
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json)
Hash identifier: FJGwmm3qFDyk7shN522oS3KVe6f19aDoiy5TuFpMTg0=
Subject key identifier: E6:0E:74:3F:D3:CA:F3:E7:C8:70:48:33:0D:F8:5D:BB:B5:92:DF:42
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 01A0D570A634F3F56FE912505ADB48F6B451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
Manifest number: 1A7A
Signing time: Thu 24 Sep 2026 22:02:04 +0000
Manifest this update: Thu 24 Sep 2026 22:02:04 +0000
Manifest next update: Fri 25 Sep 2026 22:02:04 +0000
Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: c8fOQJRL6dlaZnh01FlYoliHCcIuJ7B3+btVWhu6GnU=)
2: 5DaV4gudkDeBpkpNjorFjKdwKas.roa (hash: 9p8+UHTs/RBIZPqnbM430sMtYPmrN12mqZCcC9V+LKI=)
3: GUFmBdi0_Y_tG7LWELBPh9QEM9o.asa (hash: ZMR4mH+eqRB4yaYaBEAA+Z5mr/sJpbjQJrZ/3hcHthA=)
4: NXcDx5Sh25pDfJxJSkQVgnYIs4Q.roa (hash: iydF4IYrO0jpMLNCVz/nzmnnrXkl06goqTATkMGnBns=)
5: PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa (hash: AjAU0i8BrIwCW5B50+6SMIS7/KHtVI1eqRb3YHJQN80=)
6: PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa (hash: xcQLOrHxGLRq/OYf2oo8JfChvAAfg4ixHJ0AkaTe8sQ=)
7: UCPHMmyCJR4JmPeGnCgq8nfbn60.roa (hash: p5d6kd0pgtOUZ1UeSMMJANP3mYr/gpl0DKc8A48nhnk=)
8: UbMfCzQPRA-kXXe02IoFpUNWHRI.roa (hash: Y+LpUOlGM6jHvhHw5voeozmV7CMx8mnBHn3GF0Ey7Mk=)
9: duDdMIsWaX3Qv6Ulhf1btV1iznY.roa (hash: 8VGr6lGBwXaEA0xjsXJFLABQFwnIWckpws1DFvMKFV8=)
10: tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa (hash: QuIvgGmxEmrKFzj/tALJgGDhMmAZX/608ZoICxEakwY=)
11: u5FKfMgZNEwRxNieZ5Cq5Wc0Bng.roa (hash: logMCehLES5I14Fvvq1Wfet2WZemmEdMO+ZvgR5D7JY=)
12: uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa (hash: BfFc9lt0STbJmAF8lGnEz5SYrhiI62mYVaN3nT2PLtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:a6:34:f3:f5:6f:e9:12:50:5a:db:48:f6:b4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Sep 24 22:02:04 2026 GMT
Not After : Sep 25 22:02:04 2026 GMT
Subject: CN=e60e743fd3caf3e7c87048330df85dbbb592df42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:7e:c4:4f:63:bb:a8:69:9a:35:07:82:34:
fe:05:01:91:0b:07:d9:18:5c:d1:c4:52:53:e6:db:
49:1c:e7:97:76:13:a8:a4:71:f5:0f:3c:24:b5:ea:
8c:c6:f6:99:56:04:b4:af:02:6f:72:e0:3a:1a:40:
5e:b6:45:ed:a3:1e:cc:2e:56:db:3b:07:f4:ad:a4:
1f:c9:da:91:aa:42:fb:c6:80:7d:9f:14:bc:82:b8:
f6:fa:a0:2c:ca:54:88:75:f7:50:18:6b:36:f4:5f:
f0:79:29:62:94:35:a1:6e:ff:be:0e:6e:5b:f5:08:
61:8a:98:de:c1:f0:52:60:50:52:ac:5a:b2:f1:73:
9d:77:53:00:88:19:4a:3b:e1:fd:b5:5a:20:7f:c6:
4d:4b:db:e4:59:1d:af:e3:f8:b0:5b:5d:2d:b0:fa:
30:6d:60:77:de:51:15:8f:de:71:35:42:05:9d:aa:
41:8a:d7:fe:57:86:ff:02:b1:8c:d1:8b:57:6a:45:
0d:d5:36:b6:5f:17:e3:e7:c0:fa:3e:79:91:c1:42:
77:b7:5c:98:24:fa:b4:1a:a2:02:5a:32:b0:80:7f:
8e:71:07:64:5e:72:4f:26:0e:39:fd:95:77:fa:1f:
9c:12:be:0c:be:fa:46:85:ec:26:65:ba:23:66:82:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0E:74:3F:D3:CA:F3:E7:C8:70:48:33:0D:F8:5D:BB:B5:92:DF:42
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5d:6a:24:84:51:06:45:19:c6:c0:e8:5c:de:f2:61:4b:be:
5d:9b:e0:c8:c7:b2:e5:41:d7:b3:af:1f:7a:b8:d6:93:43:bb:
c4:14:0d:43:b7:6d:94:78:04:bf:6a:18:58:ca:26:b9:af:9e:
55:c6:fa:f5:c1:62:be:3b:c5:3d:54:14:30:0f:92:fb:1a:36:
45:44:95:cb:06:38:89:ba:00:83:31:24:eb:6e:ea:6c:a1:e3:
2d:8a:dc:84:53:f3:2a:8f:47:b9:5e:90:96:c3:f3:85:af:1b:
cc:68:ac:25:9e:dd:e1:fe:a7:ad:e7:6a:54:f1:50:66:88:4b:
6a:9c:1f:fb:a7:ac:44:ca:65:24:0b:bc:54:92:5f:f0:06:22:
03:4a:1b:6a:39:44:6c:7f:cd:3d:9d:e5:ec:f7:3f:ce:28:29:
a5:56:44:0e:20:38:c5:06:22:d0:9b:42:5f:42:70:a3:b4:87:
80:34:f5:58:f7:a3:18:84:65:52:94:b2:2c:d2:55:09:72:40:
68:ac:f5:8b:06:92:77:2a:1d:6d:4f:61:26:74:b5:4a:b4:26:
ca:ac:cb:48:49:35:d9:6e:c8:c7:0e:bd:3b:52:c4:34:3d:db:
c8:53:2e:89:f0:8a:a9:57:d7:08:00:cf:7f:d7:17:65:35:ec:
cc:79:28:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:34:53 2026 by rpki-client