
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
File: g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft (raw, json)
Hash identifier: N74G4e/LkTtnWmutjlxBR9Q5v55Wv/ZBujGCR2G9yKM=
Subject key identifier: 82:FC:07:5B:00:C1:33:1D:AA:60:59:FD:B5:FD:92:3B:82:4A:27:F1
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial: 019CB023D84CD63952CADF9E072A83D9E48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
Manifest number: 0BB3
Signing time: Mon 02 Mar 2026 20:01:04 +0000
Manifest this update: Mon 02 Mar 2026 20:01:04 +0000
Manifest next update: Tue 03 Mar 2026 20:01:04 +0000
Files and hashes: 1: 1o8rc1B2rz8EJdbZ3z6LILHJGLM.roa (hash: RgVkOLGuQmy3f1VaDolVM/xuPM7B5/Thq2bqgQQQ5KI=)
2: 9CiYOh3Tvo2DBfl0jabQvFLWLFc.roa (hash: 43nWzmq/RjcNjuxCi4y1M8IbSxUCfohc5YoCfDEycLQ=)
3: MwBfnIeh4icyMtphU38ylCMXamk.roa (hash: CEXyVLtqmaHwpYLSDbPmPnIa3IY69NeBED7KXP3ze6c=)
4: ezYsw2_e3R9NDcGghu9oCFEJ53c.roa (hash: 2lry/rf4POpaKlgjomChorPFhc51fpzfavcz/xLZEo0=)
5: g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl (hash: UWWOu8MTEpd6wLH5PMj0n3PA2j76nLmofZvgtgWhqyg=)
6: kdEPUuQDUI6I6jbSpPW6P-kkOuA.roa (hash: zinbJQSjE4KwqubnM0+SQjc1EG+tlbXwWx2ZhYd6qEA=)
7: n94KenbJMH70fjR1rrFahdY8U34.roa (hash: yP/yPEDoYrtpaNUeRocAKawwYPvsmMlpzOFnFwFc4BQ=)
8: q5kphRSAlG3DN63C9RqhU3DMVds.roa (hash: VfvnDEZYHd7dijCx60k38qn3Wzq30eQaAO0QQVJTt/4=)
9: qbbxFuzSkULQOBICM7rqsaqrwu4.roa (hash: hvKhotK2pMOwPjulJduMi4iCjCSu8N/+Goyf1aqun7Y=)
10: sNj_laiOcAyx4yKKoT5eo1FxYbQ.roa (hash: MfbxVfKPhfU7+vz/KhDXRG39RyplbnNlSLuWA903WKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:d8:4c:d6:39:52:ca:df:9e:07:2a:83:d9:e4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Validity
Not Before: Mar 2 20:01:04 2026 GMT
Not After : Mar 3 20:01:04 2026 GMT
Subject: CN=82fc075b00c1331daa6059fdb5fd923b824a27f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:c3:f0:b8:24:28:8e:c6:cb:11:99:e6:d2:
06:38:5d:1d:29:a0:80:aa:e9:d0:ce:2c:4e:89:56:
8a:6f:5a:80:1a:29:4b:34:fc:a8:b8:0c:20:3a:c8:
45:bc:7e:d7:c9:5e:11:bc:44:f0:77:5a:96:61:75:
98:e7:d5:43:d6:f9:c9:e0:18:2b:ad:8f:9d:41:9f:
fb:26:a1:88:c7:1a:f0:bc:97:2a:78:90:cc:51:bd:
9b:7f:ac:f3:06:38:e1:82:d7:88:2d:b9:03:7a:59:
fa:bb:5a:ea:27:7c:95:1b:c5:da:00:c9:48:e4:6f:
7b:82:23:22:e2:a7:0e:fe:eb:31:a6:ca:cf:70:ce:
14:b4:91:03:0a:ad:15:f6:cf:9b:92:ea:24:06:4b:
75:a4:e4:97:5d:e4:7a:3d:3b:5a:ec:64:52:1c:95:
7a:96:07:09:36:d2:f8:f8:01:85:db:55:28:62:23:
13:00:48:ad:7e:2c:1f:eb:db:6f:fc:b0:bd:05:3b:
d6:6a:b2:53:82:9a:c2:e3:f0:6a:09:d2:41:3b:0f:
ac:4a:8d:8a:45:14:82:7b:52:8b:fb:05:3c:c6:28:
17:cb:dd:0e:78:e5:41:d8:18:bd:30:b2:55:fe:5c:
cb:67:c7:31:5c:9f:2e:a8:55:d5:09:56:f5:f7:a6:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FC:07:5B:00:C1:33:1D:AA:60:59:FD:B5:FD:92:3B:82:4A:27:F1
X509v3 Authority Key Identifier:
keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:15:d7:3f:47:44:9e:f9:be:88:9d:ff:2d:a5:df:e6:1a:21:
87:4c:67:1c:3f:47:6f:e1:b0:45:89:75:97:f2:ad:70:bb:a8:
57:c2:b4:8f:51:4f:e0:bf:ad:79:5e:c0:61:6e:d3:aa:fa:60:
d0:4b:8d:a0:78:96:84:43:33:26:6e:5a:34:1c:b1:98:0a:bd:
d3:3c:b9:2f:7d:56:1c:f9:95:94:4e:48:ae:41:e2:4d:39:70:
7a:e7:3e:c6:50:3b:0f:b8:83:30:ab:2a:88:1d:70:a9:fe:ca:
e8:bc:1f:36:9c:05:0b:7d:7d:f6:8b:e5:c2:94:29:e7:d5:e0:
e9:fd:ec:cd:da:db:3e:68:b1:84:7b:c8:4a:f7:e8:9c:13:33:
1c:55:d3:a8:70:76:a1:68:22:f1:a1:9a:e1:7e:d5:a7:7f:0f:
eb:49:40:67:fc:4c:d8:1b:54:a8:be:12:fd:f8:ce:f3:fa:e6:
8e:32:cb:6b:46:31:a5:5f:c7:96:10:1e:78:f0:f4:9d:6b:3c:
24:6c:b9:7c:73:7a:15:d1:85:84:49:54:a9:e4:c4:58:b5:8a:
74:df:1a:d7:f6:c7:b9:cb:2a:54:53:1f:d9:6b:58:5c:2c:eb:
e4:d2:1e:01:05:27:5b:d6:aa:e6:c5:60:c9:ec:8d:d7:38:0b:
19:5e:e3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:54 2026 by rpki-client