
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json)
Hash identifier: qBmdAJGSuExjAR9wE57ZuPVVDoFmLwxYhegXsn6bHWE=
Subject key identifier: 3D:EA:5A:43:33:2E:85:F7:08:24:B7:9C:6E:FB:44:27:75:7F:00:78
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019FA82BF8E42510A9BAC2DA92EF61A6A63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
Manifest number: 1A18
Signing time: Tue 28 Jul 2026 10:01:21 +0000
Manifest this update: Tue 28 Jul 2026 10:01:21 +0000
Manifest next update: Wed 29 Jul 2026 10:01:21 +0000
Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: Uiu7z1lHXcADH7Sf/VGDPr1sRyLZ4uybzr3Ld07F/rU=)
2: 1-n7EdeFX20C6cFMyJ6Y5HWVMQU4.roa (hash: suKN0U6xP/FTkPKNJxFCA4VBUPU7v0a/LfB27Kibl1k=)
3: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (hash: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=)
4: 5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (hash: UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=)
5: 6nafakW_FoiGF0x1s1VoLFJqiuw.roa (hash: tSlSVShZ1Ws+SLODMKOJpPu4G+R5CcazLAH7YNSqZ2c=)
6: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (hash: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=)
7: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (hash: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=)
8: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (hash: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc=)
9: C0VnbFyJGyh-3dXIXN-FVbbzva4.roa (hash: nupbKfiMh1Vbm5eU6VpPOjsRTYtweNUnX1ebsHaK4hQ=)
10: CT3vMjevN0fYRTlNcJsck0hB60Y.roa (hash: 85AL/YEBSQNN6+KYNgUrlSLsBbfZxOy5uaLrLJGec+M=)
11: GnQ9nonV43lnZNoCG-ecdWqOLDk.roa (hash: 5lmMKt+idSdfaSrOW6fzEjOhALbxhOPcgnKdUuSF0JY=)
12: HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa (hash: BGn13AFdqwObLZ5mjHyJ0u9f6CC1n+u2Nsk2L6TLrao=)
13: MaRo3qPa_AXa-98seLnNkzlSlLM.roa (hash: ji8JHlcGAHWKEBT5OFXPF3gvRuoRQByWZBo69DobjWw=)
14: W-cWYMFcdHDS1yv5jkAVjyp5ho4.asa (hash: QdAC+W0wfurd2BssKpz9U5P9YKTKUM6ZjHzLGg+JdOA=)
15: cQJLykBOqMGgV5KV9rcPZr-_U1Y.roa (hash: aOQV+i/NapnfOnLvAQ3Zr9czxxA22kZuub947U3fZRw=)
16: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (hash: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo=)
17: fyxZLGtBW9e59RZ3aEwSKlhWT4w.roa (hash: itxLmMXkodUFbwqD5SmQmqHBd8MyF3lpLKdM1WEIZu0=)
18: ipuMNUIFJfwrG69f0t1BcA9T-lo.roa (hash: E/49CgkatlS4HbWzI9f4jj29KOBht+FWKi5pYDsrCiU=)
19: oOmWYS79EfLZM1YUVX02Dm8sbCI.roa (hash: UMtyOefWK95ZFcwkFudLsDtrliJckAkSIFBXdWfp+zQ=)
20: odS4gJ1H-haIP2hfRvP__EIClnA.roa (hash: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ=)
21: pHgh0geILg2H9c8tNXl-coocbok.roa (hash: MiAWsYu39mO81MmSrazkuF8uttZJWXsnb0YqEMhZmqc=)
22: xLvL2DDHdDsFuu0LWe_ArfxkZOU.roa (hash: jEvpZaWRUr0vww6k+sw/ZzVTbY8rHX3wan18IH9TsyY=)
23: yUTvxSoxh0P1X3qi3W3GEmQmupg.roa (hash: YggGVCBvHEr/or8wxjiqlTzxSxsrR2x9hxdT1duIBFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:f8:e4:25:10:a9:ba:c2:da:92:ef:61:a6:a6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jul 28 10:01:21 2026 GMT
Not After : Jul 29 10:01:21 2026 GMT
Subject: CN=3dea5a43332e85f70824b79c6efb4427757f0078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:3a:6e:90:f3:f1:54:06:f6:a9:42:9f:29:
75:87:10:f1:4f:26:52:95:11:c6:08:3f:d8:9d:65:
36:77:0b:d0:f1:ba:da:ae:a9:66:5c:69:5d:43:8b:
c9:24:ed:b7:67:e9:60:f9:73:7f:87:a3:95:74:9d:
bb:c9:06:0f:6a:9a:0f:a1:f0:f0:f7:10:5f:ea:4a:
2f:f1:fb:cf:8c:0f:a1:1f:10:f2:85:56:ee:08:2c:
46:b4:d1:50:52:98:b0:57:1b:da:3d:20:92:37:d7:
e6:67:ff:cb:27:55:2d:e0:44:ee:d8:1c:39:f4:b8:
18:dd:4b:f7:78:8a:61:1b:19:ba:08:1e:ce:1a:ef:
10:1f:69:01:3a:fe:16:b1:49:2d:8a:c2:c5:d6:be:
c1:21:95:f3:e9:fd:1f:69:00:25:e4:ac:de:3c:74:
8e:e5:a4:34:40:0e:ee:01:01:39:96:0e:5f:fc:fd:
c8:30:ec:dc:d9:33:53:92:08:da:4c:90:69:52:e2:
5c:c4:29:a8:08:55:42:06:75:73:e7:a7:cd:d6:a7:
c1:2b:1a:2e:3b:6c:7e:c1:45:8e:dd:f9:72:47:a1:
22:78:17:3d:f2:b3:fd:7e:46:33:30:fd:80:d4:5d:
72:73:28:e0:27:a3:9f:0f:95:4f:d8:0c:96:96:bb:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:5A:43:33:2E:85:F7:08:24:B7:9C:6E:FB:44:27:75:7F:00:78
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e3:a6:40:56:5f:0e:79:f8:74:ca:76:5c:f0:69:a0:25:ce:
b0:08:59:52:ec:e7:54:43:11:92:74:c9:2c:e6:48:fb:d6:e2:
63:58:8a:36:22:e6:bf:95:15:f6:a3:4e:63:a3:f0:94:c4:ce:
22:aa:f3:91:78:dd:a7:13:6c:88:04:80:ce:f5:cf:87:d3:63:
e3:e0:66:73:22:87:a7:41:02:68:69:aa:a9:d2:a3:33:07:31:
62:06:44:07:f5:7d:e2:45:70:80:fa:b4:1a:ab:bf:5c:65:88:
56:84:6a:83:1f:1b:08:6f:76:60:8a:5a:24:3c:b0:43:91:a6:
b0:a7:3a:32:cd:df:d1:d2:84:4e:8c:d9:a3:8e:00:06:1d:0f:
68:bd:7d:cf:64:a6:6a:e0:72:b4:08:ff:20:a6:28:8d:fc:0e:
25:e1:0c:e3:a0:0f:4a:92:8f:22:b0:13:92:fa:eb:18:10:e4:
80:49:84:ed:88:11:fa:9a:92:3d:d8:6a:4a:23:fc:e5:88:d1:
7f:c1:f4:79:83:1c:82:23:5e:ab:88:71:bc:8b:ee:f0:af:09:
f0:06:db:3b:8d:7a:f7:61:e6:e2:70:96:91:1c:7e:74:1c:f8:
28:1e:b2:ec:c1:a2:1a:86:7b:93:ab:98:59:cc:1d:b5:e4:fc:
b4:2a:8c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:21:53 2026 by rpki-client