
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File: jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier: oAysS6mfbZERg55TN4xjHxBLOInd+lWDoi7m/cwvkX8=
Subject key identifier: 3B:69:EE:6C:40:E7:1A:3D:84:C6:87:50:24:7E:46:5F:20:DC:71:7D
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 019F91DAE86CC0D39E64093A7C7541813B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number: 15B3
Signing time: Fri 24 Jul 2026 02:01:10 +0000
Manifest this update: Fri 24 Jul 2026 02:01:10 +0000
Manifest next update: Sat 25 Jul 2026 02:01:10 +0000
Files and hashes: 1: 0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa (hash: RGjdNXoSFFGrfTu/Ti51Lk+K5F2xhb4depOlZwB8FXE=)
2: 1-VHrB2ftFgG1R7rW9e965VrbOgs.roa (hash: e22B3XhTvj7ENfOUB059RvQemhyhAgeNVsH6G1GtXTY=)
3: 1qpX2cPG5_nkbMnEo1efuLPeHZ8.roa (hash: spDyNX8ekUn+reTXNALqP0weIlhwk99TCbZoof+/3iU=)
4: 7YQDZucpbsxyTF1dG-WSopyYoD4.roa (hash: AZ+p2vdqGYxqTemz9H7WmkXG8urZ++JrwB5Ra4yemqo=)
5: Dw29NJ_ctrOpeieGYBgCqVAOqqY.roa (hash: JIVZInEs3qX488BMPJFD+ldY4NUedBvpDHZsEFrw4pk=)
6: Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa (hash: 0Ghl85pIQUjr9ungl4JN/VBPTNlFSKD8oMqKbzB0zRU=)
7: ZpiZYChv03XcXjWFsXMCV1QM0HU.roa (hash: wmoSAUcGUPypcaj5YjtRFn3oVWGJ3KsONwwVdodfB08=)
8: d6ItI_r9yN86_JuxNhgIRpd_mYs.roa (hash: CsL0RYDbH+7gxUo2SESj6CejUJThVCLmBvpqsgfpQmY=)
9: iVJ08SxG4feimgPWve7FHmKvN14.roa (hash: zFhC/XqvQ6mooyGtsx8PFTYFm28tXJQuLsuuvmNHdsY=)
10: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: RTJvkYN/EuxoLxp+IBIuVh9ZN9016lMGki0ft24UvEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:e8:6c:c0:d3:9e:64:09:3a:7c:75:41:81:3b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Jul 24 02:01:10 2026 GMT
Not After : Jul 25 02:01:10 2026 GMT
Subject: CN=3b69ee6c40e71a3d84c68750247e465f20dc717d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:be:e5:29:73:a2:74:93:dd:d4:f9:b9:16:
7b:d5:28:8a:16:d8:87:a8:dc:01:26:7a:3b:23:ac:
ea:83:cd:b0:aa:ba:2b:de:11:17:2a:25:f3:93:f5:
c5:21:d5:46:6c:8b:73:b0:ff:f7:94:07:4f:e8:20:
89:8c:da:58:f2:ab:52:68:f8:b0:f3:b4:6f:a2:88:
cf:68:8e:70:4e:93:f5:31:d1:ef:82:0e:59:46:df:
87:9b:96:fe:49:27:4c:f5:8e:68:ac:21:2b:92:12:
7e:96:df:ab:42:32:b5:7e:ee:cd:ef:ee:7a:d5:ea:
f1:4c:64:5e:ea:95:c2:bf:1b:5d:b3:79:18:c0:0f:
21:68:62:4e:ab:1a:12:cc:d4:f1:4e:6b:d6:9a:6d:
bb:1f:13:39:38:74:0a:49:7f:c8:1d:2f:0c:3f:76:
09:cc:f0:4a:15:f4:b0:ee:f0:a7:8e:05:12:95:02:
4f:79:cc:d9:42:15:14:a6:53:8f:8b:1a:ec:13:ca:
7b:e6:97:12:a3:1f:3f:b6:ae:a3:8b:aa:af:d3:f3:
aa:9e:1a:3e:bb:d3:69:b7:c9:79:81:f2:ea:43:63:
4d:8c:7a:72:8f:ac:3b:f9:77:aa:9c:75:55:e1:85:
df:06:ca:e0:38:76:eb:dc:c2:53:ff:95:56:01:22:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:EE:6C:40:E7:1A:3D:84:C6:87:50:24:7E:46:5F:20:DC:71:7D
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:04:9f:bd:f9:3f:81:d9:d3:f5:ac:3e:b2:3b:be:85:09:1a:
b5:77:cc:f4:1a:0d:c5:94:70:2b:f6:8d:9a:da:e7:31:c4:5e:
fa:90:2d:5e:32:a7:69:4e:f8:6e:5b:09:4d:9e:ea:53:e3:fe:
f7:24:1b:00:95:3a:e7:df:37:00:09:17:96:7a:08:31:15:67:
35:94:cc:cb:73:e1:04:7e:5c:53:ef:98:59:c0:e0:ac:26:13:
72:4d:19:5e:29:69:60:d8:f6:af:d2:4a:46:7b:4d:2c:f8:6d:
ec:dd:b8:ec:db:16:ab:14:9e:e0:a4:94:14:51:1c:3a:b0:ff:
4b:00:2e:be:e5:3d:44:4b:44:66:c0:a4:f3:8f:79:87:ea:5b:
b4:bc:a3:17:21:f1:17:c8:b8:ce:06:75:48:77:18:4d:ea:54:
1c:23:02:6b:de:9d:f3:1b:ee:f8:9e:b3:21:09:d5:fc:28:73:
8a:06:b4:77:f4:17:57:28:19:35:c8:1b:0c:ee:ed:5b:a4:91:
18:4e:d7:10:ea:54:00:01:f6:51:56:5e:8b:fc:1a:55:c6:3c:
34:4a:06:ba:cd:d1:20:28:eb:a0:2b:3c:97:e1:91:a8:01:97:
e8:0b:49:7e:d6:d3:d2:43:7c:87:16:56:a6:86:e2:e5:9d:f4:
b7:63:2a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:32 2026 by rpki-client