
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File: GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier: kqHKcLN3K9qIuFAkmqxI1vTo3wJWTxtIxj0jcL5kAfU=
Subject key identifier: 71:B3:A9:1A:EF:F0:CB:EC:CA:14:25:E8:6E:86:C7:24:D6:D0:3C:6F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019F8EA298FE28FE1E845E500D49CCD54305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number: 1B23
Signing time: Thu 23 Jul 2026 11:00:48 +0000
Manifest this update: Thu 23 Jul 2026 11:00:48 +0000
Manifest next update: Fri 24 Jul 2026 11:00:48 +0000
Files and hashes: 1: 0RmJ0oWNUFzdrlNu1jmD_6qelT0.roa (hash: PS53B4WrvaBeWkHBS+GkBG7h8gTZB1XYm80R6e/3gog=)
2: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (hash: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4=)
3: 1Yjgfutm5DnbWOKFjw22gv51x-M.roa (hash: FaSPbh1Wuwrp3aBT4Tz30+vRY/whGasHFL0WO3iZou8=)
4: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (hash: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk=)
5: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (hash: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM=)
6: 8QzrnFYYad02iQIDf3z71rNwwgg.roa (hash: /TV8cLYJ56VSgsNfmu5SUka0AmIh/wB9Qv7GFizgeDA=)
7: CB1RlJ-MsoW5c96mAUK_hbi7JE0.roa (hash: 5fJPe+eX7sQDBwrHzP9tK4pCYoIPbZwz6vPeuUSzBZo=)
8: CGMesv41p6arRgdmu59sWV_LTbg.roa (hash: vHHfTTfTp66kYxelMyA0pMKFUsWOmgvA1RM4B0b03Wo=)
9: FGqtnf6TyPbCwTCRNMgfE5ElE5w.roa (hash: IP8sItWkkBAhRfjY/SHImiuPFxLIkIVKl2CDA/PHVrI=)
10: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: IltSuyau4g7lJVuSUlRA4JpeUkrtNRCK92D1dOnrVgs=)
11: HgmGhHhflSc83-12eOaUVFkQZ7A.roa (hash: TVfWDXrhIGbWC7iEdqwCMqeSIvitThoDMENS1YOjOUg=)
12: J8FCtrgBkWVKDExtzrqO2O610GY.roa (hash: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=)
13: JhKGEy3yN9RGFH7neVX_QRgQgCM.roa (hash: HoGwkfjFFe5gr9hjtd2+/eclOoHDyifUnnXWLBjGwA4=)
14: L3_ye7DPVI366Ic6Ngz0rx8KNS0.roa (hash: M35zUOYT/3wfQtDZmc6mQI7KYPlIQlA+Fde0pk0Wiks=)
15: L6pA6dqo4JBMSuF5ROGNzwk-AWM.roa (hash: eZHdi1uoI4O0n9vGs1id6DxX8FOaQEq3LrkqkgiYU50=)
16: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (hash: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo=)
17: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (hash: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k=)
18: P_yuLjWbsEnPJRri0sPdIAJwtIE.roa (hash: OWw6475ue2CyouQdZseNajAOA39IhXLc9Jah+PLT7PA=)
19: TqPtGzYoLspunrwYwjZawqiHS4s.roa (hash: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk=)
20: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (hash: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww=)
21: _VHpXcuxCNgWVUFdEL6JjYzFdvc.roa (hash: egMfawhK+jcJ0v0KX4LlR7Y7XWXtaJR0Baa6miCKt6s=)
22: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (hash: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc=)
23: aMt7dQqxO17JsD3Qpf3pES1OiDs.roa (hash: prHDntIpg3WYe2PiUap0RT0C1RNJIg+ZNZut4BOlk+8=)
24: egYWRu7pYjFhPGLCQzQa4aLHYMw.roa (hash: I3B6Xal7vfQPZ9RmGSAv4ydK9M3uVrA0mOyKz6lQg80=)
25: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (hash: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM=)
