
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json)
Hash identifier: 2vjoh0e57KH/eA784oon72tR3J8k59Sfby7Q35qxxDI=
Subject key identifier: AE:E1:7F:B2:84:A2:46:CD:C8:2C:C8:BD:16:58:B8:9E:A9:D2:00:E9
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019DA11C91FE6BFDDE2246A191908B164BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
Manifest number: 02CE
Signing time: Sat 18 Apr 2026 15:01:37 +0000
Manifest this update: Sat 18 Apr 2026 15:01:37 +0000
Manifest next update: Sun 19 Apr 2026 15:01:37 +0000
Files and hashes: 1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=)
2: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: 2XTFVj4ow2v/Sf5+05HUuwOwioBXgclx1yEaGTqYEfg=)
3: IqdHlUJa3uvZPr2-m3v2S7HrJE0.roa (hash: 0dizv8L3FD2g5DMEu7DpHeZSiKDU38+rdYF5Csc3+Wk=)
4: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=)
5: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=)
6: WvlvNh7K5hLx9h9vacG0tkPjMmw.roa (hash: 2dl+awpNpd4g8TVURdJWX1OrrQJPPqOtOykXldkOySI=)
7: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=)
8: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=)
9: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=)
10: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=)
11: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=)
12: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 15:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:1c:91:fe:6b:fd:de:22:46:a1:91:90:8b:16:4b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Apr 18 15:01:37 2026 GMT
Not After : Apr 19 15:01:37 2026 GMT
Subject: CN=aee17fb284a246cdc82cc8bd1658b89ea9d200e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:a8:29:bb:e6:48:1e:a6:d5:53:d2:22:52:
3d:d2:f8:ce:5f:85:58:6b:0b:3f:66:f1:74:33:33:
c5:ca:12:ef:ac:26:3d:36:bb:0b:25:a5:c6:bf:18:
88:1b:12:ae:c0:30:39:42:fe:b9:bf:b5:41:06:30:
38:b9:dc:b4:a0:9d:af:30:07:07:3c:5d:79:57:49:
2f:6b:70:29:d2:22:db:4d:66:d6:17:fe:36:99:48:
95:e6:ab:53:1e:f3:6a:29:5f:ba:48:a5:a0:eb:7a:
46:b5:07:1c:cf:e5:15:e2:d7:7c:eb:21:7d:7f:ef:
ea:94:04:9c:04:ea:fc:e8:24:d2:2a:b4:d5:f3:61:
d6:01:40:22:46:76:50:5e:bc:94:fa:0a:6d:a3:94:
fa:e2:17:66:ee:55:0f:d2:9e:ff:d6:5d:04:1d:61:
d6:5e:2e:3e:0b:1e:89:52:5e:01:76:a4:22:54:6d:
e4:79:a3:33:e1:3e:a8:b8:72:b4:3e:f4:92:5d:eb:
38:8e:8b:cb:8b:e3:c6:73:82:75:40:a5:a7:23:ad:
74:4c:21:af:21:c0:11:6f:e7:a7:ae:a1:e8:56:cb:
75:1a:4f:2d:d5:77:4d:9c:d4:4a:1d:4f:a3:6f:26:
70:2c:37:a1:30:fd:a5:0e:cb:e2:59:83:9b:16:f4:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E1:7F:B2:84:A2:46:CD:C8:2C:C8:BD:16:58:B8:9E:A9:D2:00:E9
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:52:85:11:c7:27:b6:02:ae:e5:23:85:52:d6:46:b8:91:9d:
f7:da:ec:91:97:85:f5:18:87:9b:1a:0f:34:31:27:21:0d:e1:
39:c2:f9:50:1c:29:3e:30:ac:d1:d1:0a:13:d1:5c:e0:09:df:
e0:1b:c1:e9:ed:0d:e6:41:99:18:1b:68:49:d0:ad:c7:a8:82:
cf:1a:90:cc:a3:f2:d6:b5:f9:af:df:7e:e9:61:73:0a:29:c6:
67:69:a0:69:a9:e8:54:bb:09:25:8f:cc:25:6c:dc:df:73:db:
2f:a6:e8:e5:49:64:7d:27:b7:cb:20:96:8b:69:81:a0:6c:0c:
12:3c:f3:30:8f:63:b3:a1:f8:d7:39:9c:90:53:e2:71:c5:4e:
06:37:f2:d1:71:11:8d:23:7d:64:0e:c9:17:20:bc:08:e7:9a:
7f:a9:01:07:7c:30:ea:bd:ae:69:cf:66:c6:46:04:48:aa:39:
4e:5c:34:1c:f0:ef:40:ac:ae:ca:6f:94:02:5f:57:87:7e:3c:
13:66:f0:3b:d0:8e:25:32:f3:c6:23:ba:42:d9:d1:42:e5:0a:
8e:fe:d6:a8:21:25:8c:1b:35:c2:d8:28:35:24:50:d0:85:c6:
33:a6:9c:5c:2c:8e:a0:f6:c1:28:84:37:9e:d3:55:e5:fe:1e:
14:a1:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 23:38:57 2026 by rpki-client