
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File: xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier: fpEASdptmNzFnYD70dN6NUz5KoQppYfkS1hXVsRguwY=
Subject key identifier: 93:CB:12:9C:80:CE:E5:45:C5:6E:12:99:3F:80:56:8B:99:76:E6:EE
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A0E588081E9D90D785B46048666F97A1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number: 1B1A
Signing time: Mon 28 Sep 2026 01:01:32 +0000
Manifest this update: Mon 28 Sep 2026 01:01:32 +0000
Manifest next update: Tue 29 Sep 2026 01:01:32 +0000
Files and hashes: 1: 1scAzSfF6-O4qi-AFUEj_37aURo.roa (hash: eTH807xo4Op+ZKawsAc+aiv/dB4TYhJguB/r2EFj3ME=)
2: 2c-E5BZdiwqZ2Q-DnytRU90rLWI.roa (hash: +KiT1wYNU4xT/dbPCwls8LNvm2nJx4GyHtaKqzRjkQI=)
3: 2g3YqagtveoXivlimUOijGK4Sw4.roa (hash: ygC6oN+dOsYHf4Cjh6O/E1qqcFKMCRFPzFyAC5l12yw=)
4: 5B28Ei4KPuBfMPCYz_CdjunmzfA.roa (hash: Fh0fY9vBoWA1h/GgmdDXwKoDcv0YIku/VzyUipmtScY=)
5: 5dkqS1kOogdDjOVpwAfLimpJt5w.roa (hash: 4rpahEdjqfHI+J8PiOnxP0jGqurgzE3tQ8tvvK8E+LI=)
6: 847QYcUP5hjUb-CFADZoXL-2EAA.roa (hash: 7A5j1ayEySWaguXhxHGqbzXvWLgn70DxblNYwzAZz1k=)
7: ADU9Ot52SGzefQKh2DGEXePNY-0.roa (hash: V0wapUiJ26KIs+WS34QY65fxOFjUrNBK87fDA6RrJ2c=)
8: DeLLhmnL8UGopy5KKmx7aJEcegM.roa (hash: MiHnbQkuo0f/Ih4buFqhTcosJDlqA6PQQ++HZPqmd5w=)
9: ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa (hash: lKK5rdzCjZE0+7rICMxRWAfKpw9HWxpCs96nQPbHzso=)
10: F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa (hash: S7WFcWfal2pVRy/GM+kUJ9lEuF9xQr0ct0tz3YBvyhU=)
11: GzFILLIkAaT9aB9CvnWDZTFwbdY.roa (hash: Wm6rCP0d9sgkyPeTHrd7psMD7wjPvGW5jHpasqKACzk=)
12: IMr3NO1SrUrQt7cnrfSqxhavDeg.roa (hash: svZlzOG84qB/ubvVsJUgoWUNTAczB6CkyCQMs1ByCnU=)
13: MDrt79mC6kMu5R27ERe_p3PXA7g.roa (hash: Y6CbpK/IdrhzJrPxsU/2B/u64jcq8RAQZg4LE13g3AA=)
14: W9AeGn_4EYTr-z8IbzJJXYoLOc0.roa (hash: r/0RiCOSE+WrdRBD5qqcgjI3IcYBeed6dA+B48z6B+E=)
15: cUKcHJFrJ0eH0dvSy-4NvKEMJRg.roa (hash: ay80hlOU/zsjK/Gj33Njc9A5kUM22amUQKa18P+z+G4=)
16: gMYRXePhXBj5QEchP90fA4n6PTI.roa (hash: n3t3ay/80ZRLXPkmrmKkNg7PYGv+vXmzByKb6p1QvZ8=)
17: hbdbuaRvg2tTLKp10GziAeSgyRU.roa (hash: H+cM7/5ALMd58f/dYxV/Q5+dv/fO2eB8PR2xGdT8ZXc=)
18: iE31HcpgdKKrdPMldO0jIS93Go4.roa (hash: q2vi84j7Hjeqqy/+pd9xsj/QdQIOk9oRPO1utxPcNqU=)
