
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File: G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier: r5622P9V/hvQ9x3hrxxp96Kcq/qSrvGzgIeNTX2YkVs=
Subject key identifier: B2:56:07:6C:8A:04:DF:F2:AA:E0:88:E8:1B:8D:E8:AD:1A:F1:44:BC
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 019E1DFE972FA879AEAD69F8D2DB6E4CE667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number: 0D3E
Signing time: Tue 12 May 2026 21:01:24 +0000
Manifest this update: Tue 12 May 2026 21:01:24 +0000
Manifest next update: Wed 13 May 2026 21:01:24 +0000
Files and hashes: 1: 1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa (hash: eC+mZscuKYFGh3jGSwYrM/zwgdkrzy7mnebI0W8HJjI=)
2: 1xyHsYNUFoJ-pAioaST7r-4iNoY.roa (hash: wxDqW3rd3N4FjlubcyoVvj1qY2eHpaWt4iZm04KnwmU=)
3: 8xyDaKXsDnV4pvSfD6Zi67leEh0.roa (hash: 1qsVMvOFnBXVT6ErwFRrHBk8i2fu6F56aLWn7B6Thbo=)
4: ArZg-qm8lEntEril04_eQVh-D58.roa (hash: 6ZG3jmP+1JYRU8rVmpDqUwMETM2Rl/USJi5tT1v2KOU=)
5: B7mKkJOQIDMNFDDRLxnggLv2QZ0.roa (hash: Mi1l3jAauhlk+iIu6HPrxpd0H99Ta8USVmSJWxkvFOc=)
6: FcpBxzBs-mUGpJZGFFeEKOoVc84.roa (hash: DdKbCIauyMh+ERMZDyRdDWbQHa/GNAQTeKFJAN9XkKI=)
7: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: XttXUM+qewTc9rgHFqPu5+uUHK7uhbi0vLooIb2rZfs=)
8: HEBMMFCN8-2lBFekdiQRcYWnvrg.roa (hash: snCaNhSPR2tWzl8KWki9lG1jT29WpUoT1k50wbz95JE=)
9: IPb5d35plrMJG2iIT309KL2lmj0.roa (hash: KRvF/nchRUjNO7qEjTuRMT/eoA6wApPgVHaxY0nL3kc=)
10: O7Gej2bS_5hKcBi8mcz3JmNEOSw.roa (hash: h9gK6E3GHEkt+S79YiKfgPJlXrJcrfRQGLu5O6pt61U=)
11: PfDqVJ2AuhPLDK1F25vWraX2zng.roa (hash: 8kYADqUwxwWR6TitwtDD0haDphbCu9nP+tkQXOwbbYg=)
12: TzcrPtQyygSQdE_9ZpW0U258FWA.roa (hash: XHB179G1NkuoxHUDA2RIeIaiHXV5LoFis8B7rN9rC4w=)
13: XMyxg50FUIvcPAmn3dgQAD2rX5A.roa (hash: p3P3/d+pjMB4dPGP7cLvPY1UtOYfXIrBb9Vr7UC3pqg=)
14: gp1wlgGo5vivn7gfDRwXZtwctws.roa (hash: KehzF0g+L+PNvyC/IBXZK4NamgKmadqbNbXSvh4706E=)
15: h-YKHLBpdlMPlGTD2x8ny3EBvoE.roa (hash: kaocMh2GRL2VpSQbIazDPnOu2/38Foo0BooOmaJVLx8=)
16: iJAh4MzVUxgXIicmX1BF9DyiVJc.roa (hash: i5znTUbRnDwQdx+fd6qQhbrZflv2THSPw2LRl2jp6kY=)
17: jTk2ghaEMDC7CYJ_QaO8Kuls2VI.roa (hash: wXuTm3VvMxF7Fy+o/HgTRq0XIiaxh+LU1Nqi3XYzQ+w=)
18: la8gZB1qceC66CXnaIMpn1d6kfk.roa (hash: JvuyiLdyaWhi31x9Fsi4BLtHOme+Sv8lI2ldqt6pCN4=)
19: rpVmcRWK9Zhy_VaIn_bvOzXSQ6k.roa (hash: ZuY1ZDdDENsieUHmA5f7BeysqfqkQXy2jQwGzKSjHsE=)
20: sv4FoJpHxihbjQVOHGih_J_ffUs.roa (hash: aDxEXYa4qCra57+aM/aAUjJp5FE00bEh1/avX6X6ENQ=)
21: utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa (hash: 4Zxs7imh2v9OypwWBLyvUBMlzHoY/4pgzfFtHfz7Sbw=)
22: xJPb4f4rCehz8TLUSv0N6n8_MiE.roa (hash: MEW0AHLyPDoZAygBiCZTzYIaCJijNL4VVMa21hRooaY=)
23: zrpx2qONMlsehUMBf0ui700KaQs.roa (hash: rQCz92YTBiLjMsPmrkI3y1kzmH/U/hqwcfTTPZ9f40I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:97:2f:a8:79:ae:ad:69:f8:d2:db:6e:4c:e6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: May 12 21:01:24 2026 GMT
Not After : May 13 21:01:24 2026 GMT
Subject: CN=b256076c8a04dff2aae088e81b8de8ad1af144bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:6e:b7:fe:c3:b2:95:35:82:7e:1d:0d:60:
