
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
File: Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft (raw, json)
Hash identifier: ozbElUIFVkWGZR5PrYouOQCb78dGizn1EzjYtAUOq50=
Subject key identifier: 36:E7:AE:AA:EE:CB:B4:40:A4:F1:EB:51:2D:F5:D6:97:43:70:9D:C0
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01A1735DA7D4C653FAF83C0556C7140C6A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
Manifest number: 0A4B
Signing time: Sun 25 Oct 2026 14:01:19 +0000
Manifest this update: Sun 25 Oct 2026 14:01:19 +0000
Manifest next update: Mon 26 Oct 2026 14:01:19 +0000
Files and hashes: 1: 8Z4cnJPLnuvDnXqgx8BKoKEM9bU.roa (hash: 6Fm2cAinJPnR+GJXlx5vjK077RhAacIcahwr2z1YkDg=)
2: 9UtT5GcWwC7TWfNnh2me3mLPlFI.roa (hash: qgqqfceXIM+BVgfwFTl9tcLAUFjeXoDcWcGGai98SQM=)
3: A8MjN0eidT6iDCjoo7S-r3ul_Tc.roa (hash: i7YanX6zn3v0DG9D6Ag3WSlhyo5m86D2Igd9CoS0Fjw=)
4: AHoAIdWXRAPIrDSl4u1SU8YYqSk.roa (hash: EWMLVeLj+fyihsFBIWnZZJmtFYOU0n6PSicXw/JZTwQ=)
5: BQHofkNDdwo8VDxETqm6eOYoHdg.roa (hash: bNhzHl3IkpkYEjbrGYNAAlrHXhlpC4ZSBZr0iWx1THc=)
6: CzX--NSlj4j4e_bPOJnrBSnXMDE.roa (hash: T9uZuh47VYQIKvHfzAQBj+kD6w6gwmwKS7XUNwFB694=)
7: Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl (hash: mjDn2yRBaVk0YvUo51i+CfTz1W1Qn4b9JYBruGkgJ24=)
8: J1aCTCe9S3EttkG3gjoMsOR6Xk4.roa (hash: BW0JcsAW2YXqSEQ+lbB1GbYcVdH4XyQmnvM9e9JVf3o=)
9: KvM3StmOZkBwSmEp39O9I_j7k04.roa (hash: tpcdc0S3Vfat1KVvABMTMEmMwO077uZepfs7I1i4yMY=)
10: MBFPvIPgNySe2urpIvFCDePV9Y4.roa (hash: f5+yNK9LhJwsFZqjTx+HKOKeKNubN7GeN8d0fxuo2LI=)
11: MZ7S-RSHcnSELGMtrXuzvi3LI68.roa (hash: +fq1dXYLe8pvw7cMIz7e2FS56xrJY1Io672b/msokkQ=)
12: QTnflRDqAKg81BhqTfvGF5Pz_xM.roa (hash: GASWvWT0LzhuKAbwvS1EOgovlGNitmvN7JCqe3mF9OI=)
13: QsrVdj0EDuFeHzbM36_tXIdVYO4.roa (hash: rSlbajiApqcbyUeHEkfPmsSeEw0M5M/pY9jVKn1gC0I=)
14: ROQ-Tbim0cZvwTwTc4SRtxkouaI.roa (hash: SGRrqCJNQ7GyVwO8SOgRrr3MSGqTOE8u6IAHGd7bB0A=)
15: b3OIDkHF0SCOrHo_420obyvnkmI.roa (hash: sc1FokAaPj9a+a6X7xyvlvbupvhwzdVFtIvrgSiKEeA=)
16: bawlKjjRUn-2VUvaXqgMqrmXIYE.roa (hash: 4v7xLDkhU1j/Z9g+fxPJmcjl4ID73clEnOAWrniIb90=)
17: cH1U0akjXxWwjePysfs1KMEhgnM.roa (hash: c/aVQw4vYLSrm6+5KMS/RqtZdacZ4uxH0y7aXje0vQY=)
18: gB9pySILbpD_ARKbsKBosjbrp2o.roa (hash: P7JIDPQrScNZtIMVCacJw/YIMNuDt6IHyEVuiNcFTOw=)
19: ix50fllmTBXH0H6Th11QAkYuvBU.roa (hash: p2NUkXsFZFD0PMPwbkACoAvFJ2EQV4gGlYmOL6mduVg=)
20: mnaD-SqMaItcNhqa0LO5p-4uqZc.roa (hash: t1tFSNibr7+MeQN9/FMt6ud4uRozJUnr3W0XaIgm8nU=)
21: r1FDlfrTL0hBKBz_EIagW-GX9Ao.roa (hash: 7RaL6Etx3q+xbKYR2Cg8tFQiNAa/86ECIbzS8ZguzE8=)
