
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
File: j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json)
Hash identifier: S9YoofSegKFIVR9485pb76gFeulZCywFaOzMl6p32YA=
Subject key identifier: C3:2A:20:9C:5D:11:13:CB:34:9A:F6:CE:D4:64:31:4E:A7:5E:25:5E
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019E1D23514E787FD433986518E4C4CECDDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
Manifest number: 1497
Signing time: Tue 12 May 2026 17:01:54 +0000
Manifest this update: Tue 12 May 2026 17:01:54 +0000
Manifest next update: Wed 13 May 2026 17:01:54 +0000
Files and hashes: 1: 0wV5g4EVRhgoKZWB0l4u4NCoebc.roa (hash: x9f29Pup33svef1VwpyK5xHxGxbt4thAXHF+Oyzm5bM=)
2: 4CZjW2K05gjTWVSm5HCC1YhuGFM.roa (hash: YUklznotWSasG+NPzST/0VXBFbDg9f0JqUM1FXRqVpI=)
3: 5h6kFRQXVVJn7vc_7-eg5_4Zx1M.roa (hash: 7n1WW6ereLymBeWVUlfPXwnYkLa0bK40qeD55u+vgDQ=)
4: 7Y-dcG1ts9XBr6M2neYbzLiBIE0.roa (hash: fa0hkAmckPv2az2FBEeIwpMqvvWjXXDG2d/nbEmckOA=)
5: CRGHJQj4lZiRn9TWiVjqPSQiI_s.roa (hash: LhY2OVqSV8kBseD85misaxGvwCTS5KLte3vYc1JA8OE=)
6: Dja78ruX4o7MO5yCfGzKSVMuXBo.roa (hash: 2yO1oHN3Azbfysz52/wvWwgKaNjr723EJVJe38YhZHk=)
7: JKAnK2en3odHT3-Pq6Exoze1jvQ.roa (hash: qU0dNd/ElxDWuoJrBPmPXPS+v87iZmcyX83uBVkJOdg=)
8: MPO8HbcFWMOeE2iBKVv-IWpWPxk.roa (hash: CZOBmBd1hbGjq3AqK4WkUgTLjxnhfpm1Rc52Dylmg/w=)
9: MpLOwnyu2anoLVlED_5oFKlDxB4.roa (hash: 8o1FX8BBhwIHnjoaP2OfRA6v8Ril1Bvaqiop7L5Ytzg=)
10: OY4yu33kRTHXIDvS06hD5g3ZU1I.roa (hash: MO3P51CXchSgKn4Y84H+Th8p16bdsxGFK2fbYdmXi5Y=)
11: QsaJUx8IySwAVJKdDaCVAV_WeG8.roa (hash: vu/oFsB63dNb0RilkgFUkxuOJfKjYLkKFMHoBUDzCU4=)
12: RQYIGLLVSIftKc72IB8Q5fGhyLA.roa (hash: du2s9GjbjtVis5okEfEtz3NF056oJiz3iauob6CPdOw=)
13: S2NE7ivxA_6uSF3faj9xM7QLVgw.roa (hash: qDphZ//ssVu7S99t/OF3SeD4wpZPqNUE9vHt5D6PaMI=)
14: W_DUPmMWXfw6_1KwWt3waPIqT-s.roa (hash: cneq7hYbqTf+UiD+t4E82O4maYI9qUbQh2f/R56QLF8=)
15: imB7m_SSkD-EKaGcH3WYOVA3UFA.roa (hash: QaG4X81jQlLRNJJxryf942TxAMPUaQpIxGX6diK8mSM=)
16: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: OdVy272oUTrFoeDMisggJYMBlggucfTxLHl+HnFFz4E=)
17: lLhmEw7IEMb-qUjY7M3kCd8cWOA.roa (hash: ynq1BksMwSLgFJR9WzfdR5gm2pKZhnJLRvt2UFC0YIk=)
18: rcJDPkI4eynfWrTLoSdqLg60fG4.roa (hash: EXzqiGJMATe2PwXCIjt1gE9L/khTBoqYQQscvLJnOxM=)
19: s1BOsr_SL1rErib0eleQtkSspyY.roa (hash: YIrdM89Nie4pypUTkAA2EhoG4aHCBtnPq36XIULi8J4=)
