
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File: G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier: M0KThhwvxjQ8vk+d6BQrIyM0f0+BH6HzHQGgpACeO44=
Subject key identifier: 9D:A9:8C:BF:5A:E9:7C:4D:DC:64:8E:33:40:6E:7D:CD:96:D5:B4:5B
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01A104DBEC394DB2A35518FB13BC8F1104EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number: 0EBF
Signing time: Sun 04 Oct 2026 03:01:24 +0000
Manifest this update: Sun 04 Oct 2026 03:01:24 +0000
Manifest next update: Mon 05 Oct 2026 03:01:24 +0000
Files and hashes: 1: 1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa (hash: eC+mZscuKYFGh3jGSwYrM/zwgdkrzy7mnebI0W8HJjI=)
2: 1xyHsYNUFoJ-pAioaST7r-4iNoY.roa (hash: wxDqW3rd3N4FjlubcyoVvj1qY2eHpaWt4iZm04KnwmU=)
3: 8xyDaKXsDnV4pvSfD6Zi67leEh0.roa (hash: 1qsVMvOFnBXVT6ErwFRrHBk8i2fu6F56aLWn7B6Thbo=)
4: ArZg-qm8lEntEril04_eQVh-D58.roa (hash: 6ZG3jmP+1JYRU8rVmpDqUwMETM2Rl/USJi5tT1v2KOU=)
5: B7mKkJOQIDMNFDDRLxnggLv2QZ0.roa (hash: Mi1l3jAauhlk+iIu6HPrxpd0H99Ta8USVmSJWxkvFOc=)
6: FcpBxzBs-mUGpJZGFFeEKOoVc84.roa (hash: DdKbCIauyMh+ERMZDyRdDWbQHa/GNAQTeKFJAN9XkKI=)
7: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: g5g5OlVZDLLgY7ecNx9ZwyNYP0wm3yfrjPF8oslIjPc=)
8: HEBMMFCN8-2lBFekdiQRcYWnvrg.roa (hash: snCaNhSPR2tWzl8KWki9lG1jT29WpUoT1k50wbz95JE=)
9: IPb5d35plrMJG2iIT309KL2lmj0.roa (hash: KRvF/nchRUjNO7qEjTuRMT/eoA6wApPgVHaxY0nL3kc=)
10: O7Gej2bS_5hKcBi8mcz3JmNEOSw.roa (hash: h9gK6E3GHEkt+S79YiKfgPJlXrJcrfRQGLu5O6pt61U=)
11: PfDqVJ2AuhPLDK1F25vWraX2zng.roa (hash: 8kYADqUwxwWR6TitwtDD0haDphbCu9nP+tkQXOwbbYg=)
12: TzcrPtQyygSQdE_9ZpW0U258FWA.roa (hash: XHB179G1NkuoxHUDA2RIeIaiHXV5LoFis8B7rN9rC4w=)
13: XMyxg50FUIvcPAmn3dgQAD2rX5A.roa (hash: p3P3/d+pjMB4dPGP7cLvPY1UtOYfXIrBb9Vr7UC3pqg=)
14: gp1wlgGo5vivn7gfDRwXZtwctws.roa (hash: KehzF0g+L+PNvyC/IBXZK4NamgKmadqbNbXSvh4706E=)
15: h-YKHLBpdlMPlGTD2x8ny3EBvoE.roa (hash: kaocMh2GRL2VpSQbIazDPnOu2/38Foo0BooOmaJVLx8=)
16: iJAh4MzVUxgXIicmX1BF9DyiVJc.roa (hash: i5znTUbRnDwQdx+fd6qQhbrZflv2THSPw2LRl2jp6kY=)
17: jTk2ghaEMDC7CYJ_QaO8Kuls2VI.roa (hash: wXuTm3VvMxF7Fy+o/HgTRq0XIiaxh+LU1Nqi3XYzQ+w=)
18: la8gZB1qceC66CXnaIMpn1d6kfk.roa (hash: JvuyiLdyaWhi31x9Fsi4BLtHOme+Sv8lI2ldqt6pCN4=)
19: oqvVF5ro_xcfYZX0L91psrz4scE.roa (hash: 9GXkVLe3LroEDzobGbILI6BVJmNa1NCl51cSlpSEpww=)
20: rpVmcRWK9Zhy_VaIn_bvOzXSQ6k.roa (hash: ZuY1ZDdDENsieUHmA5f7BeysqfqkQXy2jQwGzKSjHsE=)
21: sv4FoJpHxihbjQVOHGih_J_ffUs.roa (hash: aDxEXYa4qCra57+aM/aAUjJp5FE00bEh1/avX6X6ENQ=)
