
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json)
Hash identifier: llaMuqBj3MTN3ZjigJE9mQMOVWq2kcz4is37J/CczBs=
Subject key identifier: C5:A1:58:0E:8C:E5:62:86:64:0E:DF:EA:60:DC:39:34:D6:8B:2F:6C
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 019CA945DD0B2B0DABC0A44704D8B9E2D9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
Manifest number: 142A
Signing time: Sun 01 Mar 2026 12:00:53 +0000
Manifest this update: Sun 01 Mar 2026 12:00:53 +0000
Manifest next update: Mon 02 Mar 2026 12:00:53 +0000
Files and hashes: 1: 6qBOGIzy7SiE5aHoDtHWinTh2oI.roa (hash: KwYB7/zyOeuIegeDk01/5M8IIa6sVcCvAJ0ZuQL1yIE=)
2: A3dfbS-b6385QXbD4gqPyZDygnI.roa (hash: eMk+m8VzfNpB4AhSwjxnwTq5SWYabewWTjTtFBj+jG4=)
3: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: lUwYISxlI+/gNO/3v8e11rR13LXlTuu5e/T5ZwKelMA=)
4: M3X3dm-8It7aMXQj1y54UfL58OM.roa (hash: 7bUApRHysWlBDgJo+0traB3WXa7dB6bicxRUCK/I0eI=)
5: RxzZhT8fBiEGIwzJcpEaVq4187g.roa (hash: hquVSPsZNeqlCDz0r9h6cmg+2UHwUyJ0mqDqk+VOViY=)
6: URKvTjDp4aRxdSZ3jqDjwv8D8go.roa (hash: 0rxLDrLwqqP9CnkuagDXnUpxuRr/vAmcV/9SQj91sog=)
7: _eOaEicMkKKbiwUmCfYmS46987o.roa (hash: BD38gTS64MApM1VCH/ZNlIeeCLbbXCbnCN+Xqd56/3o=)
8: ecI9WwfCcCzWrmDmHhs2EyFDQJM.roa (hash: F5YXv2pp9vRYKIztKcSv4xzwJ07F66Zhmicw5zjO8J8=)
9: ft0VCR9IS3VMAgUDh10GOu9PLZE.roa (hash: 2folTB1j+SZaT+1+FVh+nOf0J1JfCJxhCtpk4te0AZM=)
10: ktxPtq6QBIdiSOZ68pA9GADZGkA.roa (hash: nKwrZvWFwYhUKsU2Xr6N7bIKsHUx8g94vR6U6JSn7Rw=)
11: oDF8isOJjyEJhYEJCgEsnjBbHWk.roa (hash: 6eDaCiZYBtD9bJDiBCS6z1HiWa8aHX6Yc2oe3UfDymI=)
12: wdbxHLFVBNdWh2qGHilCZZD7-g0.roa (hash: 90fXHeqU2neAZl01CJ/fB5l+GTvQAN5HQEWOMc2pyGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:dd:0b:2b:0d:ab:c0:a4:47:04:d8:b9:e2:d9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Mar 1 12:00:53 2026 GMT
Not After : Mar 2 12:00:53 2026 GMT
Subject: CN=c5a1580e8ce56286640edfea60dc3934d68b2f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:9b:6b:49:57:d8:01:e1:46:9b:2d:c7:36:
8e:51:e7:c6:3c:2a:27:21:89:dd:96:2c:fa:78:e5:
a4:57:18:cb:b8:3a:21:ee:92:70:a5:be:87:b8:ca:
d3:d7:8f:eb:f8:bf:b5:4a:49:66:46:2b:2e:5e:7c:
f8:cd:f1:6a:56:47:cb:e7:c6:9c:d9:99:63:74:ad:
e1:4b:6b:f5:af:8f:3b:0f:35:f8:70:35:f1:f3:81:
84:83:28:39:63:f5:4d:05:b2:5d:bb:83:45:34:da:
26:56:21:b8:ae:4f:1e:f6:c9:7d:92:35:ec:80:b0:
6d:62:55:3e:53:e0:d7:6b:6d:dc:25:3e:33:50:cc:
e6:43:5c:46:b4:e1:80:70:98:ed:8c:f1:92:04:91:
ae:7c:ed:e2:9d:69:34:ac:3a:78:c2:3b:9f:9d:99:
59:bb:12:6d:ad:80:d9:1d:ae:59:28:36:89:e5:d0:
bd:21:4e:25:36:0c:89:25:86:8f:2a:85:3a:dc:2d:
e3:23:1d:d2:7a:a4:b3:e4:7f:4f:0b:5e:e9:62:ca:
b3:b6:ad:37:af:fd:94:4f:01:c8:b2:ff:96:c2:86:
58:b5:ce:a9:ea:07:f8:67:48:7a:e2:c9:d0:f4:cc:
33:04:f7:51:8f:79:af:5e:de:eb:64:bf:73:9d:5a:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A1:58:0E:8C:E5:62:86:64:0E:DF:EA:60:DC:39:34:D6:8B:2F:6C
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:18:8a:21:50:f2:7e:e0:a7:05:a9:bb:a7:85:21:dc:ea:55:
59:59:7b:f9:36:8d:00:eb:0c:7e:69:a3:08:1d:ec:62:d8:34:
53:f7:c2:fa:b5:bb:1d:dc:cc:9a:68:89:d2:92:ff:6f:74:2c:
c4:7e:5b:dd:93:81:a6:b8:c0:31:4f:92:31:68:3a:19:1b:91:
e9:44:75:3a:92:e2:6e:ef:41:d7:ed:31:85:c3:dc:d7:0a:23:
6e:47:0a:42:94:48:43:cd:51:1d:c8:df:d2:79:0a:01:96:a8:
3f:4f:dc:53:88:fe:6d:40:fe:bf:4c:28:07:0f:bf:79:d8:9b:
8c:78:1a:14:26:d5:d2:9d:d9:87:dc:96:bb:aa:12:dc:61:2d:
4f:a7:1c:f3:42:3e:4b:52:33:41:5d:45:54:bb:27:0f:e9:6c:
6d:ce:1e:6f:63:b7:f1:11:3d:7f:c6:03:e1:47:99:93:22:45:
ee:4a:ca:c9:c1:05:92:56:6f:c2:2b:15:76:67:4d:e1:6f:92:
0c:54:3e:0b:97:35:a4:5d:8e:01:11:0d:10:cd:5a:71:e5:58:
a1:62:d6:fe:4a:c0:d3:a1:63:f4:6d:4b:cf:46:b8:51:d9:af:
96:c9:b9:e1:7b:c8:ef:0b:12:dc:b2:d9:2c:79:6b:78:94:de:
b2:72:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:39 2026 by rpki-client