19: jX-4IWGmG4eMlD0i54uclcBT7Oo.roa (hash: fjR22bEWcrZfBSNMZjc/CuGiPhNuJQZ9SlzDLkoJWZM=)
20: jhdb_r0XRcl9Mcv7PgAbpc3alEQ.roa (hash: BZ7uV/P7VilBs71H3zS8GxmU/EiaA1em1b4uTkZIOnM=)
21: jpMS12QCO2gdD3cuexYC2wQ8Qeo.roa (hash: nMFW9BQneK7T1fgc0t6oA8jRIcD7rZtWnJMbSrXrhdQ=)
22: llmpvsJp6iJllq8aPzCHiXy7pDI.roa (hash: DANl4OSIWpehyMk+CpY4YG/h/rDOrMDg4VQVT2cFg7g=)
23: ms0wuT7v6-h1UgnL6n_jgWkOkVU.roa (hash: QBEq8rCcXKzWf4ULJs+y+Nad4kF1AXFNATRKBuEGesA=)
24: nm-KZislIGz6wosxLU6C90OgEBY.roa (hash: eiBhQ/2d82wkJoJ8lwkynR/qT2+hnESyOr9AACLRf+E=)
25: ogqLdcHBVunptQqU8na3eZ4TAyk.roa (hash: 5LphFus+DuaNIXfIZUq0AA1jagejb6gUIJL2iHIV3t4=)
26: sl1r80DXM22cM59xuY5TxIaUKIk.roa (hash: OaqLufEYLMhF0Zy2J7LLu5msyS3w3ex+GoFgknsRxqg=)
27: ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa (hash: aT3mMJhpwKfI0RkCBtFq/BKu85xA6+3aVTdjvSvqPZQ=)
28: vHpNG066C7qb6w3seYRGvSbcLTM.roa (hash: oOMKXuPYcJhhb1ks0FKSqMbqfUNTbYofrvqb7j5sseA=)
29: w6gmNc7f_bvjPNIJjuhS3RSIpZQ.roa (hash: GdBjwBkJ4iGW3k1Xd7AiPym4634yoaPZu5TSA3ZGyx8=)
30: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: E9Z5pjBYg6rkSdhv0h2fFrVeE5qjgk2zWUiHlD9aS2w=)
31: zPpg6IVM4o-i4jinuCnEdex0dqQ.roa (hash: uIlAbF8c+38K/x3ETxFNnYAiumMWGn5GI23E2fbm2gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:88:08:1e:9d:90:d7:85:b4:60:48:66:6f:97:a1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 28 01:01:32 2026 GMT
Not After : Sep 29 01:01:32 2026 GMT
Subject: CN=93cb129c80cee545c56e12993f80568b9976e6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:05:be:97:83:19:fa:f7:92:e6:3e:8d:99:
d5:12:99:d1:42:d3:9a:e3:61:71:6b:cb:e1:00:65:
47:17:99:0e:ee:17:a2:0a:c0:e7:3a:dd:2f:79:7b:
3a:36:13:af:22:59:93:de:24:86:f4:20:21:f8:4d:
25:c5:52:1f:d4:be:da:65:f4:97:a9:c5:a1:dc:cd:
09:c1:bb:c0:53:3c:4b:73:47:9b:78:73:33:a8:0d:
40:c7:2c:65:bb:5b:af:08:bd:5b:6b:5b:b7:c9:1e:
62:8d:8e:2f:f0:1f:c1:86:3b:b6:f1:a5:04:b4:a9:
93:7b:1d:dc:bf:80:86:7a:f9:04:e3:6e:07:6a:fd:
a7:6c:ad:d9:20:ee:03:fc:dd:16:f1:9e:78:59:cb:
d0:87:e1:53:51:08:62:c2:82:17:d5:fa:60:37:73:
0e:49:a9:9f:cb:95:90:ed:65:ac:3e:57:2b:0d:9b:
11:a8:aa:02:9f:86:c5:e3:3f:b8:0d:f0:1d:59:c4:
29:5f:ad:59:ec:f3:63:46:90:48:bd:e5:2c:ad:34:
bf:3a:c6:cb:04:27:60:a2:8d:b8:67:3f:57:58:79:
b5:51:21:b5:13:c5:f4:a5:3e:8c:29:ea:20:04:1e:
c8:bc:73:27:42:c1:b4:1a:7d:6d:e4:8f:0c:59:10:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CB:12:9C:80:CE:E5:45:C5:6E:12:99:3F:80:56:8B:99:76:E6:EE
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9d:03:2a:e1:10:01:5a:8f:3d:48:7e:43:07:e1:94:ba:da:
55:4c:6b:a5:a0:e4:a2:97:cf:72:85:37:9a:55:36:89:9e:e6:
33:8c:7e:c0:40:d5:c2:e4:62:78:dc:9e:ce:67:8e:70:33:28:
d5:be:45:ed:55:d0:c1:11:89:f7:41:13:4f:c1:b3:19:61:2f:
e9:d0:8e:39:91:89:9f:ea:e3:97:ab:38:90:d2:54:dd:2c:1e:
8c:16:79:92:60:65:69:52:94:4c:1d:cb:1e:8e:9d:23:53:1e:
76:cd:77:b2:60:c1:68:be:e6:53:dc:26:65:ec:01:98:f5:73:
d0:1a:87:fa:2f:57:1c:b4:97:17:29:e6:b6:d0:3a:f5:24:f0:
05:2b:ac:20:67:b6:6d:1a:80:12:4d:f3:cc:1e:cd:00:7d:fa:
66:d5:d3:76:57:4b:62:a7:7e:3e:27:c5:95:a6:cb:f2:8f:e9:
07:85:88:a1:8a:41:ba:55:78:1c:72:df:9e:e5:b9:ee:c4:1e:
3a:09:bc:46:4e:fd:cb:d2:aa:d1:7f:94:66:75:c5:43:bc:46:
32:05:84:27:3f:6e:68:8d:bc:fe:25:92:54:2d:ce:24:dc:82:
cc:ea:ff:35:8e:29:84:9c:5f:b8:54:1f:ef:c9:1b:f4:ce:d1:
8b:9a:3c:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDliAgenZDXhbRgSGZvl6HqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwOTI4MDEwMTMyWhcNMjYwOTI5MDEwMTMyWjAzMTEwLwYDVQQD
Eyg5M2NiMTI5YzgwY2VlNTQ1YzU2ZTEyOTkzZjgwNTY4Yjk5NzZlNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV4FvpeDGfr3kuY+jZnVEpnRQtOa
42Fxa8vhAGVHF5kO7heiCsDnOt0veXs6NhOvIlmT3iSG9CAh+E0lxVIf1L7aZfSX
qcWh3M0JwbvAUzxLc0ebeHMzqA1Axyxlu1uvCL1ba1u3yR5ijY4v8B/Bhju28aUE
tKmTex3cv4CGevkE424Hav2nbK3ZIO4D/N0W8Z54WcvQh+FTUQhiwoIX1fpgN3MO
Samfy5WQ7WWsPlcrDZsRqKoCn4bF4z+4DfAdWcQpX61Z7PNjRpBIveUsrTS/OsbL
BCdgoo24Zz9XWHm1USG1E8X0pT6MKeogBB7IvHMnQsG0Gn1t5I8MWRBpCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPLEpyAzuVFxW4SmT+AVouZdubuMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN50DKuEQ
AVqPPUh+QwfhlLraVUxrpaDkopfPcoU3mlU2iZ7mM4x+wEDVwuRieNyezmeOcDMo
1b5F7VXQwRGJ90ETT8GzGWEv6dCOOZGJn+rjl6s4kNJU3SwejBZ5kmBlaVKUTB3L
Ho6dI1Meds13smDBaL7mU9wmZewBmPVz0BqH+i9XHLSXFynmttA69STwBSusIGe2
bRqAEk3zzB7NAH36ZtXTdldLYqd+PifFlabL8o/pB4WIoYpBulV4HHLfnuW57sQe
Ogm8Rk79y9Kq0X+UZnXFQ7xGMgWEJz9uaI28/iWSVC3OJNyCzOr/NY4phJxfuFQf
78kb9M7Ri5o8DA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 12:31:56 2026 by rpki-client