
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json)
Hash identifier: PsCYG6E1i5VPyiqzuCAqv9YxMmFADnHPeUkCXCCNGzs=
Subject key identifier: 6D:66:34:1E:82:77:23:74:AF:7B:F7:FC:16:03:72:05:83:80:87:D8
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01A1DACADE7EF5D73D04DA5938C7686D4E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
Manifest number: 1B12
Signing time: Sat 14 Nov 2026 16:01:30 +0000
Manifest this update: Sat 14 Nov 2026 16:01:30 +0000
Manifest next update: Sun 15 Nov 2026 16:01:30 +0000
Files and hashes: 1: 1-RE5LtI-oYEUM5q0cKhJC4JO_3U.roa (hash: d7tHq0/WDiMxn6UKxVk4uWzuZHMqABk4mVDBFTvFdTs=)
2: 1-vUv7EaY6d2pa2xs72jKwT4h_7M.roa (hash: KPckFHdiEOqGYspSp++CrvH0FIP1CeWJQlPSZU4ipsg=)
3: 1pNj_76j6mMS3u4BpN5gcHIvm34.roa (hash: xSQfQP+EsZm2U+T+O/IykU1NqD6pAYR1qJHp244VQts=)
4: 2XhKt2LNvViUfl3CfxvkBvd5EQ0.roa (hash: pvE2PtElk442DLYEKZCHkOsuZUjrau+pa9+tdrDPOa8=)
5: 3DWFpw79OcRxHFUgDBKVisWT3bU.roa (hash: x3h4wbAmV51TlkfTEkHGrNxK/j4eCvpQPxXmB1qILMc=)
6: 3Q_yMiwTyac3O9Accnhg5KfD92Q.roa (hash: 2pKWPuyute5RJlYJfS0zr4oGa9jeGylHhVM1CLmLS3M=)
7: 5ysiViCYjFvC9-kctDcIkY-pILA.roa (hash: G9bDJB7QDClrvtETEje7e1l6WKvZlQKdYpwndPvzGug=)
8: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: CAVA4xz6joZcp/aiA528I/YDHF3R75heRf11oSDdZPw=)
9: J-77ZlXsX9U2N93n4AsioUY-n30.roa (hash: 176hXqJ10VD2B6wOqNZJ0R5KmjVOqUfFRwDGeoXMTzY=)
10: JV9qqXJgthdEV9gSEtaAmKrXJH8.roa (hash: HbqSFDLUPF4aIt4hRE8wj3agSeKulUgEDvc2yx+tlBw=)
11: NTpN21eL3Rsp6kn_8ipm7Sd9W5Q.roa (hash: nLprapUqPV9Ri3l6oKOQrylBfkeWz8n1WoTNn+XlF64=)
12: SQRKv0Z6_hmqtMPRpJ8gU8-qRNg.roa (hash: 2pACudLrBk6yGw4NBGywXzJ+cVqO1szI/T9hnvWe6SY=)
13: TPuALIMyKHTAJN5eUnqBGspsy3E.roa (hash: ebun0C4ydv6bPmHr73fW6etob8nrsagGkwWDv5pcdsU=)
14: U5RLeifz_xBe5s_He7E-Usj0o2U.roa (hash: j6ywqTV/wpFAItlHMsi4PNzXglpUnGi+vu3TqttVZl4=)
15: dny3tReQLhVMkluPT2fnIL0-PDE.roa (hash: n9SThQXODaWNDc9q3fwExfhrE1fksgEVeXfy0EUzNVw=)
16: emEYO6Xm2zB3uO0gY4lIjNHWOPs.roa (hash: UslOLiX4wEz1eptieEOecWhikavAl/mlrbTGzuC2lHU=)
17: fcHjLtqVqV3tVtoDxwjhfSzY7bs.roa (hash: ePNTITXRrYt66PQPFxhFK+34fiF8t0NZrF7ig8fGhT4=)
18: hJ99v2p-kjtGOUcKBEPiUv62q80.roa (hash: x0WHYTjVa1fBBNhi71QSt5FoK7FqF26Qyuiibh4AUiY=)
19: xhYmgGiF89Fz7bZhNjTbr52OYzc.roa (hash: Y8zNHkd72sloXAusIAjhHWfHMe8tp3rm6YXqz7dcQSg=)
