
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json)
Hash identifier: HhvqTZpOXhTLxE2/uK2MozUwgEZOK43R2dipf40UWuc=
Subject key identifier: 0C:6F:87:79:AA:E0:8F:24:21:AA:4E:45:7C:B5:04:9F:00:BA:EA:42
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01A0CE9228DDF3773CDB59923ED697884425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
Manifest number: 1A83
Signing time: Wed 23 Sep 2026 14:01:20 +0000
Manifest this update: Wed 23 Sep 2026 14:01:20 +0000
Manifest next update: Thu 24 Sep 2026 14:01:20 +0000
Files and hashes: 1: 1-RE5LtI-oYEUM5q0cKhJC4JO_3U.roa (hash: d7tHq0/WDiMxn6UKxVk4uWzuZHMqABk4mVDBFTvFdTs=)
2: 1ZrxuRCZshhY9s-tRrinaL6p2M4.roa (hash: vYDVELPxbFafSrHLHY1BdtRwJHAAFaUieh3mkUsVbik=)
3: 1pNj_76j6mMS3u4BpN5gcHIvm34.roa (hash: xSQfQP+EsZm2U+T+O/IykU1NqD6pAYR1qJHp244VQts=)
4: 3DWFpw79OcRxHFUgDBKVisWT3bU.roa (hash: x3h4wbAmV51TlkfTEkHGrNxK/j4eCvpQPxXmB1qILMc=)
5: 3Q_yMiwTyac3O9Accnhg5KfD92Q.roa (hash: 2pKWPuyute5RJlYJfS0zr4oGa9jeGylHhVM1CLmLS3M=)
6: 5ysiViCYjFvC9-kctDcIkY-pILA.roa (hash: G9bDJB7QDClrvtETEje7e1l6WKvZlQKdYpwndPvzGug=)
7: Cno2ECt5zWG8x2rItCKPgOTCzds.roa (hash: IEJ+ozBs/+G+ZTwI22ieEKOuITC+Sg6aWJDoMBvjKzA=)
8: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: JBYbt0BFC3vKkl2iG4dMuC9RgILus00OS+vDevZZikk=)
9: HcrhRtfROyUtMyYdwEAqxsg1wig.roa (hash: u1rHBHJGzvgEOJg1heYgUCIOqnoD1iQ2J3moBSCOEfQ=)
10: J-77ZlXsX9U2N93n4AsioUY-n30.roa (hash: 176hXqJ10VD2B6wOqNZJ0R5KmjVOqUfFRwDGeoXMTzY=)
11: JV9qqXJgthdEV9gSEtaAmKrXJH8.roa (hash: HbqSFDLUPF4aIt4hRE8wj3agSeKulUgEDvc2yx+tlBw=)
12: NTpN21eL3Rsp6kn_8ipm7Sd9W5Q.roa (hash: nLprapUqPV9Ri3l6oKOQrylBfkeWz8n1WoTNn+XlF64=)
13: SQRKv0Z6_hmqtMPRpJ8gU8-qRNg.roa (hash: 2pACudLrBk6yGw4NBGywXzJ+cVqO1szI/T9hnvWe6SY=)
14: TPuALIMyKHTAJN5eUnqBGspsy3E.roa (hash: ebun0C4ydv6bPmHr73fW6etob8nrsagGkwWDv5pcdsU=)
15: dny3tReQLhVMkluPT2fnIL0-PDE.roa (hash: n9SThQXODaWNDc9q3fwExfhrE1fksgEVeXfy0EUzNVw=)
16: emEYO6Xm2zB3uO0gY4lIjNHWOPs.roa (hash: UslOLiX4wEz1eptieEOecWhikavAl/mlrbTGzuC2lHU=)
17: fcHjLtqVqV3tVtoDxwjhfSzY7bs.roa (hash: ePNTITXRrYt66PQPFxhFK+34fiF8t0NZrF7ig8fGhT4=)
18: hJ99v2p-kjtGOUcKBEPiUv62q80.roa (hash: x0WHYTjVa1fBBNhi71QSt5FoK7FqF26Qyuiibh4AUiY=)
19: n-5zEzSs351qrnGuBMspmFZCEI0.roa (hash: MYJupN5IEmr6ZufnYdbMso7OMy/8DIghG/NxlYmVwKI=)
20: okyZecfvIRqZODTkhqFVtVBqWlo.roa (hash: JURGYJBnqyW45CKjgzH7wE+F8JuOD/bJVrdaAV1cAA4=)
