
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File: G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier: 7gv3XKJkiQ8HH+4PhwEfqa9ghzpEQkZrIirCatjbww8=
Subject key identifier: 6F:4C:00:EA:56:88:8E:2A:A7:8F:ED:D6:53:5E:29:82:FF:EF:BE:05
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 019D26CCD1CE1E55044521E561F0A272C918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number: 0CBE
Signing time: Wed 25 Mar 2026 21:00:50 +0000
Manifest this update: Wed 25 Mar 2026 21:00:50 +0000
Manifest next update: Thu 26 Mar 2026 21:00:50 +0000
Files and hashes: 1: 1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa (hash: eC+mZscuKYFGh3jGSwYrM/zwgdkrzy7mnebI0W8HJjI=)
2: 1xyHsYNUFoJ-pAioaST7r-4iNoY.roa (hash: wxDqW3rd3N4FjlubcyoVvj1qY2eHpaWt4iZm04KnwmU=)
3: 8xyDaKXsDnV4pvSfD6Zi67leEh0.roa (hash: 1qsVMvOFnBXVT6ErwFRrHBk8i2fu6F56aLWn7B6Thbo=)
4: ArZg-qm8lEntEril04_eQVh-D58.roa (hash: 6ZG3jmP+1JYRU8rVmpDqUwMETM2Rl/USJi5tT1v2KOU=)
5: B7mKkJOQIDMNFDDRLxnggLv2QZ0.roa (hash: Mi1l3jAauhlk+iIu6HPrxpd0H99Ta8USVmSJWxkvFOc=)
6: FcpBxzBs-mUGpJZGFFeEKOoVc84.roa (hash: DdKbCIauyMh+ERMZDyRdDWbQHa/GNAQTeKFJAN9XkKI=)
7: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: f6tuD/uosmaWXwUMF8VobAFX44zxncvUxb2n/2PqqLY=)
8: HEBMMFCN8-2lBFekdiQRcYWnvrg.roa (hash: snCaNhSPR2tWzl8KWki9lG1jT29WpUoT1k50wbz95JE=)
9: IPb5d35plrMJG2iIT309KL2lmj0.roa (hash: KRvF/nchRUjNO7qEjTuRMT/eoA6wApPgVHaxY0nL3kc=)
10: O7Gej2bS_5hKcBi8mcz3JmNEOSw.roa (hash: h9gK6E3GHEkt+S79YiKfgPJlXrJcrfRQGLu5O6pt61U=)
11: PfDqVJ2AuhPLDK1F25vWraX2zng.roa (hash: 8kYADqUwxwWR6TitwtDD0haDphbCu9nP+tkQXOwbbYg=)
12: TzcrPtQyygSQdE_9ZpW0U258FWA.roa (hash: XHB179G1NkuoxHUDA2RIeIaiHXV5LoFis8B7rN9rC4w=)
13: XMyxg50FUIvcPAmn3dgQAD2rX5A.roa (hash: p3P3/d+pjMB4dPGP7cLvPY1UtOYfXIrBb9Vr7UC3pqg=)
14: gp1wlgGo5vivn7gfDRwXZtwctws.roa (hash: KehzF0g+L+PNvyC/IBXZK4NamgKmadqbNbXSvh4706E=)
15: h-YKHLBpdlMPlGTD2x8ny3EBvoE.roa (hash: kaocMh2GRL2VpSQbIazDPnOu2/38Foo0BooOmaJVLx8=)
16: iJAh4MzVUxgXIicmX1BF9DyiVJc.roa (hash: i5znTUbRnDwQdx+fd6qQhbrZflv2THSPw2LRl2jp6kY=)
17: jTk2ghaEMDC7CYJ_QaO8Kuls2VI.roa (hash: wXuTm3VvMxF7Fy+o/HgTRq0XIiaxh+LU1Nqi3XYzQ+w=)
18: la8gZB1qceC66CXnaIMpn1d6kfk.roa (hash: JvuyiLdyaWhi31x9Fsi4BLtHOme+Sv8lI2ldqt6pCN4=)
19: rpVmcRWK9Zhy_VaIn_bvOzXSQ6k.roa (hash: ZuY1ZDdDENsieUHmA5f7BeysqfqkQXy2jQwGzKSjHsE=)
20: sv4FoJpHxihbjQVOHGih_J_ffUs.roa (hash: aDxEXYa4qCra57+aM/aAUjJp5FE00bEh1/avX6X6ENQ=)
21: utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa (hash: 4Zxs7imh2v9OypwWBLyvUBMlzHoY/4pgzfFtHfz7Sbw=)
22: xJPb4f4rCehz8TLUSv0N6n8_MiE.roa (hash: MEW0AHLyPDoZAygBiCZTzYIaCJijNL4VVMa21hRooaY=)
23: zrpx2qONMlsehUMBf0ui700KaQs.roa (hash: rQCz92YTBiLjMsPmrkI3y1kzmH/U/hqwcfTTPZ9f40I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d1:ce:1e:55:04:45:21:e5:61:f0:a2:72:c9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Mar 25 21:00:50 2026 GMT
Not After : Mar 26 21:00:50 2026 GMT
Subject: CN=6f4c00ea56888e2aa78fedd6535e2982ffefbe05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:fc:ad:70:62:03:2e:da:25:11:df:43:f3:
