
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json)
Hash identifier: HoycEElBNERDwnYhEgAvHfqx3jnQOmeSreE5a8Eg9Qc=
Subject key identifier: 33:9E:E4:0D:1A:6B:CE:72:15:B9:B8:D1:6C:A3:0B:31:EE:2F:A7:BD
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A1DB6F765CF9488D347849A078E83A3CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
Manifest number: 0524
Signing time: Sat 14 Nov 2026 19:01:17 +0000
Manifest this update: Sat 14 Nov 2026 19:01:17 +0000
Manifest next update: Sun 15 Nov 2026 19:01:17 +0000
Files and hashes: 1: 1-7lBoUQLqCs0SrDtfuOiH-hBqKY.roa (hash: uKNvGN7ZD4nsV4in9Y8Y//rdyR/gaCR0sYeleivqS5M=)
2: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=)
3: 36PRmC1GP3ueaeEjlYANeJ3LXbA.roa (hash: PZlaEdi/ajdKb06dXTcZ+6Hv0OskYDexJ38koRPQi50=)
4: 5uFOCa8-r8p4u5DjbFcyMxWnxpk.roa (hash: six96PBP2FVtrDub0viM0uQeju8Q52lW6mmVN0at+D4=)
5: 66spJgWO4r5iJulLefAkdYTwISc.roa (hash: AyjLjLUdwhw2VQoEzrUJ+rotnQiPNzqjvEUgW3yJgvQ=)
6: CoLO71qrUv_4qMwwwRs5lDVCE9E.roa (hash: T4p9qnVSGm7AR+uo+khZZRMNDQd/GpzNGpYFRL2iEKU=)
7: D8AltX8NXcLOq-pSTN7KWtLKGHY.roa (hash: Jhg74LTPlJvtU+9SkThmAe1N9wxkw8e/NSOn4orb4Jw=)
8: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: Hw+3tJ0kq1KQ0yuyiZtqneQs7GW8CYaSUj0wU4BNh7c=)
9: Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa (hash: 9cuNi2UUB3uoW2G4GMhdugeWXWqlYW8/ZVXdji7vqm8=)
10: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=)
11: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=)
12: SW6Tanlspu32Q4YoMd-Rt7HAHNs.roa (hash: aL36fgXsHk04MAwwOrDjHIzxG5aLhcW1gldiD4rfIMM=)
13: VvLQA9Cae2PQuMrr3_Y-0TmNwcY.roa (hash: XwK6vB2kQtof3+RV72T5Wj8ggzbbz/YUbH3GUgwyoJw=)
14: Z6MskMkEXzBOrr08MyqO_Qkq-eg.roa (hash: Jc2k3yBoYG8HC5iVw30jV49DTomvXwgVQwrLuJF9/+g=)
15: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=)
16: _CTtp7ZPH0kOXThVR7wQj4XW06A.roa (hash: 6qdFfEyB76OZ8FZHFVIZ5XewiprUqvvRVqyD2drMzds=)
17: aApcJx1Vl6jx6w4yohNQaV1Io5Y.roa (hash: TnHtMgPhychs4GGqHiht/VWWogxSmwlOOeNfBvbp0w0=)
18: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=)
19: a_bqWhibp7SeshuAQiOml-HBzFo.roa (hash: 3/NcBV1xs1onuU3mKr8Ow0etCQW+Riv48+qzB2krzYc=)
20: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=)
21: eh5fOnfV3Yahiu4aGae0RbMTacA.roa (hash: EnUBauk+HPUC2FL0C2u4k3bttrn+4mEzqjxd5GPr53A=)
22: ii9LtIl5z4pfeWcOSv4chuHToL0.roa (hash: XZ9+lbsPmgFqiDNRTZUxX1Y4b8nNUBrBj4+Zb+KEdjI=)
23: nXcVZv-BU5nC4jNra5f09x54HeM.roa (hash: iqu36oMqP46CX2CYzFsUJwzZuRu/tE4uzTsQ189IQ3U=)
