
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier: ZgXvWtKLfD8Rox4L4xh7DNZlpATRM5gw468f6v2Rxo4=
Subject key identifier: E2:45:85:B9:59:B5:7A:5D:5D:D0:0E:01:88:38:6E:9C:0F:7C:C5:1E
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01A0BE0BB5444D41DD2098CCC2A52FF1725C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number: 12B7
Signing time: Sun 20 Sep 2026 09:00:33 +0000
Manifest this update: Sun 20 Sep 2026 09:00:33 +0000
Manifest next update: Mon 21 Sep 2026 09:00:33 +0000
Files and hashes: 1: 0V-6Ocf6ckJP0OmiGxbtIBGBZmU.roa (hash: BeQPwwhAk0wYxfBBr2kzYrvOfYh+U9/Tjif4YIzJ0F8=)
2: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
3: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
4: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
5: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
6: 957KjKsgQQ-VsvqavE6ngE5UV_E.roa (hash: brbR3ebf55NlnYJGtD6lvlUEhjYCWu8BA/oxkjsOs0I=)
7: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=)
8: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
9: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: vDEFcBoGk0+9CyesR3FfF1zKo7CSIHXEezEhPH95BiY=)
10: ISsGxHIyrOPNYfVnvYomPgXoioM.roa (hash: Rohi1FBRyCEDtd+NeWD1TRuQbRscn3zM0CYpnIqNU38=)
11: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
12: ebH1LH3rtcCFyoMlHWJucoddnKk.roa (hash: w5pFXYTG5xXpiPZ27k95gUc+ufkXKutPUdAJkQwEA8E=)
13: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
14: ltlQZdBprIAZtA0AlHcwNThjuJ8.roa (hash: w4tQk9JwHDO4yRlDh9QyPlHelxD0WmS14timwLhZHpI=)
15: m6qwRKca6itBiUVdwN1KXUT2lxA.roa (hash: /aV+oJ7nRkyO35tfs9XJfVVL79kGBuqCjU4aDL711gY=)
16: uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa (hash: jeR1y8042HqLS1mMvheBMUQZBnBjFCW3QvpduHp+6M0=)
17: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:b5:44:4d:41:dd:20:98:cc:c2:a5:2f:f1:72:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Sep 20 09:00:33 2026 GMT
Not After : Sep 21 09:00:33 2026 GMT
Subject: CN=e24585b959b57a5d5dd00e0188386e9c0f7cc51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:46:84:df:4d:32:8b:0b:bf:d1:1d:c2:7d:
e6:7f:fe:eb:dc:05:c1:1f:3d:9c:ab:b9:65:76:a2:
ea:8c:f3:19:21:de:ae:28:b9:b0:ae:36:9c:51:45:
97:e8:10:3f:a9:a1:07:25:65:3c:3b:a3:a4:56:6a:
47:25:ad:26:14:3a:a3:3e:ea:40:2d:ac:36:c4:a4:
f7:c2:c1:5b:ed:a9:91:b8:2f:05:1c:9a:78:de:2d:
b9:f9:1b:b1:5c:7b:70:e5:86:94:21:73:28:8a:42:
f2:c2:a0:28:20:84:ad:4c:86:7d:46:79:52:3c:f1:
9a:2d:f1:9f:60:8f:b8:cc:5b:13:ff:60:71:f7:8f:
0e:34:57:be:5b:70:e5:c3:28:c1:86:f0:77:d5:14:
