
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json)
Hash identifier: AJmlMY4RFSdr67aTBeNG021fu3ncYXocbtEIl4qt5zQ=
Subject key identifier: 3E:8E:91:77:AB:63:AB:88:7B:9B:16:46:5F:57:30:FB:8F:D5:6D:FE
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 019F8FEBFD142FD16FBB11130C51AC3B4050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
Manifest number: 19D1
Signing time: Thu 23 Jul 2026 17:00:35 +0000
Manifest this update: Thu 23 Jul 2026 17:00:35 +0000
Manifest next update: Fri 24 Jul 2026 17:00:35 +0000
Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: AYyol13CGavMMh5Ye9UcQNWyM6adSSn7aGMgaOGX8os=)
2: 4oZyLCfBt_PtcDqSB1D6VrV0TUM.roa (hash: 37kfxzMZjAEGlX1IGqlGrRZxkEO+b+KVXD2c+rB8lAQ=)
3: 5DaV4gudkDeBpkpNjorFjKdwKas.roa (hash: 9p8+UHTs/RBIZPqnbM430sMtYPmrN12mqZCcC9V+LKI=)
4: GUFmBdi0_Y_tG7LWELBPh9QEM9o.asa (hash: ZMR4mH+eqRB4yaYaBEAA+Z5mr/sJpbjQJrZ/3hcHthA=)
5: NXcDx5Sh25pDfJxJSkQVgnYIs4Q.roa (hash: iydF4IYrO0jpMLNCVz/nzmnnrXkl06goqTATkMGnBns=)
6: PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa (hash: AjAU0i8BrIwCW5B50+6SMIS7/KHtVI1eqRb3YHJQN80=)
7: PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa (hash: xcQLOrHxGLRq/OYf2oo8JfChvAAfg4ixHJ0AkaTe8sQ=)
8: UCPHMmyCJR4JmPeGnCgq8nfbn60.roa (hash: p5d6kd0pgtOUZ1UeSMMJANP3mYr/gpl0DKc8A48nhnk=)
9: UbMfCzQPRA-kXXe02IoFpUNWHRI.roa (hash: Y+LpUOlGM6jHvhHw5voeozmV7CMx8mnBHn3GF0Ey7Mk=)
10: duDdMIsWaX3Qv6Ulhf1btV1iznY.roa (hash: 8VGr6lGBwXaEA0xjsXJFLABQFwnIWckpws1DFvMKFV8=)
11: tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa (hash: QuIvgGmxEmrKFzj/tALJgGDhMmAZX/608ZoICxEakwY=)
12: u5FKfMgZNEwRxNieZ5Cq5Wc0Bng.roa (hash: logMCehLES5I14Fvvq1Wfet2WZemmEdMO+ZvgR5D7JY=)
13: uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa (hash: BfFc9lt0STbJmAF8lGnEz5SYrhiI62mYVaN3nT2PLtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:fd:14:2f:d1:6f:bb:11:13:0c:51:ac:3b:40:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Jul 23 17:00:35 2026 GMT
Not After : Jul 24 17:00:35 2026 GMT
Subject: CN=3e8e9177ab63ab887b9b16465f5730fb8fd56dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:93:05:4b:eb:18:44:a2:67:84:02:82:83:b4:
5a:dc:68:7a:5c:c9:d7:c1:90:8f:49:01:dc:e4:3a:
15:fd:15:9c:6e:07:84:54:0c:f1:98:84:36:d7:73:
07:b7:d5:55:e7:d3:39:2b:9d:38:90:24:7d:18:42:
ed:05:3c:33:06:84:4f:31:f2:4a:11:60:8a:8c:63:
48:09:66:30:38:97:fb:0f:25:80:e6:c5:05:d7:93:
dc:69:dc:7e:3d:08:ce:b6:d1:9a:08:b1:61:fd:cb:
c8:6d:80:2a:43:4a:53:62:19:18:57:91:fb:40:30:
51:bd:3b:15:8c:07:94:82:ac:0a:2c:8c:89:c7:42:
a3:8b:c4:0c:cd:15:65:05:09:e2:1d:46:69:5c:7d:
73:ee:8e:63:bd:33:3c:f4:11:7e:55:bf:89:c4:43:
30:61:0d:67:62:4e:72:9f:7f:89:ed:f1:ae:59:bf:
bf:e4:b7:7a:cd:d5:65:fa:d2:8a:b2:74:e3:d0:05:
f2:4a:d4:73:45:2b:5a:08:23:94:5e:8a:8f:1e:74:
b0:c5:47:6e:4d:17:c7:d7:52:4b:80:6e:87:f6:e5:
11:28:87:70:70:98:86:61:ce:9d:b1:c8:60:b9:15:
b5:f6:ab:83:70:6b:8d:67:eb:e5:61:9a:e2:a3:76:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8E:91:77:AB:63:AB:88:7B:9B:16:46:5F:57:30:FB:8F:D5:6D:FE
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:89:70:a9:5f:1d:f4:71:3b:b9:79:2c:d5:f1:a1:08:05:a1:
d7:69:3f:99:ae:27:39:5f:34:d8:2b:1e:40:b7:52:af:41:8f:
28:4e:f9:35:42:0a:97:5c:8e:40:80:40:10:9a:50:cc:47:ff:
d1:27:4b:78:54:1f:d1:09:a5:5f:b3:94:81:fe:ba:24:bf:bf:
2d:01:b8:66:25:9d:4f:d4:36:d3:ec:47:f4:fc:1a:f2:61:13:
b5:34:7a:92:98:52:34:73:b4:71:ee:53:bc:d8:fa:96:19:18:
0f:f9:9b:53:9c:9f:fb:8b:f1:e8:db:11:83:ad:41:78:6a:56:
1f:66:f2:ba:e3:23:f9:b0:24:6b:ac:78:85:26:24:99:e6:55:
20:a8:13:3b:5a:1f:af:8d:38:00:93:02:7a:9f:be:36:88:a4:
66:ce:73:e7:ff:9a:8b:9a:64:7e:b3:5a:bf:54:64:96:ca:3a:
04:7b:f9:66:60:be:a0:2f:ec:65:3a:46:82:e4:55:89:60:3a:
ed:06:ee:30:47:f2:2a:09:65:87:52:e2:a7:f5:46:02:d8:33:
3f:42:90:a7:c5:ea:fe:73:2b:d4:c0:11:97:e6:1b:05:b1:bb:
bd:65:42:d7:92:7d:ae:5b:aa:74:fd:bb:b1:35:ac:be:44:01:
2d:a5:31:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:36 2026 by rpki-client