22: rcRoIjuYJtNSn9g4NTDRPBJhZLQ.roa (hash: ZjhmVaUc3HqZVzA0H9v1Qsh5U5MX08HlFP/jm9mqcMA=)
23: taNOcFtjGX4XDaLQFSWD9YAKY80.roa (hash: 1nijtZl6vRVqZanQGkkq5xkFpuzGH86d1/U2hfDQy6k=)
24: uhIp9qB7kmChMTb7Zgy6ODlmQ-0.roa (hash: JtrRy8K8JfXY6c0h4tIaVxPoTz6vUyxLw4quWDAs64g=)
25: usnzEjwTf3Hb8Ns9_jne7bL8qtg.roa (hash: 55lzaab3Q4oNX9z+oCX7fFYT3pDNkQzjAEYIEWThmaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:5d:a7:d4:c6:53:fa:f8:3c:05:56:c7:14:0c:6a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Oct 25 14:01:19 2026 GMT
Not After : Oct 26 14:01:19 2026 GMT
Subject: CN=36e7aeaaeecbb440a4f1eb512df5d69743709dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:ab:7c:95:e1:c7:73:c9:e8:ac:4f:ef:29:
25:4a:f1:be:cd:d1:7f:c9:29:cc:a9:59:eb:75:45:
8a:0e:0f:23:76:b5:60:96:6c:5a:2c:9a:e5:73:2f:
0a:8d:9c:44:47:7b:d8:6b:7d:f0:d5:87:29:12:fe:
76:9a:b6:cf:be:a3:bd:3c:38:28:26:97:f9:4f:fa:
14:51:e0:89:d5:cc:61:3a:70:ff:ff:7f:7b:20:ac:
64:31:93:1a:e4:7b:58:8a:96:75:f4:c6:5c:c3:0e:
c6:e4:68:f4:3b:8f:6c:fe:c6:c5:8e:b2:91:37:16:
06:78:8e:76:8d:e8:7a:a8:f7:cb:f8:0e:5b:95:9c:
2c:4e:b4:f5:b2:29:88:1b:ae:c8:b6:5b:7f:2d:e8:
b5:63:1e:4b:db:97:8d:d4:4b:19:92:e0:e9:ce:7e:
1d:92:3f:e1:05:7d:4f:b8:db:44:7f:14:fc:6b:17:
b3:4f:3b:6f:c6:30:05:31:2b:8d:24:3c:3b:1d:67:
6d:9d:6a:3b:18:10:af:98:27:e6:42:79:c3:da:a5:
72:7a:dd:fc:d3:14:65:7d:2d:5c:b0:41:8c:ed:f5:
a5:6d:4d:00:6f:29:e2:ae:9e:87:5b:87:e7:e8:17:
5c:d9:2f:27:f2:4a:38:9d:d2:97:a6:b4:6f:d7:08:
e7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E7:AE:AA:EE:CB:B4:40:A4:F1:EB:51:2D:F5:D6:97:43:70:9D:C0
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f6:04:a8:c4:22:90:e6:70:4a:23:fa:5c:99:3b:37:46:3a:
70:cf:e0:03:94:f0:79:74:6c:f3:68:d6:c4:20:27:a7:52:17:
1c:4d:8c:78:d6:05:24:5b:64:2e:ca:0a:94:b9:76:e3:57:24:
db:80:0c:6d:05:28:ab:5f:d0:fc:25:1d:50:fa:ae:4c:f0:a7:
3f:00:75:0c:18:b0:99:88:17:58:f7:06:5e:bf:03:01:d2:50:
bd:80:5e:84:f8:33:9f:f7:51:7c:6f:92:fb:fe:8e:59:b8:fe:
24:95:5f:ed:6e:36:71:3f:b1:33:ef:ad:b8:19:54:16:88:54:
89:46:75:6b:67:24:30:5a:3f:d0:8a:13:f4:1f:b2:26:d8:f8:
2d:3a:26:5a:bc:8b:fd:91:f0:a0:18:1e:3c:e3:a7:58:d5:0b:
6a:01:7d:09:d4:ac:bb:c1:3a:4b:9f:b0:be:f1:4b:d2:ec:e7:
67:82:93:42:a1:07:f1:e0:5a:ac:92:7e:dc:f9:41:43:e3:d3:
58:a5:2a:1e:7e:23:29:06:3a:30:cb:fe:29:2a:ab:1b:c3:50:
8f:bd:f1:8e:e0:26:ea:58:8a:43:7e:9f:7c:d1:0c:79:32:ef:
8f:ae:af:df:99:26:93:56:31:7e:84:e3:34:eb:d7:cd:bd:48:
66:40:fe:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:42:20 2026 by rpki-client