
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
File: g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft (raw, json)
Hash identifier: x6Gi8cHlovlRgAtw/Ue62s+m9EdNHayhutxu9d6pR+k=
Subject key identifier: 8F:9C:20:8F:A2:70:41:AB:F5:79:9E:3D:39:F6:FC:E1:1F:AC:D9:B2
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial: 019F93C878D9EB7B4AF9A83D539F79031BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
Manifest number: 0D32
Signing time: Fri 24 Jul 2026 11:00:16 +0000
Manifest this update: Fri 24 Jul 2026 11:00:16 +0000
Manifest next update: Sat 25 Jul 2026 11:00:16 +0000
Files and hashes: 1: 1o8rc1B2rz8EJdbZ3z6LILHJGLM.roa (hash: RgVkOLGuQmy3f1VaDolVM/xuPM7B5/Thq2bqgQQQ5KI=)
2: 9CiYOh3Tvo2DBfl0jabQvFLWLFc.roa (hash: 43nWzmq/RjcNjuxCi4y1M8IbSxUCfohc5YoCfDEycLQ=)
3: MwBfnIeh4icyMtphU38ylCMXamk.roa (hash: CEXyVLtqmaHwpYLSDbPmPnIa3IY69NeBED7KXP3ze6c=)
4: ezYsw2_e3R9NDcGghu9oCFEJ53c.roa (hash: 2lry/rf4POpaKlgjomChorPFhc51fpzfavcz/xLZEo0=)
5: g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl (hash: 55fdJXOSVs+w08GjQv6ATcsAsaYxJgSifbDcGODWJp0=)
6: kdEPUuQDUI6I6jbSpPW6P-kkOuA.roa (hash: zinbJQSjE4KwqubnM0+SQjc1EG+tlbXwWx2ZhYd6qEA=)
7: n94KenbJMH70fjR1rrFahdY8U34.roa (hash: yP/yPEDoYrtpaNUeRocAKawwYPvsmMlpzOFnFwFc4BQ=)
8: q5kphRSAlG3DN63C9RqhU3DMVds.roa (hash: VfvnDEZYHd7dijCx60k38qn3Wzq30eQaAO0QQVJTt/4=)
9: qbbxFuzSkULQOBICM7rqsaqrwu4.roa (hash: hvKhotK2pMOwPjulJduMi4iCjCSu8N/+Goyf1aqun7Y=)
10: sNj_laiOcAyx4yKKoT5eo1FxYbQ.roa (hash: MfbxVfKPhfU7+vz/KhDXRG39RyplbnNlSLuWA903WKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:78:d9:eb:7b:4a:f9:a8:3d:53:9f:79:03:1b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Validity
Not Before: Jul 24 11:00:16 2026 GMT
Not After : Jul 25 11:00:16 2026 GMT
Subject: CN=8f9c208fa27041abf5799e3d39f6fce11facd9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:5f:8c:22:2b:8b:07:61:2d:c2:cd:8f:4a:
43:ba:cc:c0:a1:cc:89:8a:d3:a3:07:f3:a5:42:08:
94:bd:64:26:b4:4b:3f:d6:1d:27:4c:1d:5a:44:72:
c5:ad:91:65:6f:ea:41:07:2a:a0:4e:4e:ed:7b:b6:
43:1d:48:35:ec:42:2c:bc:10:d0:e1:70:e1:6a:96:
f9:63:f5:04:65:18:c7:22:67:0a:95:11:25:bb:b6:
82:ae:78:56:21:7f:b2:72:8c:51:f0:74:4c:bc:86:
ec:43:b8:82:f9:aa:74:a2:b1:5a:5f:6d:73:11:43:
f3:bc:ae:1f:4b:da:37:10:64:46:56:7e:24:80:fe:
f9:b7:0c:df:f2:7c:a6:d4:ad:39:a0:7b:37:d2:ee:
07:01:98:1a:46:65:b8:72:d9:e6:f5:0c:f9:f2:7c:
ea:f2:57:62:02:a2:f6:01:57:c9:eb:05:38:8c:37:
83:c4:79:76:ec:30:0c:e8:03:84:d1:86:1a:3b:89:
64:b3:0f:5b:da:ac:7b:7c:c6:2e:69:5a:c7:32:64:
f9:18:81:57:dc:0a:28:ef:65:73:af:17:47:f0:b1:
