
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json)
Hash identifier: w7uJRQ7dk10PUUu9KfoxrioPGmr+lW8nR7pKcKiv0lQ=
Subject key identifier: AC:A9:F3:48:E9:D7:CA:AC:5C:9A:20:B4:02:A0:AE:0D:A8:7D:FE:C4
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01A0C10D5047831EFE94FD9D1A9C3E6426A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
Manifest number: 1AA4
Signing time: Sun 20 Sep 2026 23:01:10 +0000
Manifest this update: Sun 20 Sep 2026 23:01:10 +0000
Manifest next update: Mon 21 Sep 2026 23:01:10 +0000
Files and hashes: 1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=)
2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=)
3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=)
4: ItLnYEbliO9uy4pN2f9Nx-cbnMU.roa (hash: SC8dz/gz97zrc/Tqdl9uM99+iCk/s/X41bIC+YpTYTI=)
5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=)
6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=)
7: U2EVUUWlWvbUAILqaxAgK8pY0KE.roa (hash: P61yHP4ZBPMnRJW1hcXnzx/7WhRn7HOpJpj+yy4Yx4A=)
8: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: soJQmEAZlSX/FDGfWjwjdJfuRbRlemEuN8+8N43XP0M=)
9: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=)
10: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=)
11: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=)
12: wiv8BGLIxUUMQwOeROx0j4rSHpg.roa (hash: 0dTxqq6Mcxp0f/baeK9P3ozslv5RRG7NpV1hP4JK7gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:50:47:83:1e:fe:94:fd:9d:1a:9c:3e:64:26:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Sep 20 23:01:10 2026 GMT
Not After : Sep 21 23:01:10 2026 GMT
Subject: CN=aca9f348e9d7caac5c9a20b402a0ae0da87dfec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:ff:99:18:5a:eb:50:9a:76:2f:d4:38:90:
c8:dd:95:bc:21:b5:1b:d5:b5:9c:6e:ea:74:0a:ed:
47:43:9f:e5:d0:bd:a3:10:c6:2e:9c:8d:1f:c0:a6:
ba:90:a0:56:44:37:d3:8f:1a:76:0b:dd:a0:2a:fa:
0c:8c:40:92:ad:12:04:89:b0:07:6b:72:3a:e6:6d:
d7:7c:3d:b6:f3:3e:25:be:ff:c7:3f:23:1b:b4:7f:
75:c8:d7:c3:7b:bf:fb:82:b5:f5:85:89:5c:4c:e4:
e4:c6:34:47:ab:3f:83:e2:7b:7b:f3:ea:85:22:15:
13:79:09:1d:5c:a0:78:d2:65:eb:65:93:98:bf:4d:
f7:ee:da:97:1a:26:65:79:a7:83:e1:0a:80:91:e4:
f7:75:58:5d:9f:e6:83:60:fa:ab:f4:ed:c1:6b:c0:
f7:af:10:fb:5f:fb:70:e1:b6:2e:b8:48:70:68:6f:
3b:07:70:93:b0:e6:b3:15:0b:a0:29:b3:79:8e:e4:
e3:a6:e5:8f:b0:af:f4:7d:4a:f0:46:7a:ac:7e:f1:
0e:60:82:60:c3:0e:a4:05:fd:24:fd:01:38:d0:29:
92:32:13:46:3c:ed:a0:6d:5c:e2:d9:98:bd:f3:07:
81:03:23:c9:e3:05:5b:fa:ad:55:24:56:93:10:0b:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A9:F3:48:E9:D7:CA:AC:5C:9A:20:B4:02:A0:AE:0D:A8:7D:FE:C4
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:87:1b:1e:2d:3f:b2:bb:fd:cd:f7:ba:49:9f:67:18:e1:2d:
13:36:d5:37:0e:c9:b0:ce:75:c1:e3:68:c1:ca:bb:55:b7:15:
b3:cf:1b:70:70:7d:2b:10:1b:ce:df:f9:63:c7:94:7b:55:ef:
a4:80:0f:18:ba:0f:57:90:da:ac:d8:e7:99:6f:d2:eb:61:b5:
db:3d:f8:a8:9c:29:d6:10:2d:29:66:28:16:aa:f8:53:94:52:
b0:ed:8d:bf:bd:6d:02:a9:a1:4d:80:df:d7:00:3f:1a:16:f2:
bd:5d:8c:57:cf:8b:05:7f:fd:27:b1:ab:cc:c2:d9:de:b8:8f:
89:c9:2b:91:df:28:16:9e:81:e9:2d:20:ee:10:c7:37:f2:db:
62:32:76:8e:af:78:e1:60:b9:a2:a7:d6:d6:09:a3:b9:21:23:
74:26:4c:9b:15:b0:91:a7:06:15:a7:09:1e:ad:c2:32:81:a3:
29:e7:91:1e:23:f7:36:b3:c9:39:6f:47:f9:90:aa:45:31:1b:
ed:fb:91:f3:db:72:e7:56:ce:9a:f1:fa:44:87:a9:84:e2:ff:
82:ff:b3:a2:39:21:81:d5:98:68:a7:73:85:da:af:b9:f7:01:
10:7a:ac:20:07:36:80:4f:69:24:19:54:ca:fe:4f:d3:a5:19:
a9:70:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:18:33 2026 by rpki-client