
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json)
Hash identifier: t2u/AP2D7kD25ANxLDjVD75tcnjD51jblG8Ykp9sGUI=
Subject key identifier: CE:AA:F6:71:B3:D1:8B:7C:24:06:0C:54:F4:A0:32:53:E6:C3:B4:04
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 01A0CD8D0947E5903DA24389556B76907E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
Manifest number: 17FF
Signing time: Wed 23 Sep 2026 09:16:07 +0000
Manifest this update: Wed 23 Sep 2026 09:16:07 +0000
Manifest next update: Thu 24 Sep 2026 09:16:07 +0000
Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=)
2: 8-_TWMNK9smVCIZHx2gSgefBTvk.roa (hash: GoPHoDZXQ4RK7VcYW0JWFdEHGQJJF9f+5F3ghTg1XDg=)
3: 9qAEHUby2kuUCMI19wdK7QIhAg8.roa (hash: j0PyiEMnRv/aYSZCH4c3fek9SvuRs8/liv5iE7aCOm0=)
4: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (hash: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=)
5: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=)
6: BIlBx7GNQtDXs3rYutuCu_mCEbs.roa (hash: PjkQd4dOSp8nnX9aBaii5mDXPUnbKEUEDpkzwxtH96g=)
7: GspeMP674JCoxzmabdO8Nx2F6fQ.roa (hash: VKbOH4JHpKYz0hG7SgazWoJ56gIYm3db7hsnAsPcBug=)
8: JvSklV-wlWBMdiMFZHYwnOO4qno.roa (hash: 2Y5pgGlMimFGDoHDIk55HXcJoD340d10aMUaMx1CDGE=)
9: LUc1MJoVPez5w1xSPgQNKTfk4LM.roa (hash: 972ijDeKVAa4Gskej+slmbPkDfx9Jo5UGuOHg1JfZ5s=)
10: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=)
11: Qww9gCj-X4B4Xg_aKnU4H1Tk5uo.roa (hash: SIiEXR4hvpH9UtDtRw7spSH/X12xxic4pC9q8/Dobkw=)
12: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=)
13: Ya8UhAbXRHW76CZXydZwDc89luQ.roa (hash: jrko4GgQfGa4fx2XVYs7sNRMDfXWZShssHOvl4TRSgg=)
14: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=)
15: c4Dm4UgqUL4CUx9nOOL5uBAzFTA.roa (hash: U3K1dzpYsUWsqrAD5WtyRGP2OtEEKqHJp0n2MHiucNo=)
16: f4t99DHwC1imSdH0qBOau6ppWXc.roa (hash: R9huUo4NQkxmrWCn+znDnfiLaLSzUXjUqRrEAKTH5p0=)
17: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=)
18: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: 0fd8EHlvPQDKt/ViAqbaLjT4MHgvP2jXxmYfN6aEAqE=)
19: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=)
20: yWXTyKbdzhf70aOdG1K-qa2Vqzo.roa (hash: HsTOFLq2DipgL762bkM6mfxMBIXe/4uYryzBcH67ZcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:8d:09:47:e5:90:3d:a2:43:89:55:6b:76:90:7e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Sep 23 09:16:07 2026 GMT
Not After : Sep 24 09:16:07 2026 GMT
Subject: CN=ceaaf671b3d18b7c24060c54f4a03253e6c3b404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:46:4e:6e:46:6c:48:ed:aa:66:7b:d6:ff:
d9:26:a7:ac:33:d4:d2:78:92:04:02:28:18:f4:f2:
e5:dc:81:e9:9e:b8:43:d8:82:3d:6b:16:68:dd:ae:
71:3c:4a:ae:0e:8b:bb:84:5c:b1:ee:35:48:58:5b:
eb:6f:49:78:75:fa:52:a5:b0:41:7e:82:62:24:64:
2f:d0:53:c1:37:41:e1:7c:0b:cf:e4:b2:90:ad:9e:
a6:b9:4b:63:fd:94:f1:96:26:17:18:cb:06:46:1a:
23:b2:84:b7:03:8c:55:6d:32:9f:1f:3c:86:c8:54:
a5:d0:c2:1b:64:3e:bd:40:8f:34:3e:d1:43:e0:8c:
43:c5:a5:4d:f7:ec:88:88:e9:d8:b7:19:f9:35:8a:
3b:14:33:5b:2f:31:6e:37:07:44:a7:8f:34:41:b0:
a5:4d:b2:b2:e0:da:7a:ab:3d:6d:87:70:61:35:80:
26:9c:ab:48:cc:e5:e7:52:27:8c:3b:da:8b:3e:67:
fe:2c:c2:56:2c:d5:39:b1:4e:36:78:fb:ba:ac:05:
ed:42:16:f1:7b:78:8a:26:88:a2:4c:3a:14:d8:0b:
0e:94:fe:be:fa:7f:4d:a7:32:51:94:92:3f:a5:08:
b5:f1:76:17:cc:61:85:18:6e:5c:61:d5:d7:e6:3f:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:F6:71:B3:D1:8B:7C:24:06:0C:54:F4:A0:32:53:E6:C3:B4:04
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:94:47:24:b5:23:14:e3:34:dd:54:75:2a:f8:e5:c6:87:fd:
8d:5b:01:d6:0e:16:2e:55:cb:b1:08:a9:25:27:90:dd:48:e8:
5a:2d:ce:c0:74:ac:6f:ce:1b:47:76:f2:33:99:a9:f1:1d:61:
1a:ad:2b:b0:1d:9c:47:e9:d3:f4:3a:65:f5:60:60:47:9c:78:
2a:15:fc:a8:80:2b:01:f3:bd:be:79:5e:40:54:e3:9f:c1:5c:
ce:7b:b2:f4:a5:66:3c:60:31:6e:39:63:be:5d:3b:df:da:b4:
26:1c:52:81:e9:cb:fd:b0:8b:83:f3:6c:49:06:02:3d:57:b7:
6e:91:84:70:90:a0:90:78:e6:ca:cf:8e:8d:61:4d:d5:7f:90:
42:73:26:bb:49:b7:11:23:a1:47:a0:9b:46:ba:92:69:e0:05:
a3:09:4d:2d:8a:7f:74:9f:bd:26:db:75:a4:a9:3f:45:6a:12:
f5:a0:23:26:17:7d:fd:84:7f:23:04:e8:c8:bb:d5:6c:c1:1a:
9b:5b:9b:19:ae:b4:9f:27:5a:87:65:33:81:48:d3:f2:93:45:
46:1f:66:16:a5:99:0e:88:c6:c5:f0:bc:12:f3:57:48:07:d1:
ee:84:58:6a:13:5e:c1:f2:f6:14:2f:e9:21:bc:17:0e:9a:01:
4c:82:79:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:53:27 2026 by rpki-client