
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
File: g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft (raw, json)
Hash identifier: FgGH/ccmrs9Ic3imKYC49Cv1v0edFfgjTgCyTci5Kh4=
Subject key identifier: A7:FD:55:2A:11:45:E1:0B:D5:15:E9:62:77:B6:23:59:74:C4:EB:32
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial: 019F08BDCB2AB1DFDB07214DF06358C3E93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
Manifest number: 0CEA
Signing time: Sat 27 Jun 2026 11:01:23 +0000
Manifest this update: Sat 27 Jun 2026 11:01:23 +0000
Manifest next update: Sun 28 Jun 2026 11:01:23 +0000
Files and hashes: 1: 1o8rc1B2rz8EJdbZ3z6LILHJGLM.roa (hash: RgVkOLGuQmy3f1VaDolVM/xuPM7B5/Thq2bqgQQQ5KI=)
2: 9CiYOh3Tvo2DBfl0jabQvFLWLFc.roa (hash: 43nWzmq/RjcNjuxCi4y1M8IbSxUCfohc5YoCfDEycLQ=)
3: MwBfnIeh4icyMtphU38ylCMXamk.roa (hash: CEXyVLtqmaHwpYLSDbPmPnIa3IY69NeBED7KXP3ze6c=)
4: ezYsw2_e3R9NDcGghu9oCFEJ53c.roa (hash: 2lry/rf4POpaKlgjomChorPFhc51fpzfavcz/xLZEo0=)
5: g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl (hash: UpGzQphRLlD5BGScsfV5osLPLQd00IwzvsvaMY3zKKY=)
6: kdEPUuQDUI6I6jbSpPW6P-kkOuA.roa (hash: zinbJQSjE4KwqubnM0+SQjc1EG+tlbXwWx2ZhYd6qEA=)
7: n94KenbJMH70fjR1rrFahdY8U34.roa (hash: yP/yPEDoYrtpaNUeRocAKawwYPvsmMlpzOFnFwFc4BQ=)
8: q5kphRSAlG3DN63C9RqhU3DMVds.roa (hash: VfvnDEZYHd7dijCx60k38qn3Wzq30eQaAO0QQVJTt/4=)
9: qbbxFuzSkULQOBICM7rqsaqrwu4.roa (hash: hvKhotK2pMOwPjulJduMi4iCjCSu8N/+Goyf1aqun7Y=)
10: sNj_laiOcAyx4yKKoT5eo1FxYbQ.roa (hash: MfbxVfKPhfU7+vz/KhDXRG39RyplbnNlSLuWA903WKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:bd:cb:2a:b1:df:db:07:21:4d:f0:63:58:c3:e9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Validity
Not Before: Jun 27 11:01:23 2026 GMT
Not After : Jun 28 11:01:23 2026 GMT
Subject: CN=a7fd552a1145e10bd515e96277b6235974c4eb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:5f:2a:4b:47:84:d1:31:02:a0:c2:e8:3e:
6a:04:97:04:79:08:d4:73:e1:34:95:cf:11:8d:d2:
d5:aa:70:a5:d1:9d:9b:a1:1d:8b:5b:a5:f4:9c:e4:
9d:d5:c1:7c:13:15:70:b0:b4:6b:ef:98:b5:86:40:
97:df:73:83:54:ba:97:db:3c:cc:0c:a4:fb:a9:a9:
ff:bf:bf:4a:21:bd:d8:c7:f4:77:03:1e:8e:44:56:
ce:8d:3d:8a:6f:60:31:0b:db:e2:45:6b:14:ce:2e:
98:c6:a0:61:cc:04:cd:7b:98:90:03:dd:29:80:63:
c8:92:24:33:81:b6:d4:c8:1e:41:95:35:c5:f3:99:
de:04:df:67:ac:d3:23:b7:b7:81:18:7c:ad:b8:7c:
4a:4d:04:08:e4:34:07:bb:75:2c:0e:b1:b0:5b:fb:
50:0f:79:ab:f0:51:a7:83:dc:3b:bf:d1:fb:4b:4d:
88:c3:72:c7:36:7c:21:56:eb:f1:bb:42:e4:36:78:
8b:14:1e:8c:2b:87:b1:90:1b:7a:80:62:f0:43:c4:
34:83:36:5b:69:d9:ae:23:02:85:c1:5f:24:27:82:
7e:62:83:8d:e5:46:a2:67:e2:6c:e5:3f:0d:0e:d7:
8d:5c:44:93:03:1c:49:49:30:30:19:d4:db:2c:d8:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FD:55:2A:11:45:E1:0B:D5:15:E9:62:77:B6:23:59:74:C4:EB:32
X509v3 Authority Key Identifier:
keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:06:1b:f9:52:14:a7:22:cd:d7:88:3f:ba:73:9f:3b:71:28:
3c:67:e9:12:92:f9:c9:13:68:c7:40:2f:e0:f6:a6:23:a1:28:
45:b3:d4:32:98:07:20:b1:15:48:63:b5:b7:e9:fb:4a:5e:3f:
50:69:3b:e6:fb:59:82:85:7f:c0:61:0f:f2:55:18:f3:7a:e4:
31:3d:ab:38:1f:d2:9d:f1:f3:bf:ba:71:d7:a8:2f:99:31:48:
9a:aa:a3:97:e6:8b:46:d7:12:62:86:b6:01:cb:7f:85:8e:ad:
d6:0e:31:24:86:ab:72:22:f3:c5:5a:13:56:83:20:83:7b:db:
d1:fc:ea:3d:1e:13:88:e9:f2:63:a0:21:cd:84:35:83:2c:16:
96:ea:e7:e8:47:2e:b3:ef:6e:df:0c:59:3d:cb:f4:50:dc:30:
57:4f:b2:ff:5a:43:b8:b5:87:e9:c8:1d:8a:4e:5d:85:74:a1:
16:48:c4:d3:e9:11:38:23:c2:ce:3e:41:13:7e:9d:46:a3:77:
ec:cf:20:d4:55:75:6c:2b:51:15:bb:b8:26:e3:4d:a0:df:39:
8e:07:f2:8d:36:b4:b0:7c:59:9f:20:01:89:13:4e:8a:00:b1:
96:1a:2b:55:57:b8:c2:dd:d3:5c:be:54:92:a8:36:e5:f6:ba:
e4:12:65:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 18:49:00 2026 by rpki-client