
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier: pSykDae+Z2a2BPNxpZjiaAdEuSt1tKoz0Yu6b41n4Mk=
Subject key identifier: E0:67:37:51:29:0B:66:5A:10:EF:2E:79:6B:63:D7:91:1C:6E:49:F2
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01A108B8E3FAC9DB7BE8353D8A9D7D740182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number: 12E1
Signing time: Sun 04 Oct 2026 21:01:36 +0000
Manifest this update: Sun 04 Oct 2026 21:01:36 +0000
Manifest next update: Mon 05 Oct 2026 21:01:36 +0000
Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
3: 3h4WTidFEK5MwQqcWECC_fEqbxw.roa (hash: D0DN2xnVk35yiTKr+sYl2ENqJNd+pv7xGkTfjbVwkWw=)
4: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
5: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
6: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=)
7: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
8: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: TA18W+rLliey2Hkd1rpQI+2ASedbkp9JB+PvHO78I0I=)
9: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
10: jFJe3jl_QcpRM-Nhwh499UXzHl8.roa (hash: 4ZP7K3NzaQIb5Oo5+GVsX5DHhCL0Z9KsvPv5i497LDk=)
11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:b8:e3:fa:c9:db:7b:e8:35:3d:8a:9d:7d:74:01:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Oct 4 21:01:36 2026 GMT
Not After : Oct 5 21:01:36 2026 GMT
Subject: CN=e0673751290b665a10ef2e796b63d7911c6e49f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:5d:a5:74:0c:9e:fc:fc:01:a2:b8:af:f3:
5b:dc:2d:c7:bb:96:9b:07:eb:b0:6c:11:db:c7:8a:
62:de:2c:99:f6:ba:d0:5e:cb:e2:23:a6:a7:db:ba:
b1:9a:9c:6f:eb:e1:a5:9c:af:b3:bb:a4:c1:a0:d2:
74:88:77:66:a9:f8:9d:79:f2:9e:93:f3:19:d0:ff:
4a:63:32:6c:73:76:bb:e3:8b:0e:cc:41:02:b3:69:
d4:79:0c:b4:04:b4:51:d4:02:b5:98:01:fa:4b:3c:
15:3c:17:57:78:0d:03:ff:0b:b4:b5:be:7a:d2:da:
f1:5c:8d:6f:61:8a:84:99:d3:d2:54:96:b7:e9:07:
fc:fd:01:1a:cc:f5:d5:2b:d9:82:44:a9:ee:c9:66:
7a:1f:14:a0:cd:cc:cb:af:f5:2d:81:ac:7d:8c:90:
2a:66:c3:fc:6c:13:8f:5f:3c:2e:ed:5b:62:a4:ed:
a1:34:c6:16:96:84:77:3d:ac:3e:73:62:f6:0b:93:
8d:57:71:75:2d:81:86:8f:8e:39:b5:c1:a6:f5:de:
b7:48:d8:30:d1:28:9a:59:9b:87:61:30:e2:f2:dd:
b4:6d:82:6f:43:9c:db:d4:26:78:6e:fc:50:cf:eb:
ed:d7:d9:6f:25:14:b9:18:6c:b1:34:c4:e4:d8:2f:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:67:37:51:29:0B:66:5A:10:EF:2E:79:6B:63:D7:91:1C:6E:49:F2
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fa:f1:9f:1b:ad:a1:07:ed:7a:c8:3b:19:70:d2:7b:39:b5:
85:b9:d4:02:f9:66:95:47:4a:a5:68:e8:7e:ef:22:4e:a4:9a:
25:27:6b:73:80:65:44:f6:02:90:71:eb:d1:9b:dd:67:51:db:
fd:38:d4:48:f1:75:71:c2:1b:1c:52:1e:2e:fc:2d:df:09:4e:
77:e0:10:b3:f9:e5:fb:8d:3b:55:2b:43:86:d9:0f:98:77:06:
e8:4b:d0:e2:27:55:8d:19:93:aa:27:0b:bd:ad:42:b1:86:39:
b0:cb:72:df:fa:51:68:9b:2d:3a:f5:ad:5a:d4:0d:eb:b5:15:
86:e0:36:56:48:d1:14:e9:88:21:4b:30:4a:97:8f:fb:39:d9:
3f:b5:c4:cc:e4:ba:99:59:f6:67:b4:95:e0:36:b6:6d:d7:f4:
33:88:c6:7e:92:e4:2b:69:4f:67:7d:7a:55:4e:a0:cc:cf:99:
8f:1e:99:1a:38:92:44:bc:38:31:a9:2f:8c:24:d4:10:0f:1b:
c7:d7:18:9b:2e:7b:4a:9e:e7:a7:0c:f0:9b:7d:ac:92:0a:0b:
48:5f:dd:97:f7:d8:df:74:3b:7e:0d:a9:e7:a5:bb:85:d6:3f:
cf:ab:4b:85:25:60:59:58:72:5e:64:93:30:f1:82:03:d1:89:
b3:c8:ab:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:18:07 2026 by rpki-client