
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier: /aEQhDXhSGksCtFyDvdqy3ObDLddnwRVvFdAPvbtW+s=
Subject key identifier: 20:AA:6A:3D:41:68:F8:DD:89:E7:83:94:86:62:7D:F5:0D:D4:DF:06
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01A0D796E73DAB60298FAC265651E14ECC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number: 101A
Signing time: Fri 25 Sep 2026 08:03:06 +0000
Manifest this update: Fri 25 Sep 2026 08:03:06 +0000
Manifest next update: Sat 26 Sep 2026 08:03:06 +0000
Files and hashes: 1: 1EgCfIUZHYf24SrWg9kAOto8Duc.roa (hash: AUpadmn7SxPiN/E2rAaCXCpLwYoRDkhN/Jxbn7p885k=)
2: 3GHhVMraDxdiiAskPewL35crdjo.roa (hash: XPSOg6gcqzCXxPqB2AsSmHrynZ5hN5FT4lGxnzezIrw=)
3: 8MnxyjCOrSvQ6i3dnWv8KYTCZVY.roa (hash: 0JK4Fw26Ffv1CbJTN1h1lmvQzBmi4JhkRYBwfgGlUiI=)
4: B19k1PitIujJpaB0ZKwK-7amv2k.roa (hash: 5KywPlZFag+pODjYDKN24Y+tX6ip9dFPHCvilImjUlk=)
5: CI5OA6QXqxDb_vQORKk6q2XDhKs.roa (hash: EhsJRsPXMO4K43zEnBLLLlr95wCN5evyvOqkDdEQez8=)
6: C_i3BFwSyufK3kEKnj8AwQJSM-g.roa (hash: RqeBg4qnPKs7LMu02pA0RKL7OpjvJCoQwZAVatnEMK4=)
7: G978p2Z4fjPEzTOjuXppglSIr4s.roa (hash: Nz/5Sv/BTu9yF7BMhupkYJxi7TJYJJ/JoGGvUftlZv8=)
8: Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa (hash: pGrQx5S2KxHTpkTBouQo/IMtimjqQRdhpHgfquKymNk=)
9: M8jgCbSmS_f7pdpfIZJACPF9zFQ.roa (hash: pXnnl9PZijaHt9S33eJN6xuH7nQxj7MBnjM8e2gGQQQ=)
10: NZeiCNkAFPPe6mRmV3vIotIey6I.roa (hash: 1okB9NoMuO2fNW/qbueY6s54GpzzWp1KSEo2FrjzOoM=)
11: QFBIL98nhWZihq6X9otfp-26AW8.roa (hash: 7lXr8KdBRuxrgLdmbnp5sqy+5Eu7YOk4bILMk23Cxhg=)
12: YFekMV6k_znI9JX_sw8Tv3F6sTI.roa (hash: m5Hdd1gjDtnmRTylaY7LXFqGy5f9ant1wS9vgjPqwac=)
13: ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa (hash: yNA9Iud4iZ26wPkbKHA01kAUSSNsLVBFRoknHNyK1a0=)
14: aagIksMopc799P33hATJVhYhv50.roa (hash: iIkNSdTVd4sXcPwrjUX8C5eltdaFk4s2uMI1T070mOQ=)
15: c4DyAsvFXbG5o7jFYYQSHpcqttU.roa (hash: 4O/PlJ6tXg3HjZe3texYnbvtJFDsgoqM8xcWPLuCcns=)
16: iKgelSgdHhyAKexXbXYmueOaeUg.roa (hash: +J08ylKBec0E8mLjnpla5kSjNS7Y7MzYev03SpaSkmY=)
17: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: wJfAVSuWZnfhx8UsJLoAhY+1t3uvHBAWXZylPMV9l6w=)
18: rmDqg6_mwNfYbcdrFON7FhlqYh0.roa (hash: jIARmAph/9tdERae1K6C9u4rfY/UdNtYyTUK8kLHly0=)
19: vk8AdaRmwdGEey0-KpqMAa5y-4s.roa (hash: gP9M2HbDQuUF4XHqQmNFAfst7z43j3AWmXSU5dk3Lk4=)
20: xJUfKNZ1xwiWMdelR8iN_NauVcs.roa (hash: W+SoqO5Yn7RcvEpB633UMr3Dz2Q++VpVK6LVgymGZUo=)
