
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json)
Hash identifier: NR1A5+Pofxqoudoca4daAQGGLRXacg3fiUZvwFejv3U=
Subject key identifier: BB:B5:85:39:F8:12:66:5F:46:9B:15:48:80:61:29:9E:9F:0B:4F:E9
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 01A0C8FD13246E4D1A644928E1E185013D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
Manifest number: 1A7D
Signing time: Tue 22 Sep 2026 12:00:23 +0000
Manifest this update: Tue 22 Sep 2026 12:00:23 +0000
Manifest next update: Wed 23 Sep 2026 12:00:23 +0000
Files and hashes: 1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=)
2: 2-9TE0hGien7uJimnUsiIL-slx4.roa (hash: ITBjj6tI+9B/OwJk2K8Dzw0Ey9IFfvrN1KI8kY4JXFU=)
3: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=)
4: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=)
5: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=)
6: KplJ3LduqB8fju8Cp8wVC5kYaEw.roa (hash: 1HTgbzS5o5VYiYxgpRXb60MFv/qXACweKzDFgHcjSQo=)
7: T2XlEh6k8oXA5m_Hmkc7Jeq872U.roa (hash: /9TV0tPt7Hezx8nofCt10e+R7phZBTBRrAT2/hbBfq0=)
8: XD3CHImTefD8FuenptmC1xt8ItM.asa (hash: zINZ70P1S66UVaG5a/xPv//b9AHB0SJycGjf91yrXwY=)
9: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=)
10: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=)
11: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=)
12: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=)
13: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=)
14: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=)
15: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=)
16: qtDoqnaV9ZZGBUq4tRSN1Fvz-j0.roa (hash: GSE9R+oyIw7xMTL0Ep+U9AxHVf7kythML3j+Y7ovTM8=)
17: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: en8xk/PVALi6HefP963ymF15x2jN7Kg8Yjb0Tje4f04=)
18: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:13:24:6e:4d:1a:64:49:28:e1:e1:85:01:3d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Sep 22 12:00:23 2026 GMT
Not After : Sep 23 12:00:23 2026 GMT
Subject: CN=bbb58539f812665f469b15488061299e9f0b4fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:89:5d:7c:13:d5:73:77:81:48:c2:39:50:
e6:5c:92:dc:1b:98:c8:f2:49:7b:20:ce:e8:d2:da:
72:2d:bd:49:b7:ab:4b:08:33:bd:f4:7c:05:dc:b9:
24:d7:4d:94:bb:5b:d7:c7:96:2c:d4:80:69:dd:2d:
fc:67:1a:b5:d0:4b:87:f6:9c:38:db:90:1e:83:7d:
bc:4c:d1:53:56:2e:69:f9:28:87:81:0b:6e:f7:b6:
48:fe:53:5b:6d:32:09:a7:14:4b:ce:af:0f:7f:38:
7c:e1:9d:48:5b:14:de:52:0e:c4:0b:70:99:72:7e:
a6:57:12:44:c1:8c:21:11:96:8e:e9:77:70:4f:00:
3c:a5:15:6d:54:01:fb:cc:4b:63:88:f2:dc:2f:15:
68:ac:82:de:10:b8:b9:14:a2:82:a6:16:6d:d9:cb:
1b:a8:6e:2e:88:7b:8a:c7:63:44:d6:ab:11:2b:3c:
07:a9:23:c9:9e:f0:58:7a:8d:98:d2:a1:70:d9:0e:
8d:d0:10:63:0b:cf:9c:e3:9c:bf:95:f8:24:48:75:
69:2c:27:a9:45:f2:a5:4f:62:8f:3f:89:e2:88:5b:
00:b6:21:15:50:3c:13:41:b7:1a:62:f3:d6:14:c4:
c5:a9:a7:17:1c:bf:33:f3:8f:ae:07:88:71:93:a9:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B5:85:39:F8:12:66:5F:46:9B:15:48:80:61:29:9E:9F:0B:4F:E9
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:39:b9:c0:54:cb:1b:36:40:d0:85:8c:20:99:e2:ec:90:d9:
3d:66:40:9d:b3:5b:54:f3:4e:8a:7b:25:11:34:40:51:b3:62:
73:c2:df:e5:1e:65:81:00:7e:cf:f1:25:08:58:eb:69:05:e8:
5a:42:a3:25:2a:f6:6e:a0:b7:30:f1:af:e1:2e:83:bf:f2:68:
3f:ae:16:5c:4f:a3:c7:7d:6e:a4:a1:be:63:04:56:35:57:fb:
82:f9:78:47:a6:64:ca:00:e6:d8:8f:45:6a:22:8c:9c:ab:49:
be:e0:a8:e8:11:72:c7:38:f9:53:bb:e3:5a:f9:7d:2c:90:07:
2c:87:72:f5:61:18:34:02:1c:79:50:8f:7b:3b:e3:3b:98:d2:
68:35:e3:53:21:bc:3b:a4:40:3a:5f:73:b2:5f:1f:cf:63:ab:
7e:1f:28:d5:3d:55:fd:ec:07:8a:63:57:5c:64:ca:cb:fb:57:
7e:dd:10:18:4d:fc:42:67:e0:76:11:42:07:40:3f:0c:54:aa:
7f:d3:f2:9a:f9:6a:5a:44:82:1d:dc:e0:dd:b6:07:c3:05:20:
9f:79:2a:49:0e:e0:a7:d0:81:1b:2e:02:45:1a:ba:02:5f:7e:
83:f5:b1:29:c9:22:64:6a:cc:9b:a1:b8:39:76:48:02:39:78:
4d:e2:fa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:16:09 2026 by rpki-client