
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier: 9P7qPkchOJ5AwRdTZMLywSvoZNoSwnK1q4NjEyeFahw=
Subject key identifier: F8:A3:31:4D:25:3D:7A:D3:3F:79:87:06:71:A1:14:0D:67:79:00:69
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019E1EA3B82052BF241B1FB3DBFC3C58A99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number: 0EAA
Signing time: Wed 13 May 2026 00:01:46 +0000
Manifest this update: Wed 13 May 2026 00:01:46 +0000
Manifest next update: Thu 14 May 2026 00:01:46 +0000
Files and hashes: 1: 1EgCfIUZHYf24SrWg9kAOto8Duc.roa (hash: AUpadmn7SxPiN/E2rAaCXCpLwYoRDkhN/Jxbn7p885k=)
2: CI5OA6QXqxDb_vQORKk6q2XDhKs.roa (hash: EhsJRsPXMO4K43zEnBLLLlr95wCN5evyvOqkDdEQez8=)
3: C_i3BFwSyufK3kEKnj8AwQJSM-g.roa (hash: RqeBg4qnPKs7LMu02pA0RKL7OpjvJCoQwZAVatnEMK4=)
4: G978p2Z4fjPEzTOjuXppglSIr4s.roa (hash: Nz/5Sv/BTu9yF7BMhupkYJxi7TJYJJ/JoGGvUftlZv8=)
5: GNGk2dk3owBh0t7XjA8lYKtdBNY.roa (hash: C0SSoQPsvhCvPcaamLjO8oeUMsL4lVyuJZ6NEzbK8t8=)
6: Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa (hash: pGrQx5S2KxHTpkTBouQo/IMtimjqQRdhpHgfquKymNk=)
7: M8jgCbSmS_f7pdpfIZJACPF9zFQ.roa (hash: pXnnl9PZijaHt9S33eJN6xuH7nQxj7MBnjM8e2gGQQQ=)
8: Ot9lzAsI_BYRWxJHShZ_sNy6TQE.roa (hash: okx1A4+uPrtu1VfsVJTCRu2rdB0eV794sdfC0zgIhxk=)
9: QFBIL98nhWZihq6X9otfp-26AW8.roa (hash: 7lXr8KdBRuxrgLdmbnp5sqy+5Eu7YOk4bILMk23Cxhg=)
10: UG4gN9aA_f7YEAcfB1dO7NY5_ek.roa (hash: nJyT2MQFpU6Fg7zPK7kL/FvpROU0th0KaXDPuCdaUZ0=)
11: YFekMV6k_znI9JX_sw8Tv3F6sTI.roa (hash: m5Hdd1gjDtnmRTylaY7LXFqGy5f9ant1wS9vgjPqwac=)
12: ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa (hash: yNA9Iud4iZ26wPkbKHA01kAUSSNsLVBFRoknHNyK1a0=)
13: aagIksMopc799P33hATJVhYhv50.roa (hash: iIkNSdTVd4sXcPwrjUX8C5eltdaFk4s2uMI1T070mOQ=)
14: b_rbJD0ZQG4ZvUjkt34Qlu8-Ccc.roa (hash: PVGQ7PuJO29dq4nCPNz/ExdypC2r9RCf0bTTn6uhOlw=)
15: c4DyAsvFXbG5o7jFYYQSHpcqttU.roa (hash: 4O/PlJ6tXg3HjZe3texYnbvtJFDsgoqM8xcWPLuCcns=)
16: iKgelSgdHhyAKexXbXYmueOaeUg.roa (hash: +J08ylKBec0E8mLjnpla5kSjNS7Y7MzYev03SpaSkmY=)
17: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: CK4wGJvnqBHoddcR65cikWCdWFtz4gvG0yHJXNmHKtk=)
18: rmDqg6_mwNfYbcdrFON7FhlqYh0.roa (hash: jIARmAph/9tdERae1K6C9u4rfY/UdNtYyTUK8kLHly0=)
19: vk8AdaRmwdGEey0-KpqMAa5y-4s.roa (hash: gP9M2HbDQuUF4XHqQmNFAfst7z43j3AWmXSU5dk3Lk4=)
20: xJUfKNZ1xwiWMdelR8iN_NauVcs.roa (hash: W+SoqO5Yn7RcvEpB633UMr3Dz2Q++VpVK6LVgymGZUo=)
