse3QWuviHE/f3Q=)
25: sfoaD0gh3QgYHRuTwM6KqFkxOkQ.roa (hash: MG+l0cjg9doHuJsEha9w6usP174LVgs0j+PQfMk+iKk=)
26: si7LSWMuuhPUeaWDlYag_JlVhKs.roa (hash: nyL0gUFvTFAGinP9bvtQz8LACtq13OiZAYvgoeGB/C8=)
27: wgx1sqQMaS-I2L2y6gRiBobGYlg.roa (hash: 7eLb6fN+zf4qJF/TPfiQ9qgt4nim0I4itE886o8X68g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:bf:0d:2e:59:17:8a:12:06:87:2c:a9:5d:10:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Sep 21 04:00:55 2026 GMT
Not After : Sep 22 04:00:55 2026 GMT
Subject: CN=4a451ace76c47d4e5c4cb4250b69768f5cc993dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:97:8f:79:6d:ba:92:7d:d7:b5:a3:1c:9a:20:
e1:39:fa:44:d8:dc:22:9c:02:10:1e:0b:dd:61:26:
d1:75:a3:98:32:96:ff:9c:6b:a7:51:2c:24:69:45:
20:14:7e:46:87:b8:b7:f2:5e:68:34:27:5a:ed:f0:
e4:7f:33:77:a2:b6:31:2f:32:ac:1b:1b:b3:53:b9:
0e:70:7f:7e:60:16:00:ca:af:ef:82:bd:48:26:6d:
58:2a:68:4a:77:e5:09:ba:15:3b:7e:0e:51:5c:ea:
a2:7f:13:37:a5:0e:84:31:02:2e:80:9b:b3:99:19:
94:1e:47:6c:93:f0:24:3e:1d:57:48:0c:e2:1f:b3:
5a:20:45:6c:a5:02:c2:4b:7f:37:eb:23:8e:96:09:
b8:e2:6b:da:4c:67:3b:31:6e:b6:95:c9:69:3f:ea:
47:01:ce:1d:fc:bc:cb:03:99:03:b9:b3:b1:13:a9:
c0:17:39:c2:3e:4a:c7:df:81:f1:69:18:61:11:4b:
2f:de:c1:7d:28:00:2f:b7:a2:40:b5:12:df:b0:c0:
88:61:98:8f:92:f8:77:ea:57:1c:d4:70:dd:84:0a:
9f:81:43:9c:06:27:1f:f4:16:05:9e:80:76:20:a2:
ea:c2:e3:33:fe:13:c1:f7:bc:20:e3:2d:ad:70:e1:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:45:1A:CE:76:C4:7D:4E:5C:4C:B4:25:0B:69:76:8F:5C:C9:93:DD
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:32:aa:6e:a2:76:60:16:f9:e6:67:5e:b2:d6:8e:ee:78:52:
f9:54:43:f8:be:b0:51:a1:a7:6b:8d:8b:2e:47:5b:ee:b8:ef:
e9:fc:91:a6:9c:b3:62:f3:f9:a5:46:6c:5d:5c:87:d9:5e:10:
3a:dc:57:cf:d1:7f:53:7a:45:db:1e:14:f6:ce:d1:45:eb:f2:
c9:7b:e6:65:2e:4b:2a:5c:6c:9e:47:c4:d3:ad:f1:fd:93:42:
99:2a:1c:5b:74:db:57:ca:1a:fa:81:7b:53:0d:a8:20:c4:01:
3e:96:f7:df:97:e2:ff:57:c6:e5:ed:81:89:ec:c1:3d:e8:6e:
65:2a:08:e6:c9:a4:29:a1:c8:7e:c3:fa:5d:e0:8e:91:cf:de:
d8:61:71:ed:6e:c1:5c:d7:99:38:7c:56:91:32:23:42:64:f8:
af:81:f6:a2:11:f1:15:1e:5f:c1:36:b4:8b:1b:28:26:00:49:
85:fe:04:16:fa:1b:f3:50:a0:ae:90:83:d8:60:aa:bc:9f:fd:
9d:f8:cd:66:63:83:3e:b9:ce:a1:89:16:85:52:b7:73:d7:cb:
5c:5b:48:57:72:12:56:bd:97:c8:55:39:ba:44:20:26:b4:71:
61:4b:16:44:d9:9f:ed:58:57:3c:c5:fd:9d:1d:fa:a9:aa:94:
7a:eb:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:27:06 2026 by rpki-client