20: vTjdy81Ui1f2cDgZ1hxqEJxmLlo.roa (hash: VYtXHqRevYtaXeI9lQQ4d+QNrCRIHyo5F1ekiS2/Np0=)
21: yxBWMEqUTuUpppX4kQbNWZMUag8.roa (hash: GfoDixWxoGP9Yf1RA/HAN8eaFxjgurmqtoh7fzztQM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:51:4e:78:7f:d4:33:98:65:18:e4:c4:ce:cd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: May 12 17:01:54 2026 GMT
Not After : May 13 17:01:54 2026 GMT
Subject: CN=c32a209c5d1113cb349af6ced464314ea75e255e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4f:94:00:2a:ba:79:36:ce:f6:2c:12:2c:7b:
c1:fb:bd:da:67:0d:8b:be:19:f6:12:25:06:1c:ce:
25:bd:db:f8:b8:f9:0b:4d:6e:bb:47:09:0c:d7:75:
af:7a:a1:3a:04:31:ce:7a:2e:a3:55:83:56:aa:bd:
ea:98:8a:77:27:44:c7:97:a0:c6:d9:86:16:9f:31:
af:0e:07:2d:91:1e:78:9e:38:3c:43:5b:c1:c8:19:
ef:83:c1:1f:de:8b:8b:62:ff:d7:dd:ff:bc:29:c6:
26:58:c0:44:41:b1:ec:1e:29:9c:4b:f6:ea:b5:62:
88:73:36:07:4d:94:a3:49:5a:24:13:18:9e:31:63:
c0:ec:66:6d:a0:8d:ea:b2:85:80:ac:95:8c:58:58:
10:16:f5:e0:68:e1:54:f2:85:62:c7:a4:72:59:1e:
0d:f8:85:93:f4:12:9c:a6:80:51:7a:0e:50:15:a7:
51:1e:61:d1:f6:93:d9:5c:13:f3:0b:79:80:09:ff:
86:70:4f:1c:26:a1:fc:7a:7d:ec:ab:76:68:dd:53:
48:ab:9e:52:50:17:23:51:ae:46:3b:32:b9:44:d0:
01:c0:fb:ad:f6:ac:da:4a:72:40:1f:2b:3c:83:81:
a0:fe:31:ca:9b:0e:2b:4d:fc:98:f7:71:da:d9:2c:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2A:20:9C:5D:11:13:CB:34:9A:F6:CE:D4:64:31:4E:A7:5E:25:5E
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4e:ec:eb:ad:36:4e:7c:cb:22:33:78:e4:af:9e:ba:42:fa:
f2:40:c2:15:19:fe:c0:85:89:09:8d:a3:dc:fc:ed:72:07:1b:
ba:48:9b:db:a5:c4:05:88:6a:07:7a:ff:50:1e:f6:d3:58:50:
27:f5:5e:1d:dd:aa:e9:6b:d1:58:a3:81:ee:01:52:81:34:05:
2f:a0:9f:1c:bf:8f:9e:0b:00:d7:e3:32:08:33:6c:7a:fe:3b:
1c:d9:6a:fd:29:4a:4c:77:72:ff:7a:91:7a:0f:56:66:17:6b:
46:98:8c:5a:60:ad:d9:64:cb:45:20:c4:f1:37:48:82:43:15:
c9:6f:9a:14:fc:03:5f:40:70:5d:7d:ac:2b:dc:71:fa:71:47:
f7:47:85:86:5a:07:05:f9:eb:b0:39:06:a0:91:13:98:0b:e0:
1d:70:b0:60:19:d4:ae:db:1c:23:f1:5e:74:0d:fe:af:a6:c8:
db:37:bd:4c:80:ca:5c:f0:1e:0f:51:4f:3b:a3:36:51:40:2e:
63:f5:54:cc:3f:8f:17:e3:d7:d9:f6:03:1f:a3:9d:50:d9:2e:
4f:98:af:8a:4b:46:57:cc:f7:91:4b:72:f4:b5:c5:7b:2e:a6:
f7:ae:ba:63:ea:db:b7:68:a7:27:b7:28:c6:ca:56:bf:c4:57:
3a:46:e7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:00 2026 by rpki-client