
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json)
Hash identifier: UNEO0AVmoIqpQ08aIpf7fJdlpZ0DD7qklffviKbJU1A=
Subject key identifier: AA:CC:ED:58:FF:77:E8:ED:B8:33:A2:23:55:3B:36:7E:19:C0:D2:7B
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019E20FF7F1ACCB5580EABA8DC05E1DDA0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
Manifest number: 1680
Signing time: Wed 13 May 2026 11:01:15 +0000
Manifest this update: Wed 13 May 2026 11:01:15 +0000
Manifest next update: Thu 14 May 2026 11:01:15 +0000
Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=)
2: 4HCRVHg_7Fpp7PvqVl5KuccIESk.roa (hash: puBwqjPV6QqbrN+4fAjWbkC+7OOzoSwZ1Vj+oyvzRbs=)
3: 4Uc22LPWnWUE2R7euaG4ZHnFv6s.roa (hash: RGTqZUMIJDCt8fg43m28f23pkWbeJCT3vhwBQSzMBNo=)
4: 8-_TWMNK9smVCIZHx2gSgefBTvk.roa (hash: GoPHoDZXQ4RK7VcYW0JWFdEHGQJJF9f+5F3ghTg1XDg=)
5: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (hash: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=)
6: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=)
7: IoVIx2I3x-PhEDaNiA3QsmgYRfU.roa (hash: LJmLkrAVOpzOpZpY71yZciCd1TYlZWcX63CtNAvFvDI=)
8: JvSklV-wlWBMdiMFZHYwnOO4qno.roa (hash: 2Y5pgGlMimFGDoHDIk55HXcJoD340d10aMUaMx1CDGE=)
9: Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa (hash: ujg1A0vQ9FG1rTPZa8Vj4tuAeoDxeA7TxCNsFbsOZaw=)
10: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=)
11: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=)
12: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=)
13: c-uurSvFwdZ4HnQ-2FusksHz4JY.roa (hash: L6sexLXbR65THJCvf0Zc/VUy29DDIcDYXnW872IpKPc=)
14: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=)
15: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: IDWbXCeLBydtlDMS5esSUXus0EUZPAYUy4nUE1KG/Js=)
16: sVnkdz-If3BToP_lR8Kbr7aviEw.roa (hash: Rccu1mXIlX1/SPnYu01bLRxxpECZ4YTVP8mo65xnQx0=)
17: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:7f:1a:cc:b5:58:0e:ab:a8:dc:05:e1:dd:a0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: May 13 11:01:15 2026 GMT
Not After : May 14 11:01:15 2026 GMT
Subject: CN=aacced58ff77e8edb833a223553b367e19c0d27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:9c:54:52:dc:25:40:b2:3e:2a:7b:67:e1:
0c:80:ce:d3:74:0f:f7:fe:8f:1a:e8:9b:29:27:4d:
2e:e6:c8:67:f4:6c:c6:83:4a:b2:dd:a8:ca:44:f2:
42:a4:21:33:67:58:36:96:09:82:59:cd:17:12:f5:
8d:7c:3c:32:ab:56:15:8f:03:37:a3:ad:4a:c4:67:
36:64:9b:5e:69:b9:93:d7:e0:53:10:2c:22:d4:99:
1c:4b:55:fc:b0:4c:af:57:49:15:83:d4:02:c3:30:
09:1b:eb:a8:42:ec:27:f1:ca:8e:88:21:30:a4:08:
81:79:6f:fe:5b:26:94:70:13:54:8f:6c:72:d1:d1:
9f:ca:fe:f5:97:28:1a:27:a7:b1:11:c8:d6:a5:a4:
af:2e:02:fe:57:ff:c0:2e:7a:89:27:4c:69:bf:55:
75:51:a8:ef:d1:c4:1b:9e:db:1c:1b:2e:c8:a9:87:
6b:80:84:94:5c:09:fd:c1:b7:fe:f9:2a:5d:30:6e:
cc:cf:9d:3a:ea:eb:71:9d:6f:92:a5:8f:1d:13:86:
94:b8:32:84:bd:e1:cc:a5:00:1f:eb:98:fe:f9:e8:
09:3b:03:d6:3e:1d:e1:cb:f3:31:e2:17:ba:63:4a:
fa:26:41:5b:9b:58:b0:44:98:6e:c5:4d:9f:38:7d:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CC:ED:58:FF:77:E8:ED:B8:33:A2:23:55:3B:36:7E:19:C0:D2:7B
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f8:4e:d6:90:29:bc:da:b5:a7:55:69:e8:ef:e9:b8:69:1e:
4f:aa:00:d8:5f:03:f4:f0:cc:58:73:43:14:5a:8d:d3:56:5e:
f8:6a:40:09:53:39:92:08:fb:8c:18:f0:42:6a:00:68:16:c4:
0a:2c:50:c0:67:0b:27:90:fd:87:52:7a:e7:e5:c2:09:f0:41:
de:29:a7:cc:3e:15:4b:3c:07:9d:bd:65:6a:e0:08:f6:0d:bc:
05:95:b5:fe:83:6f:af:ff:63:75:b9:7a:f5:0f:20:e8:73:d9:
f7:cf:8f:c6:d6:91:09:3d:d5:d5:ca:16:c2:78:7d:c7:21:07:
bf:00:6f:89:a4:c3:b2:db:7a:8f:eb:06:3a:52:80:11:c4:c0:
7f:ee:c6:21:a4:5e:78:df:43:71:50:e0:30:ab:a8:3f:ab:3a:
ce:7e:09:43:3c:b0:bc:c4:4e:cd:68:35:d7:30:9b:5d:8b:cc:
d7:b9:f4:c1:11:a3:d9:9c:16:b0:66:77:3f:3c:f4:b8:84:a0:
dc:5d:c8:c8:95:0a:4c:fe:ff:d9:73:78:04:0f:1e:91:ae:99:
77:39:ae:44:35:af:98:3e:31:3b:fe:b8:9b:74:30:3b:b6:26:
4a:1e:5e:e1:9b:16:ad:8c:68:dc:a5:74:10:1c:b1:f7:2d:6d:
44:16:ab:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:36:28 2026 by rpki-client