
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File: G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier: l1xB16dTOi7fsIO1fwX646tspEU6qWnSqJFsImitwgo=
Subject key identifier: 1F:E6:00:24:A2:D8:29:30:44:5E:43:37:97:6C:33:67:B5:3A:48:53
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 019CA94584E684AA49BB54FCC17D1A3B1598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number: 0C7D
Signing time: Sun 01 Mar 2026 12:00:31 +0000
Manifest this update: Sun 01 Mar 2026 12:00:31 +0000
Manifest next update: Mon 02 Mar 2026 12:00:31 +0000
Files and hashes: 1: 1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa (hash: eC+mZscuKYFGh3jGSwYrM/zwgdkrzy7mnebI0W8HJjI=)
2: 1xyHsYNUFoJ-pAioaST7r-4iNoY.roa (hash: wxDqW3rd3N4FjlubcyoVvj1qY2eHpaWt4iZm04KnwmU=)
3: 8xyDaKXsDnV4pvSfD6Zi67leEh0.roa (hash: 1qsVMvOFnBXVT6ErwFRrHBk8i2fu6F56aLWn7B6Thbo=)
4: ArZg-qm8lEntEril04_eQVh-D58.roa (hash: 6ZG3jmP+1JYRU8rVmpDqUwMETM2Rl/USJi5tT1v2KOU=)
5: B7mKkJOQIDMNFDDRLxnggLv2QZ0.roa (hash: Mi1l3jAauhlk+iIu6HPrxpd0H99Ta8USVmSJWxkvFOc=)
6: FcpBxzBs-mUGpJZGFFeEKOoVc84.roa (hash: DdKbCIauyMh+ERMZDyRdDWbQHa/GNAQTeKFJAN9XkKI=)
7: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: 2Pm0ncEK9gVMtPD2FLYihnyVTTOJOj1kVmbAsAZFhwg=)
8: HEBMMFCN8-2lBFekdiQRcYWnvrg.roa (hash: snCaNhSPR2tWzl8KWki9lG1jT29WpUoT1k50wbz95JE=)
9: IPb5d35plrMJG2iIT309KL2lmj0.roa (hash: KRvF/nchRUjNO7qEjTuRMT/eoA6wApPgVHaxY0nL3kc=)
10: O7Gej2bS_5hKcBi8mcz3JmNEOSw.roa (hash: h9gK6E3GHEkt+S79YiKfgPJlXrJcrfRQGLu5O6pt61U=)
11: PfDqVJ2AuhPLDK1F25vWraX2zng.roa (hash: 8kYADqUwxwWR6TitwtDD0haDphbCu9nP+tkQXOwbbYg=)
12: TzcrPtQyygSQdE_9ZpW0U258FWA.roa (hash: XHB179G1NkuoxHUDA2RIeIaiHXV5LoFis8B7rN9rC4w=)
13: XMyxg50FUIvcPAmn3dgQAD2rX5A.roa (hash: p3P3/d+pjMB4dPGP7cLvPY1UtOYfXIrBb9Vr7UC3pqg=)
14: gp1wlgGo5vivn7gfDRwXZtwctws.roa (hash: KehzF0g+L+PNvyC/IBXZK4NamgKmadqbNbXSvh4706E=)
15: h-YKHLBpdlMPlGTD2x8ny3EBvoE.roa (hash: kaocMh2GRL2VpSQbIazDPnOu2/38Foo0BooOmaJVLx8=)
16: iJAh4MzVUxgXIicmX1BF9DyiVJc.roa (hash: i5znTUbRnDwQdx+fd6qQhbrZflv2THSPw2LRl2jp6kY=)
17: jTk2ghaEMDC7CYJ_QaO8Kuls2VI.roa (hash: wXuTm3VvMxF7Fy+o/HgTRq0XIiaxh+LU1Nqi3XYzQ+w=)
18: la8gZB1qceC66CXnaIMpn1d6kfk.roa (hash: JvuyiLdyaWhi31x9Fsi4BLtHOme+Sv8lI2ldqt6pCN4=)
19: rpVmcRWK9Zhy_VaIn_bvOzXSQ6k.roa (hash: ZuY1ZDdDENsieUHmA5f7BeysqfqkQXy2jQwGzKSjHsE=)
20: sv4FoJpHxihbjQVOHGih_J_ffUs.roa (hash: aDxEXYa4qCra57+aM/aAUjJp5FE00bEh1/avX6X6ENQ=)
