
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
File: g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft (raw, json)
Hash identifier: BQvesjRzmGoCGQzgb6d509m7eA92Lht0RqRteHuayiQ=
Subject key identifier: 86:9A:9E:A6:D5:7C:64:71:55:85:C2:65:A7:CF:44:C4:3B:CF:7F:22
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial: 019E20FF6381794D2C8C4D92A56B8B544532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
Manifest number: 0C72
Signing time: Wed 13 May 2026 11:01:08 +0000
Manifest this update: Wed 13 May 2026 11:01:08 +0000
Manifest next update: Thu 14 May 2026 11:01:08 +0000
Files and hashes: 1: 1o8rc1B2rz8EJdbZ3z6LILHJGLM.roa (hash: RgVkOLGuQmy3f1VaDolVM/xuPM7B5/Thq2bqgQQQ5KI=)
2: 9CiYOh3Tvo2DBfl0jabQvFLWLFc.roa (hash: 43nWzmq/RjcNjuxCi4y1M8IbSxUCfohc5YoCfDEycLQ=)
3: MwBfnIeh4icyMtphU38ylCMXamk.roa (hash: CEXyVLtqmaHwpYLSDbPmPnIa3IY69NeBED7KXP3ze6c=)
4: ezYsw2_e3R9NDcGghu9oCFEJ53c.roa (hash: 2lry/rf4POpaKlgjomChorPFhc51fpzfavcz/xLZEo0=)
5: g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl (hash: r8c9jgjejRWH42bQmeNfC9lf3u3P+7vguGnQXObZgxo=)
6: kdEPUuQDUI6I6jbSpPW6P-kkOuA.roa (hash: zinbJQSjE4KwqubnM0+SQjc1EG+tlbXwWx2ZhYd6qEA=)
7: n94KenbJMH70fjR1rrFahdY8U34.roa (hash: yP/yPEDoYrtpaNUeRocAKawwYPvsmMlpzOFnFwFc4BQ=)
8: q5kphRSAlG3DN63C9RqhU3DMVds.roa (hash: VfvnDEZYHd7dijCx60k38qn3Wzq30eQaAO0QQVJTt/4=)
9: qbbxFuzSkULQOBICM7rqsaqrwu4.roa (hash: hvKhotK2pMOwPjulJduMi4iCjCSu8N/+Goyf1aqun7Y=)
10: sNj_laiOcAyx4yKKoT5eo1FxYbQ.roa (hash: MfbxVfKPhfU7+vz/KhDXRG39RyplbnNlSLuWA903WKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:63:81:79:4d:2c:8c:4d:92:a5:6b:8b:54:45:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Validity
Not Before: May 13 11:01:08 2026 GMT
Not After : May 14 11:01:08 2026 GMT
Subject: CN=869a9ea6d57c64715585c265a7cf44c43bcf7f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:dc:fb:9a:d4:a9:55:56:59:18:6c:d7:25:
87:cf:c1:2e:a1:e6:a5:e5:11:66:00:49:21:b2:2e:
64:d4:61:ac:a2:15:22:19:2c:7f:90:2d:4b:2b:b6:
56:12:8a:20:61:90:12:27:55:b6:2b:20:0f:08:44:
b9:a4:3d:cc:be:2c:f6:51:e9:aa:5b:f7:52:2e:6e:
ec:dd:68:10:cd:ad:36:4c:2a:0a:2f:b0:f7:45:4d:
54:c4:18:cc:bb:58:07:25:05:32:b3:ec:ed:38:c9:
a3:62:d7:6a:b2:58:cf:28:7f:68:72:71:0c:9b:cb:
8c:f7:15:70:65:4e:76:85:08:ec:ae:08:c2:44:f7:
56:80:43:ec:10:29:29:37:ac:e6:68:85:b1:60:94:
c0:02:04:a1:3e:14:37:fd:48:1d:c2:bc:7f:6e:d7:
2c:b2:21:7f:19:de:70:27:db:ac:03:85:64:6d:46:
26:da:9c:1f:30:0a:35:b3:69:8c:c5:7c:f5:b5:a3:
d5:3f:25:6b:71:41:e9:51:ff:52:76:0c:6a:87:92:
0f:65:71:5d:db:ba:e3:fa:82:19:21:63:2e:b6:e9:
1c:4a:61:af:f4:30:f2:65:dd:a2:22:9e:c6:a0:15:
23:f7:cb:34:f7:41:e4:e0:b9:b7:10:59:71:93:c5:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9A:9E:A6:D5:7C:64:71:55:85:C2:65:A7:CF:44:C4:3B:CF:7F:22
X509v3 Authority Key Identifier:
keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e6:4d:6a:57:4b:4a:b3:a7:e4:71:67:c7:81:6d:68:36:ac:
87:6b:eb:1d:c2:79:23:5d:26:9d:3b:18:1d:64:5b:a2:fd:65:
db:76:f0:d8:95:46:ca:20:12:da:b1:81:cf:45:d0:07:ba:4b:
5a:4b:91:16:2c:21:22:c5:c0:ba:a8:24:eb:12:1c:91:40:5a:
49:3c:30:40:a3:68:e0:93:14:24:14:77:38:71:d2:53:60:0d:
2d:3d:65:e7:e6:65:97:a4:42:74:18:05:87:c5:4a:93:d5:84:
22:b5:a5:2b:0d:07:74:ee:02:2b:45:10:b0:50:8f:54:85:6f:
3b:65:56:04:c4:02:41:ca:6d:df:12:95:14:6d:bf:bc:34:fc:
96:82:38:8b:94:42:19:fb:65:16:12:6a:31:a4:8f:b2:13:db:
21:46:13:14:18:68:be:ed:78:fb:e2:5b:dd:66:22:1f:96:ba:
f8:18:b1:c0:66:6d:91:32:9e:0f:ac:db:a6:f2:62:27:77:72:
e5:97:c1:af:30:b1:6b:32:37:48:b6:d3:2b:a1:ce:a8:97:45:
53:50:09:93:3d:4c:28:d0:5d:48:7c:71:ad:71:f2:8a:3b:ef:
ac:05:71:f0:f3:9c:15:61:d6:ea:79:ae:1e:08:ed:e6:c2:7e:
90:63:11:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:29:00 2026 by rpki-client