22: utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa (hash: 4Zxs7imh2v9OypwWBLyvUBMlzHoY/4pgzfFtHfz7Sbw=)
23: xJPb4f4rCehz8TLUSv0N6n8_MiE.roa (hash: MEW0AHLyPDoZAygBiCZTzYIaCJijNL4VVMa21hRooaY=)
24: zrpx2qONMlsehUMBf0ui700KaQs.roa (hash: rQCz92YTBiLjMsPmrkI3y1kzmH/U/hqwcfTTPZ9f40I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:db:ec:39:4d:b2:a3:55:18:fb:13:bc:8f:11:04:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Oct 4 03:01:24 2026 GMT
Not After : Oct 5 03:01:24 2026 GMT
Subject: CN=9da98cbf5ae97c4ddc648e33406e7dcd96d5b45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5f:5a:95:7a:9e:a5:8b:0a:76:39:80:ab:d2:
74:aa:a4:01:48:1b:49:05:aa:8c:c3:a9:c0:21:c9:
6a:bd:05:3a:f8:b0:55:d0:64:99:35:85:60:e8:ea:
bc:3f:dd:95:44:65:8b:09:37:57:1d:fd:8f:8c:b9:
81:a9:4e:8c:44:49:ea:63:e3:a2:71:c6:2d:d9:00:
bb:9c:6e:6f:26:79:41:ef:c4:27:95:57:03:3a:7f:
74:e8:84:98:54:db:a9:48:f9:a3:b8:78:8e:e6:4b:
92:d7:51:e1:57:12:1c:52:cf:6d:4d:3f:de:7b:2a:
02:7c:8f:07:04:87:48:e6:89:8c:1f:62:04:64:20:
83:23:e0:eb:c0:65:32:3b:78:45:ee:49:74:47:d6:
33:3d:df:6b:47:47:74:71:0b:27:b9:a5:27:ac:bf:
13:51:be:92:a5:a0:49:07:e9:7b:49:2d:59:64:bd:
33:d2:64:e6:dd:86:21:da:73:f0:36:c7:9c:fe:62:
d2:36:b6:96:e1:19:69:12:a3:97:ab:02:04:8a:e9:
e2:4f:bd:af:38:b5:89:b5:da:20:d1:64:65:74:6a:
6e:c7:dd:76:b4:48:bd:bd:ec:5d:1e:e7:c3:7b:ea:
7d:f6:5d:1a:54:65:0a:49:56:c5:66:db:02:ed:b9:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A9:8C:BF:5A:E9:7C:4D:DC:64:8E:33:40:6E:7D:CD:96:D5:B4:5B
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cc:a9:eb:aa:be:ba:c7:8e:bc:12:44:f9:e3:e6:42:f1:c6:
62:b8:31:b2:88:4f:28:e4:f7:c7:51:89:a6:74:75:b8:02:6a:
3f:e5:49:b7:da:41:76:b6:8a:0e:8f:0e:55:36:15:06:37:53:
06:d1:84:73:7f:70:74:81:30:9d:e7:6d:84:65:32:c1:21:0d:
23:07:2d:69:04:ea:c0:23:39:13:b6:dc:e0:56:1e:6a:44:cb:
9f:d6:7f:8e:20:19:a0:f6:a6:c7:2d:3b:a0:57:8a:51:a9:b0:
67:2b:84:d1:a3:11:1d:6a:65:5b:92:e5:b5:a3:c1:55:26:af:
b1:0c:42:1e:a8:04:7e:13:01:e9:c5:4c:84:ff:71:c9:eb:86:
1c:ca:ff:fb:17:b8:09:fc:7f:41:76:80:1a:2c:3d:82:9f:36:
47:8a:92:b1:0f:5f:a5:37:e2:0e:59:eb:e1:76:15:64:34:f7:
bf:c5:2c:62:93:40:b3:1a:16:7e:2d:d7:6a:29:7b:59:7b:24:
e4:e7:57:d1:3b:a1:65:60:7b:18:e2:61:1a:89:60:fb:f9:01:
c8:46:be:99:08:a6:f8:2b:ac:3e:9d:44:eb:a3:42:a8:04:99:
ad:d2:16:8a:04:d7:ff:fd:8d:5e:02:b8:c7:15:19:bb:d4:e5:
30:5c:1d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:04:27 2026 by rpki-client