
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json)
Hash identifier: 3vA3a/XhaI01O/nmrTiL7Si5gCKSOY9Lzk7YzlX/pwY=
Subject key identifier: 99:97:80:39:CF:F1:FB:68:7F:29:53:36:2C:6A:9F:CC:1F:FC:AB:93
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 019FA0E01FDDBBB7550C48748279DE4AACCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
Manifest number: 13D6
Signing time: Mon 27 Jul 2026 00:01:10 +0000
Manifest this update: Mon 27 Jul 2026 00:01:10 +0000
Manifest next update: Tue 28 Jul 2026 00:01:10 +0000
Files and hashes: 1: 6sDEpQA35ftQgC9cRb2aUxRe15M.roa (hash: 9RYUADj24edFkxjz1HOYfztJjRAg3gUE9hiqhdU7LFs=)
2: 9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa (hash: r9Mi0ISmgqXc4MQRndutfvzx3+gJmpftorBgBM19zMU=)
3: CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa (hash: GvwQBFKWqGnALtG2pY9jEuPw2EDgNLgRgYwwOKULAJQ=)
4: RKC_1mqLXMIDbGkqZMEJrCSWeCo.roa (hash: PPGCCrSEwXx1Rr+8w142QOXo4ncdDGVM4h0k0e7qrm8=)
5: U6vQ_9-xOxVrenXa0_Xg04rZfLY.roa (hash: OQhVM9/l+WAA3TDjGzNDJCTikubrDwOffydjFZn+MFs=)
6: UUD9roNkskiwye2tqwssSFEocBY.roa (hash: uz8OsG4t9MjUUcUflz9xYFC0CJuPcU2Ss0OyzWUNNtw=)
7: W4qxGEOnhck0eA0os9nmiLaPXEU.roa (hash: QlC0nvvSkC3Gr5lT9KAlzmA+mhP9wXRsj529IDFwxxk=)
8: YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (hash: TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=)
9: hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa (hash: p7tJPFgjfUUpJQH1SrbPDkojOBWipCAp1Q6lO2Sk15g=)
10: iIxvWcwl88BImtN8o1GvbtwFtug.roa (hash: a5Q+4dXfu6wDxBWXxjzSYqzWruw5vPQbQWVRYFB3/0Q=)
11: ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (hash: r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=)
12: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: oyOjQzLElF0tW3vUJry2+SQidtYVf+i88b/1AwKGLZM=)
13: sf51NOhxVRdedJBM3Z0cnGoghkQ.roa (hash: LN9NTe23NXKUtbp6+7QIyRE2B1TaB0xN6+rtM8kCrNA=)
14: ttggVWDiefPyqveIlfoGKCWaja4.roa (hash: NvSwdx11u/EHh453rM9xZTJvAWhbuq2a/Hj0lXbHfsQ=)
15: vTt98DamUvECWEMoSR5lw_z_oe4.roa (hash: xsmG4HMvRTP949NLqKrEta8cDRTk+o+O5AMMpfIwVNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:1f:dd:bb:b7:55:0c:48:74:82:79:de:4a:ac:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jul 27 00:01:10 2026 GMT
Not After : Jul 28 00:01:10 2026 GMT
Subject: CN=99978039cff1fb687f2953362c6a9fcc1ffcab93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:94:1a:90:20:e6:b4:82:ed:2c:ef:f3:31:
49:2a:cf:1c:ce:65:26:f9:72:2c:9a:f7:9e:27:e3:
65:fd:e4:76:1b:b2:2c:d2:f6:a1:d5:7a:01:14:73:
1d:5a:30:d6:38:55:9e:22:5e:54:93:57:5c:3a:c6:
d0:b5:1b:65:2d:37:83:b4:a1:9c:5c:9c:a9:f6:9e:
e1:68:d5:76:57:01:91:47:d4:44:14:5b:38:fe:67:
44:07:72:45:b4:1e:88:78:82:1e:8e:d0:ce:c5:43:
d4:52:a2:53:e8:d3:b5:7f:7b:cc:c1:0b:f1:aa:5e:
93:16:e6:8a:af:d1:ec:fa:75:9b:f4:48:b8:19:0e:
6c:41:4a:cd:46:34:cd:7d:60:b6:b4:ae:21:d8:ca:
4a:14:53:a6:65:2b:39:d3:b2:47:2b:e4:01:7f:25:
6f:d8:74:ce:87:7e:b0:ba:75:a5:2b:fe:43:a2:db:
73:6b:51:d1:fa:07:e9:48:7c:9d:a5:f8:c7:f4:4e:
a8:87:2e:a3:ac:16:9e:8e:2f:fe:9f:2f:a1:46:0f:
ea:91:5f:86:59:7e:fd:ac:cc:d2:d8:9b:52:c1:3e:
54:1b:ca:c2:17:78:6c:12:fa:5a:fb:7b:6e:e8:b9:
d8:d5:05:e6:9f:74:50:69:dd:fa:05:cf:3b:88:e0:
e2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:97:80:39:CF:F1:FB:68:7F:29:53:36:2C:6A:9F:CC:1F:FC:AB:93
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:9c:47:19:ae:8a:ba:a5:31:f2:f2:31:29:e4:29:49:7d:6e:
7d:85:9d:c4:e9:2f:6c:93:5b:6c:99:9e:44:41:1f:76:59:bf:
67:20:de:b6:26:15:da:b9:69:bd:87:d8:5a:fb:53:f3:f6:ce:
2b:9c:47:1d:a3:7f:44:a3:b3:42:4a:0d:cb:67:8b:79:9b:ea:
ed:ae:4e:e0:ee:4c:c6:1c:8b:9d:03:1c:07:e2:24:ab:c9:49:
47:f1:1e:73:84:cc:a5:34:6c:ff:4c:5f:e8:18:48:fa:fb:69:
e1:d4:58:98:a2:a1:ea:6c:ec:b8:2b:b0:81:c9:48:bb:64:1b:
cc:90:d0:ac:60:b0:28:fd:56:5e:f3:54:07:cb:90:fe:7d:8c:
51:fe:56:a0:6f:60:69:40:fa:7b:d2:5a:5a:ba:fc:6d:88:23:
6b:a4:80:2d:47:ab:63:b6:c6:ed:24:0c:b8:72:2b:aa:bb:35:
f4:23:4c:82:37:ea:47:b4:a8:48:50:7c:84:78:e4:91:28:a0:
24:c6:5a:ad:87:f7:35:62:c0:38:d0:1f:35:ee:35:5f:c4:e4:
c7:eb:a5:6a:d7:d9:b1:a7:ea:ba:9f:dc:a4:a6:00:d0:ed:a8:
63:2f:51:2d:4b:eb:67:61:c5:b7:e4:1f:56:01:8d:50:a6:8b:
bc:70:b9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:48:22 2026 by rpki-client