
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json)
Hash identifier: muvdOIjnljHZ11UkqEThCJuF6yEXLBQ+z8e6vluZw3k=
Subject key identifier: 4A:2A:8C:9C:17:A7:59:50:15:9D:2F:FA:2F:4F:2D:91:03:9C:FF:CF
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 019CE41123E90CD1CACBF574932A113B9EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
Manifest number: 144C
Signing time: Thu 12 Mar 2026 22:00:54 +0000
Manifest this update: Thu 12 Mar 2026 22:00:54 +0000
Manifest next update: Fri 13 Mar 2026 22:00:54 +0000
Files and hashes: 1: 6qBOGIzy7SiE5aHoDtHWinTh2oI.roa (hash: KwYB7/zyOeuIegeDk01/5M8IIa6sVcCvAJ0ZuQL1yIE=)
2: A3dfbS-b6385QXbD4gqPyZDygnI.roa (hash: eMk+m8VzfNpB4AhSwjxnwTq5SWYabewWTjTtFBj+jG4=)
3: AJLP9JiL00zLQVdWs1QaU1UT0i4.roa (hash: rln/wA7IR5Ivsdngw+7h4V6CmOpdbKfoxbL3+mwh54k=)
4: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: yH9pD+CbVeybnMoUPMVKuBgcOfcyilHB7YbbsCTFZ3o=)
5: M3X3dm-8It7aMXQj1y54UfL58OM.roa (hash: 7bUApRHysWlBDgJo+0traB3WXa7dB6bicxRUCK/I0eI=)
6: RxzZhT8fBiEGIwzJcpEaVq4187g.roa (hash: hquVSPsZNeqlCDz0r9h6cmg+2UHwUyJ0mqDqk+VOViY=)
7: URKvTjDp4aRxdSZ3jqDjwv8D8go.roa (hash: 0rxLDrLwqqP9CnkuagDXnUpxuRr/vAmcV/9SQj91sog=)
8: _eOaEicMkKKbiwUmCfYmS46987o.roa (hash: BD38gTS64MApM1VCH/ZNlIeeCLbbXCbnCN+Xqd56/3o=)
9: bSb1vKlFqm6Lgoy9mUt1MbjszKU.roa (hash: 8Rm1aKWGejiopvOQal7M9IGwEZUMfEE7E/dgp4snH3E=)
10: ecI9WwfCcCzWrmDmHhs2EyFDQJM.roa (hash: F5YXv2pp9vRYKIztKcSv4xzwJ07F66Zhmicw5zjO8J8=)
11: ft0VCR9IS3VMAgUDh10GOu9PLZE.roa (hash: 2folTB1j+SZaT+1+FVh+nOf0J1JfCJxhCtpk4te0AZM=)
12: ktxPtq6QBIdiSOZ68pA9GADZGkA.roa (hash: nKwrZvWFwYhUKsU2Xr6N7bIKsHUx8g94vR6U6JSn7Rw=)
13: oDF8isOJjyEJhYEJCgEsnjBbHWk.roa (hash: 6eDaCiZYBtD9bJDiBCS6z1HiWa8aHX6Yc2oe3UfDymI=)
14: wdbxHLFVBNdWh2qGHilCZZD7-g0.roa (hash: 90fXHeqU2neAZl01CJ/fB5l+GTvQAN5HQEWOMc2pyGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:11:23:e9:0c:d1:ca:cb:f5:74:93:2a:11:3b:9e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Mar 12 22:00:54 2026 GMT
Not After : Mar 13 22:00:54 2026 GMT
Subject: CN=4a2a8c9c17a75950159d2ffa2f4f2d91039cffcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:d3:64:89:95:73:cd:f1:6a:33:d9:2d:5e:
a4:79:e5:9c:4d:a6:0a:bb:1b:f5:36:44:06:43:6e:
c8:af:c7:ed:30:fa:d5:39:b4:f7:89:9e:7c:2f:0e:
ad:c6:5a:36:75:da:6a:79:83:fb:05:89:b8:2d:cd:
90:d5:c6:bd:29:30:95:8c:ac:0c:f0:08:66:2b:2d:
a2:76:77:22:70:a1:d9:46:34:4c:78:71:d9:c7:86:
c0:52:f5:ac:3b:8d:1b:c1:be:89:1a:83:5e:fa:13:
f2:e7:7d:2b:10:a3:10:a4:85:2c:e3:02:d0:9b:6d:
5f:8e:bf:1d:9e:2f:0a:ce:df:fc:80:dc:c3:a6:b5:
cd:9b:6a:3a:d8:31:41:bf:74:36:15:72:05:81:6d:
54:34:bc:94:47:4b:6c:76:35:1a:f6:a6:54:59:d9:
cb:0b:97:da:9d:59:55:78:01:a5:31:a7:3f:20:cd:
74:c4:6c:a7:9b:4a:d9:cd:7c:97:f3:36:ff:da:67:
6e:7e:4b:29:a3:64:80:b3:d8:63:1d:0d:30:2c:8c:
8c:ad:58:a2:26:a4:ce:ca:90:9b:3d:c6:ea:12:8a:
42:b4:40:5a:82:50:43:fb:02:e4:e9:9d:e6:6d:84:
c9:1b:34:bd:23:19:33:b7:f7:f5:a2:32:3d:51:69:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2A:8C:9C:17:A7:59:50:15:9D:2F:FA:2F:4F:2D:91:03:9C:FF:CF
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:58:0d:7f:0b:47:4f:60:5a:92:03:3b:13:64:7e:cd:95:87:
0c:67:da:a8:ba:8c:a6:4e:da:33:20:b9:23:4d:fe:f7:a0:93:
5b:60:2a:8f:9a:78:51:91:02:3b:6b:40:3a:23:a6:a2:47:17:
76:9e:cb:26:61:01:f9:29:6a:29:91:82:64:e0:28:21:c2:46:
ba:9e:67:5d:b4:43:a5:cb:81:81:68:56:98:35:0a:6d:5c:7f:
e4:14:0f:77:05:a2:da:9a:48:03:98:5f:68:e7:1b:a0:1a:0e:
15:c0:d1:e8:75:51:c9:a1:37:7c:8c:a1:12:ab:76:9f:2d:ac:
3b:57:44:f4:b8:fc:b4:16:a5:ec:9d:e9:1a:09:a9:ed:3e:9b:
70:81:48:1d:cc:7a:3f:57:57:68:9d:bc:b1:25:7d:43:5f:6f:
98:a0:de:64:be:9f:be:df:da:ed:e5:16:75:15:63:0d:59:23:
e8:03:6b:d2:04:74:e5:27:1c:ed:9f:0a:bb:26:5d:38:a3:7e:
af:87:4b:31:e5:5f:18:05:f2:73:5d:f1:fe:da:67:b2:77:30:
eb:af:c1:04:81:59:e9:ac:6d:b2:17:c5:a6:b2:ba:8f:9a:4b:
a8:dd:03:a2:25:60:7e:02:64:1c:da:ca:1e:fd:a9:5f:fe:fe:
b7:72:5e:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkESPpDNHKy/V0kyoRO56hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1
MjM1MmQwHhcNMjYwMzEyMjIwMDU0WhcNMjYwMzEzMjIwMDU0WjAzMTEwLwYDVQQD
Eyg0YTJhOGM5YzE3YTc1OTUwMTU5ZDJmZmEyZjRmMmQ5MTAzOWNmZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7rTZImVc83xajPZLV6keeWcTaYK
uxv1NkQGQ27Ir8ftMPrVObT3iZ58Lw6txlo2ddpqeYP7BYm4Lc2Q1ca9KTCVjKwM
8AhmKy2idncicKHZRjRMeHHZx4bAUvWsO40bwb6JGoNe+hPy530rEKMQpIUs4wLQ
m21fjr8dni8Kzt/8gNzDprXNm2o62DFBv3Q2FXIFgW1UNLyUR0tsdjUa9qZUWdnL
C5fanVlVeAGlMac/IM10xGynm0rZzXyX8zb/2mdufkspo2SAs9hjHQ0wLIyMrVii
JqTOypCbPcbqEopCtEBaglBD+wLk6Z3mbYTJGzS9Ixkzt/f1ojI9UWnZ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoqjJwXp1lQFZ0v+i9PLZEDnP/PMB8GA1UdIwQY
MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt
ODcxZjllZDcwOGUwLzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw
LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1gNfwtH
T2BakgM7E2R+zZWHDGfaqLqMpk7aMyC5I03+96CTW2Aqj5p4UZECO2tAOiOmokcX
dp7LJmEB+SlqKZGCZOAoIcJGup5nXbRDpcuBgWhWmDUKbVx/5BQPdwWi2ppIA5hf
aOcboBoOFcDR6HVRyaE3fIyhEqt2ny2sO1dE9Lj8tBal7J3pGgmp7T6bcIFIHcx6
P1dXaJ28sSV9Q19vmKDeZL6fvt/a7eUWdRVjDVkj6ANr0gR05Scc7Z8KuyZdOKN+
r4dLMeVfGAXyc13x/tpnsncw66/BBIFZ6axtshfFprK6j5pLqN0DoiVgfgJkHNrK
Hv2pX/7+t3JeSQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 03:47:44 2026 by rpki-client