26: glzgkwZylfRsndKgZJ2KYakfBL8.roa (hash: S0qWQ1u2x5kgmb4OJ1zWbvE5PadyvZ01sbhLzCQQIig=)
27: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (hash: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY=)
28: kkBbL5GQCXbcPIlpra9BISH413A.roa (hash: vCdkmwPxJu59m+M9IjhfPHDw9m/ikpb4ndaI0+l1XvI=)
29: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (hash: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw=)
30: njcv1S0zFlZVfkeF7_3Vlol-DoE.roa (hash: inR3oOtjsIbQDT5x9YgwyxFNYwWCphFwCjDaytA5qmk=)
31: s87JXAJZovXeQZZ0akQUapnLHmM.roa (hash: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw=)
32: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (hash: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk=)
33: xUiEOdMZD90K11XwaXn_ebriw94.roa (hash: jkqN1ZeOZ0ZOeU7yNnO80po0a5R9fVycdJjtANd999I=)
34: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (hash: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU=)
35: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (hash: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:98:fe:28:fe:1e:84:5e:50:0d:49:cc:d5:43:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 23 11:00:48 2026 GMT
Not After : Jul 24 11:00:48 2026 GMT
Subject: CN=71b3a91aeff0cbecca1425e86e86c724d6d03c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:98:22:89:83:95:25:73:26:fa:fd:f4:5b:88:
02:e6:a7:18:d5:04:93:8a:66:5d:86:85:f8:11:bc:
4c:88:03:b7:2e:d7:9e:77:ba:03:90:1c:b0:05:52:
c5:e3:47:51:f7:3d:1b:9d:f6:69:6f:54:77:27:44:
97:a2:83:9b:28:35:99:a6:d0:b4:6a:9a:0c:58:7b:
43:bc:f2:58:f4:e5:89:7a:0a:b1:1a:c4:60:2b:7a:
fd:12:41:90:9e:de:2d:eb:d5:35:83:30:f3:1c:78:
7a:54:6a:18:9c:c0:ca:82:63:f7:75:b1:c4:8b:07:
af:b2:a1:03:9a:b4:63:c9:31:04:20:37:c6:06:d1:
ea:6e:cc:92:87:30:76:39:17:df:f8:02:91:aa:12:
77:97:e4:b8:30:15:4f:f1:84:1f:b3:48:a4:88:38:
b2:df:cb:29:39:07:ee:15:da:8e:a9:d7:94:b8:0c:
1c:b8:57:14:87:e1:e9:93:3f:3b:84:b4:2f:2d:8e:
46:3c:de:da:a5:93:52:9e:75:9d:90:a1:93:e6:28:
83:54:af:6f:08:ee:c7:90:90:11:3a:95:08:df:ab:
bf:da:bd:2b:f3:bf:6a:6b:2a:f3:4b:1c:5c:ab:ec:
c3:80:a4:6a:67:7d:71:45:80:05:ca:11:d9:65:0d:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B3:A9:1A:EF:F0:CB:EC:CA:14:25:E8:6E:86:C7:24:D6:D0:3C:6F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:81:d7:ff:6f:bc:c7:ee:a5:ea:89:de:13:c3:a5:41:df:81:
18:52:6a:61:02:d8:9f:3c:04:91:b8:b0:ad:41:91:4f:9c:8a:
44:bd:60:09:d5:1d:bf:2d:6f:b1:aa:78:7e:c7:ea:1c:40:43:
0b:4d:51:39:4b:fc:bc:1f:b1:6a:70:1f:bf:c6:06:52:e4:f5:
23:e3:2d:ba:e6:d8:83:97:d6:d4:85:3a:b3:30:1f:cb:ed:9d:
a2:e1:dd:f9:5a:80:06:73:8e:79:6d:22:4d:0e:72:a0:fc:81:
84:67:57:67:f2:bf:c0:20:1d:3e:28:fe:8d:d9:5c:e8:a8:cd:
07:7f:01:e8:23:ab:bc:81:3b:ad:a7:8c:5a:fc:cb:8d:ab:64:
af:0c:99:1f:f6:52:7b:c6:1b:0b:63:01:c1:52:6b:7c:7b:7c:
73:9b:df:f3:98:83:b7:11:f7:1c:54:b8:4f:d5:e2:04:3e:4b:
e1:5c:f8:06:9a:77:d2:7b:d5:a2:b1:3a:91:aa:7a:c8:c6:1a:
9d:29:0f:1c:cf:31:e5:df:f2:f1:21:bf:7c:94:4a:92:0f:cf:
9b:98:73:1f:72:2b:60:76:20:88:ac:bc:5d:4a:52:0e:d6:2f:
59:9f:2e:46:cc:5e:c8:75:ed:8a:4c:3f:e0:06:d3:8c:70:d9:
e9:e9:96:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:52 2026 by rpki-client