
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json)
Hash identifier: tO/cBUykjfLeXvT49i/C2lyR9OlGfZodMvIfhkQ1eVM=
Subject key identifier: EA:B6:98:36:AC:4C:E9:31:9F:16:7A:04:6D:9A:08:42:33:79:AF:8A
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 019CA8A0E99F9950C6BA7C02408644278A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
Manifest number: 124C
Signing time: Sun 01 Mar 2026 09:00:43 +0000
Manifest this update: Sun 01 Mar 2026 09:00:43 +0000
Manifest next update: Mon 02 Mar 2026 09:00:43 +0000
Files and hashes: 1: 0VSesXDVm1kdp7OP9sVaQNaIx0I.roa (hash: QMxjCfdCBm32VW6X1BoprZ37jAPwnIJNYNKtYt65wRk=)
2: 6sDEpQA35ftQgC9cRb2aUxRe15M.roa (hash: 9RYUADj24edFkxjz1HOYfztJjRAg3gUE9hiqhdU7LFs=)
3: 9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa (hash: r9Mi0ISmgqXc4MQRndutfvzx3+gJmpftorBgBM19zMU=)
4: CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa (hash: GvwQBFKWqGnALtG2pY9jEuPw2EDgNLgRgYwwOKULAJQ=)
5: U6vQ_9-xOxVrenXa0_Xg04rZfLY.roa (hash: OQhVM9/l+WAA3TDjGzNDJCTikubrDwOffydjFZn+MFs=)
6: UUD9roNkskiwye2tqwssSFEocBY.roa (hash: uz8OsG4t9MjUUcUflz9xYFC0CJuPcU2Ss0OyzWUNNtw=)
7: W4qxGEOnhck0eA0os9nmiLaPXEU.roa (hash: QlC0nvvSkC3Gr5lT9KAlzmA+mhP9wXRsj529IDFwxxk=)
8: YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (hash: TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=)
9: hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa (hash: p7tJPFgjfUUpJQH1SrbPDkojOBWipCAp1Q6lO2Sk15g=)
10: iIxvWcwl88BImtN8o1GvbtwFtug.roa (hash: a5Q+4dXfu6wDxBWXxjzSYqzWruw5vPQbQWVRYFB3/0Q=)
11: ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (hash: r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=)
12: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: 8Ad+WM/s7nDn7br2PPZRUkTjv46stAW0WSvhO5OxJ4g=)
13: sf51NOhxVRdedJBM3Z0cnGoghkQ.roa (hash: LN9NTe23NXKUtbp6+7QIyRE2B1TaB0xN6+rtM8kCrNA=)
14: ttggVWDiefPyqveIlfoGKCWaja4.roa (hash: NvSwdx11u/EHh453rM9xZTJvAWhbuq2a/Hj0lXbHfsQ=)
15: vTt98DamUvECWEMoSR5lw_z_oe4.roa (hash: xsmG4HMvRTP949NLqKrEta8cDRTk+o+O5AMMpfIwVNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:e9:9f:99:50:c6:ba:7c:02:40:86:44:27:8a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Mar 1 09:00:43 2026 GMT
Not After : Mar 2 09:00:43 2026 GMT
Subject: CN=eab69836ac4ce9319f167a046d9a08423379af8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:57:49:3f:33:f5:4e:0a:91:97:e0:07:f1:
f0:17:7d:5b:a3:45:38:18:22:09:1c:ae:4e:d3:c5:
3d:15:a9:b0:da:76:62:43:ab:8b:5b:29:a4:03:de:
65:e4:74:23:bb:8e:ce:f9:27:81:60:29:c2:6c:07:
d4:e4:dd:91:c4:66:7a:88:b6:1a:90:6e:12:a6:87:
ec:ef:ac:eb:d1:32:79:0f:0d:3b:69:ec:e4:46:06:
