
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json)
Hash identifier: dUzQ66e3fni/guvS/xNftzjk6SoUKHpClzY97ceKeyY=
Subject key identifier: 90:8C:0A:B0:A5:A7:90:41:05:92:F3:DD:7D:85:AD:17:46:0C:FF:21
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019F8F10577376E3DC7B9A292E9593E4F3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
Manifest number: 1A0B
Signing time: Thu 23 Jul 2026 13:00:40 +0000
Manifest this update: Thu 23 Jul 2026 13:00:40 +0000
Manifest next update: Fri 24 Jul 2026 13:00:40 +0000
Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: 9wHURdL4jmCWlglGeM9xOP/bvvkOXAdg31BB7Qvp11c=)
2: 1-n7EdeFX20C6cFMyJ6Y5HWVMQU4.roa (hash: suKN0U6xP/FTkPKNJxFCA4VBUPU7v0a/LfB27Kibl1k=)
3: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (hash: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=)
4: 5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (hash: UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=)
5: 6nafakW_FoiGF0x1s1VoLFJqiuw.roa (hash: tSlSVShZ1Ws+SLODMKOJpPu4G+R5CcazLAH7YNSqZ2c=)
6: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (hash: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=)
7: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (hash: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=)
8: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (hash: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc=)
9: C0VnbFyJGyh-3dXIXN-FVbbzva4.roa (hash: nupbKfiMh1Vbm5eU6VpPOjsRTYtweNUnX1ebsHaK4hQ=)
10: CT3vMjevN0fYRTlNcJsck0hB60Y.roa (hash: 85AL/YEBSQNN6+KYNgUrlSLsBbfZxOy5uaLrLJGec+M=)
11: GnQ9nonV43lnZNoCG-ecdWqOLDk.roa (hash: 5lmMKt+idSdfaSrOW6fzEjOhALbxhOPcgnKdUuSF0JY=)
12: HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa (hash: BGn13AFdqwObLZ5mjHyJ0u9f6CC1n+u2Nsk2L6TLrao=)
13: MaRo3qPa_AXa-98seLnNkzlSlLM.roa (hash: ji8JHlcGAHWKEBT5OFXPF3gvRuoRQByWZBo69DobjWw=)
14: W-cWYMFcdHDS1yv5jkAVjyp5ho4.asa (hash: QdAC+W0wfurd2BssKpz9U5P9YKTKUM6ZjHzLGg+JdOA=)
15: cQJLykBOqMGgV5KV9rcPZr-_U1Y.roa (hash: aOQV+i/NapnfOnLvAQ3Zr9czxxA22kZuub947U3fZRw=)
16: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (hash: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo=)
17: fyxZLGtBW9e59RZ3aEwSKlhWT4w.roa (hash: itxLmMXkodUFbwqD5SmQmqHBd8MyF3lpLKdM1WEIZu0=)
18: ipuMNUIFJfwrG69f0t1BcA9T-lo.roa (hash: E/49CgkatlS4HbWzI9f4jj29KOBht+FWKi5pYDsrCiU=)
19: oOmWYS79EfLZM1YUVX02Dm8sbCI.roa (hash: UMtyOefWK95ZFcwkFudLsDtrliJckAkSIFBXdWfp+zQ=)
20: odS4gJ1H-haIP2hfRvP__EIClnA.roa (hash: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ=)
21: pHgh0geILg2H9c8tNXl-coocbok.roa (hash: MiAWsYu39mO81MmSrazkuF8uttZJWXsnb0YqEMhZmqc=)
22: xLvL2DDHdDsFuu0LWe_ArfxkZOU.roa (hash: jEvpZaWRUr0vww6k+sw/ZzVTbY8rHX3wan18IH9TsyY=)
23: yUTvxSoxh0P1X3qi3W3GEmQmupg.roa (hash: YggGVCBvHEr/or8wxjiqlTzxSxsrR2x9hxdT1duIBFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:57:73:76:e3:dc:7b:9a:29:2e:95:93:e4:f3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jul 23 13:00:40 2026 GMT
Not After : Jul 24 13:00:40 2026 GMT
Subject: CN=908c0ab0a5a790410592f3dd7d85ad17460cff21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:16:ef:9f:4e:03:88:d7:f9:ca:58:71:be:
ea:1d:fb:b5:e7:cf:67:f8:9d:25:5a:a6:15:47:a4:
14:9c:23:75:3f:b6:56:32:cd:65:03:7a:20:5c:e0:
2d:8a:7a:d2:27:f7:d2:1b:2c:0c:97:dd:bc:6c:95:
f8:c3:3a:bd:94:6e:88:85:80:db:89:8b:2c:68:ae:
3d:51:9d:95:4f:f4:62:c4:55:f0:1e:ff:d2:7c:ec:
72:b1:ad:76:f5:10:23:e7:17:31:e1:f1:fa:8f:4b:
ad:e3:92:2f:5c:1a:0f:ca:4a:03:f9:26:64:ab:1b:
b4:61:0c:c4:2b:6c:de:b6:09:52:e7:3b:16:e7:b1:
20:35:3a:7d:80:93:74:d4:cb:56:e4:72:8d:c8:1f:
3c:ec:6f:fd:a7:43:97:42:3c:23:46:ac:fc:c0:05:
47:b8:71:e0:2a:b9:44:b2:75:06:e1:65:64:94:af:
7c:87:a6:d1:e2:87:a0:95:8b:41:83:f0:94:23:2d:
c1:32:59:27:ff:22:3a:94:96:5a:8f:39:0a:ee:10:
fe:10:5b:ed:07:64:52:30:a1:eb:a7:22:e3:e9:69:
9a:63:7e:2b:2f:ce:4f:24:69:f2:29:c9:68:29:c3:
ac:76:0f:1c:39:11:b6:42:2b:34:46:6b:17:a1:ad:
1b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:0A:B0:A5:A7:90:41:05:92:F3:DD:7D:85:AD:17:46:0C:FF:21
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:78:07:b1:db:ef:2c:e1:20:9c:e6:f2:98:41:3a:d9:18:d1:
f5:be:1f:93:69:d4:54:be:7c:33:19:ac:fb:61:f1:26:7f:e8:
2f:e7:a9:96:6d:68:1b:51:ad:5e:95:02:e2:bd:fd:32:fc:f3:
70:9e:5e:34:20:21:76:59:e2:2e:21:27:4b:74:59:d0:c7:7d:
d7:87:18:e3:f2:99:23:e1:30:2d:6e:f6:0f:fc:2d:99:4e:ec:
9c:64:ea:35:5b:83:41:76:b7:0b:9c:95:f3:98:0f:b7:e1:ea:
70:6c:3e:cd:96:0b:0a:d4:6c:90:84:f2:41:0f:f9:29:2c:d8:
f4:38:36:9e:1b:7b:88:d1:15:26:5c:5a:23:f0:34:92:e2:3d:
40:88:2c:6c:08:1a:8d:c8:d9:95:be:4c:6e:a3:1f:8c:52:23:
e9:0c:ea:35:2b:66:db:fe:5b:8f:96:13:47:c9:f7:7c:64:1c:
2f:e8:4f:d0:92:3f:36:a3:70:ad:3e:2f:c7:24:14:d0:dc:39:
59:ee:14:a9:6a:d5:03:af:17:9c:ed:4a:9f:91:59:e8:83:4a:
cc:d7:45:0d:ef:8d:09:cb:6c:a2:52:4c:ad:93:74:5f:d7:21:
a8:f7:50:b2:85:7a:86:08:75:f3:06:89:34:ec:c6:19:af:9e:
7b:0e:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:26 2026 by rpki-client