
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
File: g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json)
Hash identifier: McN5mLbNU8FWDUTwQ5JW/1aO1wfZQcKr5YA5+4+4LfU=
Subject key identifier: 6E:9B:7D:12:11:CB:CB:DB:7A:9F:0F:66:A8:8F:41:2F:6B:0F:9F:B3
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 019D2583885183FC29F171F4735B2A96DBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
Manifest number: 18A3
Signing time: Wed 25 Mar 2026 15:01:10 +0000
Manifest this update: Wed 25 Mar 2026 15:01:10 +0000
Manifest next update: Thu 26 Mar 2026 15:01:10 +0000
Files and hashes: 1: 1--JUDppRbu7T0stV0TMFX_JdJqk.roa (hash: 7ElxaU2FrJVBWuFjmaI5WPADPHQpzQarn/tOamW8ol4=)
2: EmYDSnJqctRpN9CEhV280CiZiZE.roa (hash: ijsmLasEnX5vmRmeCLWwnkIFdYfKeY7/Yqd7k5nDgPo=)
3: GvIMpzg1BrWyJZnNUgc-c9Cv_wE.roa (hash: QqPKk6SddSUzOWwAEp4MtmTKN+FX4BL1RGH8TdopCcU=)
4: Hxy4OYK276xESCf3Anb_fwGbVFA.roa (hash: OEZqLe2GA3/g06uklHFF+Qr+gAumMT+wNuHWtE1vS0I=)
5: MywVTrCitZ0jjbFx7Ww-pldZ2-E.roa (hash: 3AQWbOwtzZshqM3V2nv18YVl7dRi4sEO32WjYpoQrG8=)
6: P5DeZi-NZPhI3zAbu6P2URQXDh0.roa (hash: 3xwHLPA2O8drb+zjl4yg8vS/CGvVdoGiWmy4gUvfoNs=)
7: PvOMcu6kkYu1VaD3XwX_1ePatyY.roa (hash: FOWoO0sh/7LnR+o/5+ENcU9IVroksYKfAOK89ZHzs8M=)
8: ToR3l5gVKWkh1HkCQfxhW1CzvWY.asa (hash: 5/XdBKo+IhaBicLeby9UMqaBA2rriEbXlfvupBlSYZ8=)
9: WdDfR5pgm5GQzeAWXeQkEcP9Als.roa (hash: PHS7Fi2QuZ8k4rtqstAGppZfNcCEvjMbriLsQWM1JoU=)
10: XUgse1SVG2LYV88Lp4UVNGgo6_8.roa (hash: g7ViDtzqv8KPcw50VAZhPz4xcsCIQITUrXQJTHZp81Q=)
11: ZATmFCtd8TVNPFHFtlKcgu_1kXI.asa (hash: ffc+j89Ft70Ls1O6VR8vGw8bdjW94XVRvBxoyjZyeVs=)
12: _XRghfMhYMaDoIUQgdxTV1nl8Zg.roa (hash: 3r32wTlW0UwBU+wmGMDkMPZxoYROHjLHE8xLGZOKfig=)
13: dID3LhBrOI7h-JjxBCDXGS6Ka90.roa (hash: Rx7lZVpO1Kcn3Rd9uI0ZIiOCJf4fpdx1CaamZMAapoY=)
14: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: 0WzDXiGyReKbZKCijYqY7BeM6W3Y3kuUQVOI/Zws9/U=)
15: h4qnmgZvvV6hazj9Xn7cghOv6uI.roa (hash: vjv4+ammuobmFm2l5IQ69DMODD0qU4CxTRycj23fFCA=)
16: jNJqMoNe0ELonaLE9cyhu3Yf3pU.asa (hash: /h+Wu3UV9kCep/2/ugXh+p8eqjm47dE0wFhPV69CpbA=)
17: jPosKpC4jbWbnigp_N_xbEGwtdU.roa (hash: PKivQvn7H0k9WsK5zKGzhI4jllClxyjJNOUB8aA/6s0=)
18: o5BKntmZ9JtZu-kMInHB78iso3o.roa (hash: y3nwxUjTAtP6jlMnZQwlOLiitgv+xb6KltP0aX7WOCQ=)
19: uCNLYkMpygNunXFvH6vpKE2NN28.roa (hash: jZxZzuY2jmV8G4KIhZiQuYNw9N0R/IOj9mu4mI2n1s4=)
20: vc3_2HwZU1b1IDix6yqY246HGsI.roa (hash: C2RwLxlNEFwKzGr5sfPtGfDi2mMkvqCKZMvxOHJKA+M=)
21: yhnCcvMGfFoTZMf1oJ6P5sYzLfg.roa (hash: mwt4irHC6GhVnuZ5Xr0w1wBWRdsXBhU6yRY/gWgSeJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:88:51:83:fc:29:f1:71:f4:73:5b:2a:96:db:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Mar 25 15:01:10 2026 GMT
Not After : Mar 26 15:01:10 2026 GMT
Subject: CN=6e9b7d1211cbcbdb7a9f0f66a88f412f6b0f9fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:d4:b8:aa:32:84:27:be:c7:48:cb:59:8f:
ca:cd:62:c9:14:11:18:d7:b1:f4:8f:6d:c9:a0:e5:
5b:fe:5b:24:c4:5f:e6:d5:51:bc:98:8a:da:44:05:
17:cb:c3:3a:f3:74:ce:d5:37:cf:3c:a7:03:4c:1b:
b4:cf:5d:1a:89:00:87:6e:f9:77:88:8e:ae:f0:68:
7d:fa:17:db:cf:e9:5d:d8:2d:b9:2a:47:be:30:d6:
b0:29:43:ca:e9:23:17:cb:b0:db:4a:8e:aa:09:4c:
51:86:d6:fc:46:46:1a:56:fa:5e:0c:d6:59:75:21:
f1:74:53:31:05:59:a3:a2:a0:81:a6:7a:f1:80:78:
75:9d:8b:b7:d1:51:9b:c5:9d:bf:33:5e:ea:89:21:
c8:6e:2f:00:e2:b9:a0:9d:18:3c:d9:b5:27:5f:1b:
de:cb:36:68:37:5b:76:59:60:99:48:3c:bd:3f:10:
e6:70:bd:59:ea:53:3d:5c:5d:b5:94:6d:78:64:18:
60:1f:0f:0b:b3:21:c4:8a:75:a1:b2:e4:f2:de:f4:
50:52:6e:c3:5f:cb:b7:7c:89:de:47:52:74:4e:9a:
ea:2f:d5:05:2e:89:2e:92:cf:e7:7f:f6:73:b4:8c:
bb:41:f7:d3:d5:cf:f6:82:1a:b0:fa:7e:bc:23:41:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9B:7D:12:11:CB:CB:DB:7A:9F:0F:66:A8:8F:41:2F:6B:0F:9F:B3
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:72:c6:9f:51:c6:16:48:e9:bd:5d:11:3d:66:64:aa:ce:b0:
33:59:07:4e:9b:8a:2c:24:09:fe:1b:71:30:f3:d9:e3:17:00:
1e:1e:b4:c0:3a:7d:c0:42:1c:15:d1:37:a9:a0:df:1d:5a:31:
13:f2:65:f0:05:08:2d:ba:b0:e3:a3:9b:ca:01:30:92:6c:a3:
e5:5e:50:58:94:00:57:b8:2b:04:5d:99:d0:57:c4:c5:4c:bd:
29:35:9e:53:3a:bf:c8:43:05:6b:2b:61:25:ed:eb:55:30:9a:
5b:d8:16:26:74:c8:ff:fb:10:cd:e2:01:d4:69:02:b7:63:60:
c9:f6:d9:72:0f:a3:10:1b:8a:47:96:cc:03:67:79:cd:1d:c4:
41:c6:00:af:5d:ba:89:cf:86:eb:fb:20:86:7a:6d:f3:db:b4:
ca:31:50:62:ed:6c:64:86:6f:67:ab:b9:14:dc:5f:e7:d3:49:
ac:67:f5:cc:2e:16:8a:7a:b3:2a:f8:87:0e:47:23:0a:3a:59:
ba:bd:d2:2b:f1:59:b6:1f:23:e2:da:77:80:6a:d5:03:fb:e0:
ee:a5:da:ce:6b:c9:aa:03:32:ec:99:cd:25:a7:25:89:22:39:
6d:9b:f7:de:4a:46:e1:bb:30:b1:9b:58:e3:da:9b:c3:c6:66:
18:70:62:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg4hRg/wp8XH0c1sqltvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy
NDQ4MGYwHhcNMjYwMzI1MTUwMTEwWhcNMjYwMzI2MTUwMTEwWjAzMTEwLwYDVQQD
Eyg2ZTliN2QxMjExY2JjYmRiN2E5ZjBmNjZhODhmNDEyZjZiMGY5ZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2LUuKoyhCe+x0jLWY/KzWLJFBEY
17H0j23JoOVb/lskxF/m1VG8mIraRAUXy8M683TO1TfPPKcDTBu0z10aiQCHbvl3
iI6u8Gh9+hfbz+ld2C25Kke+MNawKUPK6SMXy7DbSo6qCUxRhtb8RkYaVvpeDNZZ
dSHxdFMxBVmjoqCBpnrxgHh1nYu30VGbxZ2/M17qiSHIbi8A4rmgnRg82bUnXxve
yzZoN1t2WWCZSDy9PxDmcL1Z6lM9XF21lG14ZBhgHw8LsyHEinWhsuTy3vRQUm7D
X8u3fIneR1J0TprqL9UFLokuks/nf/ZztIy7QffT1c/2ghqw+n68I0GMAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6bfRIRy8vbep8PZqiPQS9rD5+zMB8GA1UdIwQY
MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt
YjM2YTI0ZDM5NDI3LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3
LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnLGn1HG
FkjpvV0RPWZkqs6wM1kHTpuKLCQJ/htxMPPZ4xcAHh60wDp9wEIcFdE3qaDfHVox
E/Jl8AUILbqw46ObygEwkmyj5V5QWJQAV7grBF2Z0FfExUy9KTWeUzq/yEMFayth
Je3rVTCaW9gWJnTI//sQzeIB1GkCt2NgyfbZcg+jEBuKR5bMA2d5zR3EQcYAr126
ic+G6/sghnpt89u0yjFQYu1sZIZvZ6u5FNxf59NJrGf1zC4WinqzKviHDkcjCjpZ
ur3SK/FZth8j4tp3gGrVA/vg7qXazmvJqgMy7JnNJacliSI5bZv33kpG4bswsZtY
49qbw8ZmGHBi+g==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:19 2026 by rpki-client