e2:4c:96:a8:ca:36:f3:8a:a4:7c:1c:92:73:15:79:
ec:9d:63:61:06:9f:da:16:1d:c5:d0:4b:c7:a8:f5:
7e:9f:dc:96:be:28:35:29:7e:68:99:42:e3:7b:de:
c8:87:97:93:4b:da:a2:13:a4:5f:aa:f0:f0:66:48:
2b:56:cc:4f:27:b4:f8:b2:2d:72:91:cc:62:8b:0b:
80:60:76:ca:9d:76:f8:7c:7f:0e:c9:d6:7e:a0:bf:
f6:6b:be:15:0b:a8:2c:eb:a1:e5:4d:89:a1:a9:f3:
3d:94:97:a1:33:61:15:86:3e:52:43:58:d5:24:59:
85:8f:38:87:b3:80:24:1a:0b:07:c2:00:a5:44:b2:
c0:5d:61:3a:dc:59:a6:06:04:d7:9c:26:5f:5d:3b:
e0:40:61:2b:23:db:8b:40:0c:98:9c:d1:a1:b5:27:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B6:98:36:AC:4C:E9:31:9F:16:7A:04:6D:9A:08:42:33:79:AF:8A
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a1:8b:37:a1:33:d8:8b:1c:0a:0c:b5:e2:6b:76:ca:2e:11:
ca:be:b1:17:93:aa:28:c5:59:06:b6:86:f5:5b:a8:47:da:cb:
e4:97:37:1b:c7:34:01:6f:8d:9d:22:1e:94:76:e8:9a:7a:b8:
8d:e1:71:f4:e2:af:f6:3f:e5:c3:cd:95:bf:19:d2:e9:a3:63:
a3:44:8b:9b:2e:85:ec:2d:3c:ef:4e:ad:55:f4:f0:44:58:4a:
61:c7:78:fc:04:a4:c1:7a:61:99:28:55:8f:9a:a8:e0:fa:83:
1b:a2:f4:01:53:88:7a:98:ed:5a:96:e9:66:53:c9:fa:84:14:
fb:08:36:3e:46:8e:e8:3a:c3:2a:4c:0c:18:13:dd:10:59:20:
fd:4d:bb:2e:0b:aa:29:d1:01:69:34:d6:84:5c:c9:f6:ef:21:
2b:e4:74:97:68:91:45:c7:77:17:0f:c7:df:54:db:2e:0b:21:
4c:3e:43:65:a9:4d:a1:de:f8:42:24:94:1a:a4:8b:bd:b1:2b:
08:40:0b:aa:8c:57:f4:b9:0e:db:1c:cd:cf:36:f4:e2:59:d9:
01:f5:82:bb:60:ad:16:49:96:28:92:14:4e:6d:8e:43:82:de:
9d:f4:20:a8:57:93:e7:c9:43:6c:2e:0c:45:9a:08:c0:89:ab:
07:03:f0:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyooOmfmVDGunwCQIZEJ4ooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjYwMzAxMDkwMDQzWhcNMjYwMzAyMDkwMDQzWjAzMTEwLwYDVQQD
EyhlYWI2OTgzNmFjNGNlOTMxOWYxNjdhMDQ2ZDlhMDg0MjMzNzlhZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFJXST8z9U4KkZfgB/HwF31bo0U4
GCIJHK5O08U9Famw2nZiQ6uLWymkA95l5HQju47O+SeBYCnCbAfU5N2RxGZ6iLYa
kG4Spofs76zr0TJ5Dw07aezkRgbiTJaoyjbziqR8HJJzFXnsnWNhBp/aFh3F0EvH
qPV+n9yWvig1KX5omULje97Ih5eTS9qiE6RfqvDwZkgrVsxPJ7T4si1ykcxiiwuA
YHbKnXb4fH8OydZ+oL/2a74VC6gs66HlTYmhqfM9lJehM2EVhj5SQ1jVJFmFjziH
s4AkGgsHwgClRLLAXWE63FmmBgTXnCZfXTvgQGErI9uLQAyYnNGhtSdD8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOq2mDasTOkxnxZ6BG2aCEIzea+KMB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6GLN6Ez
2IscCgy14mt2yi4Ryr6xF5OqKMVZBraG9VuoR9rL5Jc3G8c0AW+NnSIelHbomnq4
jeFx9OKv9j/lw82VvxnS6aNjo0SLmy6F7C08706tVfTwRFhKYcd4/ASkwXphmShV
j5qo4PqDG6L0AVOIepjtWpbpZlPJ+oQU+wg2PkaO6DrDKkwMGBPdEFkg/U27Lguq
KdEBaTTWhFzJ9u8hK+R0l2iRRcd3Fw/H31TbLgshTD5DZalNod74QiSUGqSLvbEr
CEALqoxX9LkO2xzNzzb04lnZAfWCu2CtFkmWKJIUTm2OQ4LenfQgqFeT58lDbC4M
RZoIwImrBwPwUg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:56 2026 by rpki-client