
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File: jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier: FQkw9dIPO7DurOfFigKhNBVxV3AQnddIwm/xo3UZauE=
Subject key identifier: 27:60:59:79:FA:4C:80:E8:AA:BA:53:25:3B:7C:BD:A7:8E:CF:26:6B
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 01A0D080547A48834ACDCF955AB1BDCCE524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number: 1658
Signing time: Wed 23 Sep 2026 23:01:06 +0000
Manifest this update: Wed 23 Sep 2026 23:01:06 +0000
Manifest next update: Thu 24 Sep 2026 23:01:06 +0000
Files and hashes: 1: 0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa (hash: RGjdNXoSFFGrfTu/Ti51Lk+K5F2xhb4depOlZwB8FXE=)
2: 1-VHrB2ftFgG1R7rW9e965VrbOgs.roa (hash: e22B3XhTvj7ENfOUB059RvQemhyhAgeNVsH6G1GtXTY=)
3: 1qpX2cPG5_nkbMnEo1efuLPeHZ8.roa (hash: spDyNX8ekUn+reTXNALqP0weIlhwk99TCbZoof+/3iU=)
4: 7YQDZucpbsxyTF1dG-WSopyYoD4.roa (hash: AZ+p2vdqGYxqTemz9H7WmkXG8urZ++JrwB5Ra4yemqo=)
5: Dw29NJ_ctrOpeieGYBgCqVAOqqY.roa (hash: JIVZInEs3qX488BMPJFD+ldY4NUedBvpDHZsEFrw4pk=)
6: Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa (hash: 0Ghl85pIQUjr9ungl4JN/VBPTNlFSKD8oMqKbzB0zRU=)
7: ZpiZYChv03XcXjWFsXMCV1QM0HU.roa (hash: wmoSAUcGUPypcaj5YjtRFn3oVWGJ3KsONwwVdodfB08=)
8: d6ItI_r9yN86_JuxNhgIRpd_mYs.roa (hash: CsL0RYDbH+7gxUo2SESj6CejUJThVCLmBvpqsgfpQmY=)
9: iVJ08SxG4feimgPWve7FHmKvN14.roa (hash: zFhC/XqvQ6mooyGtsx8PFTYFm28tXJQuLsuuvmNHdsY=)
10: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: XlOJehiKfgJr7IwlRnFfmF6/myBWi048wr5V70t4Xzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:54:7a:48:83:4a:cd:cf:95:5a:b1:bd:cc:e5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Sep 23 23:01:06 2026 GMT
Not After : Sep 24 23:01:06 2026 GMT
Subject: CN=27605979fa4c80e8aaba53253b7cbda78ecf266b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:1d:c1:d3:50:d8:28:d1:d9:44:a8:00:b0:
e4:8a:59:fb:de:61:06:6e:11:ba:98:4c:bd:73:d5:
01:1d:d9:f2:41:31:9d:16:3e:62:aa:1f:dd:02:83:
6a:59:6a:d0:af:e4:75:aa:d3:91:7d:3b:32:0b:67:
1c:0b:a3:e4:3f:a9:66:db:83:56:c1:9c:04:84:e4:
86:52:12:f7:32:80:2b:71:d7:3e:1b:f4:c3:bd:c0:
1c:18:39:3e:44:e7:09:3d:d9:f3:98:1b:74:97:5c:
61:34:ce:f1:66:d6:4f:61:25:da:4d:d8:76:e6:0c:
ef:42:46:9d:1e:9f:09:ae:bd:46:cf:59:eb:42:9d:
69:25:5b:d0:5a:5a:f0:fa:98:d1:2c:a9:7b:71:c9:
00:c5:a8:d4:9f:93:91:1f:c9:50:b2:35:29:89:25:
73:db:d4:9a:18:a8:d2:9b:95:45:b0:52:c2:0b:c7:
2e:ed:f3:5f:52:11:dc:4d:5c:7d:ec:86:94:84:7e:
be:01:a4:46:b8:1d:81:f6:5a:91:03:bb:fb:93:b2:
f4:96:3b:ee:c2:cf:6b:f5:96:ff:80:2a:7d:66:3a:
21:2e:d1:4c:c5:44:d3:71:26:56:54:af:fb:b1:57:
57:3e:88:3e:65:e4:4f:be:ed:b4:8b:06:b3:56:c0:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:60:59:79:FA:4C:80:E8:AA:BA:53:25:3B:7C:BD:A7:8E:CF:26:6B
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2b:bc:25:b7:fc:e5:e0:ec:96:cc:d0:f4:4f:e9:a5:f6:ff:
71:3b:a5:93:dc:2e:f7:66:cf:dc:a7:43:39:7e:5c:72:98:57:
a1:d8:aa:1d:3d:61:37:56:a3:a3:30:5e:36:8c:ca:1d:cb:6c:
8f:3e:b9:51:a8:53:f0:95:95:83:71:40:8e:5d:46:e2:93:55:
5e:c0:9b:c8:ec:2b:14:28:1c:54:05:1a:01:d2:90:2b:02:52:
ab:d3:3d:6b:48:90:04:7e:32:89:51:ff:fa:04:fe:41:b4:33:
2a:39:2d:46:ec:69:e9:dd:ac:a8:b1:68:91:dd:97:db:fa:36:
45:06:2d:b3:b8:a5:00:e7:eb:0d:c0:a4:cd:6c:ae:db:b8:64:
c5:34:62:95:64:fa:a0:9d:84:8d:9c:2f:6b:cf:3c:7d:de:5f:
09:28:db:1d:c8:96:3e:c4:9c:e1:3e:92:7c:4e:03:f1:38:e5:
e3:47:e2:01:e0:9d:e1:cb:ad:5e:60:17:ad:b1:0b:6b:2f:d4:
4a:1d:d4:ee:6b:b9:de:15:e7:40:90:7d:8b:d3:c4:fa:7f:a5:
15:3c:29:48:da:fa:d1:e5:12:16:9d:ae:16:dd:33:3b:3d:ac:
ee:0a:d0:3d:b0:d0:c7:3d:1d:76:89:fd:d6:be:dd:5d:7f:66:
78:f4:b2:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQgFR6SINKzc+VWrG9zOUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlM2YxNjYzOTk2YmUxNzA3NjExZmRjZTFkZGVhODkyMGRk
Mzk4YTMwHhcNMjYwOTIzMjMwMTA2WhcNMjYwOTI0MjMwMTA2WjAzMTEwLwYDVQQD
EygyNzYwNTk3OWZhNGM4MGU4YWFiYTUzMjUzYjdjYmRhNzhlY2YyNjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb4dwdNQ2CjR2USoALDkiln73mEG
bhG6mEy9c9UBHdnyQTGdFj5iqh/dAoNqWWrQr+R1qtORfTsyC2ccC6PkP6lm24NW
wZwEhOSGUhL3MoArcdc+G/TDvcAcGDk+ROcJPdnzmBt0l1xhNM7xZtZPYSXaTdh2
5gzvQkadHp8Jrr1Gz1nrQp1pJVvQWlrw+pjRLKl7cckAxajUn5ORH8lQsjUpiSVz
29SaGKjSm5VFsFLCC8cu7fNfUhHcTVx97IaUhH6+AaRGuB2B9lqRA7v7k7L0ljvu
ws9r9Zb/gCp9ZjohLtFMxUTTcSZWVK/7sVdXPog+ZeRPvu20iwazVsBBPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdgWXn6TIDoqrpTJTt8vaeOzyZrMB8GA1UdIwQY
MBaAFI4/FmOZa+FwdhH9zh3eqJIN05ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzkt
YzhmOWJlN2QxOWRmLzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzktYzhmOWJlN2QxOWRm
LzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayu8Jbf8
5eDslszQ9E/ppfb/cTulk9wu92bP3KdDOX5ccphXodiqHT1hN1ajozBeNozKHcts
jz65UahT8JWVg3FAjl1G4pNVXsCbyOwrFCgcVAUaAdKQKwJSq9M9a0iQBH4yiVH/
+gT+QbQzKjktRuxp6d2sqLFokd2X2/o2RQYts7ilAOfrDcCkzWyu27hkxTRilWT6
oJ2EjZwva888fd5fCSjbHciWPsSc4T6SfE4D8Tjl40fiAeCd4cutXmAXrbELay/U
Sh3U7mu53hXnQJB9i9PE+n+lFTwpSNr60eUSFp2uFt0zOz2s7grQPbDQxz0ddon9
1r7dXX9mePSyFw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:20:12 2026 by rpki-client