
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json)
Hash identifier: iGn9GbG6zG//C5h9YtBOZecxhwN6k5jltt2lFwWCywQ=
Subject key identifier: C9:BD:86:74:4A:65:85:70:72:0B:50:B6:C6:EF:77:D6:36:54:85:AB
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 019E1F10AB69CF112B921EB778E9F4EFF25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
Manifest number: 14F0
Signing time: Wed 13 May 2026 02:00:46 +0000
Manifest this update: Wed 13 May 2026 02:00:46 +0000
Manifest next update: Thu 14 May 2026 02:00:46 +0000
Files and hashes: 1: 6qBOGIzy7SiE5aHoDtHWinTh2oI.roa (hash: KwYB7/zyOeuIegeDk01/5M8IIa6sVcCvAJ0ZuQL1yIE=)
2: A3dfbS-b6385QXbD4gqPyZDygnI.roa (hash: eMk+m8VzfNpB4AhSwjxnwTq5SWYabewWTjTtFBj+jG4=)
3: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: tpoMKSq/5jtbNLM0+FZsXfS0HEy9fNJR4CsOZVpkOlg=)
4: M3X3dm-8It7aMXQj1y54UfL58OM.roa (hash: 7bUApRHysWlBDgJo+0traB3WXa7dB6bicxRUCK/I0eI=)
5: RxzZhT8fBiEGIwzJcpEaVq4187g.roa (hash: hquVSPsZNeqlCDz0r9h6cmg+2UHwUyJ0mqDqk+VOViY=)
6: URKvTjDp4aRxdSZ3jqDjwv8D8go.roa (hash: 0rxLDrLwqqP9CnkuagDXnUpxuRr/vAmcV/9SQj91sog=)
7: VIoe5vtniIMNu_oPEWff-lwSqrw.roa (hash: 3k0VjZdIDMeiSnCUwM6+f+LSTU02mg7Bx1Owb60WuIE=)
8: _eOaEicMkKKbiwUmCfYmS46987o.roa (hash: BD38gTS64MApM1VCH/ZNlIeeCLbbXCbnCN+Xqd56/3o=)
9: bSb1vKlFqm6Lgoy9mUt1MbjszKU.roa (hash: 8Rm1aKWGejiopvOQal7M9IGwEZUMfEE7E/dgp4snH3E=)
10: ecI9WwfCcCzWrmDmHhs2EyFDQJM.roa (hash: F5YXv2pp9vRYKIztKcSv4xzwJ07F66Zhmicw5zjO8J8=)
11: ft0VCR9IS3VMAgUDh10GOu9PLZE.roa (hash: 2folTB1j+SZaT+1+FVh+nOf0J1JfCJxhCtpk4te0AZM=)
12: ktxPtq6QBIdiSOZ68pA9GADZGkA.roa (hash: nKwrZvWFwYhUKsU2Xr6N7bIKsHUx8g94vR6U6JSn7Rw=)
13: oDF8isOJjyEJhYEJCgEsnjBbHWk.roa (hash: 6eDaCiZYBtD9bJDiBCS6z1HiWa8aHX6Yc2oe3UfDymI=)
14: wdbxHLFVBNdWh2qGHilCZZD7-g0.roa (hash: 90fXHeqU2neAZl01CJ/fB5l+GTvQAN5HQEWOMc2pyGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:ab:69:cf:11:2b:92:1e:b7:78:e9:f4:ef:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: May 13 02:00:46 2026 GMT
Not After : May 14 02:00:46 2026 GMT
Subject: CN=c9bd86744a658570720b50b6c6ef77d6365485ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b0:95:4a:71:88:10:2c:61:7f:e5:ef:bc:41:
38:61:15:2d:bb:44:31:1c:41:5a:d9:f4:23:74:c2:
c2:8a:08:e8:b7:31:60:b3:f9:db:c9:b8:65:e4:d6:
69:cf:b2:f6:c1:a2:25:50:6d:f1:7d:c0:21:84:dc:
98:d5:1f:1a:3b:73:39:f0:f6:6a:fe:3d:d8:c8:ae:
a8:0f:6f:36:45:b9:b6:2f:9b:7b:ae:15:52:f5:bf:
1a:ba:47:28:07:35:c3:0a:7e:3e:8d:ca:71:73:65:
b0:a6:8e:e1:77:3e:6c:28:6b:38:9e:a7:b1:94:b7:
c1:cd:ef:72:d7:02:78:08:67:28:ee:94:79:d1:54:
b2:9e:db:db:9a:00:de:97:5c:10:ee:f3:36:53:a7:
1e:42:ca:5a:35:90:01:4d:c1:de:dd:f6:d5:8c:18:
a4:a7:e5:87:5f:5b:7a:25:96:33:68:ce:7a:db:cc:
07:d7:32:dd:f2:77:df:c9:2d:d2:db:26:7f:cc:cd:
bf:1a:dc:75:5b:a9:23:3b:b1:72:41:16:b3:be:f8:
2e:c4:f0:6f:42:fd:db:99:d3:7b:e4:44:fa:10:ce:
e0:e9:b2:46:ff:29:2b:3d:2b:c1:9b:c6:2a:7c:9d:
14:36:b6:eb:45:52:03:27:c0:05:b6:f6:4f:bb:32:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BD:86:74:4A:65:85:70:72:0B:50:B6:C6:EF:77:D6:36:54:85:AB
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d6:64:fe:88:01:e5:5d:6e:fe:39:e3:d0:d2:0e:4b:8c:3a:
b7:21:30:fb:6a:5a:cf:c9:59:d9:bc:68:cf:05:cb:d8:05:8e:
82:2d:24:c3:f0:9b:d1:95:9a:4c:87:11:a9:1e:c9:e3:d4:b9:
4f:e2:55:0f:9a:31:48:64:7b:ad:36:cc:f2:66:9a:2e:70:e2:
9d:ec:ab:a2:50:a6:a8:28:79:83:d0:47:a1:60:6b:60:e0:12:
9c:c9:a4:94:32:f4:7e:e6:bc:3a:5f:3c:d5:4d:03:bd:7a:f5:
38:d5:92:5a:31:32:c9:7b:94:bb:4c:e6:dc:b6:3f:9e:bf:f9:
d4:43:8c:cd:8a:1d:be:0e:63:63:37:0d:00:b8:fb:74:65:66:
ac:a7:a8:da:e7:af:95:3e:81:43:50:c7:cc:65:90:ac:26:b0:
88:98:4e:e0:34:d7:16:99:90:fb:8e:a2:81:bd:b7:be:e7:d2:
87:74:08:00:c4:92:3d:10:be:90:12:5e:40:bd:7a:b7:44:b6:
6f:dd:e9:95:2b:a5:45:8e:50:d6:cc:08:48:7a:8b:e4:14:19:
97:90:b5:32:14:20:cb:7d:6d:d3:d5:81:31:ee:7c:8d:9c:e5:
3f:ac:19:45:1e:8a:5c:24:ec:60:fc:09:d7:3c:81:a5:a9:ca:
30:19:78:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:34 2026 by rpki-client