21: yFniHWXO7_eCIiqp5zEklB0-E4M.roa (hash: AVejDieEOPpUjiHa4BQgEX+ocNwhYeJQ16YzzFkL1AM=)
22: zACbew-GGDfV_PK86Nbolx1SxaQ.roa (hash: D57qhpDyGLmWHribQIP+4h8O4QGVd3pMoP+ytRMK0jc=)
23: zSrZfDynMxjHsni65bw3lNFxjdo.roa (hash: B3r/Ky/6d0oUxMT1wJmgm/sCz+cdvAcj1deLNp7FbDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:b8:20:52:bf:24:1b:1f:b3:db:fc:3c:58:a9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: May 13 00:01:46 2026 GMT
Not After : May 14 00:01:46 2026 GMT
Subject: CN=f8a3314d253d7ad33f79870671a1140d67790069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:9f:eb:c2:d3:a5:dd:2d:48:3b:d3:60:2f:
bc:12:29:b8:db:74:a4:91:f5:d5:11:f6:68:21:2c:
dc:c2:1d:cc:85:5f:9d:d8:62:6b:f9:28:c9:bc:6c:
76:ac:86:33:21:62:81:56:51:96:64:f6:d5:7b:ab:
a2:b7:a8:02:22:f0:30:74:cb:a7:9c:bd:74:15:3c:
04:98:46:9e:30:b1:fa:d0:85:ee:da:b1:3d:22:88:
b1:d8:e7:9a:d3:3a:96:fc:6a:ef:78:00:99:25:04:
04:cf:a9:e7:ea:8e:5c:14:2e:2f:c5:40:88:f9:e0:
4a:cc:d0:cc:33:b0:9a:15:b2:13:b4:1e:37:74:4d:
08:91:89:c6:ed:fe:9f:c7:74:b2:62:bc:c8:9a:28:
4f:5a:14:ae:d6:f9:a1:e2:29:90:3f:74:11:1b:72:
6a:43:b9:e9:0e:b9:47:93:70:89:a2:8e:5a:af:78:
af:d0:e4:54:88:3e:b0:c5:fe:69:78:a9:5a:a4:97:
78:72:b4:26:71:42:28:c6:a1:26:4b:1b:11:9d:f9:
33:8d:e8:08:3a:02:31:f7:33:70:2a:90:45:34:92:
f2:a5:9b:20:72:bf:9b:6f:82:c7:5e:cb:93:f1:07:
92:d4:34:a2:62:ee:36:21:41:67:9f:42:fb:1d:19:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A3:31:4D:25:3D:7A:D3:3F:79:87:06:71:A1:14:0D:67:79:00:69
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:41:07:aa:06:4a:31:36:a8:83:ab:d3:c1:c9:ca:bd:e1:01:
81:1b:86:31:2a:68:94:f9:05:12:00:57:c8:36:9f:e6:4d:f1:
e4:04:55:4d:b3:d9:59:9c:de:ea:bf:8e:cd:e2:f9:3c:82:a2:
0d:fe:9a:db:da:11:06:2b:9e:18:12:aa:b6:a0:ed:a0:fc:cd:
65:f2:e0:e9:70:5d:e2:52:67:fe:00:74:cd:7e:8b:5a:bd:97:
ca:48:cb:34:52:e2:f0:2c:00:09:30:27:37:d4:22:ab:b4:8e:
85:b1:f4:8b:8e:28:f6:dd:cf:82:85:55:7c:f5:33:48:a0:8e:
2f:5d:b4:35:ce:12:c1:ae:b5:a5:0e:a6:8f:fb:c2:b1:63:a1:
21:8a:13:ee:ba:76:fd:1e:72:45:bd:3e:4d:0d:13:e8:87:51:
8a:aa:86:46:43:a8:8c:0f:be:76:38:8e:c6:00:c7:8e:ff:32:
7f:5c:bb:89:e5:26:3c:e1:22:31:1f:aa:03:f6:f3:4c:ea:91:
34:57:5a:58:68:00:6b:50:8e:ef:a5:02:b7:e2:fa:a4:41:20:
67:af:d6:57:39:f0:47:60:e4:b2:9d:83:6e:87:6c:6c:23:34:
12:ab:4f:bb:ff:c1:7d:b4:4f:56:a2:55:64:35:61:0a:90:89:
c1:41:be:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:21:39 2026 by rpki-client