
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json)
Hash identifier: b2IcK2ZqQKSIZzsm9lEvXe8RPAbACz0OEUj2ZY4+fS0=
Subject key identifier: 70:AE:49:21:A8:6E:A7:DC:93:80:FC:8C:01:DB:95:C7:E4:74:7B:DA
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019E90263D2DE0ACB8E14369DF837669C57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
Manifest number: 0355
Signing time: Thu 04 Jun 2026 01:01:25 +0000
Manifest this update: Thu 04 Jun 2026 01:01:25 +0000
Manifest next update: Fri 05 Jun 2026 01:01:25 +0000
Files and hashes: 1: 246t8tITYAyw5xkMmEUrB-DKjWQ.roa (hash: 131JbPsay5gnj8P2waHLD9VfGrgYXPjf59o+Gj4+vJM=)
2: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=)
3: FKDB1nLn_ZS_a9rdy0c5mxFNjAw.roa (hash: 2sgSFU9TG23xIm09t4WNIN0wcgWuOUk3p2yOrCzVZt8=)
4: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: uJvzLCZN199wOW3sfsCwqrBeGeC8azl/AIFXh1MNURs=)
5: Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa (hash: 9cuNi2UUB3uoW2G4GMhdugeWXWqlYW8/ZVXdji7vqm8=)
6: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=)
7: Ky8s4Lu3M8j3F784s3VxKx1e75k.roa (hash: 9Gc23uMOAcwKEfyzeLAFLWHetYWPfkRMND3EMrVpfX0=)
8: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=)
9: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=)
10: YQKMXVm06N8zD3NDnbfHYsCtcuU.roa (hash: 4zO+32jaiCVPHg0DG0Z719jsGnydWv+/YMvSSq/GIt4=)
11: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=)
12: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=)
13: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=)
14: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=)
15: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:26:3d:2d:e0:ac:b8:e1:43:69:df:83:76:69:c5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Jun 4 01:01:25 2026 GMT
Not After : Jun 5 01:01:25 2026 GMT
Subject: CN=70ae4921a86ea7dc9380fc8c01db95c7e4747bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:fc:4f:c8:11:be:34:29:27:bb:a2:2f:26:
c9:54:46:6c:e6:6b:5d:62:0f:e0:b6:eb:4f:42:f7:
78:f5:63:58:ef:15:94:ba:79:f0:cd:cd:72:06:71:
39:2d:7b:7a:4b:54:ab:73:21:5e:e5:47:90:2b:dc:
64:67:cc:8c:c6:5b:7e:b3:18:31:8a:9a:67:0a:94:
fc:54:0f:17:a6:48:3f:b0:ec:70:55:3c:52:d8:9e:
61:c0:42:11:84:ac:73:dc:eb:27:dd:3c:67:ac:51:
3f:e4:96:78:6a:a9:1b:86:b3:3e:11:a4:0b:be:65:
16:51:ef:e0:51:d3:5c:6c:6d:81:79:17:6f:95:bc:
4d:e1:fc:3d:28:a9:bb:8c:e5:37:db:55:0b:b2:46:
56:17:f1:71:86:3a:62:9f:23:4c:3f:18:43:e4:12:
80:27:86:55:9b:7b:c3:55:4d:0b:d2:a3:7a:ca:83:
b5:57:ca:69:85:53:90:bc:62:be:23:99:dc:e4:1d:
01:6a:0a:f1:70:d9:bb:ef:da:01:c2:c4:0f:6c:2b:
29:7a:91:15:4f:74:22:a3:5a:3d:68:ed:d8:05:96:
d9:cd:21:cd:5a:92:e8:cc:f7:a4:51:f4:cc:e5:cd:
66:24:8d:d4:5c:74:7d:d9:6f:1a:04:d1:c0:1f:46:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AE:49:21:A8:6E:A7:DC:93:80:FC:8C:01:DB:95:C7:E4:74:7B:DA
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:00:ae:4b:95:a6:3f:ac:bb:34:16:cf:53:6e:a9:fe:b6:68:
99:f5:27:05:22:67:86:50:87:cf:2b:c9:f8:f0:eb:3f:9b:4f:
ef:23:c0:e1:65:d4:9d:a5:6a:34:d7:db:b3:1b:5f:1e:86:fa:
7c:d9:6d:c5:d7:ff:18:27:1d:40:5a:16:21:fa:dc:ad:42:b0:
69:f7:99:ca:35:f8:9b:1a:20:06:79:cb:bb:be:c6:4d:8c:93:
0d:35:df:03:98:24:c8:fa:30:02:d3:c9:c5:88:d3:18:9a:12:
60:ba:fd:45:e6:69:2d:4c:d9:ea:13:56:60:d7:2d:ef:a6:3d:
03:c6:cc:c9:96:ef:ce:b7:7b:9a:fc:4e:29:bb:d1:c5:47:8f:
91:19:b2:5d:68:9d:2b:6f:7f:99:7c:6a:7b:4a:b8:13:f6:f8:
46:16:e9:c7:97:a4:50:21:32:bd:9a:f0:f6:c4:44:37:55:eb:
29:d3:8e:c2:6a:8b:ef:57:bd:dd:b3:1b:ea:03:bc:41:ad:bb:
2d:3f:70:28:10:7d:0f:e4:c5:37:f6:59:40:89:09:8f:8d:15:
03:98:79:ac:38:4f:04:72:ca:68:b8:93:50:7a:5b:cd:3a:57:
20:ba:63:09:dc:83:d1:24:30:1b:c0:8e:ae:7e:04:4a:85:37:
78:49:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:17:31 2026 by rpki-client