
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json)
Hash identifier: 5LPCXCeLU4z/vvYFebVTLUhCUnU+hN5PNnotunLS4Nc=
Subject key identifier: D3:70:A4:73:9D:25:F8:E2:90:95:E7:65:F7:34:DE:EA:D6:6D:80:3B
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 019F927EE2832D6B508B098A6028EBCEBACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
Manifest number: 1969
Signing time: Fri 24 Jul 2026 05:00:16 +0000
Manifest this update: Fri 24 Jul 2026 05:00:16 +0000
Manifest next update: Sat 25 Jul 2026 05:00:16 +0000
Files and hashes: 1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=)
2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=)
3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=)
4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=)
5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=)
6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=)
7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=)
8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=)
9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=)
10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=)
11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=)
12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=)
13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: CyqxHfAyN/zydjn+0kl1GQDAJktnDjcRk+UqzlzBm6c=)
14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=)
15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=)
16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=)
17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:e2:83:2d:6b:50:8b:09:8a:60:28:eb:ce:ba:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jul 24 05:00:16 2026 GMT
Not After : Jul 25 05:00:16 2026 GMT
Subject: CN=d370a4739d25f8e29095e765f734deead66d803b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:73:05:9b:28:d5:16:f1:82:c0:c1:ff:a8:
c9:27:63:33:e1:a5:fc:9a:18:cd:58:cf:d8:5c:a3:
e2:02:17:14:da:03:05:1e:0f:bf:2d:5a:7e:18:61:
77:77:95:82:43:f8:c2:5f:96:c4:14:1d:19:0d:5a:
9c:70:f3:13:f4:30:06:88:73:48:a5:1c:c0:bb:cb:
82:6a:c3:2e:09:72:c9:61:4e:8b:86:8a:06:8a:4d:
4d:90:66:29:ec:51:b0:56:5a:8d:9a:27:bf:9e:cc:
ba:66:86:5b:bc:c3:0b:ae:11:87:6f:61:ea:81:7c:
6c:33:83:45:52:f2:12:aa:10:29:7e:de:7e:a5:61:
9c:ed:de:f6:87:d1:50:0d:f4:a7:a7:cd:47:95:04:
31:fe:d8:a6:50:77:74:13:42:e1:57:b5:a4:21:a6:
34:58:6b:94:62:d2:d4:03:40:3d:0d:16:5e:00:40:
8b:b7:10:6c:27:f1:8f:a8:c8:aa:c0:45:04:83:b0:
d3:4c:0a:20:e5:5f:b7:a7:89:c7:16:0d:86:8c:83:
70:af:b8:08:e9:6c:93:75:c8:23:5c:47:94:80:2c:
75:22:4a:4b:14:f9:39:9f:e5:8b:da:72:61:bf:50:
02:da:15:61:93:96:d1:2d:76:37:27:79:a4:93:c1:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:70:A4:73:9D:25:F8:E2:90:95:E7:65:F7:34:DE:EA:D6:6D:80:3B
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:35:66:56:c7:bd:e1:43:e8:9a:b2:f5:9c:5a:65:45:99:8e:
6e:4a:54:68:81:e6:10:3a:40:84:1b:03:85:61:51:d3:98:7e:
66:ad:75:46:9c:5d:27:63:28:f9:bb:a5:7c:8c:97:eb:dc:91:
d6:1b:39:fe:4e:b9:d1:24:9f:de:46:9f:1e:da:e6:86:b1:ff:
42:67:86:36:3f:59:20:15:42:ea:da:a3:9b:34:76:88:04:6b:
ab:95:3c:2d:9d:a7:a8:4f:5e:32:e5:cc:12:93:1a:3d:3f:81:
88:99:68:fb:b1:62:6e:75:d2:8e:b1:ce:e6:7e:6b:18:df:17:
3d:10:d3:cb:f7:0b:5f:cf:b6:95:ef:ea:94:87:a9:03:d4:ee:
82:fc:57:ee:45:5b:24:4c:b2:18:96:6a:e2:c9:d3:a3:2c:b9:
2e:11:8c:95:f9:b6:d6:94:1e:e7:f8:b0:1f:f2:fe:58:14:ef:
a2:0f:0f:c7:17:65:08:7c:84:d9:cc:85:42:cc:8f:0f:be:81:
4d:6d:35:52:d2:5d:42:66:84:d2:6e:9d:a0:3d:86:ed:a2:ff:
48:ec:d5:3d:f9:b7:cf:46:e2:82:9d:a8:22:5f:12:0d:aa:48:
e6:63:83:77:05:3f:8a:5d:43:63:d9:fa:b4:a0:a1:10:ee:d8:
a9:f9:b2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:30 2026 by rpki-client