
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json)
Hash identifier: ardN3FpUdKlSXg76QVZ1K9Lgt9API/iu2qani2nCfKc=
Subject key identifier: 71:BA:EB:0A:89:6A:2F:E3:CB:E3:76:20:17:8A:AB:79:EC:C1:F3:CF
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 01A1268B85187850907E5C397BCCAC9C2482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
Manifest number: 1AA4
Signing time: Sat 10 Oct 2026 16:00:39 +0000
Manifest this update: Sat 10 Oct 2026 16:00:39 +0000
Manifest next update: Sun 11 Oct 2026 16:00:39 +0000
Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: Rpjoo+ElF+NZhl+gI1/Rx5w9rN1a4O6mdb7S+nywu58=)
2: 5DaV4gudkDeBpkpNjorFjKdwKas.roa (hash: 9p8+UHTs/RBIZPqnbM430sMtYPmrN12mqZCcC9V+LKI=)
3: GUFmBdi0_Y_tG7LWELBPh9QEM9o.asa (hash: ZMR4mH+eqRB4yaYaBEAA+Z5mr/sJpbjQJrZ/3hcHthA=)
4: NXcDx5Sh25pDfJxJSkQVgnYIs4Q.roa (hash: iydF4IYrO0jpMLNCVz/nzmnnrXkl06goqTATkMGnBns=)
5: PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa (hash: AjAU0i8BrIwCW5B50+6SMIS7/KHtVI1eqRb3YHJQN80=)
6: PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa (hash: xcQLOrHxGLRq/OYf2oo8JfChvAAfg4ixHJ0AkaTe8sQ=)
7: UCPHMmyCJR4JmPeGnCgq8nfbn60.roa (hash: p5d6kd0pgtOUZ1UeSMMJANP3mYr/gpl0DKc8A48nhnk=)
8: UbMfCzQPRA-kXXe02IoFpUNWHRI.roa (hash: Y+LpUOlGM6jHvhHw5voeozmV7CMx8mnBHn3GF0Ey7Mk=)
9: duDdMIsWaX3Qv6Ulhf1btV1iznY.roa (hash: 8VGr6lGBwXaEA0xjsXJFLABQFwnIWckpws1DFvMKFV8=)
10: tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa (hash: QuIvgGmxEmrKFzj/tALJgGDhMmAZX/608ZoICxEakwY=)
11: u5FKfMgZNEwRxNieZ5Cq5Wc0Bng.roa (hash: logMCehLES5I14Fvvq1Wfet2WZemmEdMO+ZvgR5D7JY=)
12: uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa (hash: BfFc9lt0STbJmAF8lGnEz5SYrhiI62mYVaN3nT2PLtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:8b:85:18:78:50:90:7e:5c:39:7b:cc:ac:9c:24:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Oct 10 16:00:39 2026 GMT
Not After : Oct 11 16:00:39 2026 GMT
Subject: CN=71baeb0a896a2fe3cbe37620178aab79ecc1f3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:3a:34:6b:c1:27:63:b8:06:ef:cd:29:77:
63:ec:8c:32:67:7e:3b:1a:89:35:7b:f7:8a:2d:29:
2d:4b:8a:b5:71:4d:30:6b:13:f3:05:be:cc:74:b8:
57:f8:93:9f:8c:77:3b:ec:8a:51:c6:08:3a:82:a9:
f8:f9:6a:cb:37:ba:9c:cd:95:76:53:d5:34:1e:9b:
8b:f4:71:c5:fb:ce:20:f1:cb:be:37:34:5f:30:68:
c3:b0:aa:65:5f:f5:74:70:fa:f7:b2:5a:05:53:2f:
93:03:7a:0a:bd:31:4a:3d:c8:6d:1a:6f:e9:e0:01:
4f:44:73:fc:85:2d:24:d5:20:0c:c4:f0:cb:e1:27:
1b:79:bd:9c:3b:43:06:c1:7b:33:2e:f5:61:4d:b4:
d7:85:1e:85:cd:62:c1:25:e9:b2:9a:77:f5:4b:59:
ba:e5:a1:bf:7d:2a:00:fc:c5:64:25:8a:90:70:0b:
71:46:c1:bb:bb:4c:e9:a3:06:ba:e6:81:41:2f:c8:
4f:a4:ba:2d:a7:2e:bd:19:11:bd:bd:d7:0e:de:97:
67:1c:b5:20:6f:30:ef:34:e6:36:eb:65:e6:0e:a1:
f9:45:30:89:e2:5a:9b:09:cd:e7:6a:4a:b2:e2:4f:
7e:b7:70:af:23:bd:11:b4:53:b0:95:66:da:eb:8d:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BA:EB:0A:89:6A:2F:E3:CB:E3:76:20:17:8A:AB:79:EC:C1:F3:CF
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0a:a0:6e:d5:7c:7f:91:29:86:f1:a1:c4:89:be:ce:a8:53:
a8:61:b2:31:2b:d5:c8:c4:2f:20:71:76:a1:d1:ad:78:5d:bd:
3c:47:22:ee:c8:23:1c:cc:b8:97:b4:e0:e7:fe:c0:08:ac:5f:
05:62:72:50:29:8d:64:7d:f6:ad:2f:0f:28:07:13:cc:20:4f:
41:ad:56:7e:0c:a2:11:47:33:b9:d9:e7:f7:69:a9:e8:85:2c:
98:27:de:5e:d9:37:b9:ae:ec:96:9b:eb:3c:4b:6c:8d:f6:06:
70:70:13:95:49:da:68:80:be:51:29:14:4b:d0:5b:ce:42:16:
40:8d:43:61:ac:55:25:59:96:ef:83:3a:23:cc:83:d3:fd:4c:
50:e7:4c:1a:01:78:6c:93:41:ac:5a:4f:a5:a0:89:e7:c0:73:
85:ee:7c:e3:f3:fc:47:f6:9d:ce:1d:f5:3a:10:a5:94:ce:d9:
95:c1:96:c7:28:52:7e:04:9d:1f:5d:5c:60:27:8d:5d:15:79:
3d:b9:21:fa:24:92:b4:5b:62:d9:81:ea:2d:59:6a:dd:50:90:
0b:9d:e6:7c:74:00:6c:b3:30:8a:2b:cc:37:2f:0a:3c:94:c6:
0f:6e:c2:08:10:46:10:ca:ac:0f:ae:64:16:98:13:0c:77:ff:
11:0a:2d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:32:04 2026 by rpki-client