21: xhYmgGiF89Fz7bZhNjTbr52OYzc.roa (hash: Y8zNHkd72sloXAusIAjhHWfHMe8tp3rm6YXqz7dcQSg=)
22: z-M332yUcZzCTQnUx92JaIFm4lM.roa (hash: z6ZEntp831JJArGs2BedeJhcNl4wp+TXxoYayfvGoKo=)
23: zw5fWwxMO3uQ-3JnwT5dNNL0eVM.roa (hash: pnhzFXR1P1zYlMWvKT9giOYUIJ62wyltI992iTbrpYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:92:28:dd:f3:77:3c:db:59:92:3e:d6:97:88:44:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Sep 23 14:01:20 2026 GMT
Not After : Sep 24 14:01:20 2026 GMT
Subject: CN=0c6f8779aae08f2421aa4e457cb5049f00baea42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:fb:ba:9f:c6:9d:a3:3e:e3:30:5f:86:e8:
2a:e4:96:cd:38:0c:c0:15:1a:d3:fb:bd:a2:1a:2c:
08:d1:c7:ca:30:07:bc:c8:4e:31:7b:b8:c4:ec:a5:
53:58:5a:72:7d:00:8c:a5:0b:9f:97:3f:e8:dd:4f:
ef:a3:9b:cf:a4:23:e0:94:74:59:f2:6c:07:f9:6b:
f9:da:9b:07:96:9e:fe:e0:cd:e5:ae:ef:fb:08:87:
a9:5c:a3:40:81:f6:36:49:a0:c2:85:65:34:f2:ff:
d9:95:7b:47:92:c5:10:55:7f:58:99:c8:da:c9:6e:
2f:40:fa:44:62:cc:de:40:82:0a:ad:43:19:e0:76:
4a:ce:43:93:97:3c:4e:9c:27:f8:14:d7:6f:32:d5:
bc:0e:af:8a:29:20:b8:4f:52:b8:55:a6:46:a3:0b:
53:12:7a:4b:7a:40:7d:94:3a:d7:ee:86:5b:c4:8d:
41:79:d8:31:f4:bd:af:0a:1e:c3:cf:47:87:d3:c0:
44:20:19:d9:bf:d2:0d:06:24:a1:75:f3:55:cf:af:
18:1a:7e:2c:84:5a:d8:30:be:e6:65:d2:07:ac:67:
e7:ce:c1:c8:86:f5:2a:dd:b9:45:7d:84:82:6d:18:
e6:36:e9:df:43:f8:4e:d7:cb:68:9e:5e:d0:0a:6d:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6F:87:79:AA:E0:8F:24:21:AA:4E:45:7C:B5:04:9F:00:BA:EA:42
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7b:98:90:47:9b:39:74:a3:f9:40:9a:12:72:81:4d:23:a5:
8b:66:f6:72:8d:80:36:f6:c9:99:54:0a:bb:00:6b:83:e0:a0:
e9:80:98:b8:02:1b:b2:4c:41:c1:67:3b:cf:ee:bb:c4:d6:cc:
11:4c:49:d3:dc:c8:79:e2:1f:e9:30:75:42:bf:0c:4a:92:31:
ac:8b:32:d2:e0:6b:38:05:3b:f8:82:a5:9f:e3:bd:b1:d8:3e:
a4:3c:17:e9:c3:d5:28:10:bb:13:8f:3b:ec:62:58:37:99:7c:
9e:bc:a9:93:ff:98:06:0c:d7:a5:08:13:f2:16:d2:f1:29:1c:
5e:1d:f7:9d:30:a8:c7:e5:a3:9d:bc:d2:b6:6d:b2:80:27:a9:
f9:51:14:cc:65:82:7f:f2:ca:3e:3c:2c:13:98:1f:02:47:a0:
69:2b:97:e4:64:16:bb:e0:5b:25:9e:4c:54:91:30:34:28:79:
cd:78:ff:58:11:ab:6f:0a:51:ce:7a:df:f9:ac:d6:d5:6c:b4:
15:ba:23:fa:97:6d:e0:8a:69:74:7b:f7:33:2d:e8:aa:d5:f0:
fa:be:6e:91:3b:02:64:dd:4b:47:b8:f5:8a:24:85:b8:d9:10:
ea:48:fb:b6:24:97:69:78:70:87:87:ef:70:d2:de:eb:0e:3a:
3b:d4:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:37:44 2026 by rpki-client