
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
File: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json)
Hash identifier: pRHPnwn1x0zMuxi8q4Hr9o3z+BXM6gwgvK/xxKPFoI8=
Subject key identifier: E5:2F:4F:B4:85:36:A9:DD:A2:6B:2B:DE:7A:78:9D:EA:F1:F5:55:E5
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial: 019CAA58E0EED4FDCAB3659E68675355DEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
Manifest number: 12EB
Signing time: Sun 01 Mar 2026 17:01:17 +0000
Manifest this update: Sun 01 Mar 2026 17:01:17 +0000
Manifest next update: Mon 02 Mar 2026 17:01:17 +0000
Files and hashes: 1: 8YEPdClPNr_3zDrhmRGiX4nWwZA.asa (hash: 2bvyL1QtbFD5dzAQ0Bl2sb4g9BiR/U4X0BGmGEMfbKU=)
2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: 29oUa55mCp2diw1haYeAg3uxnFLCsjbKcYV9tkJbK2k=)
3: B5j3YeJoZkR-M842kAei_UWMVnY.roa (hash: 9dBcdzBINoDXdmkJLkcJhvttYwcsyEIX2FhzFQvtp+s=)
4: axIqDyAlK0bUNbzn8X3np8rLZdg.asa (hash: qyAh01KjzZwobQ5AxwlXgm7EdBIeIjU3cgZPryzz3yA=)
5: g3MXjNcsWoLD0PetYkh3H8FGFEw.asa (hash: na+ynpKUQZPFDrKy+EXa5B4rQ+xPN8v4RPHAqcwEPhI=)
6: hfYAMmC7nzj6eP_4KjmX0ydK61k.roa (hash: ENco3xJLaaDmCT3M7xz4xfUTyINJdjSu/7+AW54JdKY=)
7: lwxiv3kekrPmCweGpFX4WJfrhX0.roa (hash: 2lW/SbMqaftEHsN9ssTuGMfD/ZAuKFXzBYGrp9TrmHI=)
8: nBKubqHJCPmxZed95Pwvup7veOk.roa (hash: SF8k+2B3p2IDWArFu3EKiVWXhjgf4ze2L6pnr/0Lp4o=)
9: qMkdURgl5v8iVuM-fHHXRCMHBok.asa (hash: KT0x4APoSA9EBXsj4uU5Mno2FoqnMrb2Le5rpuVOb0U=)
10: wehxXgpfgzalQRxlqvRAJwCWbMQ.roa (hash: kDdYxSItK7GlFWzV8XEeVDHmfQM6o/WzrJGoU9qv79A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e0:ee:d4:fd:ca:b3:65:9e:68:67:53:55:de:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Validity
Not Before: Mar 1 17:01:17 2026 GMT
Not After : Mar 2 17:01:17 2026 GMT
Subject: CN=e52f4fb48536a9dda26b2bde7a789deaf1f555e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:c5:d6:99:5a:d8:8c:b5:c3:03:4f:f0:82:
77:7c:72:09:2d:0e:1c:4a:10:74:26:71:d8:18:b0:
42:65:88:04:53:eb:13:9b:bc:b5:0d:c7:63:fe:f1:
85:a2:ba:fb:bc:61:cc:90:fb:97:63:06:65:d9:59:
0f:4c:18:fb:da:4b:4b:90:cb:59:a5:63:7c:10:8f:
52:39:b9:73:93:2f:4f:b5:b3:f6:e9:ce:97:ce:6a:
c3:b2:38:3e:e0:40:28:c1:be:9c:15:6e:ee:05:a6:
1f:d9:e8:83:c0:fb:56:44:a1:5f:1a:33:77:55:55:
26:aa:d2:5e:d9:a7:23:dd:2c:69:57:af:59:94:62:
df:a8:d1:7a:5a:25:00:e7:fb:86:b4:16:75:9b:88:
c5:e4:b8:56:78:89:9e:dd:b8:9b:02:00:81:19:bb:
ac:2a:b0:4d:15:34:a0:3e:e9:9a:dd:d5:f8:9b:f0:
1a:3b:13:2b:44:50:fa:65:21:c3:46:af:77:70:d9:
63:b5:3d:72:ae:b1:57:65:a2:11:18:1c:fd:cf:37:
f2:3b:a0:1a:65:01:f3:6b:f7:0a:e6:04:07:92:ed:
93:07:5f:11:fc:4f:e6:5b:cf:46:b0:21:43:d6:3a:
4c:6e:b5:37:08:69:58:d3:2b:cc:9c:52:51:de:9b:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2F:4F:B4:85:36:A9:DD:A2:6B:2B:DE:7A:78:9D:EA:F1:F5:55:E5
X509v3 Authority Key Identifier:
keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:d6:fd:c1:c5:52:f8:cb:03:63:d6:c5:e9:d5:3f:89:b5:6b:
80:7c:9d:38:f5:7d:7e:4f:f6:aa:55:5f:85:9e:c5:9c:97:bd:
97:42:23:e9:3f:0a:c3:fa:1f:ee:d3:93:a8:5d:91:ca:be:ae:
cf:f0:6d:66:ba:94:f8:54:9f:fc:29:fc:2c:d9:57:44:96:58:
2f:02:ee:1b:3d:0a:37:e6:b5:d4:f2:46:c8:db:8e:77:42:3c:
2e:60:a8:0e:3c:de:1b:7f:91:42:3b:11:39:e2:08:e3:24:16:
50:69:75:22:ff:c7:37:74:31:d5:1a:51:69:0a:9a:8a:c9:c2:
9f:54:1c:ea:c6:f9:32:14:e1:d0:cb:90:27:66:d0:86:d9:48:
44:c7:e0:77:ab:aa:71:eb:d4:94:2b:d2:dd:f5:fe:0a:e6:96:
cb:4f:09:7d:55:16:8c:e8:fe:24:3f:ed:21:54:20:a2:12:96:
15:3a:50:6e:c3:1b:8d:2b:7d:f4:d5:6a:84:27:18:1b:e1:05:
e8:31:3b:8f:67:8a:8e:7c:d2:b2:92:30:49:39:5c:a8:bc:ff:
b3:d2:de:e7:3f:50:79:6a:06:dd:63:ac:15:25:08:83:2e:41:
05:85:a1:9f:76:df:57:ff:06:63:b2:92:42:20:cc:b9:d3:ec:
c0:29:de:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWODu1P3Ks2WeaGdTVd6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh
MzVhNTUwHhcNMjYwMzAxMTcwMTE3WhcNMjYwMzAyMTcwMTE3WjAzMTEwLwYDVQQD
EyhlNTJmNGZiNDg1MzZhOWRkYTI2YjJiZGU3YTc4OWRlYWYxZjU1NWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR/F1pla2Iy1wwNP8IJ3fHIJLQ4c
ShB0JnHYGLBCZYgEU+sTm7y1Dcdj/vGForr7vGHMkPuXYwZl2VkPTBj72ktLkMtZ
pWN8EI9SOblzky9PtbP26c6XzmrDsjg+4EAowb6cFW7uBaYf2eiDwPtWRKFfGjN3
VVUmqtJe2acj3SxpV69ZlGLfqNF6WiUA5/uGtBZ1m4jF5LhWeIme3bibAgCBGbus
KrBNFTSgPuma3dX4m/AaOxMrRFD6ZSHDRq93cNljtT1yrrFXZaIRGBz9zzfyO6Aa
ZQHza/cK5gQHku2TB18R/E/mW89GsCFD1jpMbrU3CGlY0yvMnFJR3puiZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUvT7SFNqndomsr3np4nerx9VXlMB8GA1UdIwQY
MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt
ZmUwYTY1OGQ5ZGVkLzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk
LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4tb9wcVS
+MsDY9bF6dU/ibVrgHydOPV9fk/2qlVfhZ7FnJe9l0Ij6T8Kw/of7tOTqF2Ryr6u
z/BtZrqU+FSf/Cn8LNlXRJZYLwLuGz0KN+a11PJGyNuOd0I8LmCoDjzeG3+RQjsR
OeII4yQWUGl1Iv/HN3Qx1RpRaQqaisnCn1Qc6sb5MhTh0MuQJ2bQhtlIRMfgd6uq
cevUlCvS3fX+CuaWy08JfVUWjOj+JD/tIVQgohKWFTpQbsMbjSt99NVqhCcYG+EF
6DE7j2eKjnzSspIwSTlcqLz/s9Le5z9QeWoG3WOsFSUIgy5BBYWhn3bfV/8GY7KS
QiDMudPswCnewA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:29 2026 by rpki-client