cb:99:0c:a9:59:16:5d:fb:24:e8:5c:b5:9d:fa:38:
d9:05:f4:9c:68:81:9d:92:25:c5:d9:d4:70:83:f0:
af:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9C:20:8F:A2:70:41:AB:F5:79:9E:3D:39:F6:FC:E1:1F:AC:D9:B2
X509v3 Authority Key Identifier:
keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bf:5c:4f:c6:f8:11:a4:94:21:8e:d6:27:26:9f:b0:90:c4:
b9:94:80:22:b6:80:af:b3:54:b2:bc:6c:2c:5a:4c:da:d2:4a:
e7:42:d5:83:f9:de:c1:1f:ee:7c:8d:4d:32:93:e6:35:20:91:
33:03:12:55:06:30:06:57:29:54:d0:6f:04:0d:6e:9d:b1:40:
cc:ab:e1:f0:4f:4a:80:a6:bc:38:9f:6f:9e:a0:95:ac:95:c5:
1d:37:f4:fe:1d:50:c1:0e:c6:2b:ab:91:ba:1a:c5:99:a4:92:
4a:bc:24:51:03:44:8e:98:b8:e1:2d:ee:39:30:10:b0:44:f9:
68:cf:2b:ac:0d:64:64:3f:1b:95:9d:66:5d:0b:84:72:02:9d:
7b:55:88:bf:59:dc:13:b8:2f:c8:8e:f1:67:9d:12:f7:e6:f0:
5b:52:df:e6:19:6c:ef:e6:3b:28:b9:77:29:db:10:5a:a2:c3:
50:27:86:82:ac:c2:41:02:64:2c:24:71:28:c8:b0:8e:29:19:
bd:b5:f4:3d:e1:2f:ed:8a:4c:73:19:62:cb:bc:ee:18:78:d5:
1f:5c:46:d2:ad:91:8c:4c:16:27:75:e0:37:09:63:0a:bf:f4:
ab:36:5f:6f:75:d5:0d:77:81:b7:90:d2:f2:22:39:5e:f0:af:
4d:1a:22:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyHjZ63tK+ag9U595Axv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZjM2YjBhZGVlNmNiNTUxODc2M2I1YmM4ZWFhM2Q0MWYy
M2U5MzgwHhcNMjYwNzI0MTEwMDE2WhcNMjYwNzI1MTEwMDE2WjAzMTEwLwYDVQQD
Eyg4ZjljMjA4ZmEyNzA0MWFiZjU3OTllM2QzOWY2ZmNlMTFmYWNkOWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnFfjCIriwdhLcLNj0pDuszAocyJ
itOjB/OlQgiUvWQmtEs/1h0nTB1aRHLFrZFlb+pBByqgTk7te7ZDHUg17EIsvBDQ
4XDhapb5Y/UEZRjHImcKlRElu7aCrnhWIX+ycoxR8HRMvIbsQ7iC+ap0orFaX21z
EUPzvK4fS9o3EGRGVn4kgP75twzf8nym1K05oHs30u4HAZgaRmW4ctnm9Qz58nzq
8ldiAqL2AVfJ6wU4jDeDxHl27DAM6AOE0YYaO4lksw9b2qx7fMYuaVrHMmT5GIFX
3Aoo72VzrxdH8LHLmQypWRZd+yToXLWd+jjZBfScaIGdkiXF2dRwg/Cv2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+cII+icEGr9XmePTn2/OEfrNmyMB8GA1UdIwQY
MBaAFIPzawre5stVGHY7W8jqo9QfI+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGIt
YWY2NGYzZmEyNDU5LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGItYWY2NGYzZmEyNDU5
LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWr9cT8b4
EaSUIY7WJyafsJDEuZSAIraAr7NUsrxsLFpM2tJK50LVg/newR/ufI1NMpPmNSCR
MwMSVQYwBlcpVNBvBA1unbFAzKvh8E9KgKa8OJ9vnqCVrJXFHTf0/h1QwQ7GK6uR
uhrFmaSSSrwkUQNEjpi44S3uOTAQsET5aM8rrA1kZD8blZ1mXQuEcgKde1WIv1nc
E7gvyI7xZ50S9+bwW1Lf5hls7+Y7KLl3KdsQWqLDUCeGgqzCQQJkLCRxKMiwjikZ
vbX0PeEv7YpMcxliy7zuGHjVH1xG0q2RjEwWJ3XgNwljCr/0qzZfb3XVDXeBt5DS
8iI5XvCvTRoikQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:30 2026 by rpki-client