
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier: wFSTfCK5O5dKm7E5Mb1+ca7WP++6vpgvAJKCZ9W866Q=
Subject key identifier: 98:08:FB:9B:21:E4:1B:42:59:55:CF:6B:8C:3A:49:B2:79:62:72:68
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 019CE4B5995A5848E874CCAEBEA80EFEAC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number: 1579
Signing time: Fri 13 Mar 2026 01:00:32 +0000
Manifest this update: Fri 13 Mar 2026 01:00:32 +0000
Manifest next update: Sat 14 Mar 2026 01:00:32 +0000
Files and hashes: 1: 7r4ZXKz9RUnPmqvrGpcL4c9s6uE.roa (hash: TjqR9pBqeAaKXzawGJajC/5EzIOxqUpNkIWNRPKzQiY=)
2: 9_XCzJVQ0vHT8hA7DULO66uGe5o.roa (hash: cJQG6xW1gdrrjMHUKHp2S/TQBEdZhKtS4GkWHUfZeGc=)
3: INXHJDHDB1ukzYRaA3EidD_0aQ4.roa (hash: Z2x4wj/CdGVnD9ySadsV++WZwVQOZWizFudROy88bRQ=)
4: Lyc7L5ENNnNmeFFiP13mgBm-teQ.roa (hash: gtEddttCg6evm5ZoDlDkaU8NOuk0QknemDaWTdJCohQ=)
5: ay0VUntTWjhODm52u9TFTTH4EJw.roa (hash: 7gFOBHTqvfcaglUxfgHe1x48kCbMp0iTpGgti6zIr4k=)
6: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: afyz/6UUGT2KFhpeijopizisHYggw3jHuwqtvjno+x4=)
7: kDHc3reVMJPLgu58itw4ZupB-4Q.roa (hash: QwLu7BES2xuFPZdD76Beo2u1lAJTYierBEEu5vEPTTo=)
8: o-lwE03BQjuSCoHPvrungn8RW5E.roa (hash: 6jhTwsjRV3a0rHOssSDB/4JB3N1eJdRGn/9ePaST8TM=)
9: polvb4mWJFtYlmCnCQgjC3KNjFM.roa (hash: ok6ZqIcHmI5POEVYtqUr4M7uhrPkkTSbl73JjPBOL34=)
10: tnYABoJMY7Wi-wWcLi2d_oJP6jQ.roa (hash: GWuYZQOsyi/Kep+VibmM7lp5ukM+ocv9ZUuI4km8O1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:99:5a:58:48:e8:74:cc:ae:be:a8:0e:fe:ac:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Mar 13 01:00:32 2026 GMT
Not After : Mar 14 01:00:32 2026 GMT
Subject: CN=9808fb9b21e41b425955cf6b8c3a49b279627268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:2f:9a:2c:9a:a4:26:03:32:9b:43:b7:9b:
7d:28:e8:97:2f:78:55:6e:ec:37:63:1a:dc:d8:23:
a8:69:57:a9:5f:1e:f2:37:67:b5:49:21:d9:ba:02:
5b:4d:6f:8f:8e:e4:b4:f2:20:b4:70:ff:dd:05:1a:
71:c9:68:c5:8f:6e:4d:3e:27:85:d8:93:9b:13:b1:
b7:51:48:11:78:37:da:4e:13:91:b4:a9:0b:a6:e8:
10:06:89:be:4e:37:b1:4c:6c:97:37:f4:ad:b2:e1:
02:7c:0a:d0:7b:07:b9:8b:f1:f4:93:70:38:9d:fc:
e6:b0:89:7c:1a:79:78:9a:cc:30:f3:e2:c4:c4:b1:
93:dc:b9:5f:c8:0b:31:7f:de:15:b4:3c:66:d5:e2:
51:0a:ee:87:8c:f8:2c:25:1a:97:df:54:90:23:23:
0b:98:f5:19:44:37:81:ed:be:e3:97:fd:25:7e:84:
62:da:8b:33:17:71:35:5e:8b:f2:a2:ed:03:28:5c:
87:91:d0:df:9f:d9:f1:4e:3b:02:5a:34:65:b4:b4:
88:0f:c3:f3:8c:da:5f:9d:31:a2:8f:b4:bf:f5:98:
87:48:57:1e:d4:02:84:12:74:71:f9:a3:6f:d8:75:
80:4d:06:8e:5c:b2:d4:bd:a0:cc:fb:15:e8:40:62:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:08:FB:9B:21:E4:1B:42:59:55:CF:6B:8C:3A:49:B2:79:62:72:68
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fa:89:ba:f5:8c:94:f4:57:ab:f2:5b:9f:d7:b7:5c:95:f2:
84:6b:b2:fd:86:cb:36:ed:42:10:4b:3e:50:75:6b:cb:a7:77:
a4:e6:ec:3d:cf:61:ee:e1:d6:ad:16:ad:8e:df:58:f9:20:08:
df:69:15:ed:3c:ca:09:a8:c8:87:a5:a3:00:81:e9:84:da:7b:
fd:01:8d:7b:58:80:f7:a0:ea:d1:f7:c3:a3:67:b0:a0:a3:4d:
95:fb:53:64:5d:1f:32:a2:16:05:c7:8d:c4:8a:f1:c5:ae:2e:
73:b8:51:d7:91:1d:31:8b:9a:05:da:ca:d5:cf:ab:66:09:7e:
78:c3:7f:40:ed:72:66:ed:6a:ee:46:e2:12:fe:bc:4c:e1:d0:
c5:26:1f:93:83:60:3d:9a:c7:18:67:ea:09:bf:93:30:83:68:
8a:c8:20:7c:d8:df:92:a3:58:0a:7f:79:78:a8:50:6f:d5:3f:
3b:a0:25:36:7d:f4:55:95:1c:e6:8f:c8:52:ca:ff:7f:b7:bb:
5a:84:81:bf:1a:c9:41:75:5b:54:7c:53:0f:b6:c9:5c:83:bc:
52:cc:03:b6:21:aa:47:67:f1:ef:f3:ec:58:0c:41:42:b4:20:
d0:6d:32:ba:32:34:7b:b0:5b:ac:70:e5:39:7d:8c:c4:14:2e:
cb:a2:03:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:31:36 2026 by rpki-client