
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
File: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json)
Hash identifier: 06G7EJ5qTYbdQcSvfC2bi7iAXTWwq7cNUHyLZrMhZ0o=
Subject key identifier: 8B:3C:32:CC:AD:4A:56:D0:6C:D7:2A:34:78:9F:ED:A5:40:17:DC:F9
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 01A0C1B157228BDF79FBD7FCB8B9607BD868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
Manifest number: 1A89
Signing time: Mon 21 Sep 2026 02:00:19 +0000
Manifest this update: Mon 21 Sep 2026 02:00:19 +0000
Manifest next update: Tue 22 Sep 2026 02:00:19 +0000
Files and hashes: 1: 1Xv1ZT3Ka3Pl-sig-kxHu9QPm4A.roa (hash: yCVw68UmAC47CHqpmFupYHC9ZxaKhStlflix7eTg3Ug=)
2: 1utoEShH5AmTt79y1zx-Gta_IU4.roa (hash: ORpna8ZAvXV8ys2iYurxCqgk2LCtS/yxIeHlBJ5A+tA=)
3: 1y7xTrL6Zi63EaoYq9pgRa2ZmlQ.roa (hash: x6v+XwxnZ+9V385BiBIu0MPWBYFFND0ofcUwqGHURxo=)
4: 3ASjA1q8ARIV2ZYv3dMNfit6u3I.roa (hash: 7NA9a/ZKJFAsJurJjGE4qQlN7WKcef8AvmYKofmxtdA=)
5: 3wThh6CKhn_ncQErP2xOaMw46vM.roa (hash: U/vQzD8zfdM0QCfGbqv0YkKIdI6EBacCC74VpNhb6LI=)
6: 4krczbw6OIfHLsE4rx_N8Co4yOw.roa (hash: zxKlKv1GZqpmDDrZvXoufwn7GqO5TPnVqQ8ZVbSEX/k=)
7: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: P+iRZ11JNxQF/FrO+8Fh8SXKQ5/k8McL3sco4tnvoT0=)
8: ADSCFOnjMJLAi_8BKddA7FSJKFo.roa (hash: YTUiHXsQfmeuHGdgWhbD4DOLIxz6/HL1IPSKvOV9r04=)
9: CI_IbIiOr7bX2nxFp9oik4WuQKw.roa (hash: LoeO3X2rVxLRDsyO+eMBMVv3AZSWcHWTpYLzyG6GgFI=)
10: EZHW40mMXzLh-R95XQXWSQ1xGew.roa (hash: jXC+C5PX+oNmQCB4dM1aptKPPNjJmtw5ieXSimbQjw4=)
11: F1wz9gMaUrDGSj5_Bql1AKzFVxU.roa (hash: q6zbBfs586JaMimNp5Bcw/8qOnIIxp8Jrco5OLAUgAE=)
12: GnjgrlX5ldq-8V0xMtEgsEXb8K0.roa (hash: 7TO2wIfe9IgC+RH76SDWjU1AztJO8iq77EyqtjbsQmw=)
13: GzMKu8jXjKBUVxDX-5sQgFMQgJs.roa (hash: 0LE/1Wb9HCROg7521ihQ2bGsxl+ElnIJTcDjDH1Uxqs=)
14: H_ZbE32xD4Jhfd7d_Lm5fnPovzM.roa (hash: aZ9uNmSOhcQkLqZFW9owTasfsuaMVCH5Cmg+PDELd3k=)
15: Ho6mNf_9Z2hzoXQrFFuu_J0WfRM.roa (hash: Oprieq0BOhCbckP7sqbHtzOf/Mysy62W8N4pVZm/UiU=)
16: K6IhTrUZclyMeBVpYLNDvb8TUbg.roa (hash: 72NmOOFBeGJuzIR1SE1cUuWu7D88rU3xoreFGRYXduw=)
17: KS0FVLSMGfWzQdYtQuL8y-oJdD0.roa (hash: bFjxw1lHEJZaqaMp+L6ugQRb5WaLfdFW4jxueW8cRcA=)
18: Qfk4KZDN_NVec0Fh5jidYk7fEsM.roa (hash: WIiLwWhQcJYVRWRpVwBUqqxiCRvroZi4xvJ2AYsOSJo=)
19: QqOV1t_rvWgp7d8XnXyjaPwjar8.roa (hash: tOqX3TdeefdEULHlf/6xKuTSxXbTQGcNvDfPoledb9E=)
20: UESPvkGn40lC_qnNZUih916lSYA.roa (hash: wn/Z//Pr0RHYOOOY6bI6NqL/aVXg8hzJxv1NUOW+0pY=)
21: WQgnD-JktijZnRhzkWWmxreQGms.roa (hash: bt7fHkMyPJ2bu7raN/9QpGM2Pefyuc7nqym8N0GRFqM=)
22: XnhnoeUHsuoR4mhcctsEjt9lvMg.roa (hash: /V0gM4qnoLR414oEzXK8LbL+H5gHt5BmuPHE3nwesY8=)
23: a6YPy8t2smPnddF-vAybhOouYkI.roa (hash: 2VTnHbp49NXPzMqgsIFYWCQ+9Ms6/ReLgmJTyeo9QTM=)
24: bBMC-Jl9ZMdEMbHiKoX6e8xbdGQ.roa (hash: FZlvu/V5G6Rj6/p4659ddbcuZLsyU/qT6XCVQg1Pc8U=)
25: bv5xG98RESJXrwU1xeck7PUBsio.roa (hash: 8309DITknQ+X1sMxvcKqt7keYSOvkVj+qcP2H19wns8=)