21: yFniHWXO7_eCIiqp5zEklB0-E4M.roa (hash: AVejDieEOPpUjiHa4BQgEX+ocNwhYeJQ16YzzFkL1AM=)
22: zACbew-GGDfV_PK86Nbolx1SxaQ.roa (hash: D57qhpDyGLmWHribQIP+4h8O4QGVd3pMoP+ytRMK0jc=)
23: zSrZfDynMxjHsni65bw3lNFxjdo.roa (hash: B3r/Ky/6d0oUxMT1wJmgm/sCz+cdvAcj1deLNp7FbDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:e7:3d:ab:60:29:8f:ac:26:56:51:e1:4e:cc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Sep 25 08:03:06 2026 GMT
Not After : Sep 26 08:03:06 2026 GMT
Subject: CN=20aa6a3d4168f8dd89e7839486627df50dd4df06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:78:52:a0:8d:c1:64:b7:ae:ef:28:da:2d:
c6:c8:7e:db:99:a6:a4:79:da:f7:0e:bf:70:8c:f0:
e4:77:14:76:d8:d0:f9:e0:33:7b:b1:07:a0:d6:61:
d8:a5:49:a9:a4:c1:6a:1c:5b:a5:4d:08:b5:16:9b:
4c:27:51:c8:c9:ad:7f:58:15:30:3d:aa:7b:2a:aa:
44:01:74:5c:ca:bb:68:8b:ee:be:c3:bf:6d:b9:51:
e6:0d:2a:d2:af:bc:88:a1:72:de:1b:5e:93:6f:e2:
3c:8a:a0:2a:61:a4:30:13:4d:e2:1c:96:05:d0:8f:
2c:56:de:40:32:b1:17:4e:4b:5c:27:2a:d6:8a:4e:
1f:80:59:9f:56:61:3f:d5:59:97:ed:26:64:df:c3:
31:48:54:b8:3a:bd:22:5b:bf:fc:3f:4a:46:31:60:
6d:6b:98:d4:ba:19:cf:22:eb:e8:66:a1:93:96:ea:
05:48:9d:51:f2:0b:04:f2:89:72:64:17:9b:37:df:
92:bb:b6:9f:64:07:80:da:d0:fe:fe:a9:b9:cf:6e:
2a:80:95:f8:74:ff:12:45:ff:d4:d0:ad:7f:ca:03:
16:4a:24:c6:b4:b7:87:7a:17:ad:d6:05:76:7a:24:
a4:d9:c9:5e:52:23:1b:e4:4a:e4:9b:f4:a4:24:67:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AA:6A:3D:41:68:F8:DD:89:E7:83:94:86:62:7D:F5:0D:D4:DF:06
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:24:7c:be:47:ee:aa:ef:40:58:02:29:70:bd:4c:2f:61:2f:
06:44:7f:dd:cb:a5:71:96:9a:5f:cf:36:80:8b:0f:32:ba:57:
17:6e:70:16:13:9d:62:ef:91:0d:f6:b3:16:96:2b:87:ea:95:
fa:8b:a2:cf:ce:74:85:86:40:e0:33:1c:a4:91:f0:83:cb:5f:
76:a6:6f:70:77:b9:48:f9:96:36:70:5f:b9:d2:46:4f:a1:16:
28:36:2b:69:27:cc:78:22:c6:9c:d4:98:63:f1:28:0e:ed:92:
5c:46:eb:48:1e:2c:69:e9:53:22:d9:38:2c:58:d3:f6:b6:0f:
95:69:e4:b8:36:40:c8:ac:29:0c:d5:4a:ed:33:42:6f:b1:c1:
06:d8:68:85:e4:f2:93:ce:35:26:d1:4a:58:ec:4f:38:e0:41:
e7:62:30:ef:7a:94:dd:1c:51:8e:46:b6:88:c8:a6:58:72:68:
c6:81:dd:3e:bf:82:06:29:64:29:8e:0a:3e:b1:b9:b8:af:99:
44:fc:5a:0c:38:11:14:21:d7:e0:83:7d:2b:56:4b:6b:81:84:
e0:2e:36:c2:25:2d:b5:42:a9:43:63:1d:54:87:23:6d:89:81:
c5:69:e1:f7:74:e2:80:b2:2b:c2:ea:6f:96:8a:ab:f3:f4:8f:
57:e7:39:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:03:43 2026 by rpki-client