20: z-M332yUcZzCTQnUx92JaIFm4lM.roa (hash: z6ZEntp831JJArGs2BedeJhcNl4wp+TXxoYayfvGoKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:de:7e:f5:d7:3d:04:da:59:38:c7:68:6d:4e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Nov 14 16:01:30 2026 GMT
Not After : Nov 15 16:01:30 2026 GMT
Subject: CN=6d66341e82772374af7bf7fc16037205838087d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:cd:fd:30:38:7d:59:97:be:a5:01:c0:f9:
76:de:5a:c2:12:30:29:f2:a0:de:a8:82:9a:0d:cf:
87:bb:7f:a6:5e:1e:c8:20:b9:11:0c:64:1b:c8:c8:
8e:3c:bb:70:95:24:36:e8:e5:ea:b2:82:5b:b5:4d:
60:31:3e:47:f9:7b:40:c9:f6:71:14:7b:e6:03:73:
7e:b3:64:d3:d2:46:5f:d7:aa:d0:a9:04:f1:26:5e:
ef:db:05:fc:45:7d:26:11:c9:91:a6:50:ae:a5:af:
e9:b3:09:76:d7:8f:8a:27:55:cf:96:d2:b4:9a:3f:
5a:1f:89:e8:3d:2d:91:0c:50:9d:0a:3e:e5:c3:bc:
35:67:87:f1:64:eb:53:fa:8e:2b:49:31:e6:17:67:
b6:e7:de:75:aa:bf:2c:5d:d4:ea:fc:c0:fb:4b:a9:
10:36:9f:ba:ad:9a:6a:47:6e:7a:47:c6:d5:32:34:
ce:d3:83:2c:d2:87:b0:0e:38:10:a8:66:fc:5d:34:
bd:7d:14:c5:65:c3:52:7c:ff:cd:d2:af:5d:85:b3:
a1:ee:07:2f:e3:f7:4a:ed:05:2e:d5:a9:f2:08:ed:
b3:96:9e:81:55:09:28:88:ab:e5:d9:9c:a9:bd:b4:
50:99:cf:b3:f4:e3:c8:4b:74:d0:71:75:87:4a:e1:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:66:34:1E:82:77:23:74:AF:7B:F7:FC:16:03:72:05:83:80:87:D8
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9c:fb:90:47:e0:14:cb:c9:44:68:93:eb:5d:92:66:b4:92:
0d:83:2f:fc:fd:fe:d2:08:0e:af:b6:7e:0b:33:50:54:2a:6e:
db:ef:04:71:f8:52:44:1a:cd:e0:a7:70:23:12:be:47:56:62:
ac:ae:1e:26:7b:b0:fc:5d:61:c5:58:ea:92:24:55:8f:8a:43:
18:7b:0b:7e:ae:d8:47:70:d1:14:25:80:b6:c2:76:02:44:1c:
dd:33:84:8d:2c:e9:6c:8b:72:56:24:34:a2:1a:19:40:f0:af:
07:31:d4:4e:a8:ef:b3:70:41:52:95:31:61:91:08:98:46:63:
56:ba:dc:b9:13:c2:9e:a9:02:cc:74:4a:31:ca:78:a9:df:81:
0d:cc:19:fc:1f:91:dd:a5:f6:8e:f8:d4:a6:b4:90:45:85:9e:
8c:ba:85:63:69:c2:08:4c:61:13:b6:d0:92:46:9c:bf:09:62:
89:c2:c1:07:80:73:0e:26:80:6b:c0:58:21:90:71:e8:e5:79:
aa:6b:4e:9d:e7:ac:5a:ea:30:8e:63:ce:d2:c8:49:8d:37:e8:
be:a5:62:67:75:11:33:44:88:1a:57:1c:e1:ac:a9:7b:bd:97:
2f:25:96:ad:c0:0c:b5:1c:7c:f2:42:6b:29:d7:e3:1d:e9:41:
27:ff:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:23:50 2026 by rpki-client