
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier: ixkHownpEKVcrLrZZGozIyT20YKJmbj4kQUWIlrQjAo=
Subject key identifier: A7:F1:BB:C5:64:2E:D5:A8:49:63:9E:94:50:92:E9:E0:64:30:E7:BE
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 019E1FECFA49176C9EE7CBDE55CADFDC67CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number: 161E
Signing time: Wed 13 May 2026 06:01:24 +0000
Manifest this update: Wed 13 May 2026 06:01:24 +0000
Manifest next update: Thu 14 May 2026 06:01:24 +0000
Files and hashes: 1: 93mM6QxMc1an-bwW3LgyZk3M8KU.roa (hash: pjNQiR78vQpJ1+nXELLCemTt02qTkznGGwvvqHeDahg=)
2: 9_XCzJVQ0vHT8hA7DULO66uGe5o.roa (hash: cJQG6xW1gdrrjMHUKHp2S/TQBEdZhKtS4GkWHUfZeGc=)
3: INXHJDHDB1ukzYRaA3EidD_0aQ4.roa (hash: Z2x4wj/CdGVnD9ySadsV++WZwVQOZWizFudROy88bRQ=)
4: KJMJ77kQuoG9cpUlP7ImSAxxrC8.roa (hash: K2EGS70mhDKfj9roByjDWB46Ks+HmqgyJLsqPE6aR0s=)
5: Lyc7L5ENNnNmeFFiP13mgBm-teQ.roa (hash: gtEddttCg6evm5ZoDlDkaU8NOuk0QknemDaWTdJCohQ=)
6: diWdBr8Lw6nPV-tMvOf0Cna3ipc.roa (hash: iWodsL01tWCHUx+C3pbxQzDdBQEdtQ4RhYGFNEL8TgE=)
7: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: M/dTIEDSc3tel/EV2wprIgbNcQXSxRPxDJT25nEbG84=)
8: kDHc3reVMJPLgu58itw4ZupB-4Q.roa (hash: QwLu7BES2xuFPZdD76Beo2u1lAJTYierBEEu5vEPTTo=)
9: o-lwE03BQjuSCoHPvrungn8RW5E.roa (hash: 6jhTwsjRV3a0rHOssSDB/4JB3N1eJdRGn/9ePaST8TM=)
10: polvb4mWJFtYlmCnCQgjC3KNjFM.roa (hash: ok6ZqIcHmI5POEVYtqUr4M7uhrPkkTSbl73JjPBOL34=)
11: tnYABoJMY7Wi-wWcLi2d_oJP6jQ.roa (hash: GWuYZQOsyi/Kep+VibmM7lp5ukM+ocv9ZUuI4km8O1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:fa:49:17:6c:9e:e7:cb:de:55:ca:df:dc:67:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: May 13 06:01:24 2026 GMT
Not After : May 14 06:01:24 2026 GMT
Subject: CN=a7f1bbc5642ed5a849639e945092e9e06430e7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:5c:f7:f7:dd:e4:c9:ce:0f:f6:52:94:17:
7e:6a:a5:ab:5d:cc:fe:69:24:70:e2:bc:17:f6:fb:
6c:78:c5:b2:c1:f1:a0:3e:cd:8d:9f:e3:3f:78:c6:
fc:05:e5:46:48:39:7d:fc:e1:4b:4a:48:b9:c1:ce:
fd:97:4d:0f:cc:13:bc:37:07:68:bf:34:d7:1d:63:
e2:27:d1:3c:1e:b1:86:35:99:1d:ab:14:2e:5e:d9:
24:4e:73:00:ad:a3:c2:4c:39:2a:80:e2:e6:99:81:
e8:42:ea:51:64:4b:bd:be:39:ee:b2:f7:05:41:31:
1a:34:d7:d0:64:c0:4a:54:bb:f8:d3:d2:49:42:b0:
d1:f7:f1:5e:d6:aa:e7:31:84:f8:92:56:7c:e7:b8:
8c:8a:4c:01:cb:cb:28:f4:17:83:21:94:58:50:de:
b2:52:c9:f7:5c:98:d1:ac:39:6c:09:f4:2c:9b:bc:
ad:db:07:eb:ea:c4:33:32:93:b2:41:62:d1:ad:77:
b1:7c:31:36:63:a2:d6:4e:0d:e7:63:0a:eb:cb:6c:
35:46:a9:17:75:e5:db:fe:92:54:70:c4:e0:94:4b:
d9:40:d9:fd:53:58:ba:01:cf:66:04:fd:00:62:11:
12:58:21:cf:2d:fd:91:33:15:bd:af:fe:29:2c:e2:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F1:BB:C5:64:2E:D5:A8:49:63:9E:94:50:92:E9:E0:64:30:E7:BE
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fd:3e:0a:e9:b2:f5:e3:ce:13:12:a6:fc:e2:2f:7e:e8:15:
4f:ec:d7:8c:f1:a3:55:04:7d:9b:a9:46:04:40:cf:4a:3b:7b:
72:00:97:3f:f9:7b:ce:59:b2:a3:90:c1:3e:2c:2d:69:05:ed:
d2:2b:63:bb:8f:71:30:81:cb:a6:a6:9b:79:99:e1:a2:54:12:
8b:30:13:9d:f7:70:99:d5:1e:43:25:9b:d0:aa:9a:16:24:98:
42:5b:25:7a:b4:86:61:5f:23:43:37:4d:60:25:42:1b:ed:5d:
bb:ac:8b:9c:8c:21:dd:98:d6:ce:af:82:85:c7:83:3a:19:4e:
5a:55:1a:f4:dc:53:c7:97:0c:c5:3f:da:21:d9:f4:1f:57:aa:
0d:e9:3f:69:42:6d:07:f7:8f:86:37:e5:40:8c:3a:d3:ac:da:
8d:57:16:51:28:6c:fe:a3:79:d0:99:0e:83:ed:b3:14:03:08:
96:e9:f9:ac:29:1f:96:64:24:58:bc:b2:b7:ea:64:0a:e5:fb:
00:95:1f:7d:2e:71:f3:7b:14:b9:78:31:b1:dc:3e:b3:6d:8f:
55:c8:5f:b3:d1:d0:44:29:f5:59:33:f8:ef:96:a7:74:d7:90:
df:e3:b8:25:8d:47:8e:85:5c:cd:e6:3f:49:eb:22:ef:3e:fd:
d5:a4:51:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:10 2026 by rpki-client