
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier: KyamEx2y+E9eIZRPEwDjc1aMVQo/VkTUmQupvW5pN4w=
Subject key identifier: BD:27:2E:E5:F8:8E:8F:68:83:C2:C6:E8:9F:B3:4E:1C:F9:D8:1C:5C
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01A1DA5CDE9F1EE815F1B7F75705B5BE41DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number: 134E
Signing time: Sat 14 Nov 2026 14:01:21 +0000
Manifest this update: Sat 14 Nov 2026 14:01:21 +0000
Manifest next update: Sun 15 Nov 2026 14:01:21 +0000
Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=)
2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=)
3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=)
4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=)
5: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=)
6: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=)
7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: k56KgLB4DVQJcBHm7YG3w8YSgC5B+qFHI/5BG7Htp98=)
8: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=)
9: jFJe3jl_QcpRM-Nhwh499UXzHl8.roa (hash: 4ZP7K3NzaQIb5Oo5+GVsX5DHhCL0Z9KsvPv5i497LDk=)
10: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=)
11: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5c:de:9f:1e:e8:15:f1:b7:f7:57:05:b5:be:41:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Nov 14 14:01:21 2026 GMT
Not After : Nov 15 14:01:21 2026 GMT
Subject: CN=bd272ee5f88e8f6883c2c6e89fb34e1cf9d81c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dd:ad:b9:de:4b:44:85:11:35:cc:d7:2a:e4:
ee:9e:32:0d:40:25:d9:eb:cf:4f:e4:0c:cf:ce:84:
34:22:83:f8:ed:32:8d:68:e5:ae:4f:1d:a0:a4:04:
ee:6a:2c:51:51:74:ae:b4:3b:b9:bf:5f:c4:dd:7d:
19:8d:3c:8d:b5:25:75:ed:a7:09:9a:1a:4f:7f:89:
1d:67:28:59:42:c9:f4:77:49:6d:08:c2:7d:fd:c2:
b2:3d:d7:06:dc:fb:08:f7:33:ea:87:b2:7b:5e:0c:
31:f7:02:e6:e9:86:1f:a7:32:26:9f:91:ed:c4:89:
dc:fd:72:61:4c:fc:cc:1d:e4:85:11:64:54:6e:1e:
97:33:2c:84:da:a6:65:10:7f:f8:cc:af:5b:82:5e:
ed:fc:f5:b7:4c:03:d9:45:79:1a:65:27:ca:ae:eb:
ba:3a:5d:b7:9d:6f:df:7b:e5:30:64:22:e0:fa:ef:
33:93:3f:3b:50:df:6f:e2:9c:6b:92:26:74:63:f0:
22:e7:e9:a7:96:0c:a2:6d:a6:32:f4:50:18:4e:2b:
21:f9:ae:96:ec:b2:4f:92:b8:e2:e8:d1:e2:e9:26:
34:f0:a5:62:16:48:38:6f:74:b6:fb:fd:40:6a:7a:
33:fd:5d:77:74:a2:fb:a7:c1:21:ac:b5:22:1e:b6:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:27:2E:E5:F8:8E:8F:68:83:C2:C6:E8:9F:B3:4E:1C:F9:D8:1C:5C
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5e:c5:a9:f2:23:04:e3:19:43:7e:3d:cc:1e:40:b5:98:ec:
f3:13:1b:4a:b1:f1:c5:3b:c5:4e:82:6a:7e:5f:97:29:70:d9:
ac:fc:c6:13:19:9c:40:8f:f0:91:a3:99:75:c8:a7:fe:04:a0:
dd:ca:19:4a:74:93:1e:b5:63:04:52:02:17:3e:61:b2:3c:d2:
57:08:df:e7:1f:65:7c:c3:91:72:ad:bd:8b:ca:5b:c1:07:4b:
8c:58:7b:13:39:68:c2:fd:e1:37:2d:c4:a4:5b:4d:12:94:1d:
13:8a:9c:9b:66:c1:5e:8f:0f:1a:09:d9:fe:87:f5:79:8a:25:
e2:31:7e:45:e2:d2:8e:83:82:c4:19:54:ba:10:96:95:29:c7:
38:aa:ce:af:b5:dc:58:04:e3:5a:9d:4e:24:a5:82:d9:98:80:
7b:50:99:6d:93:5c:91:70:d7:15:a9:02:ea:57:05:b6:ad:04:
d7:f5:e1:a5:13:bc:04:3d:a1:b9:bd:5d:ff:35:92:48:a1:ff:
b7:a6:54:19:84:8e:fe:14:50:23:fb:9b:6b:c7:49:60:1d:68:
c1:95:53:4f:ab:9c:16:75:38:1d:34:83:a1:83:21:c9:f4:2c:
b1:b5:b3:59:67:df:ab:31:19:5c:41:2a:09:ac:a2:d6:e2:45:
19:68:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:37:24 2026 by rpki-client