
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
File: 5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json)
Hash identifier: NH5kcHETbAwcLgzabofhNqaugfChZpIFq87tRqGTb7Q=
Subject key identifier: 83:B2:38:FF:99:FA:5A:F7:AC:0C:F0:D1:C6:E7:48:79:79:8D:3C:7F
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 01A0C4EA083F43F47449BF6167AD900FA6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
Manifest number: 13C1
Signing time: Mon 21 Sep 2026 17:01:06 +0000
Manifest this update: Mon 21 Sep 2026 17:01:06 +0000
Manifest next update: Tue 22 Sep 2026 17:01:06 +0000
Files and hashes: 1: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: pekvGVuEr4hqcoMDyFuMELeq5qDYsHOTGznZaRYwJqI=)
2: 7rRktmv12hr5qnAEcY0vbLidyQ4.roa (hash: aNKbwb/JLwxyFb64vZUPDN1/RFLfblM8Gub5dqhlaqw=)
3: 9nEh9Ha8XL-GFKGppeJ4w078MbI.roa (hash: H+5ALV1mF+WTtbMeqGgQv0vU5pCaTdiiBM99KsMPd4o=)
4: IE07L0W_pOhFIGWBEZzf0dcbbj4.roa (hash: P5WaKFdzaKsbiRR592oXSH5BbYNixPfOcZUFED9pC6o=)
5: OqFYhVg1Efiv3mat7wl-y0IWh0M.roa (hash: oKWk1mz8YCchnuM+fj+VOQNacesKLKH9rOD1QPPd9Pk=)
6: Ug9ynSBXJvbacZUCymyFegFwsdc.roa (hash: gneEDKy7z65cw82gMUszrjpGrKuBIM6nLytArcluJiI=)
7: btG2nJT4iaqSf2ka_3HJpZV-U3w.roa (hash: VP+IxLeiBTwTjl4LN6YqPGbYd8Q1JdjDhqR+iKRO1YY=)
8: cgUyX51ni1S68djJwifB7g8e6Kw.roa (hash: 3dVMqfRP6yRNJLYCw4N0iFLQvnH08Iy8aWjLtSTCtyk=)
9: cqFzj_JP2Kl8MvYNJQ8_BrlPB84.roa (hash: is93SyhljaSUmUmf+jZ+Qwb6Zi2kBnck0kJsmNIWvuQ=)
10: uzdBbBS3T-chT93z9aFklFPXceQ.roa (hash: 2HStjG1X7LnSDu/XK+LCJICQndfda0I58UATYz414mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:ea:08:3f:43:f4:74:49:bf:61:67:ad:90:0f:a6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Sep 21 17:01:06 2026 GMT
Not After : Sep 22 17:01:06 2026 GMT
Subject: CN=83b238ff99fa5af7ac0cf0d1c6e74879798d3c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:5c:93:2d:45:6c:54:97:55:8b:49:bf:40:
2a:d0:93:33:1a:ee:76:a6:5c:5b:f0:42:4a:d7:18:
f0:9a:0f:1f:54:93:2d:94:e6:3b:8e:94:46:5a:06:
36:92:33:4a:85:98:5d:12:5b:f3:b5:f3:d6:95:d5:
7a:5c:35:21:38:11:f4:1e:94:5e:5b:b8:ec:6a:9d:
39:30:d5:61:84:fb:68:34:e6:f1:16:87:1c:80:f0:
42:2d:07:62:90:a6:47:11:c3:7d:21:c8:8a:3c:fc:
69:4f:54:03:47:3c:60:54:24:48:72:eb:07:e0:6c:
a6:20:2e:fc:b4:bf:f3:0b:9e:f7:74:a4:c3:4d:1e:
ac:ff:63:eb:4d:7a:5a:02:49:15:fd:24:3a:f4:f9:
25:d3:ab:f5:0b:44:0a:4d:e9:b2:52:91:f0:10:20:
65:ab:17:ed:2c:64:75:79:8d:a3:fd:fc:73:2f:71:
3e:2b:b4:f2:de:14:31:ad:e7:e1:33:cb:d4:37:6a:
c3:2a:b6:55:5f:82:4c:05:eb:94:71:9d:e9:fc:16:
f9:c9:f0:c0:a1:1b:67:8d:f4:7a:c0:31:d5:3e:c1:
da:6b:b3:6b:0e:b8:d2:0a:59:bf:d4:b9:78:d5:c8:
0a:4d:c3:f8:20:e1:83:71:51:8f:18:7a:46:85:39:
56:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B2:38:FF:99:FA:5A:F7:AC:0C:F0:D1:C6:E7:48:79:79:8D:3C:7F
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c1:6c:f9:ae:5c:69:db:34:ce:16:d6:29:4a:49:ba:09:46:
84:c9:16:24:40:c2:39:da:87:3c:0a:68:54:fa:0d:46:01:1c:
f7:d7:df:4d:04:16:1a:76:61:76:c2:46:58:18:d6:15:b7:27:
04:b2:74:74:b4:7c:b5:b0:e7:57:01:74:5a:b4:f5:1b:8b:60:
24:3d:40:d1:41:da:11:47:74:5c:a0:8a:24:eb:db:f0:81:75:
2c:c6:79:fa:cb:3c:cc:e2:44:22:92:55:e3:ee:ed:46:4a:ae:
08:a2:6b:10:c6:c9:68:39:bd:0d:db:3d:ec:a2:07:f6:3b:96:
1b:c4:d5:d8:0e:5c:97:ea:0b:1d:ca:fa:56:94:27:61:88:28:
4e:64:77:5a:c4:fb:f7:aa:f1:7b:e4:b4:96:7e:3b:bf:a1:fb:
f4:f6:b2:62:32:bd:f2:29:99:cb:00:eb:89:df:62:0a:55:51:
0e:10:7b:d3:e8:af:23:60:ca:ce:de:0c:dd:9c:f1:c7:85:3d:
6e:39:76:31:81:ab:fe:9a:6a:70:3e:d2:5c:c9:54:1f:98:df:
19:b2:53:f6:b8:88:ac:0b:6f:ba:c1:e3:88:7d:a2:19:97:a6:
49:b2:59:97:a3:bb:f9:69:35:33:4a:e8:8f:de:53:37:e7:fd:
23:22:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:29:30 2026 by rpki-client