21: utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa (hash: 4Zxs7imh2v9OypwWBLyvUBMlzHoY/4pgzfFtHfz7Sbw=)
22: xJPb4f4rCehz8TLUSv0N6n8_MiE.roa (hash: MEW0AHLyPDoZAygBiCZTzYIaCJijNL4VVMa21hRooaY=)
23: zrpx2qONMlsehUMBf0ui700KaQs.roa (hash: rQCz92YTBiLjMsPmrkI3y1kzmH/U/hqwcfTTPZ9f40I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:84:e6:84:aa:49:bb:54:fc:c1:7d:1a:3b:15:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Mar 1 12:00:31 2026 GMT
Not After : Mar 2 12:00:31 2026 GMT
Subject: CN=1fe60024a2d82930445e4337976c3367b53a4853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:d7:5e:a2:ab:34:e8:fc:c6:55:93:91:96:
a6:33:7b:4d:ea:c2:de:4d:15:84:28:69:a9:46:53:
26:94:0f:64:e6:09:81:89:3c:d1:ec:fd:26:de:8e:
c7:44:68:ca:7e:83:8e:82:0d:ee:98:ea:aa:85:88:
43:a4:fc:9c:a9:c6:4d:f1:c6:a9:a1:46:51:0e:b5:
6d:a2:a2:ab:6f:01:81:03:a8:47:c0:a1:61:96:4e:
84:7a:43:e2:33:45:22:1d:6e:6d:14:f4:f4:86:6e:
8e:6d:24:4c:0c:46:49:c7:a7:4e:db:30:ef:54:52:
88:ea:f5:71:26:f5:82:d9:a5:95:d3:6f:76:ce:e4:
a1:98:3d:9f:c6:40:9c:f1:12:7b:72:a2:c6:97:c1:
2a:59:54:d3:d2:cc:27:d8:52:ef:4a:50:20:25:91:
e4:8a:53:e1:40:53:4d:67:95:7f:ec:00:10:cf:44:
a0:8d:8b:e2:7c:f3:09:6b:1e:7a:90:a8:ff:26:32:
34:f3:1f:a3:01:f4:b8:7f:5c:e9:76:6e:b7:17:a6:
c0:05:a2:f0:fc:d2:83:65:75:2b:9c:ed:df:12:23:
b9:52:da:08:5c:8a:d7:24:f0:d1:9d:27:79:46:32:
25:ff:8f:96:23:ef:c7:e8:6a:22:d7:46:37:48:4d:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E6:00:24:A2:D8:29:30:44:5E:43:37:97:6C:33:67:B5:3A:48:53
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:43:ba:a7:55:7a:3c:9e:b1:86:1b:c7:ad:a3:a7:c8:1d:4d:
15:5d:5e:85:7c:36:48:42:ef:90:58:db:0e:d7:34:52:98:7f:
fa:1a:3a:d4:25:4a:6f:5a:13:a8:c1:32:83:3a:81:3d:c7:94:
dc:51:9f:39:b5:54:e1:94:d2:b5:ca:9d:22:dd:83:46:90:e5:
f5:50:12:25:b4:cb:78:11:53:fa:4c:70:22:2c:5b:17:22:01:
23:0e:e8:bb:73:1a:3a:4c:ff:b7:cf:ec:93:59:0c:0d:4f:e9:
d9:ff:61:cc:42:ee:71:d4:8b:79:77:55:01:e7:93:3b:f9:ce:
43:fd:23:af:95:6f:ea:b0:16:4a:4b:b2:55:f7:68:ba:2c:18:
88:f0:f4:dd:c1:78:21:ef:96:4b:44:b0:2a:11:d4:7d:ae:38:
e9:40:24:30:98:00:40:87:88:03:b1:d8:31:91:26:9f:a7:08:
3a:d4:97:eb:e3:7f:99:13:71:1f:eb:5c:6e:26:46:18:fc:aa:
66:63:37:33:2a:5e:ca:9c:bc:db:c9:c9:85:02:08:23:d9:16:
7b:44:40:6b:07:8a:ac:ba:8c:c1:77:75:0d:2d:ac:9b:6a:4e:
b8:55:e9:8e:0d:6b:7f:13:96:19:c6:54:40:da:0a:2b:7b:97:
e4:7e:db:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:47:48 2026 by rpki-client