24: oVD_dVqY96Rae8qlPSjzu1nbP2A.roa (hash: hMwSc/t+zdpyL3GPyUyGW/FYHdZ8kxNPn94rYv1mr6s=)
25: r3_mc9CdfqjKkPDbRieGRarY3J8.roa (hash: 1R/r8NdpsrVTyu0//wO87WSQNYrZaTMeX7aV4UcB6I8=)
26: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=)
27: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=)
28: zzlejXCHpXgamH633G_B9GA9p_0.roa (hash: eE86eVMiNcHiwH9DJb7Ms+ClxkfBQ1nOerPmLa6il54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:6f:76:5c:f9:48:8d:34:78:49:a0:78:e8:3a:3c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Nov 14 19:01:17 2026 GMT
Not After : Nov 15 19:01:17 2026 GMT
Subject: CN=339ee40d1a6bce7215b9b8d16ca30b31ee2fa7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:d4:1a:1d:fb:51:27:55:5c:09:bb:58:0b:
1f:42:43:e6:e5:06:f1:c1:6f:37:a7:52:d7:b8:2d:
2f:6c:60:ea:a3:eb:ff:68:5d:ed:ed:30:b6:cd:62:
25:bf:58:3e:be:17:d5:1f:16:0e:4a:11:cf:83:dc:
16:c1:cb:0c:00:36:97:f6:91:1e:0a:cc:d7:80:f5:
2c:6f:c4:62:86:04:94:19:99:9d:fd:ba:8c:41:4a:
45:7d:1e:3c:50:ef:1a:6a:55:4c:f4:da:13:92:b7:
c0:6d:5e:19:ae:81:2d:70:cb:8a:70:ac:eb:d7:04:
ae:6e:e0:e1:7b:1c:a0:1f:d7:54:df:09:de:85:2c:
34:30:99:51:05:af:9e:02:31:5d:8a:3d:31:04:46:
f9:f8:ec:bd:fe:02:b6:c0:83:f3:c7:c8:f2:6a:99:
54:33:d5:8a:27:fc:7a:e1:32:44:4d:0b:05:f5:c0:
a5:d5:1e:47:38:44:66:fa:01:af:a3:39:5c:f8:4d:
6d:ed:15:bb:33:15:cf:69:e9:d7:36:31:23:3f:cc:
65:3f:a8:91:97:97:74:fd:42:dc:e6:08:68:69:26:
43:f9:5a:ac:8e:9a:29:dc:33:11:c5:30:a8:26:e4:
90:df:b0:50:1a:d2:96:f1:3e:ec:bf:71:0e:85:04:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9E:E4:0D:1A:6B:CE:72:15:B9:B8:D1:6C:A3:0B:31:EE:2F:A7:BD
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:db:03:1e:6f:bf:4c:9d:4f:1e:1e:25:da:b7:49:66:4b:cb:
c8:87:dd:d8:1d:58:22:88:70:fd:fa:a6:56:2c:97:f7:13:d4:
8c:ed:30:95:1f:e9:3e:8a:5c:87:ae:14:73:f5:b7:2c:56:5f:
75:3b:cb:ac:36:fc:c4:71:84:0c:d4:5b:ba:6f:e1:0e:f1:27:
6a:58:b1:48:6f:f5:87:52:aa:fb:61:90:43:da:72:61:c8:e6:
a3:7a:20:50:5f:5e:93:2a:c8:25:29:e4:80:cd:38:fc:a1:7b:
3b:df:34:fc:99:41:14:95:e1:df:1d:24:00:c5:1a:61:b0:42:
c4:d8:9a:bb:1b:95:16:4a:87:39:ac:43:42:dd:2e:b7:8e:d1:
0d:65:b2:d8:e9:d4:d3:73:72:8f:b0:75:d2:51:b8:1a:d8:10:
69:66:a5:5b:0a:0d:77:30:64:30:6e:b2:f5:da:51:0f:1a:81:
47:5d:e9:72:5c:99:b2:d9:69:08:66:cd:3d:54:3d:3c:52:ec:
20:6b:b8:37:81:44:40:06:7b:ac:a3:30:ac:10:03:81:b1:1a:
21:60:4b:f6:a2:b5:2f:aa:dc:ed:9e:9f:e4:49:55:01:8c:67:
e1:7c:f2:db:57:e0:03:c6:62:55:b4:89:6d:74:af:c8:59:cc:
64:9d:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:16:28 2026 by rpki-client