
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier: tOv0Jo5xQD1JiyVwjjh+ovBWTI07w5Qfe0/C/R15Poo=
Subject key identifier: 36:73:AC:C5:B9:57:0F:ED:71:22:B2:BF:F6:61:69:8B:AF:E8:07:A6
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 019EE66888CBD188A51496C58A5BDFEB5BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number: 11BD
Signing time: Sat 20 Jun 2026 19:01:10 +0000
Manifest this update: Sat 20 Jun 2026 19:01:10 +0000
Manifest next update: Sun 21 Jun 2026 19:01:10 +0000
Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: h+3J1chFA2e+PIiOu72qDrKN1beCBVGxHV1619uR8Wg=)
7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=)
9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
10: qOS44k4K1WSKtUKGLEhRxJxPEas.roa (hash: FW03t2tk2X1t0JN65p0CDI9DvEztasvMAKi+nwmwwnw=)
11: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e6:68:88:cb:d1:88:a5:14:96:c5:8a:5b:df:eb:5b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Jun 20 19:01:10 2026 GMT
Not After : Jun 21 19:01:10 2026 GMT
Subject: CN=3673acc5b9570fed7122b2bff661698bafe807a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:e6:d3:e5:8b:5c:b9:de:cb:49:a6:d4:dc:
59:96:d7:3e:3b:66:b3:56:92:b1:77:e9:59:98:c5:
9e:0a:9f:a1:76:f4:d4:fb:2b:ad:30:59:3d:20:46:
a7:54:12:a2:c6:55:68:cf:6a:f0:34:ce:00:08:fd:
8f:e3:5e:e6:a4:ac:01:2d:2a:21:6d:69:2c:6e:b2:
88:d5:c9:31:d2:3e:5a:5f:da:4c:43:59:c0:20:83:
1f:7b:1a:6c:76:ef:08:12:b5:fb:40:28:5e:22:6b:
bf:2e:72:b6:9d:9b:83:fa:c0:20:21:37:3d:40:18:
99:f0:e3:e8:6d:4a:c1:59:c7:b2:80:52:5f:fd:60:
d8:0c:48:ab:58:5f:c1:85:dc:7f:df:58:b2:b8:89:
fb:7c:a2:f3:ba:50:6f:6e:68:81:84:7a:b3:d8:e9:
ba:7d:62:16:0d:a7:b3:ec:88:95:4b:0d:4b:51:03:
87:3e:6d:c0:0c:3e:05:7a:38:e1:2f:10:ab:cf:6f:
33:f7:c4:dc:4f:cd:75:a6:cd:67:e9:5a:57:06:11:
94:05:b5:62:08:38:84:08:ad:e6:60:a3:87:78:23:
2b:da:60:88:04:be:e5:9c:d5:39:ab:4a:32:6a:ef:
20:3c:47:28:1d:0c:3a:d1:55:ce:d1:d3:53:ee:7a:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:73:AC:C5:B9:57:0F:ED:71:22:B2:BF:F6:61:69:8B:AF:E8:07:A6
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ae:d1:74:de:c9:03:3e:b5:0c:d9:c8:48:88:5b:7f:1a:eb:
bd:34:c6:14:d8:1f:27:7d:ad:54:76:55:1e:d3:71:65:05:75:
ee:eb:a5:0c:3c:9d:b9:d5:1f:a8:0e:9d:08:89:bd:aa:f6:47:
ac:85:7d:f0:75:69:35:80:2d:ad:ae:fa:32:ca:2e:69:a1:2e:
36:c9:32:2c:12:ec:f7:cf:7b:2b:09:18:64:d2:24:6d:ef:e7:
6f:a5:92:cd:f1:69:bf:19:d5:8a:48:79:38:87:c3:a4:fd:64:
e8:a6:48:4b:03:cd:46:62:fb:26:c3:98:2d:fe:b0:b4:a4:6c:
17:30:27:8d:b8:dd:cc:a4:8c:69:87:89:60:e4:9c:8f:13:e8:
01:4d:ac:26:f4:35:b2:82:81:09:59:15:78:da:44:69:2a:9c:
6c:ff:f5:10:4d:a4:c5:56:db:c4:b4:a4:8c:2b:86:f6:ce:05:
37:01:e7:c2:f4:7d:f6:41:0b:5a:c1:18:f2:f8:11:9b:c6:e5:
9f:a6:25:c0:f3:35:0e:e1:56:68:bb:fe:17:5c:b6:08:95:cd:
f7:57:e1:a2:70:e1:eb:87:9a:5b:a8:9d:36:03:80:a5:d3:bd:
38:30:5b:ec:89:8d:ce:49:94:40:39:7d:17:70:77:db:0c:84:
62:f6:67:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 02:03:24 2026 by rpki-client