11:02:a0:3e:c1:c6:1f:5c:01:fb:0d:74:e3:f9:17:
85:62:9b:df:9f:b3:ac:cd:df:8d:ec:d0:47:f4:3d:
52:b5:4b:07:e7:50:dd:50:1d:06:3e:3a:f2:dd:09:
aa:10:44:dc:9f:1d:63:66:51:6e:03:b0:0f:0a:1f:
16:51:55:50:47:08:0f:6b:f4:b4:19:f2:66:4a:13:
f3:a6:04:20:c6:0e:9b:73:de:4d:c3:2a:9e:42:73:
97:45:00:aa:c3:c1:1f:3a:f1:d7:25:db:39:99:62:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:45:85:B9:59:B5:7A:5D:5D:D0:0E:01:88:38:6E:9C:0F:7C:C5:1E
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:92:3d:e5:48:2e:22:72:05:c0:a4:8f:e2:fd:39:19:c5:53:
f8:f5:3a:78:78:61:f1:63:e1:fb:13:d9:09:d7:fa:71:13:f6:
c9:e3:a3:93:a8:c0:8b:00:27:ce:dd:f7:63:d7:6b:1e:1a:36:
46:ec:bd:4f:d1:92:ce:dd:0f:59:d9:19:ef:45:72:85:89:3b:
2d:29:76:ec:2c:a8:56:a0:f2:4d:27:f0:a8:86:3d:2a:f2:75:
a3:fd:92:42:16:df:88:24:d8:0e:ed:68:c3:53:c2:b0:f1:ed:
30:85:31:25:55:ac:c9:17:0c:20:cc:04:bc:43:87:33:f6:fe:
41:18:b0:6f:4e:14:e7:f4:00:a8:da:ba:c1:62:05:c6:64:c7:
4c:38:93:78:02:ce:03:c5:16:76:55:ce:86:5a:5c:d8:87:fc:
46:c9:06:33:b2:0f:c9:8a:79:81:e7:f7:8f:d6:d9:65:e7:41:
2d:3e:88:8e:65:74:3d:04:d8:9f:37:52:19:df:e6:55:99:12:
4d:4a:a0:af:55:05:b8:f2:3e:99:c8:0c:d5:5a:28:1c:98:72:
0b:5d:e3:a7:82:0e:b0:1e:20:46:53:1e:72:a3:25:dc:20:5a:
b9:9b:d4:1e:e2:1d:df:17:48:c5:25:13:c4:aa:d6:8f:97:6f:
be:b4:aa:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+C7VETUHdIJjMwqUv8XJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjYwOTIwMDkwMDMzWhcNMjYwOTIxMDkwMDMzWjAzMTEwLwYDVQQD
EyhlMjQ1ODViOTU5YjU3YTVkNWRkMDBlMDE4ODM4NmU5YzBmN2NjNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG9GhN9NMosLv9Edwn3mf/7r3AXB
Hz2cq7lldqLqjPMZId6uKLmwrjacUUWX6BA/qaEHJWU8O6OkVmpHJa0mFDqjPupA
Law2xKT3wsFb7amRuC8FHJp43i25+RuxXHtw5YaUIXMoikLywqAoIIStTIZ9RnlS
PPGaLfGfYI+4zFsT/2Bx948ONFe+W3DlwyjBhvB31RQRAqA+wcYfXAH7DXTj+ReF
Ypvfn7Oszd+N7NBH9D1StUsH51DdUB0GPjry3QmqEETcnx1jZlFuA7APCh8WUVVQ
RwgPa/S0GfJmShPzpgQgxg6bc95NwyqeQnOXRQCqw8EfOvHXJds5mWKDDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJFhblZtXpdXdAOAYg4bpwPfMUeMB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZI95Ugu
InIFwKSP4v05GcVT+PU6eHhh8WPh+xPZCdf6cRP2yeOjk6jAiwAnzt33Y9drHho2
Ruy9T9GSzt0PWdkZ70VyhYk7LSl27CyoVqDyTSfwqIY9KvJ1o/2SQhbfiCTYDu1o
w1PCsPHtMIUxJVWsyRcMIMwEvEOHM/b+QRiwb04U5/QAqNq6wWIFxmTHTDiTeALO
A8UWdlXOhlpc2If8RskGM7IPyYp5gef3j9bZZedBLT6IjmV0PQTYnzdSGd/mVZkS
TUqgr1UFuPI+mcgM1VooHJhyC13jp4IOsB4gRlMecqMl3CBauZvUHuId3xdIxSUT
xKrWj5dvvrSqDQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:04:26 2026 by rpki-client