26: cWC-89CZxEOg7JihRqIYLNl3BdM.roa (hash: RhOP1Hck0E/C3tHN4Cpm5lDskts0RUG2y3go+ErpaZY=)
27: gC3rqU1DQllcWWxpBdLFhPfJBRY.roa (hash: GquGRvoP/5ANJWdn0l9uPSHphibPvx3UXVQbIIbaOLU=)
28: gnDuj3azpU1wiHZUf0f93N7QjnA.roa (hash: E6mUU2oB8TEHtnH3EsNLe+0P+s9OunlKpVDohgw7f1Q=)
29: gzIiWHGRR93M4EeKSxyFElEnzfQ.roa (hash: P6od455G5jZ5lUgI4sqFMNPmAnYBu1OSIcRyPwUOGuY=)
30: lc0dVVVdgP6dbN1j-pjMe8nv0pM.roa (hash: gEI4FyTD9TDkg7+cDFUctYOLiTWfZ9Ph9u6WJ4ZseHE=)
31: pJSN_0UYP55mnYa8i9az-116_xU.roa (hash: ooW2IQf7TB4yeIzuJ+xNye0+a25s9T8MsooWPksXqB0=)
32: pz0cBU5kNnxFQmG7d_jajJsuZhw.roa (hash: mHIryTn2nZYxJ3jb+100JljOGOyRK2Vo4Tu+sTeZoc0=)
33: sPKozshk0dw84yWnLecAcY4Jsz0.roa (hash: CVBUXh81vA8yv2uJ0Pq3RtuahHuKnl7ugAr2hYXTx7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:57:22:8b:df:79:fb:d7:fc:b8:b9:60:7b:d8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Sep 21 02:00:19 2026 GMT
Not After : Sep 22 02:00:19 2026 GMT
Subject: CN=8b3c32ccad4a56d06cd72a34789feda54017dcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:1f:27:d3:bb:02:89:00:58:34:ba:01:4b:
51:1b:ad:50:09:f9:36:7b:e5:02:80:73:f4:74:4c:
cb:24:44:b1:78:a5:14:a4:db:ec:19:a1:d9:59:c4:
f3:be:78:6a:71:e7:3a:43:ed:d0:21:53:83:df:d0:
ef:fe:90:ab:c5:12:50:48:54:46:80:95:d3:85:f2:
1a:39:d3:c5:7d:27:c0:16:3f:56:7b:f9:db:28:e9:
ad:e1:88:13:d0:29:af:98:cf:03:fb:77:86:a1:4e:
98:b4:ff:5b:60:7b:f3:f1:9b:0c:d9:4b:86:88:96:
67:48:14:a4:c6:61:c5:d4:b2:38:d1:80:f0:85:e1:
33:d0:49:39:42:d1:7e:fa:7c:7d:95:0a:68:0d:e5:
92:b2:f1:ce:97:a8:f7:79:76:f5:bf:fb:fc:01:2b:
16:a6:d2:34:8a:37:09:7c:1e:3c:1d:2c:03:3c:16:
3e:63:e0:12:52:08:d9:18:68:c0:2b:83:f7:ba:f8:
e1:9d:2e:b9:78:62:68:1a:7c:a6:c4:58:8d:d2:cd:
b1:f0:27:e7:f2:c1:9b:3c:f7:66:b5:de:e4:bf:97:
c2:63:d3:67:89:b8:05:ff:ac:53:c1:35:c1:ba:07:
84:ad:56:21:a2:96:cd:a5:6e:18:f3:54:9f:03:a2:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3C:32:CC:AD:4A:56:D0:6C:D7:2A:34:78:9F:ED:A5:40:17:DC:F9
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:da:84:d1:f9:1e:bf:cb:16:cd:b5:83:a2:fe:0c:a4:f7:e8:
16:b7:88:76:79:0d:12:c1:2a:7d:62:01:a9:63:19:c0:63:c8:
b9:05:2d:23:e9:92:39:b3:cf:c5:eb:a8:02:da:cf:32:c0:2c:
45:49:c8:66:74:e4:c4:79:88:ad:95:8a:2e:eb:15:1d:8b:ed:
6a:87:2c:1f:53:52:6b:04:8c:ae:9e:f2:b8:08:7c:77:86:1e:
85:5c:9c:8f:7c:63:49:ca:02:0b:e5:0c:9d:b2:0e:2c:e2:95:
45:b7:f0:1c:f6:98:52:c3:a5:e8:31:8e:46:ab:6a:05:8c:00:
e6:f5:8f:e0:6a:c9:a9:15:ab:98:3c:6e:df:c5:f1:5a:8e:5e:
ae:3a:42:04:23:2f:41:3a:f1:1a:8c:15:81:5c:72:6b:fe:8e:
ae:c0:ef:18:f0:5b:34:44:ae:40:cc:0d:a9:74:eb:03:b9:4f:
48:7c:4b:4c:d1:64:54:8f:dd:57:20:d9:57:19:b1:3f:21:94:
2a:da:66:02:66:b0:0c:ff:98:dd:96:ac:75:e1:1c:15:aa:95:
5a:f5:ff:10:b1:f3:3d:92:6e:42:45:00:eb:52:08:0f:99:ac:
7c:36:3a:1f:7d:4e:7f:a3:f0:a7:5a:6b:d9:9e:7e:0f:69:32:
7c:e8:fb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:35:41 2026 by rpki-client