
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json)
Hash identifier: LK/Z68Hh1Shgpj0LtObbVO5/bBr9pnM6qRlYDaqK5tA=
Subject key identifier: 38:F1:F8:EA:09:61:E9:86:B1:36:25:45:CA:32:EF:8C:53:76:30:A9
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019F8ED9791D1508DA42C4133186B208925C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
Manifest number: 174E
Signing time: Thu 23 Jul 2026 12:00:44 +0000
Manifest this update: Thu 23 Jul 2026 12:00:44 +0000
Manifest next update: Fri 24 Jul 2026 12:00:44 +0000
Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=)
2: 8-_TWMNK9smVCIZHx2gSgefBTvk.roa (hash: GoPHoDZXQ4RK7VcYW0JWFdEHGQJJF9f+5F3ghTg1XDg=)
3: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (hash: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=)
4: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=)
5: BIlBx7GNQtDXs3rYutuCu_mCEbs.roa (hash: PjkQd4dOSp8nnX9aBaii5mDXPUnbKEUEDpkzwxtH96g=)
6: GspeMP674JCoxzmabdO8Nx2F6fQ.roa (hash: VKbOH4JHpKYz0hG7SgazWoJ56gIYm3db7hsnAsPcBug=)
7: JvSklV-wlWBMdiMFZHYwnOO4qno.roa (hash: 2Y5pgGlMimFGDoHDIk55HXcJoD340d10aMUaMx1CDGE=)
8: Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa (hash: ujg1A0vQ9FG1rTPZa8Vj4tuAeoDxeA7TxCNsFbsOZaw=)
9: NHZjAwiNqYdXP55lTx3UrHGzF_s.roa (hash: DlXIItbGI7QMph5U0ROMZaiEwzDb77DcsZ2lNmYwWkQ=)
10: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=)
11: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=)
12: _X0bRHceQUds2sQL_FpiWJxD9QY.roa (hash: hKjph8soEua7HoSuBbCiFUhm5tA80/17iJt8Ge1lIDg=)
13: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=)
14: c-uurSvFwdZ4HnQ-2FusksHz4JY.roa (hash: L6sexLXbR65THJCvf0Zc/VUy29DDIcDYXnW872IpKPc=)
15: c4Dm4UgqUL4CUx9nOOL5uBAzFTA.roa (hash: U3K1dzpYsUWsqrAD5WtyRGP2OtEEKqHJp0n2MHiucNo=)
16: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=)
17: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: 8snXlqlMYh5ilLFUNtdz8VDuFZg97UzfLmw2/2B3bdY=)
18: jtGIUucXpS25gSIxS9ey-aTaP6k.roa (hash: C7gWcR3y9LEqqxMVoaQwthR97+AE57RrFujD9LepmME=)
19: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:79:1d:15:08:da:42:c4:13:31:86:b2:08:92:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Jul 23 12:00:44 2026 GMT
Not After : Jul 24 12:00:44 2026 GMT
Subject: CN=38f1f8ea0961e986b1362545ca32ef8c537630a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:de:a2:32:cc:43:38:44:17:7e:8d:0e:30:
20:2e:50:a3:87:db:f5:64:cd:99:a3:97:11:74:d0:
a5:d8:90:93:a7:a0:d9:02:21:06:1e:39:f8:2e:ce:
2a:da:fd:78:76:60:50:9d:5e:54:23:22:5f:85:32:
9b:ec:d6:30:29:d5:e4:79:8e:9e:e2:7a:4f:ad:82:
dd:97:6b:2b:df:75:ad:4b:39:b2:8d:23:a6:10:b0:
c4:3c:d3:f6:0e:18:25:68:bb:42:7a:e7:18:84:49:
1a:e9:46:7c:70:0d:d8:1b:70:38:8d:1f:e0:87:de:
84:21:97:88:26:85:bf:bf:76:29:bc:c6:cd:cb:2d:
dc:5d:af:3f:70:83:09:ef:87:ce:3c:2b:b9:12:fd:
ed:11:42:0a:0f:03:ba:99:c7:12:67:fb:fe:d1:64:
59:09:e6:2e:c9:c9:fd:ab:89:50:2c:0a:f7:c3:a8:
24:1e:81:5a:98:82:a3:56:51:92:66:7c:20:02:be:
5e:5b:13:8a:c3:05:36:f4:2d:5b:82:45:43:42:10:
89:c3:ee:67:cb:f5:bd:06:b7:89:e8:99:6e:8d:b1:
6f:ea:43:16:5c:cb:fd:6c:1c:d3:46:44:74:28:76:
17:24:7c:c1:74:b1:c9:b8:70:d5:74:30:1e:aa:9e:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F1:F8:EA:09:61:E9:86:B1:36:25:45:CA:32:EF:8C:53:76:30:A9
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4c:71:73:41:f1:5d:6e:5f:c0:13:79:63:9c:66:7f:60:9a:
51:df:92:eb:24:4e:67:f2:9a:b6:16:c4:cd:30:2d:6f:a5:f2:
be:82:fe:a5:97:51:de:87:c6:c1:91:cd:4b:78:c8:36:9c:1f:
90:bb:10:a9:d8:f4:66:c6:c2:37:8d:ba:04:82:93:79:93:c3:
34:7a:4d:29:9d:ea:89:9c:7d:f9:33:e0:1b:2a:a9:8b:31:cb:
ea:31:bf:fb:76:0d:fb:c6:30:7c:a6:42:3a:57:71:6f:df:95:
9a:5b:ca:42:f9:f0:56:98:53:30:40:8a:36:83:10:8d:2b:3e:
2f:4f:8c:3f:02:ac:f9:fb:10:c1:87:a9:59:17:2d:c6:08:31:
28:c9:57:33:48:23:bf:b0:5d:b4:1c:e7:71:a6:12:87:93:86:
c3:5c:97:ee:76:44:b4:86:b6:89:94:80:e6:46:2a:2c:0d:0f:
d0:5a:e6:29:d7:9b:65:78:3f:00:2d:17:f5:3c:21:ff:06:aa:
5c:f4:71:06:06:0f:a9:3c:64:3c:ce:68:4a:00:93:92:8e:cc:
36:17:99:4a:f1:dd:1f:66:c2:b7:eb:e1:ac:df:3d:89:69:86:
28:4d:eb:22:8c:1f:9a:2a:ee:b9:13:4b:58:08:e6:9e:a4:9c:
7d:25:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:48 2026 by rpki-client