
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier: cBvBs8vk8Pc2hFr6rIzYPGpXcGFCZ45okIXdNBJ/X+M=
Subject key identifier: E7:A5:AF:FA:2D:E1:92:19:51:72:31:1D:8B:9C:33:06:D3:A9:82:E9
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01A006CCFDC8A26192020C19C7EC67F1764C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number: 1254
Signing time: Sat 15 Aug 2026 19:01:32 +0000
Manifest this update: Sat 15 Aug 2026 19:01:32 +0000
Manifest next update: Sun 16 Aug 2026 19:01:32 +0000
Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
6: CliNDeoIzFeDMEH3wX5DpgCkBDE.roa (hash: X2wGn+OIgA5q23nvVMID+7z155TCD1qHOkkmj4aaJNY=)
7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: /q24veI+9HDcF6g53nhHbV9NU1w32IVBY1/wA0m1cuc=)
8: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
10: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:06:cc:fd:c8:a2:61:92:02:0c:19:c7:ec:67:f1:76:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Aug 15 19:01:32 2026 GMT
Not After : Aug 16 19:01:32 2026 GMT
Subject: CN=e7a5affa2de192195172311d8b9c3306d3a982e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:01:47:29:b3:4f:26:d2:9f:1a:c1:21:11:
41:da:c0:20:04:22:20:f3:c7:21:e6:52:12:f0:d9:
8c:80:fc:e1:3f:fd:e1:57:8a:34:04:24:ad:9a:7c:
39:db:06:a3:85:ea:78:f6:ca:cf:63:6f:7a:7e:43:
aa:e0:58:ed:a4:8d:9d:6c:e1:49:68:51:e1:63:ba:
66:a5:a9:aa:42:cd:75:f8:80:49:a4:12:58:80:22:
75:94:57:9d:b8:ef:78:f5:54:a0:3e:85:38:95:6b:
bb:43:75:08:dd:37:87:7a:46:75:d8:3a:56:65:f5:
41:3b:b6:d8:de:25:e8:c3:b7:e9:7e:19:01:b5:a4:
b5:4a:85:8e:c3:de:8b:96:62:10:b5:f7:28:bd:0c:
27:af:c5:9c:89:5e:29:87:c9:4c:11:53:ea:bc:d4:
59:e2:79:eb:29:78:fc:61:03:68:70:8c:30:8e:fc:
3d:0f:d8:00:09:02:47:60:fd:f0:96:ab:42:27:85:
b9:07:d6:cf:1e:77:2c:f2:73:7b:0e:c3:a2:95:98:
09:6c:c0:0a:3a:38:44:fe:8a:82:db:50:6a:d1:4f:
08:32:7e:b2:d7:25:f8:9e:93:b2:46:cb:ca:1c:c2:
18:78:7e:88:15:3b:ba:59:51:48:10:a2:31:85:2f:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A5:AF:FA:2D:E1:92:19:51:72:31:1D:8B:9C:33:06:D3:A9:82:E9
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d6:aa:74:f6:cb:04:aa:51:cd:e0:c8:26:20:f6:82:b1:9b:
20:d0:f2:93:0c:c6:17:ad:0e:4b:c7:40:1a:03:35:da:fd:7d:
ee:d3:8d:be:9b:d4:bb:a2:19:b4:06:5a:2c:00:53:74:40:8e:
2d:4b:c7:c1:55:c1:bd:95:6d:ba:98:25:ce:86:b7:c8:28:dc:
d4:b6:57:33:bc:97:23:08:0e:45:70:ae:a8:44:f4:6c:47:dc:
6e:6d:b7:50:77:1d:ff:5b:62:87:97:78:b3:14:a8:cf:c0:6a:
f8:d9:ef:11:3e:22:2c:ef:9e:9e:1b:b9:8d:b5:f1:6a:ad:eb:
1e:b3:30:1a:19:d8:18:9d:cf:2e:51:51:b4:18:79:1e:6c:48:
e6:c9:3a:bd:15:36:72:71:04:ed:32:d6:78:02:79:b7:86:62:
b8:94:41:06:fd:62:e0:79:56:11:e6:96:4c:bc:cb:16:a6:63:
ba:09:58:e0:da:ac:bc:95:ba:c5:3d:d5:fd:ff:54:05:74:6a:
61:ac:83:e6:26:56:3a:1a:b9:c5:e8:06:16:31:fd:6f:c6:68:
8f:8f:9f:f0:39:d5:d1:b7:e5:d6:1d:6e:f1:ea:28:d4:da:a0:
9a:68:4a:ea:30:75:29:80:9a:f1:8d:4d:0b:74:26:74:af:68:
ff:f0:b2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 05:10:19 2026 by rpki-client