
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json)
Hash identifier: gn0GatqzASoXf/SUCZ+pywhKp51+L0kt1Ne5jWNjefo=
Subject key identifier: 2F:46:B0:88:B2:46:89:EE:10:38:A8:49:F2:62:17:A9:87:EB:AF:80
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 019EB732ABF09EE4B3DD0AD0137E349ADFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
Manifest number: 135D
Signing time: Thu 11 Jun 2026 15:00:11 +0000
Manifest this update: Thu 11 Jun 2026 15:00:11 +0000
Manifest next update: Fri 12 Jun 2026 15:00:11 +0000
Files and hashes: 1: 6sDEpQA35ftQgC9cRb2aUxRe15M.roa (hash: 9RYUADj24edFkxjz1HOYfztJjRAg3gUE9hiqhdU7LFs=)
2: 9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa (hash: r9Mi0ISmgqXc4MQRndutfvzx3+gJmpftorBgBM19zMU=)
3: CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa (hash: GvwQBFKWqGnALtG2pY9jEuPw2EDgNLgRgYwwOKULAJQ=)
4: RKC_1mqLXMIDbGkqZMEJrCSWeCo.roa (hash: PPGCCrSEwXx1Rr+8w142QOXo4ncdDGVM4h0k0e7qrm8=)
5: U6vQ_9-xOxVrenXa0_Xg04rZfLY.roa (hash: OQhVM9/l+WAA3TDjGzNDJCTikubrDwOffydjFZn+MFs=)
6: UUD9roNkskiwye2tqwssSFEocBY.roa (hash: uz8OsG4t9MjUUcUflz9xYFC0CJuPcU2Ss0OyzWUNNtw=)
7: W4qxGEOnhck0eA0os9nmiLaPXEU.roa (hash: QlC0nvvSkC3Gr5lT9KAlzmA+mhP9wXRsj529IDFwxxk=)
8: YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (hash: TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=)
9: hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa (hash: p7tJPFgjfUUpJQH1SrbPDkojOBWipCAp1Q6lO2Sk15g=)
10: iIxvWcwl88BImtN8o1GvbtwFtug.roa (hash: a5Q+4dXfu6wDxBWXxjzSYqzWruw5vPQbQWVRYFB3/0Q=)
11: ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (hash: r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=)
12: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: w0oBa0g63J8063HyysPiEi7xXmMB4gtbv1ipZnTkbtk=)
13: sf51NOhxVRdedJBM3Z0cnGoghkQ.roa (hash: LN9NTe23NXKUtbp6+7QIyRE2B1TaB0xN6+rtM8kCrNA=)
14: ttggVWDiefPyqveIlfoGKCWaja4.roa (hash: NvSwdx11u/EHh453rM9xZTJvAWhbuq2a/Hj0lXbHfsQ=)
15: vTt98DamUvECWEMoSR5lw_z_oe4.roa (hash: xsmG4HMvRTP949NLqKrEta8cDRTk+o+O5AMMpfIwVNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:32:ab:f0:9e:e4:b3:dd:0a:d0:13:7e:34:9a:df:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jun 11 15:00:11 2026 GMT
Not After : Jun 12 15:00:11 2026 GMT
Subject: CN=2f46b088b24689ee1038a849f26217a987ebaf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:16:ad:f3:49:bf:64:ef:54:18:7e:ba:7a:
1c:b6:14:9d:d1:4c:52:c0:80:b1:d0:9b:14:d5:b6:
fc:b8:89:53:ad:7e:fb:b3:e2:00:ef:95:1b:7f:c9:
6c:5c:61:49:18:4d:81:7c:96:52:df:65:28:54:3f:
a7:c7:b6:a0:88:2e:cd:3f:7f:7d:1c:be:8d:4f:ef:
21:67:e1:3b:e0:2d:15:f1:12:60:d1:f8:94:aa:77:
aa:c9:2f:45:0d:d2:88:27:87:3a:90:60:0d:fa:57:
26:d4:c6:45:15:60:9d:91:05:35:69:ab:c6:c3:eb:
72:8c:8e:0b:4a:d1:ee:b2:c6:19:49:15:15:bd:94:
4b:9c:ea:02:e1:7f:6d:db:8d:57:3d:e0:21:b3:a1:
25:03:c3:cf:88:59:b0:2e:84:fd:85:9a:33:86:8c:
ab:bf:1d:f4:ee:d1:5b:47:74:e3:98:65:4e:c3:e6:
1a:a3:95:62:8c:14:58:a8:93:4b:92:d0:3a:9e:fc:
0c:ca:3a:8b:5b:4a:62:d6:f8:89:43:50:d1:55:98:
3c:24:a8:f5:00:24:e0:89:a4:cc:10:09:e0:63:f6:
34:03:cc:90:72:44:1d:55:f7:96:5d:82:52:12:fb:
d0:71:5b:16:f4:92:5e:20:9b:a6:ed:bf:3a:ae:10:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:46:B0:88:B2:46:89:EE:10:38:A8:49:F2:62:17:A9:87:EB:AF:80
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:86:68:6f:6b:e0:36:4a:ca:5a:82:d3:2b:44:ac:70:6d:1f:
e8:53:d8:3f:03:93:8c:63:f3:f6:4b:e4:75:44:02:9f:91:bd:
a9:f6:fc:6d:e3:24:bf:a6:03:69:7e:33:c7:60:4f:b6:ba:5a:
7c:48:95:6d:8c:0b:1b:b7:63:24:94:74:58:d6:1d:09:70:a3:
6f:9b:47:a1:60:37:28:76:87:0c:27:25:a8:c3:ed:de:0e:02:
c3:eb:e9:b5:47:d3:b1:0a:d4:92:3b:22:08:5d:cb:9d:22:d8:
c9:79:71:f3:2c:8e:2c:cd:08:93:f3:a3:d5:03:f4:08:a9:fb:
6d:71:a4:ea:b5:41:6c:68:3d:d5:dd:09:12:f5:49:6f:ef:f0:
af:bc:50:88:55:8f:3a:5a:74:b8:86:a3:ab:68:d9:48:0e:90:
5f:70:ca:72:4c:34:e4:c9:4d:1b:6f:ba:16:87:52:a5:a0:8b:
5c:e3:99:b8:f0:ce:68:8e:81:73:9f:cd:a1:59:d6:33:e2:50:
b6:f1:5b:7a:37:ea:af:76:0d:d9:f3:38:dd:7d:6d:0e:d6:12:
51:83:0f:27:0b:33:e2:d7:02:43:eb:e6:78:9d:ae:0a:ca:31:
03:fc:16:60:26:de:67:dc:0f:6b:90:59:12:d1:73:0c:6f:24:
12:2f:02:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:35:49 2026 by rpki-client