
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json)
Hash identifier: 6GqO8ZLBsYUSOqG2DK+fyfZ02+JSNT7+EKjKqfEseFA=
Subject key identifier: C4:6A:03:CC:26:69:C3:B3:AF:FC:AE:28:A6:94:DF:99:E4:61:84:41
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial: 019EBE108C853EBCF13F8C6CF00CF51CA801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
Manifest number: 0AD5
Signing time: Fri 12 Jun 2026 23:00:15 +0000
Manifest this update: Fri 12 Jun 2026 23:00:15 +0000
Manifest next update: Sat 13 Jun 2026 23:00:15 +0000
Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=)
2: 6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa (hash: z38nmLbA27NPlhWOJNNoq+Tpqv3KWZDwtJ61CNlRP7U=)
3: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=)
4: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=)
5: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=)
6: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=)
7: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=)
8: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: wc2drjSbTR3CVPDMLzPgxci1q97+7S9t4Box+uzrHrk=)
9: X-k71aDoZWtFtR_cnu9r97seWXY.asa (hash: lw8Nl/kqTmv0YBXcCPnKH/oG1mGI+Wcg8DdG5SlWra4=)
10: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=)
11: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=)
12: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=)
13: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:8c:85:3e:bc:f1:3f:8c:6c:f0:0c:f5:1c:a8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Validity
Not Before: Jun 12 23:00:15 2026 GMT
Not After : Jun 13 23:00:15 2026 GMT
Subject: CN=c46a03cc2669c3b3affcae28a694df99e4618441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:f2:33:37:47:52:06:bf:87:f1:26:aa:d6:
1a:51:af:cd:9d:8f:79:0f:8c:74:6f:86:c5:dc:3a:
91:4c:32:83:f9:38:82:38:d9:e2:4f:1c:61:98:15:
ab:b0:6a:93:11:dd:ab:aa:f3:89:90:f3:94:cc:c1:
28:dc:a4:ed:25:a7:99:8d:a6:18:7c:49:db:c5:5a:
f8:7c:7e:86:2e:dc:a0:f0:3e:15:72:1d:a0:6c:bb:
1b:12:83:e3:8c:e8:c8:7a:8e:00:39:73:15:d8:e2:
2b:b0:95:2b:60:90:8b:e1:f2:01:2f:d5:c7:e8:c5:
71:f4:0d:31:d8:ba:7a:79:cb:5a:21:d1:5b:18:38:
2b:2c:18:33:82:3a:53:12:3f:51:e0:fd:3f:e5:f0:
76:48:d3:08:0a:08:38:ec:38:0b:aa:95:55:5a:c8:
b4:11:27:85:4e:2a:0d:24:f9:12:46:77:72:e3:61:
31:b7:b8:b1:44:90:73:f2:2f:95:ec:a8:04:6c:12:
70:1c:e0:21:b0:52:b8:64:77:86:6b:94:28:de:a9:
d3:7c:9c:19:c5:a2:0c:b1:6a:4f:6b:01:9d:26:c5:
aa:67:7d:17:d1:98:e2:31:c4:40:88:f5:73:40:28:
52:88:69:e6:c3:bb:9c:e5:5c:4e:8f:b6:6e:0d:b5:
37:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6A:03:CC:26:69:C3:B3:AF:FC:AE:28:A6:94:DF:99:E4:61:84:41
X509v3 Authority Key Identifier:
keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:02:2b:ef:18:2c:68:c3:28:76:5b:9d:a1:9f:76:81:96:dd:
20:4c:96:42:22:a3:fe:ec:08:dd:c0:69:44:1f:fa:be:ce:28:
99:b7:45:2d:6e:cb:7b:6c:b2:c6:8b:a0:ae:4d:02:40:47:b7:
05:92:65:af:4b:8a:2b:3f:a8:0e:6c:43:be:73:c7:eb:cb:ec:
ca:39:ad:f6:d7:07:bd:3e:48:0f:10:99:d3:16:70:c6:f9:9f:
4d:8c:d6:2f:13:c5:a2:52:05:04:d3:00:ae:05:62:a0:f5:37:
ab:93:95:35:da:8d:35:cd:82:5f:e7:ca:6c:2c:c1:e4:15:98:
96:73:de:5b:ad:5d:3d:a8:e3:8a:a1:0b:bf:73:64:37:45:bf:
dc:ff:d7:5f:64:83:78:3a:6e:c6:fd:52:34:e1:92:6c:e6:1c:
3c:a2:64:f6:fc:29:5d:9e:4b:9f:ae:e2:39:3e:a4:4e:dd:42:
43:b0:0c:a7:36:e5:9a:30:f6:b0:b4:d4:58:6f:9c:77:62:b3:
a4:bb:b2:6e:1b:2b:47:e7:6f:b7:ef:82:a0:12:d0:94:76:7f:
7c:73:ae:b2:e2:20:72:1f:e0:60:a0:f8:55:23:ae:8c:91:46:
b0:26:d9:7b:b1:2c:d6:73:31:db:72:fe:80:a4:1f:80:18:c8:
3d:0d:ad:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:01:21 2026 by rpki-client