4e:72:94:08:1d:1d:f9:f5:c1:22:0a:1b:18:13:a1:
82:81:35:6b:e1:ce:54:2c:9a:0a:54:b3:2c:15:0f:
3a:83:a8:34:1e:78:ca:57:78:f4:42:dd:ed:74:24:
69:97:0f:7a:5d:5a:6f:d4:dd:b9:a6:24:78:41:a0:
68:6f:0d:a2:54:d8:70:45:9a:59:16:30:64:c8:5b:
f7:1a:11:9d:83:21:f2:4b:f9:41:c6:f8:59:46:80:
5a:e4:80:d5:cb:6d:7e:33:44:4d:80:bf:94:7e:33:
44:8a:97:eb:ca:34:db:a9:3c:62:02:65:22:80:f9:
83:fe:60:c7:ad:7b:e0:fc:54:6f:74:77:8e:4e:29:
0c:61:b5:ef:4f:11:05:81:66:b3:f6:c0:79:60:5c:
66:ba:ce:60:36:fd:2d:14:ef:e9:33:56:b5:8d:d5:
6b:53:a2:22:f4:2e:8f:cd:89:8b:b7:5a:62:36:2d:
a2:d8:4a:c3:32:d4:c9:47:a1:f1:85:b5:42:9b:a6:
e2:ab:a4:ac:9a:7d:fa:52:c2:89:79:70:09:74:d4:
2b:a2:b7:52:36:87:29:e6:1b:36:da:1c:a2:12:06:
39:32:48:51:bf:ac:6f:f0:d9:ae:b7:8a:b7:c0:d9:
39:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:56:07:6C:8A:04:DF:F2:AA:E0:88:E8:1B:8D:E8:AD:1A:F1:44:BC
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:10:30:22:11:16:d1:57:60:29:ea:36:f4:4a:cd:21:bc:b7:
f1:fe:6b:cb:b8:43:5c:67:c4:dc:98:ec:22:18:0f:44:c6:76:
c0:70:37:88:a9:d4:29:0e:37:ea:29:a1:66:67:d6:80:d6:26:
17:88:58:a4:9a:cc:86:8b:9b:74:9e:d7:0c:fd:31:9f:70:7f:
c8:70:29:90:20:80:90:37:68:f6:be:16:40:7a:84:2a:80:8d:
7c:31:58:2d:f9:9c:17:55:47:af:4f:ed:35:2f:f2:30:05:3a:
e4:b4:de:54:9e:88:ca:9c:a0:56:12:c3:7e:dd:5b:c4:9c:ec:
47:ef:54:4c:67:67:20:1d:a6:ad:c6:6b:79:37:f3:b3:c2:95:
2d:29:6e:98:b8:df:18:6c:34:47:b2:a0:0c:e3:bd:a7:ac:08:
74:1a:55:bc:a6:f3:b7:a8:77:0c:5e:90:d7:a9:d5:9d:a9:c2:
88:bf:6b:fc:a8:fc:f8:68:ae:0b:80:45:67:88:e0:e0:9f:d2:
a1:f1:ad:04:99:b4:65:65:cc:b9:64:3e:75:4d:60:45:dd:ac:
45:6b:8e:5c:64:e0:ad:2d:5a:3c:be:c1:20:91:b0:79:ee:27:
be:21:71:5c:b3:54:0e:9b:73:21:2c:39:05:9b:3a:12:75:28:
6c:1a:1f:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/pcvqHmurWn40ttuTOZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi
MzM2OWYwHhcNMjYwNTEyMjEwMTI0WhcNMjYwNTEzMjEwMTI0WjAzMTEwLwYDVQQD
EyhiMjU2MDc2YzhhMDRkZmYyYWFlMDg4ZTgxYjhkZThhZDFhZjE0NGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAJut/7DspU1gn4dDWBOcpQIHR35
9cEiChsYE6GCgTVr4c5ULJoKVLMsFQ86g6g0HnjKV3j0Qt3tdCRplw96XVpv1N25
piR4QaBobw2iVNhwRZpZFjBkyFv3GhGdgyHyS/lBxvhZRoBa5IDVy21+M0RNgL+U
fjNEipfryjTbqTxiAmUigPmD/mDHrXvg/FRvdHeOTikMYbXvTxEFgWaz9sB5YFxm
us5gNv0tFO/pM1a1jdVrU6Ii9C6PzYmLt1piNi2i2ErDMtTJR6HxhbVCm6biq6Ss
mn36UsKJeXAJdNQrordSNocp5hs22hyiEgY5MkhRv6xv8Nmut4q3wNk5fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJWB2yKBN/yquCI6BuN6K0a8US8MB8GA1UdIwQY
MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt
ZjUxYzVmYjNkZjlhLzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh
LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhAwIhEW
0VdgKeo29ErNIby38f5ry7hDXGfE3JjsIhgPRMZ2wHA3iKnUKQ436imhZmfWgNYm
F4hYpJrMhoubdJ7XDP0xn3B/yHApkCCAkDdo9r4WQHqEKoCNfDFYLfmcF1VHr0/t
NS/yMAU65LTeVJ6IypygVhLDft1bxJzsR+9UTGdnIB2mrcZreTfzs8KVLSlumLjf
GGw0R7KgDOO9p6wIdBpVvKbzt6h3DF6Q16nVnanCiL9r/Kj8+GiuC4BFZ4jg4J/S
ofGtBJm0ZWXMuWQ+dU1gRd2sRWuOXGTgrS1aPL7BIJGwee4nviFxXLNUDptzISw5
BZs6EnUobBofCA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:18:48 2026 by rpki-client