
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json)
Hash identifier: Y0r5HLGz8SgvzTOMyKxq8BzguJtdxrn1cV2vi4Cnd88=
Subject key identifier: 7A:E9:EA:B6:BA:33:5A:26:22:FE:F2:C6:1E:CD:02:90:15:6D:9E:2B
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01A0BEE7BF3E5C45AA912DC4F10730FBC5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
Manifest number: 148B
Signing time: Sun 20 Sep 2026 13:00:53 +0000
Manifest this update: Sun 20 Sep 2026 13:00:53 +0000
Manifest next update: Mon 21 Sep 2026 13:00:53 +0000
Files and hashes: 1: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: SdBDwaBJWo8bD8SVwv5GbsoNkW0uV2KtX/xdXiZfoZg=)
2: 8Go9HdfslzEYYhsG162QyXxlPrg.roa (hash: Z3SgqSpV46u7mlUHzliku+RypQp4wBZXxjHASyqRXL8=)
3: 8Nrd_fmZeNL0BSH4rv9CXgqM66c.asa (hash: K5I1pf6HiAifVMzN9jkKOGVybg6UiRdsC7/R2MM8fPE=)
4: H39SCmBhfIAL4P80AMbv9vc00_8.roa (hash: cOtYtuq75jARRK/4tVOM91mG7sEB0LZ3Ph2khyzi9O8=)
5: HVUz-pGSDFLTZZg2T2E4peiELEU.roa (hash: wezVJrmcFZ7JTwvDKwpa7PsKgNm5GHs3DhA4vBq4DQY=)
6: HYEI0JEwrvGeEpfpFZTeCg5EH8g.asa (hash: ARMsZy0uoDJPAUtmO4+hjp62F/uBIE4HsM0N2UwPbqY=)
7: K_c7eVlzPkp6rhiHCxnA36F4-xc.roa (hash: 6S2BWd2mNzmFbAB+J2b2FN4NJksfT7p6QVbD3sv/VL8=)
8: WtD6mKlfmpS7KMd25I2nHKzWkGQ.roa (hash: 8kdIDFqVwJHFysKGYVAc28Ycb8D240Eugchj4O4w7C4=)
9: Xf3bZPWk0_bi28_oQ2232QrSJQQ.roa (hash: ffz/L4K0R9hVyQDyQ+n17EfkZ224IbQsJdVzmjU75wU=)
10: a0OAcZfUpJ_at-NAiRWnugtXHZs.roa (hash: CX3pL+do0k62/x9rzFqYTy+gZPu9+b2sUZEH679CN44=)
11: ek9-6det_a8IxIqHsWia7-WY-A4.roa (hash: w03N+IHDbJSsXXRy6rZBj/rl7phalEGurLQVXj4bedQ=)
12: hmPo_o1Wwb_fc_jDeTYw0RTyias.roa (hash: buOdy6wcshKPWdUb86nMrSnh3bWvA83WVFp55tOqeX4=)
13: kE6tecKZ0fG9qC_JtCBXfpG4g1A.roa (hash: CDpFmGMaqgiUJFuGVEP8AvEce972KDkWrlC2GvXzIOA=)
14: sD9_KvYGNd0gSG9dqlTzmRlJx9g.roa (hash: cpPGHuiYhlqjVa2ZLptrQ2LGEEYQM6YwJPoAsBdLFRc=)
15: xjJ15D14LS-olVuJZ7jEwkrPC0k.roa (hash: x/bc5dXq+6Lyq8Lw/fVl1pcZIUuQ/Nrr00RhE1xkTLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:bf:3e:5c:45:aa:91:2d:c4:f1:07:30:fb:c5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Sep 20 13:00:53 2026 GMT
Not After : Sep 21 13:00:53 2026 GMT
Subject: CN=7ae9eab6ba335a2622fef2c61ecd0290156d9e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:59:de:cf:a8:d7:d8:75:da:32:87:d4:48:8c:
80:ef:e1:f3:6e:32:db:8c:a1:27:ba:86:58:8c:e2:
30:22:1f:93:88:72:d8:89:06:44:21:52:c5:d0:81:
5a:0c:24:0e:95:e0:50:c6:7a:37:7b:85:23:95:e8:
18:dd:5d:a5:5b:30:9a:c8:a2:73:a7:81:82:27:6b:
1c:1f:d8:60:15:7a:c4:28:d7:1b:88:78:64:e7:8c:
3a:a1:9e:6d:76:65:cd:99:94:02:bb:5e:3f:66:f9:
19:36:93:49:19:da:79:4c:85:ec:c6:70:c6:f8:17:
34:3b:c5:73:00:84:c7:3e:51:39:c9:f5:36:2f:43:
b5:cf:19:f0:bd:ed:91:4c:63:9e:1f:04:d6:25:b2:
17:1d:96:56:d3:eb:6a:23:a7:9e:06:a1:08:18:c3:
20:4b:3f:2b:b9:49:50:79:11:2b:15:39:6c:34:47:
3b:af:8e:49:25:9d:4b:92:02:bf:52:60:da:81:63:
dc:88:c9:37:ff:0a:f7:0d:e6:79:1e:b2:da:ff:16:
0f:a5:c6:ef:68:eb:0b:66:80:1c:bd:99:e1:59:38:
16:f0:3a:e1:d8:dc:0d:39:bd:8c:93:c3:63:24:b6:
9c:1d:b2:bf:8b:67:3d:c5:c4:8c:22:4f:f0:05:5f:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E9:EA:B6:BA:33:5A:26:22:FE:F2:C6:1E:CD:02:90:15:6D:9E:2B
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f7:10:a0:ee:06:ff:b4:31:0c:0d:71:f5:5b:29:7a:96:c7:
51:9a:1c:f9:22:eb:12:b1:bd:9d:37:aa:87:27:06:8d:61:86:
73:ce:b4:81:d8:cc:b3:50:13:07:36:27:dd:cd:27:3c:01:5c:
b3:46:b1:a4:fd:07:0e:23:e1:8c:51:93:9c:9b:9a:77:5d:8e:
4e:e9:31:a4:d1:09:6e:ba:cc:c7:b2:52:4f:e0:ca:3f:69:9a:
d3:dc:8d:62:68:f3:6c:4b:90:63:0e:a9:71:10:e2:1f:18:65:
ea:76:ed:12:e9:4e:93:66:a0:69:0b:65:21:39:5a:46:31:d9:
7c:c3:57:6a:d9:3e:0d:a3:35:cb:88:a9:5e:5c:4c:42:c1:20:
75:c6:db:b9:c8:12:3d:9c:a6:42:9c:0c:58:76:1b:96:2a:ce:
2b:53:58:9c:bd:39:7a:3e:1c:8e:6e:7b:45:53:30:c4:d1:86:
4a:54:74:1c:f9:92:3d:b0:0e:f9:54:ad:41:bc:df:f3:db:dd:
ba:53:10:df:08:1a:1b:f1:6e:4b:45:a1:76:b3:33:08:70:2b:
46:df:67:92:14:52:6e:40:74:91:68:66:09:21:d4:a6:e0:e4:
ee:75:44:f7:9d:85:cc:fd:97:0f:8a:87:0d:4b:f0:ff:80:fc:
b3:31:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:55:17 2026 by rpki-client