
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json)
Hash identifier: hpiSPZM6ANm4sRUPMzIs6DjqpfeBGQ+AgXkB+snInPs=
Subject key identifier: 6C:35:7B:6F:4B:D1:04:26:A4:B0:43:E9:D0:19:1E:E7:6F:FE:34:E2
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A0CD2B633432BDFC3F6E7F14E90EAB7B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
Manifest number: 0490
Signing time: Wed 23 Sep 2026 07:29:27 +0000
Manifest this update: Wed 23 Sep 2026 07:29:27 +0000
Manifest next update: Thu 24 Sep 2026 07:29:27 +0000
Files and hashes: 1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=)
2: 5uFOCa8-r8p4u5DjbFcyMxWnxpk.roa (hash: six96PBP2FVtrDub0viM0uQeju8Q52lW6mmVN0at+D4=)
3: 66spJgWO4r5iJulLefAkdYTwISc.roa (hash: AyjLjLUdwhw2VQoEzrUJ+rotnQiPNzqjvEUgW3yJgvQ=)
4: AFebLvn6AH0mOGLAGY1K4fdA0ac.roa (hash: lc41gS5MnYI/Mo4Xzk3UtrseTVtRz4aEngOCwuhDcEI=)
5: CoLO71qrUv_4qMwwwRs5lDVCE9E.roa (hash: T4p9qnVSGm7AR+uo+khZZRMNDQd/GpzNGpYFRL2iEKU=)
6: G31aaGd5LlY50IGLO6eQwT_sz54.roa (hash: J+TTKw7LlUBt9s2Q/PONP/L4s5aJKpFWg7AH4f8ZIRU=)
7: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: 8gSrkid3meMBymg5Tx+jrYL6RcC9LJqJLLkkp/F4cz4=)
8: Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa (hash: 9cuNi2UUB3uoW2G4GMhdugeWXWqlYW8/ZVXdji7vqm8=)
9: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=)
10: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=)
11: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=)
12: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=)
13: _CTtp7ZPH0kOXThVR7wQj4XW06A.roa (hash: 6qdFfEyB76OZ8FZHFVIZ5XewiprUqvvRVqyD2drMzds=)
14: aApcJx1Vl6jx6w4yohNQaV1Io5Y.roa (hash: TnHtMgPhychs4GGqHiht/VWWogxSmwlOOeNfBvbp0w0=)
15: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=)
16: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=)
17: mT-K5wz7DGgkYoPiR_2XSlQ0B6I.roa (hash: 73E2cGSZQ8+svLr+/xrcMfyFaxZmakWAGtNSf4DhDgw=)
18: nXcVZv-BU5nC4jNra5f09x54HeM.roa (hash: iqu36oMqP46CX2CYzFsUJwzZuRu/tE4uzTsQ189IQ3U=)
19: r3_mc9CdfqjKkPDbRieGRarY3J8.roa (hash: 1R/r8NdpsrVTyu0//wO87WSQNYrZaTMeX7aV4UcB6I8=)
20: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=)
21: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=)
22: zzlejXCHpXgamH633G_B9GA9p_0.roa (hash: eE86eVMiNcHiwH9DJb7Ms+ClxkfBQ1nOerPmLa6il54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:2b:63:34:32:bd:fc:3f:6e:7f:14:e9:0e:ab:7b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Sep 23 07:29:27 2026 GMT
Not After : Sep 24 07:29:27 2026 GMT
Subject: CN=6c357b6f4bd10426a4b043e9d0191ee76ffe34e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:cd:1d:ac:52:5f:a4:0a:99:37:4c:e2:99:
1a:f5:c2:4f:4d:e7:f8:55:f1:10:1a:4a:22:f8:5c:
16:4c:76:81:ae:43:ce:c0:cf:66:e3:1a:ad:09:57:
40:e2:69:6b:c1:50:3b:b1:ec:ac:fb:4b:d3:62:14:
f1:79:db:4e:f6:2e:0d:b4:4e:b3:36:03:4d:d3:39:
bb:7e:fc:d4:8f:f2:54:97:ce:de:a1:64:fc:e9:aa:
db:ec:3b:fe:2d:07:37:43:20:f4:1f:5a:6d:cf:4b:
9f:30:a7:f9:ab:ec:d4:5c:32:8c:68:0e:13:ce:44:
01:f9:04:52:94:14:f2:02:b5:9b:cf:0f:7d:85:ed:
ae:80:62:1d:c8:11:0a:fe:9c:bc:50:4f:56:37:de:
69:e4:c3:4f:7f:44:4b:fc:c3:df:f3:82:42:ed:f6:
0a:d9:8d:5e:41:c8:98:da:d8:41:81:dc:b1:30:ff:
58:98:1e:dc:a8:dd:ab:55:44:5f:07:3d:59:6c:ff:
99:72:3d:14:54:e9:f0:a4:a9:db:fb:d6:ee:16:90:
cb:b7:ab:e1:93:d7:07:72:e3:0c:09:46:3d:b1:c4:
0a:fc:db:a0:80:e6:9c:2e:7e:3d:2c:e8:19:aa:42:
bc:51:2d:2b:69:71:6a:7d:70:bd:9e:4b:00:8f:5d:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:35:7B:6F:4B:D1:04:26:A4:B0:43:E9:D0:19:1E:E7:6F:FE:34:E2
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a5:e7:ab:7b:e7:23:38:87:eb:4d:b9:15:3c:69:a9:5c:65:
fc:96:d2:4b:d3:d0:13:4a:b0:86:d5:a0:76:75:57:d7:ff:3e:
d4:d5:70:bf:3c:f5:d5:31:47:02:1e:e3:cf:ae:fc:c1:56:dc:
fa:61:86:3c:5c:de:38:36:ae:27:41:8c:d0:36:de:bd:ec:e0:
01:2f:b8:ee:19:05:b5:a2:1f:b7:97:b2:28:18:21:c8:0a:4b:
ae:47:74:ac:fa:58:3b:7e:75:9b:e5:a5:ca:a2:67:d3:34:f6:
53:d4:5b:7a:ae:da:ea:21:fd:27:8a:17:95:86:88:5f:9d:29:
8f:ce:ff:88:ec:e6:8a:c5:25:b0:34:04:ea:c5:ed:dd:2b:11:
90:de:77:4b:e3:f0:2a:0a:fe:79:f9:04:60:4b:8e:05:49:78:
43:42:47:5a:27:04:1f:d5:a9:61:83:43:e8:12:66:9a:39:41:
d4:97:8c:91:df:54:4c:06:a0:25:6d:3b:a1:bf:a0:e8:f3:6d:
ee:80:35:6f:22:51:50:c1:10:c3:a0:a2:3e:ea:e7:d0:42:2b:
75:71:da:ed:2f:9d:c1:b9:e4:62:5b:1c:36:c5:cb:0b:a0:ca:
d8:5e:43:b6:ee:77:69:85:c2:6b:b2:3d:be:7e:b1:2d:53:ba:
f0:df:1a:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNK2M0Mr38P25/FOkOq3tTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4
ZjMzYTcwHhcNMjYwOTIzMDcyOTI3WhcNMjYwOTI0MDcyOTI3WjAzMTEwLwYDVQQD
Eyg2YzM1N2I2ZjRiZDEwNDI2YTRiMDQzZTlkMDE5MWVlNzZmZmUzNGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF3NHaxSX6QKmTdM4pka9cJPTef4
VfEQGkoi+FwWTHaBrkPOwM9m4xqtCVdA4mlrwVA7seys+0vTYhTxedtO9i4NtE6z
NgNN0zm7fvzUj/JUl87eoWT86arb7Dv+LQc3QyD0H1ptz0ufMKf5q+zUXDKMaA4T
zkQB+QRSlBTyArWbzw99he2ugGIdyBEK/py8UE9WN95p5MNPf0RL/MPf84JC7fYK
2Y1eQciY2thBgdyxMP9YmB7cqN2rVURfBz1ZbP+Zcj0UVOnwpKnb+9buFpDLt6vh
k9cHcuMMCUY9scQK/NuggOacLn49LOgZqkK8US0raXFqfXC9nksAj10fNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGw1e29L0QQmpLBD6dAZHudv/jTiMB8GA1UdIwQY
MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt
MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3
LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqXnq3vn
IziH6025FTxpqVxl/JbSS9PQE0qwhtWgdnVX1/8+1NVwvzz11TFHAh7jz678wVbc
+mGGPFzeODauJ0GM0DbevezgAS+47hkFtaIft5eyKBghyApLrkd0rPpYO351m+Wl
yqJn0zT2U9Rbeq7a6iH9J4oXlYaIX50pj87/iOzmisUlsDQE6sXt3SsRkN53S+Pw
Kgr+efkEYEuOBUl4Q0JHWicEH9WpYYND6BJmmjlB1JeMkd9UTAagJW07ob+g6PNt
7oA1byJRUMEQw6CiPurn0EIrdXHa7S+dwbnkYlscNsXLC6DK2F5Dtu53aYXCa7I9
vn6xLVO68N8aiw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:31 2026 by rpki-client