
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
File: g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft (raw, json)
Hash identifier: jDo/Jy4K1jCJ7zlHxLvLFDUJVJoqVJADbTOL01mBTo0=
Subject key identifier: 97:A1:82:40:10:1F:DA:83:1E:60:8D:24:65:52:A5:12:54:E3:53:41
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial: 019D9BBEB15D063B2AC6C15E188B00140831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
Manifest number: 0C2D
Signing time: Fri 17 Apr 2026 14:00:58 +0000
Manifest this update: Fri 17 Apr 2026 14:00:58 +0000
Manifest next update: Sat 18 Apr 2026 14:00:58 +0000
Files and hashes: 1: 1o8rc1B2rz8EJdbZ3z6LILHJGLM.roa (hash: RgVkOLGuQmy3f1VaDolVM/xuPM7B5/Thq2bqgQQQ5KI=)
2: 9CiYOh3Tvo2DBfl0jabQvFLWLFc.roa (hash: 43nWzmq/RjcNjuxCi4y1M8IbSxUCfohc5YoCfDEycLQ=)
3: MwBfnIeh4icyMtphU38ylCMXamk.roa (hash: CEXyVLtqmaHwpYLSDbPmPnIa3IY69NeBED7KXP3ze6c=)
4: ezYsw2_e3R9NDcGghu9oCFEJ53c.roa (hash: 2lry/rf4POpaKlgjomChorPFhc51fpzfavcz/xLZEo0=)
5: g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl (hash: +Q+umvUIAOAzCe+gzJffTyc5Wu/Mv130dxuh68TBCcM=)
6: kdEPUuQDUI6I6jbSpPW6P-kkOuA.roa (hash: zinbJQSjE4KwqubnM0+SQjc1EG+tlbXwWx2ZhYd6qEA=)
7: n94KenbJMH70fjR1rrFahdY8U34.roa (hash: yP/yPEDoYrtpaNUeRocAKawwYPvsmMlpzOFnFwFc4BQ=)
8: q5kphRSAlG3DN63C9RqhU3DMVds.roa (hash: VfvnDEZYHd7dijCx60k38qn3Wzq30eQaAO0QQVJTt/4=)
9: qbbxFuzSkULQOBICM7rqsaqrwu4.roa (hash: hvKhotK2pMOwPjulJduMi4iCjCSu8N/+Goyf1aqun7Y=)
10: sNj_laiOcAyx4yKKoT5eo1FxYbQ.roa (hash: MfbxVfKPhfU7+vz/KhDXRG39RyplbnNlSLuWA903WKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:b1:5d:06:3b:2a:c6:c1:5e:18:8b:00:14:08:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Validity
Not Before: Apr 17 14:00:58 2026 GMT
Not After : Apr 18 14:00:58 2026 GMT
Subject: CN=97a18240101fda831e608d246552a51254e35341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:e6:38:29:55:53:a1:f2:ae:e2:ab:f2:e5:
c0:00:00:c3:c6:e9:74:f1:44:1b:49:b6:9c:89:62:
1f:e7:c3:5d:81:12:f5:0c:4f:03:66:ca:7f:f3:ff:
c7:53:9c:12:bc:c1:2d:9c:a4:62:84:4d:ff:d4:cd:
b8:b0:ca:ec:11:69:af:c1:1f:7c:9f:58:a0:f7:6e:
8f:48:e3:c1:f1:1b:35:bf:8a:a6:a7:64:12:70:0f:
01:97:af:de:ee:b7:20:b1:5d:65:d0:96:bd:7b:12:
59:f0:d1:89:60:2c:98:75:83:ae:87:26:db:9d:32:
91:8d:2c:b9:28:53:49:64:71:ff:e9:df:c0:ec:c8:
67:e8:bc:e9:b2:3f:5c:d8:c9:e7:af:26:31:8e:66:
74:36:df:28:b3:08:29:7e:7d:51:fe:cf:eb:e2:a9:
3a:31:5d:2c:80:4e:73:dc:64:53:a7:72:83:33:3b:
0d:2b:7d:4d:58:28:dd:2d:2a:aa:84:f2:14:17:61:
0f:39:1b:c6:f6:d7:d5:23:c1:15:32:0e:b4:75:d5:
6b:47:3a:9d:5b:e2:87:af:69:63:62:c1:1f:52:61:
24:8c:8c:fa:da:bc:df:f0:44:a1:8d:b4:c1:70:9d:
3a:ed:9b:58:26:b6:19:9e:2c:d9:0d:32:e2:b9:d9:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A1:82:40:10:1F:DA:83:1E:60:8D:24:65:52:A5:12:54:E3:53:41
X509v3 Authority Key Identifier:
keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:38:53:51:d7:a6:2b:1d:7b:db:6b:70:76:eb:ae:b6:9a:29:
5d:33:72:81:7e:25:c3:99:b9:6b:5a:0f:31:af:67:79:36:12:
42:ac:22:b7:45:bd:7e:ce:2e:ce:cf:1d:59:be:23:9a:da:19:
ee:6a:dd:83:3c:ce:dc:e9:4a:a4:fa:d2:1f:f0:19:16:3d:36:
12:97:95:60:ed:04:21:51:c8:c5:fc:01:d7:1e:e5:8d:d3:9a:
40:c6:49:e5:59:b4:52:08:3d:13:f9:4c:df:3a:9b:84:53:d1:
23:52:9a:7c:34:e2:15:e0:92:57:fe:b9:b6:4b:6a:02:8d:7e:
6e:5c:20:e2:57:b2:fa:d1:17:bb:ba:92:15:22:42:4d:8b:3a:
51:5a:ba:8c:4c:ea:7e:a5:17:bb:ba:99:89:8e:87:dd:58:ea:
d1:fc:ba:8d:60:65:16:d6:be:ff:2f:09:d1:19:29:8d:87:79:
e1:40:0e:2b:df:a9:06:bb:33:00:47:c7:84:2e:2e:c6:9d:a7:
bc:84:47:51:2a:86:db:8b:8c:a0:9c:9e:6b:cc:9d:80:96:3b:
03:ac:7d:66:05:0a:ba:c2:b2:76:8d:8d:51:3d:ab:5b:26:78:
60:de:9c:54:71:92:f5:8f:7f:12:33:91:2b:42:01:cf:f5:81:
a8:e8:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:10 2026 by rpki-client