
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier: XqNIX9xooXb2DiEUUUTzt+0bOB+H7YR8nls51IK6BSU=
Subject key identifier: E4:2D:B7:9B:4D:E5:B4:68:2F:36:C7:9D:D0:BC:EC:31:CC:86:2C:A4
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 019C6A66ECBBC928BC726F3B83F4805202F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number: 1072
Signing time: Tue 17 Feb 2026 07:00:55 +0000
Manifest this update: Tue 17 Feb 2026 07:00:55 +0000
Manifest next update: Wed 18 Feb 2026 07:00:55 +0000
Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: hnYBH0D62xFQXp9aRlp+BMXSYbrMvpKAFmEE3IF+f50=)
7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=)
9: byxTcbn0R_ABtndiznyuziTHgi8.roa (hash: T2sYxuovHiigJvci2db9Vhz7uwGqQKQmouYx6Ud5yM0=)
10: hPKkrsj0FX97l8P5hhDoNCNjeqE.roa (hash: pR+tDQOXzEiJ05cgUzQGiwCXhXXy4kL5jERdGJNHgJ4=)
11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6a:66:ec:bb:c9:28:bc:72:6f:3b:83:f4:80:52:02:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Feb 17 07:00:55 2026 GMT
Not After : Feb 18 07:00:55 2026 GMT
Subject: CN=e42db79b4de5b4682f36c79dd0bcec31cc862ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:9a:c3:44:bd:61:ff:dc:94:69:9a:82:2f:
3c:13:d8:89:5b:f1:a5:7e:29:18:1a:a7:3a:e6:72:
8d:06:0c:cf:d4:4f:8d:9e:e1:2f:3f:b6:30:01:50:
1f:c2:da:02:f2:05:ff:d4:8f:fb:50:66:aa:77:a8:
51:98:cd:8e:5e:73:cd:84:51:e7:48:45:92:23:19:
d5:78:06:70:b8:3d:9d:d5:01:5f:60:90:30:92:b8:
6c:f0:ea:94:a0:6c:c5:3c:f8:e1:79:c2:05:ca:47:
ad:55:51:4d:76:ff:33:08:57:59:f0:b4:ed:6a:31:
ca:68:dc:d6:b9:05:c1:e9:8c:9e:f9:eb:70:c6:37:
4e:e0:19:cd:51:d6:3b:f0:f7:d2:d0:14:b0:82:34:
60:87:3f:dc:21:b5:31:99:0f:0f:88:9e:5b:8e:24:
58:dc:06:44:9a:15:37:b1:1a:71:8e:52:86:f0:60:
a5:06:52:18:63:80:4e:1c:eb:b4:50:f1:0b:bd:bd:
0e:fa:71:40:3d:37:ef:18:e8:10:ec:72:ab:e1:04:
2c:fe:23:de:02:ee:ba:f3:12:e8:ca:7f:ef:1c:99:
93:f3:e7:3f:ed:18:b8:9c:e8:b5:68:f0:44:9d:b4:
00:eb:7c:a7:37:9a:60:4a:80:a0:de:42:b4:6f:95:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2D:B7:9B:4D:E5:B4:68:2F:36:C7:9D:D0:BC:EC:31:CC:86:2C:A4
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:79:74:c2:0f:d2:27:9e:b8:c1:b6:50:1b:15:85:77:3c:4f:
65:c6:c6:84:1a:f5:42:84:a1:5e:47:f8:12:dd:1c:bb:4d:6a:
c1:10:e5:82:5c:38:2e:20:11:1b:b7:5b:ea:7d:63:23:02:36:
aa:ca:ac:c6:7d:44:37:68:d3:f8:26:20:f8:19:a5:58:cc:c3:
c1:98:93:00:59:25:70:15:b0:ad:23:75:9e:66:96:02:5d:84:
66:03:72:54:e9:14:fa:d1:05:6b:0a:0c:06:51:72:ca:75:b7:
87:b5:38:b8:fc:33:72:2b:1e:e0:5b:85:16:f5:07:d2:60:a2:
00:34:eb:95:c5:96:5b:83:e6:df:c7:76:9e:50:7d:ea:50:cb:
06:cf:c5:12:cc:36:d8:fd:d6:25:19:df:b8:e4:9a:e3:e2:a5:
32:41:86:66:45:0e:7c:17:97:87:ed:9b:8a:d4:ff:ab:93:3f:
08:12:e6:f6:e9:2d:b4:98:51:5a:50:56:cb:98:66:b7:d1:05:
ea:4c:e1:13:27:69:d6:d1:ad:64:4c:f3:ba:a7:38:b1:bb:dd:
0b:80:f0:13:5f:1b:ee:14:55:88:99:65:a8:d1:fc:52:57:60:
37:de:0a:28:50:b0:86:7b:5f:25:7b:6d:4e:38:d5:7c:eb:c3:
4c:42:a6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 14:06:41 2026 by rpki-client