
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json)
Hash identifier: fMSLy5jZn7d2WdEbOla1VV43mbSQBdlcBTHQ0bP8NAM=
Subject key identifier: 5A:70:06:DB:3C:8C:FF:7C:B4:6C:AD:C4:9B:A3:ED:5A:28:8A:4B:27
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A156D3BE83365E50506B82507F8C2F7A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
Manifest number: 04DB
Signing time: Tue 20 Oct 2026 01:01:19 +0000
Manifest this update: Tue 20 Oct 2026 01:01:19 +0000
Manifest next update: Wed 21 Oct 2026 01:01:19 +0000
Files and hashes: 1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=)
2: 36PRmC1GP3ueaeEjlYANeJ3LXbA.roa (hash: PZlaEdi/ajdKb06dXTcZ+6Hv0OskYDexJ38koRPQi50=)
3: 5uFOCa8-r8p4u5DjbFcyMxWnxpk.roa (hash: six96PBP2FVtrDub0viM0uQeju8Q52lW6mmVN0at+D4=)
4: 66spJgWO4r5iJulLefAkdYTwISc.roa (hash: AyjLjLUdwhw2VQoEzrUJ+rotnQiPNzqjvEUgW3yJgvQ=)
5: AFebLvn6AH0mOGLAGY1K4fdA0ac.roa (hash: lc41gS5MnYI/Mo4Xzk3UtrseTVtRz4aEngOCwuhDcEI=)
6: CoLO71qrUv_4qMwwwRs5lDVCE9E.roa (hash: T4p9qnVSGm7AR+uo+khZZRMNDQd/GpzNGpYFRL2iEKU=)
7: G31aaGd5LlY50IGLO6eQwT_sz54.roa (hash: J+TTKw7LlUBt9s2Q/PONP/L4s5aJKpFWg7AH4f8ZIRU=)
8: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: 04L1wB3Gmbtyzj8Qh4+k34EVzX5x5xRA9JrMjIKbIhI=)
9: Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa (hash: 9cuNi2UUB3uoW2G4GMhdugeWXWqlYW8/ZVXdji7vqm8=)
10: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=)
11: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=)
12: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=)
13: _CTtp7ZPH0kOXThVR7wQj4XW06A.roa (hash: 6qdFfEyB76OZ8FZHFVIZ5XewiprUqvvRVqyD2drMzds=)
14: aApcJx1Vl6jx6w4yohNQaV1Io5Y.roa (hash: TnHtMgPhychs4GGqHiht/VWWogxSmwlOOeNfBvbp0w0=)
15: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=)
16: a_bqWhibp7SeshuAQiOml-HBzFo.roa (hash: 3/NcBV1xs1onuU3mKr8Ow0etCQW+Riv48+qzB2krzYc=)
17: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=)
18: eh5fOnfV3Yahiu4aGae0RbMTacA.roa (hash: EnUBauk+HPUC2FL0C2u4k3bttrn+4mEzqjxd5GPr53A=)
19: nXcVZv-BU5nC4jNra5f09x54HeM.roa (hash: iqu36oMqP46CX2CYzFsUJwzZuRu/tE4uzTsQ189IQ3U=)
20: oVD_dVqY96Rae8qlPSjzu1nbP2A.roa (hash: hMwSc/t+zdpyL3GPyUyGW/FYHdZ8kxNPn94rYv1mr6s=)
21: r3_mc9CdfqjKkPDbRieGRarY3J8.roa (hash: 1R/r8NdpsrVTyu0//wO87WSQNYrZaTMeX7aV4UcB6I8=)
22: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=)
23: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=)
24: zzlejXCHpXgamH633G_B9GA9p_0.roa (hash: eE86eVMiNcHiwH9DJb7Ms+ClxkfBQ1nOerPmLa6il54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:d3:be:83:36:5e:50:50:6b:82:50:7f:8c:2f:7a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Oct 20 01:01:19 2026 GMT
Not After : Oct 21 01:01:19 2026 GMT
Subject: CN=5a7006db3c8cff7cb46cadc49ba3ed5a288a4b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:bc:0e:06:7e:2c:2a:36:89:a6:14:27:cd:
ca:f9:f2:d1:2e:a4:7a:5b:b8:75:79:c8:d9:0f:3e:
0b:04:88:6a:11:04:0c:eb:28:55:b0:2e:e4:be:9b:
14:c6:4d:09:a6:b4:0a:f1:80:66:fb:92:db:97:ca:
61:39:c1:c5:4e:d0:f1:58:81:64:7c:46:98:49:a5:
ae:30:15:21:23:5b:14:0a:5f:3e:b5:d8:d6:04:a4:
09:d8:e2:1a:ce:43:1f:f7:19:c1:2f:e7:23:e9:ee:
5d:2f:22:de:38:0e:b9:8d:39:a7:c3:57:94:47:b4:
b2:27:60:81:19:37:36:61:37:e6:1b:da:8f:ae:9e:
dc:98:bc:da:83:61:69:78:79:c2:22:71:1e:1b:9a:
26:2e:dc:62:32:12:57:2b:dd:ce:74:16:9f:f6:24:
38:a5:fe:bc:9d:47:3d:ee:44:ae:54:4b:8a:2c:78:
4e:82:58:d1:92:8b:1e:32:52:cf:43:56:04:28:0d:
c1:78:3e:ce:9c:bb:05:3a:fb:81:39:c0:14:53:10:
89:e7:bc:ec:f2:ec:cb:d4:fb:7a:93:b8:c5:39:98:
9c:df:55:67:12:03:de:a5:92:34:79:03:ab:fd:53:
3e:c2:e2:ed:9f:3f:39:75:44:72:fe:2a:cf:20:0b:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:70:06:DB:3C:8C:FF:7C:B4:6C:AD:C4:9B:A3:ED:5A:28:8A:4B:27
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9c:22:ab:37:c1:07:b3:89:93:6d:d3:57:d1:15:23:1a:0e:
e6:71:3f:c5:3c:de:01:0a:ab:c5:74:05:40:ff:b4:1f:d3:6f:
18:17:d8:4e:63:68:2c:8d:e6:0d:80:52:21:0f:88:fd:0b:c0:
a3:27:d2:37:cc:ce:50:70:6e:2a:b5:77:9f:04:48:ef:5f:f8:
75:4f:d8:95:8f:8e:00:ea:c2:6d:33:ed:f7:38:4b:7e:45:e7:
6a:66:60:70:f7:e9:ad:37:5e:0f:2a:f1:4d:62:0e:a8:fd:0a:
a6:e9:a9:dd:30:11:1e:81:d9:f7:1b:95:e5:44:e2:6a:b8:d0:
a9:d6:8b:22:e1:d5:68:d2:2b:b9:ac:a9:fb:05:b6:d9:75:7e:
72:49:4d:1f:9c:66:24:82:0e:b8:cc:2d:28:df:cc:86:6a:96:
90:4e:75:5d:39:5b:9d:7d:4c:7b:2a:84:0f:03:5d:06:99:30:
92:a8:5a:d3:b9:29:3f:55:7f:c0:52:e9:35:7f:52:d9:bc:16:
a6:dc:54:52:5f:d1:2d:20:57:9d:7b:0e:f2:72:c8:05:de:da:
6f:d9:1c:9b:11:91:df:35:ae:0b:af:8a:7e:df:3c:27:96:28:
76:8d:dc:28:9b:fb:d1:8f:f6:5b:d5:65:d5:b6:7c:45:ed:7d:
62:38:38:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:42:44 2026 by rpki-client