
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json)
Hash identifier: Ln/sRqqlBp38RpKh8U98uuu/Ka9t3XAiHnLLfz1TebA=
Subject key identifier: 09:C0:DE:C7:22:3F:D0:B8:B9:9A:D3:E5:12:B7:D6:D8:1A:FE:EC:92
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019EC0DBAB7C54814DEA0434152F1435612B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
Manifest number: 16D8
Signing time: Sat 13 Jun 2026 12:01:22 +0000
Manifest this update: Sat 13 Jun 2026 12:01:22 +0000
Manifest next update: Sun 14 Jun 2026 12:01:22 +0000
Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=)
2: 4Uc22LPWnWUE2R7euaG4ZHnFv6s.roa (hash: RGTqZUMIJDCt8fg43m28f23pkWbeJCT3vhwBQSzMBNo=)
3: 8-_TWMNK9smVCIZHx2gSgefBTvk.roa (hash: GoPHoDZXQ4RK7VcYW0JWFdEHGQJJF9f+5F3ghTg1XDg=)
4: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (hash: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=)
5: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=)
6: BIlBx7GNQtDXs3rYutuCu_mCEbs.roa (hash: PjkQd4dOSp8nnX9aBaii5mDXPUnbKEUEDpkzwxtH96g=)
7: JvSklV-wlWBMdiMFZHYwnOO4qno.roa (hash: 2Y5pgGlMimFGDoHDIk55HXcJoD340d10aMUaMx1CDGE=)
8: Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa (hash: ujg1A0vQ9FG1rTPZa8Vj4tuAeoDxeA7TxCNsFbsOZaw=)
9: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=)
10: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=)
11: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=)
12: c-uurSvFwdZ4HnQ-2FusksHz4JY.roa (hash: L6sexLXbR65THJCvf0Zc/VUy29DDIcDYXnW872IpKPc=)
13: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=)
14: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: 8wsyEm5FIw7OtUn2JHdeHwna25z9PKHkYFo8n4QaB6s=)
15: qpYQo3kblbWomPwFmEhdi-yU3Ws.roa (hash: TeIBrPWRZVXfPEfWweP/JAjqy2VRwcKRY0wXngW8UGg=)
16: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=)
17: tQsPmObVMxsGs2USQ--MlT6lmJc.roa (hash: S6g3w3tZ77+L4/5UZR+GE+6G9JUS385U/WfguqUEU+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:ab:7c:54:81:4d:ea:04:34:15:2f:14:35:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Jun 13 12:01:22 2026 GMT
Not After : Jun 14 12:01:22 2026 GMT
Subject: CN=09c0dec7223fd0b8b99ad3e512b7d6d81afeec92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:ee:ec:6a:41:1b:d8:5b:28:75:0c:6f:51:
97:83:05:21:90:e1:81:f8:f7:10:4f:3d:0e:2c:1b:
08:9f:e5:e0:8b:55:54:33:18:0e:e2:51:9f:e7:0e:
bd:ca:09:ee:2b:33:ea:c1:74:bf:18:68:10:0d:7f:
90:7f:16:94:d0:40:51:fb:8d:9f:32:34:c0:44:99:
7e:19:e7:9f:ba:d2:db:96:88:38:f8:68:b1:14:5f:
76:ca:e6:d7:0c:1e:30:3e:2e:97:7c:00:bc:ca:db:
82:c5:17:bc:e0:d7:47:4b:43:11:4e:d7:04:8c:51:
0d:71:47:9e:5a:fd:89:1c:42:3d:e1:6d:7e:7a:9f:
b4:8a:54:0b:57:15:2a:fd:c1:f4:e2:0d:2a:38:02:
ef:4a:9b:68:10:4c:dc:5a:c6:71:87:e0:96:a9:fd:
38:79:82:f2:d9:9b:23:0b:2e:8e:a2:5e:e0:82:6e:
d8:fd:c2:22:85:fb:0b:15:01:57:05:d3:8a:b6:05:
ee:6e:88:b4:98:a8:68:15:ca:d6:ff:27:9f:e3:63:
27:df:d8:30:dd:dd:0d:f4:1f:8d:9c:67:7e:57:e0:
88:0c:c9:7d:7d:52:05:62:ae:da:ea:48:91:c3:1a:
81:af:80:58:2f:60:0e:40:a4:d4:2b:28:4f:a4:58:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C0:DE:C7:22:3F:D0:B8:B9:9A:D3:E5:12:B7:D6:D8:1A:FE:EC:92
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c0:04:e5:ef:a1:6e:f9:8d:d8:63:85:53:66:23:f1:bc:6c:
1d:de:81:67:11:61:23:80:76:31:f4:79:78:6e:49:e1:e5:da:
88:e9:29:cc:d2:0b:c8:84:ef:c8:f7:30:77:37:b7:ef:0d:ae:
e4:ec:18:f1:ea:3c:42:fe:52:1e:22:2d:a3:ae:6e:18:58:46:
93:4c:9c:bd:df:34:b2:95:05:3b:2c:e9:d4:b0:33:41:93:bd:
9c:a3:2b:a2:d4:f2:f5:35:40:88:fa:d4:12:23:60:6a:d1:ca:
c2:80:62:c0:63:4b:c9:f4:56:f2:40:9a:4a:c4:e1:66:3a:d7:
c1:ee:6f:43:d3:8e:91:5a:73:be:61:08:c7:46:ab:06:e3:44:
b8:43:e5:af:ad:d2:31:39:dd:8a:aa:57:a6:17:7a:14:d0:85:
6a:d3:09:cf:8f:50:8b:6e:f1:60:62:e7:88:79:06:0f:5f:36:
40:5e:63:ff:8a:56:d7:9c:e3:25:26:da:9e:d8:9c:df:b6:a1:
c8:74:fd:55:88:b0:97:fc:2d:22:41:00:32:51:3a:59:8a:2e:
b9:bb:4d:e9:97:ba:c5:7b:d3:f7:58:1b:41:a0:4f:8f:62:d3:
95:a3:00:7e:df:5c:1f:77:e4:8e:d8:cc:32:39:3c:69:72:01:
74:f8:38:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:14:20 2026 by rpki-client