01:09:11:24:83:9a:ed:1a:1f:93:d0:76:49:c5:92:
bd:09:22:e4:57:0f:67:35:fd:c4:80:60:a8:b4:80:
5e:23:66:e8:44:35:58:b1:fa:87:c1:ad:59:19:b2:
ca:56:61:6c:d4:3a:fc:d5:5e:db:a8:27:3b:1c:e6:
d0:06:d5:5a:1a:20:5d:57:0f:c0:17:5e:f9:45:55:
2c:2e:8f:e0:73:2a:c1:4c:73:4d:3b:37:d2:46:6e:
f5:10:27:97:4f:0b:83:7b:6e:a5:cf:0c:d5:b8:e6:
88:8f:a9:42:4c:d4:7c:2e:74:8f:24:77:f4:ac:4e:
81:a2:c8:cb:23:f4:97:4d:a8:c5:a7:58:43:c3:d0:
30:4a:d8:86:01:93:f4:20:40:7e:91:96:b4:40:d7:
00:7c:3c:8c:15:85:4a:90:5e:78:df:5e:9b:8c:f0:
7e:f8:c7:a2:f5:70:15:df:58:c7:37:5f:6a:df:0d:
fe:12:c8:f2:21:0f:99:ad:72:66:9d:2c:01:2e:83:
69:a3:47:53:3d:6b:7b:e9:a3:ab:21:83:a8:55:6a:
c3:fa:00:55:c8:b4:e1:d1:e3:00:89:56:86:35:66:
32:3b:61:00:d9:29:77:bd:35:f1:39:45:0b:4a:f7:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4C:00:EA:56:88:8E:2A:A7:8F:ED:D6:53:5E:29:82:FF:EF:BE:05
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e0:12:22:01:c7:66:c3:b3:c6:cf:57:50:78:b7:20:6b:3c:
f8:14:80:06:b7:2c:72:b5:64:e4:7b:c3:40:22:68:94:07:6c:
be:d2:b9:21:fd:9c:96:07:29:d9:78:a2:25:d4:06:c9:6e:1b:
90:ed:fb:90:73:61:08:2d:29:58:0c:43:dc:ee:af:e5:42:d9:
d5:79:f8:6a:9f:9b:d1:97:e0:d5:aa:84:79:ea:2a:31:2a:09:
68:11:21:d6:32:b9:ce:5c:42:2f:26:36:64:e6:20:80:31:9a:
97:65:50:a3:6b:71:02:6b:57:3b:22:00:56:87:dc:62:d6:87:
42:60:b5:9e:6a:06:51:a8:af:8e:e0:36:44:26:8d:5a:5f:8a:
80:f7:2b:77:c5:4f:90:85:88:2a:0f:78:3b:12:0e:9c:83:dc:
a4:f8:30:2b:f7:d1:34:09:aa:f1:b9:e5:49:11:63:ad:8a:23:
9d:a9:87:d3:7b:b1:ec:1a:74:11:56:dd:50:24:a6:31:e9:10:
53:93:38:e0:f7:6e:da:73:2a:be:c5:c0:6e:7e:b4:33:08:bd:
3d:99:da:d2:23:a4:f0:5c:15:ef:26:cb:69:f3:d1:b9:ca:e2:
02:bc:17:85:5b:31:5f:49:02:27:58:53:af:87:ac:cd:0d:41:
9e:cf:e7:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzNHOHlUERSHlYfCicskYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi
MzM2OWYwHhcNMjYwMzI1MjEwMDUwWhcNMjYwMzI2MjEwMDUwWjAzMTEwLwYDVQQD
Eyg2ZjRjMDBlYTU2ODg4ZTJhYTc4ZmVkZDY1MzVlMjk4MmZmZWZiZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+D8rXBiAy7aJRHfQ/MBCREkg5rt
Gh+T0HZJxZK9CSLkVw9nNf3EgGCotIBeI2boRDVYsfqHwa1ZGbLKVmFs1Dr81V7b
qCc7HObQBtVaGiBdVw/AF175RVUsLo/gcyrBTHNNOzfSRm71ECeXTwuDe26lzwzV
uOaIj6lCTNR8LnSPJHf0rE6BosjLI/SXTajFp1hDw9AwStiGAZP0IEB+kZa0QNcA
fDyMFYVKkF54316bjPB++Mei9XAV31jHN19q3w3+EsjyIQ+ZrXJmnSwBLoNpo0dT
PWt76aOrIYOoVWrD+gBVyLTh0eMAiVaGNWYyO2EA2Sl3vTXxOUULSve7mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9MAOpWiI4qp4/t1lNeKYL/774FMB8GA1UdIwQY
MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt
ZjUxYzVmYjNkZjlhLzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh
LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+ASIgHH
ZsOzxs9XUHi3IGs8+BSABrcscrVk5HvDQCJolAdsvtK5If2clgcp2XiiJdQGyW4b
kO37kHNhCC0pWAxD3O6v5ULZ1Xn4ap+b0Zfg1aqEeeoqMSoJaBEh1jK5zlxCLyY2
ZOYggDGal2VQo2txAmtXOyIAVofcYtaHQmC1nmoGUaivjuA2RCaNWl+KgPcrd8VP
kIWIKg94OxIOnIPcpPgwK/fRNAmq8bnlSRFjrYojnamH03ux7Bp0EVbdUCSmMekQ
U5M44Pdu2nMqvsXAbn60Mwi9PZna0iOk8FwV7ybLafPRucriArwXhVsxX0kCJ1hT
r4eszQ1Bns/n8w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:31 2026 by rpki-client