
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json)
Hash identifier: GsEpO6C3mLVaAX88FqTQ/bbq+oFK/PLBgEUlngAYpNI=
Subject key identifier: 55:D6:C7:4B:B2:08:82:2C:3F:6D:4A:0B:A3:DE:8E:D1:E6:AF:31:7F
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019CE1C2E1902227040CC4A0DDACB42EA5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
Manifest number: 18A3
Signing time: Thu 12 Mar 2026 11:16:11 +0000
Manifest this update: Thu 12 Mar 2026 11:16:11 +0000
Manifest next update: Fri 13 Mar 2026 11:16:11 +0000
Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: ujT+5ia5dJe/zACPkv1Bxyvq7i6ZliId569tph/IFoM=)
2: 1-n7EdeFX20C6cFMyJ6Y5HWVMQU4.roa (hash: suKN0U6xP/FTkPKNJxFCA4VBUPU7v0a/LfB27Kibl1k=)
3: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (hash: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=)
4: 5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (hash: UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=)
5: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (hash: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=)
6: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (hash: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=)
7: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (hash: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc=)
8: C0VnbFyJGyh-3dXIXN-FVbbzva4.roa (hash: nupbKfiMh1Vbm5eU6VpPOjsRTYtweNUnX1ebsHaK4hQ=)
9: GnQ9nonV43lnZNoCG-ecdWqOLDk.roa (hash: 5lmMKt+idSdfaSrOW6fzEjOhALbxhOPcgnKdUuSF0JY=)
10: HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa (hash: BGn13AFdqwObLZ5mjHyJ0u9f6CC1n+u2Nsk2L6TLrao=)
11: T4WKqnzx21YB7DT_1vKAo3UszP8.roa (hash: 6mK+AjkLTQZ9KoVljBzw+UhhF/AIqKZ8gcyABfwrr5U=)
12: W-cWYMFcdHDS1yv5jkAVjyp5ho4.asa (hash: QdAC+W0wfurd2BssKpz9U5P9YKTKUM6ZjHzLGg+JdOA=)
13: Wh6JdWbFf767tpcWkFtr8UJXLgM.roa (hash: W1BnQBZwaWYQKobp/KfvfGYFyHPluWWlI7Hmrj6OUg0=)
14: cQJLykBOqMGgV5KV9rcPZr-_U1Y.roa (hash: aOQV+i/NapnfOnLvAQ3Zr9czxxA22kZuub947U3fZRw=)
15: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (hash: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo=)
16: fyxZLGtBW9e59RZ3aEwSKlhWT4w.roa (hash: itxLmMXkodUFbwqD5SmQmqHBd8MyF3lpLKdM1WEIZu0=)
17: oOmWYS79EfLZM1YUVX02Dm8sbCI.roa (hash: UMtyOefWK95ZFcwkFudLsDtrliJckAkSIFBXdWfp+zQ=)
18: odS4gJ1H-haIP2hfRvP__EIClnA.roa (hash: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ=)
19: pHgh0geILg2H9c8tNXl-coocbok.roa (hash: MiAWsYu39mO81MmSrazkuF8uttZJWXsnb0YqEMhZmqc=)
20: xLvL2DDHdDsFuu0LWe_ArfxkZOU.roa (hash: jEvpZaWRUr0vww6k+sw/ZzVTbY8rHX3wan18IH9TsyY=)
21: yUTvxSoxh0P1X3qi3W3GEmQmupg.roa (hash: YggGVCBvHEr/or8wxjiqlTzxSxsrR2x9hxdT1duIBFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:c2:e1:90:22:27:04:0c:c4:a0:dd:ac:b4:2e:a5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Mar 12 11:16:11 2026 GMT
Not After : Mar 13 11:16:11 2026 GMT
Subject: CN=55d6c74bb208822c3f6d4a0ba3de8ed1e6af317f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:1e:35:72:5b:27:03:8e:a5:f1:44:01:d5:
b9:9a:58:05:6e:05:35:69:6e:07:80:5e:e8:72:2b:
43:92:18:55:bf:2e:db:22:ee:43:f7:31:bd:04:4f:
88:00:8f:88:91:df:1c:fc:6d:be:6b:20:9c:0b:78:
f5:a4:f1:eb:39:9f:b3:de:b0:23:a1:b3:07:c8:8a:
99:80:18:7b:4a:d9:ba:cc:2e:9a:5e:0c:73:fd:6c:
69:61:21:68:2c:8e:0d:c1:48:50:58:d6:b2:c5:5b:
be:91:f3:cf:05:bd:4f:c1:59:82:e1:26:f0:62:b7:
8b:61:38:39:66:94:ca:e7:fd:f3:a3:11:ee:37:7d:
a5:83:f7:42:af:27:3d:fb:d9:4f:69:60:9e:70:81:
65:37:69:3b:2d:15:dc:82:19:79:31:35:04:8d:06:
3c:37:27:e7:d2:5f:e6:30:8f:9e:6d:a4:3c:6f:e7:
ae:51:40:d2:7d:bb:ab:fa:67:74:09:a1:6a:c8:0e:
1a:d8:91:0f:de:84:fe:3d:1e:37:73:e1:9f:54:ab:
a8:3f:5e:b1:6c:29:67:1d:b8:05:81:38:8c:e3:3c:
af:4e:9b:00:94:54:2d:07:6a:5b:f9:54:d2:7c:a5:
e2:dd:77:ca:5d:9c:0f:f5:84:c8:8d:d4:fc:89:51:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D6:C7:4B:B2:08:82:2C:3F:6D:4A:0B:A3:DE:8E:D1:E6:AF:31:7F
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:08:2e:78:97:61:e1:b5:79:51:8c:51:6d:47:c4:dc:d2:0b:
d8:0b:c5:cf:be:e5:14:a3:be:ef:94:43:2b:fc:2f:84:e1:6a:
1c:30:92:ab:ed:05:6b:d7:57:74:58:9f:6e:76:9b:9c:ef:9b:
98:92:1e:e4:aa:39:93:e1:b6:c4:68:36:93:96:35:35:82:6b:
71:14:f1:ca:38:63:5a:5c:4f:2f:69:bf:43:17:f7:dc:d8:f5:
f5:e6:b2:33:03:47:a7:d6:4e:e5:21:94:94:9c:1d:6c:7c:9c:
6e:c5:e1:c7:36:10:30:0c:19:75:bc:29:bf:14:70:58:71:d7:
a3:72:cb:26:14:0c:d5:d7:f5:bb:d8:3d:ca:34:b5:c1:fb:80:
68:2b:9d:7a:ce:f2:1d:9e:f0:40:72:f9:2b:37:d9:8b:2c:2b:
59:c7:f7:a5:e8:e1:23:3d:30:50:2d:9d:22:76:20:bc:36:b2:
5b:1c:b3:33:31:93:aa:0a:0a:20:ce:72:f6:98:df:c9:75:18:
2b:a3:da:98:15:f0:74:1f:96:a8:8a:20:f6:cd:03:b1:ea:ee:
bf:18:a9:f2:c8:7a:8b:1f:b3:af:a0:c3:66:cb:34:fa:e3:82:
e3:ae:75:d2:48:cc:83:8d:1b:a6:f3:0a:b7:1b:50:8a:a8:c6:
af:a8:90:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 14:23:22 2026 by rpki-client