
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier: olEsHavJFNDcBvhwqxlMPwhAZpttdqVAhC787M7U4+M=
Subject key identifier: F1:32:7D:32:30:40:3D:FA:3D:9B:5D:0E:DA:EC:16:86:A1:7F:62:55
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 019FBF5839DDADCDCFAEDD9764A407F479D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number: 122F
Signing time: Sat 01 Aug 2026 22:00:57 +0000
Manifest this update: Sat 01 Aug 2026 22:00:57 +0000
Manifest next update: Sun 02 Aug 2026 22:00:57 +0000
Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
6: CliNDeoIzFeDMEH3wX5DpgCkBDE.roa (hash: X2wGn+OIgA5q23nvVMID+7z155TCD1qHOkkmj4aaJNY=)
7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: Yxjae+8/4CcedEAHZI614s290ppfOt8rt43KotEF7U0=)
8: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
10: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Aug 2026 18:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bf:58:39:dd:ad:cd:cf:ae:dd:97:64:a4:07:f4:79:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Aug 1 22:00:57 2026 GMT
Not After : Aug 2 22:00:57 2026 GMT
Subject: CN=f1327d3230403dfa3d9b5d0edaec1686a17f6255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:19:f3:29:f8:09:e8:bc:fc:fe:6d:91:24:
bc:df:c9:50:f7:11:c7:07:ed:a9:36:a3:7b:7b:df:
be:e0:c6:5c:96:96:2d:67:ab:6d:16:ce:13:65:56:
7f:69:6c:ba:8d:7a:0f:a8:14:d7:87:b6:09:5c:40:
fe:55:72:09:3f:f7:76:07:81:1a:81:e1:d5:13:50:
16:73:93:54:4a:26:b8:34:e4:cb:b9:36:5e:08:be:
ab:63:83:90:b4:9a:cf:ed:60:ec:a5:17:49:e9:38:
15:e0:4c:ee:98:4b:0a:a2:8c:3d:ac:cf:0e:dd:ce:
fb:97:20:d7:df:11:4b:78:96:49:e1:15:e5:69:d7:
7b:84:00:28:22:03:48:72:82:57:df:91:bd:ab:76:
6a:97:84:5c:3c:c6:30:08:ff:3c:75:75:b4:8d:6d:
84:75:4f:ea:5a:ad:90:75:6c:5d:d5:05:5c:48:9d:
01:11:d9:c8:4d:a8:7f:e8:21:a7:68:18:bc:65:ef:
ee:c3:97:49:3b:f0:e1:31:94:57:3a:a7:5c:7f:14:
f0:de:77:f5:34:7f:46:c5:02:1c:70:d9:d5:50:c0:
06:8e:82:16:29:8b:94:3e:aa:d7:be:b8:8d:1e:8f:
8d:3e:df:72:71:76:1a:d2:3a:b2:29:e3:3a:9d:59:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:32:7D:32:30:40:3D:FA:3D:9B:5D:0E:DA:EC:16:86:A1:7F:62:55
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2a:06:d6:d8:ba:29:6f:5d:1f:58:1c:18:db:dc:f8:58:a8:
fa:8e:dc:fd:52:49:fd:61:ed:d9:28:fd:c8:81:2f:6d:6b:3e:
64:4a:52:44:a6:0e:f0:d9:d8:72:d7:7b:e3:d1:97:03:b8:10:
9f:e4:51:d2:80:e2:1a:07:4f:4a:74:15:10:3b:34:7d:83:bd:
c5:7b:2f:63:da:e1:bb:f9:28:14:02:da:10:1d:18:7a:76:f8:
1d:d9:e3:9e:68:fb:ad:7a:d1:dd:fa:bb:79:e5:04:a4:2f:b4:
f2:43:b8:23:f6:19:91:35:67:33:13:ca:91:34:72:85:52:a6:
fa:53:ca:18:87:c4:df:2a:8d:92:68:c9:16:e4:5a:ce:27:89:
0b:8f:7c:20:91:8f:a0:5b:05:94:86:c1:61:12:3f:78:22:ad:
a3:85:72:00:f7:68:b5:ab:b7:e8:87:d1:f2:45:f9:e8:a4:8d:
4b:51:06:0c:ef:52:fc:58:e1:10:6f:cd:3c:21:ef:ba:9c:39:
62:a2:2c:05:3e:76:77:a4:db:96:b5:7a:3f:30:a8:c8:61:f9:
05:43:77:a4:73:6f:bc:ea:07:3f:94:bc:35:11:9b:84:3e:75:
08:d7:2e:2a:5d:2e:3e:aa:f0:d8:53:e4:b3:0f:67:23:0c:b1:
33:76:77:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 02:37:19 2026 by rpki-client