
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
File: j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json)
Hash identifier: d+ji0MdDs8dL3s+CHJaRE5kn4kbnTOH16EPO4zHJ53s=
Subject key identifier: 9C:66:2C:76:D2:55:37:1B:71:0A:CB:66:95:F4:67:B5:65:0C:18:1F
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019D25834E2C1CB692E2E37FA12FDC4FB155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
Manifest number: 1415
Signing time: Wed 25 Mar 2026 15:00:55 +0000
Manifest this update: Wed 25 Mar 2026 15:00:55 +0000
Manifest next update: Thu 26 Mar 2026 15:00:55 +0000
Files and hashes: 1: 0wV5g4EVRhgoKZWB0l4u4NCoebc.roa (hash: x9f29Pup33svef1VwpyK5xHxGxbt4thAXHF+Oyzm5bM=)
2: 4CZjW2K05gjTWVSm5HCC1YhuGFM.roa (hash: YUklznotWSasG+NPzST/0VXBFbDg9f0JqUM1FXRqVpI=)
3: 5h6kFRQXVVJn7vc_7-eg5_4Zx1M.roa (hash: 7n1WW6ereLymBeWVUlfPXwnYkLa0bK40qeD55u+vgDQ=)
4: 7Y-dcG1ts9XBr6M2neYbzLiBIE0.roa (hash: fa0hkAmckPv2az2FBEeIwpMqvvWjXXDG2d/nbEmckOA=)
5: CRGHJQj4lZiRn9TWiVjqPSQiI_s.roa (hash: LhY2OVqSV8kBseD85misaxGvwCTS5KLte3vYc1JA8OE=)
6: Dja78ruX4o7MO5yCfGzKSVMuXBo.roa (hash: 2yO1oHN3Azbfysz52/wvWwgKaNjr723EJVJe38YhZHk=)
7: JKAnK2en3odHT3-Pq6Exoze1jvQ.roa (hash: qU0dNd/ElxDWuoJrBPmPXPS+v87iZmcyX83uBVkJOdg=)
8: MPO8HbcFWMOeE2iBKVv-IWpWPxk.roa (hash: CZOBmBd1hbGjq3AqK4WkUgTLjxnhfpm1Rc52Dylmg/w=)
9: OY4yu33kRTHXIDvS06hD5g3ZU1I.roa (hash: MO3P51CXchSgKn4Y84H+Th8p16bdsxGFK2fbYdmXi5Y=)
10: QsaJUx8IySwAVJKdDaCVAV_WeG8.roa (hash: vu/oFsB63dNb0RilkgFUkxuOJfKjYLkKFMHoBUDzCU4=)
11: RQYIGLLVSIftKc72IB8Q5fGhyLA.roa (hash: du2s9GjbjtVis5okEfEtz3NF056oJiz3iauob6CPdOw=)
12: S2NE7ivxA_6uSF3faj9xM7QLVgw.roa (hash: qDphZ//ssVu7S99t/OF3SeD4wpZPqNUE9vHt5D6PaMI=)
13: W_DUPmMWXfw6_1KwWt3waPIqT-s.roa (hash: cneq7hYbqTf+UiD+t4E82O4maYI9qUbQh2f/R56QLF8=)
14: imB7m_SSkD-EKaGcH3WYOVA3UFA.roa (hash: QaG4X81jQlLRNJJxryf942TxAMPUaQpIxGX6diK8mSM=)
15: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: HcalhQmZ1T6z/ZQZmC0xyq8HxdDzxX8Ki2WGTyAjVR4=)
16: lLhmEw7IEMb-qUjY7M3kCd8cWOA.roa (hash: ynq1BksMwSLgFJR9WzfdR5gm2pKZhnJLRvt2UFC0YIk=)
17: rcJDPkI4eynfWrTLoSdqLg60fG4.roa (hash: EXzqiGJMATe2PwXCIjt1gE9L/khTBoqYQQscvLJnOxM=)
18: s1BOsr_SL1rErib0eleQtkSspyY.roa (hash: YIrdM89Nie4pypUTkAA2EhoG4aHCBtnPq36XIULi8J4=)
19: vTjdy81Ui1f2cDgZ1hxqEJxmLlo.roa (hash: VYtXHqRevYtaXeI9lQQ4d+QNrCRIHyo5F1ekiS2/Np0=)
20: yxBWMEqUTuUpppX4kQbNWZMUag8.roa (hash: GfoDixWxoGP9Yf1RA/HAN8eaFxjgurmqtoh7fzztQM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:4e:2c:1c:b6:92:e2:e3:7f:a1:2f:dc:4f:b1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Mar 25 15:00:55 2026 GMT
Not After : Mar 26 15:00:55 2026 GMT
Subject: CN=9c662c76d255371b710acb6695f467b5650c181f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:83:5a:b6:a9:20:35:71:e3:19:a5:cf:56:
28:9b:bb:ac:60:17:3e:9a:0e:e9:01:63:c4:99:c2:
fe:4e:a5:52:41:ca:23:1d:f0:7b:0e:06:38:8b:1e:
eb:8e:95:e1:8a:6d:6f:90:58:82:92:ac:a8:f2:bf:
94:4d:ac:f1:32:ba:86:5d:30:23:dd:84:68:69:9a:
ba:72:de:b6:dd:1f:f2:08:61:ae:ff:8d:1f:99:be:
ea:2a:ff:db:1c:36:38:c6:3f:a0:9f:2e:ae:c4:e1:
5f:2e:64:9c:8d:d7:14:6b:48:84:9c:4b:8d:2b:ae:
e0:00:f3:e0:51:68:a7:72:a2:7c:10:92:50:16:1c:
1f:a2:76:33:af:90:68:a0:f7:fa:99:73:39:c1:a3:
91:ee:62:da:57:ac:11:c5:32:0a:7a:36:75:0e:c4:
02:4b:99:2a:5c:60:f4:a6:70:04:05:71:80:d8:3d:
fe:4c:3e:41:c3:ed:66:bc:b4:d8:f2:06:9a:38:56:
ee:7c:d6:ef:9a:20:65:0f:79:5a:43:89:50:8b:78:
f6:e2:18:6d:e1:be:98:c4:fa:b7:b4:e6:56:7a:04:
a9:ce:c4:5b:8d:0a:a0:b5:22:4c:6c:bd:1d:0c:2d:
9f:96:4b:67:d3:61:c8:c9:bf:26:4a:78:d3:c6:75:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:66:2C:76:D2:55:37:1B:71:0A:CB:66:95:F4:67:B5:65:0C:18:1F
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3f:b3:85:d0:49:5a:ae:4b:9d:d2:40:8a:ba:6e:04:58:9b:
e9:29:60:49:54:7a:38:f9:8e:ca:e1:6b:64:c4:95:af:ef:76:
0a:f8:a7:5f:7c:ab:6a:ec:82:a2:c6:1d:b9:ee:13:7e:e4:44:
5c:59:66:bd:c1:94:cc:2e:11:a9:62:47:e9:27:eb:ee:7e:17:
9d:e2:5b:82:5a:64:ec:c5:bf:3f:fd:45:5c:d9:38:6a:af:dc:
28:b8:f6:2a:b3:04:d9:fd:34:64:f6:1f:a6:78:4f:6c:6f:a7:
87:4a:f4:ee:6a:b7:79:88:99:e4:54:a7:3c:de:4e:6d:cd:75:
40:bd:89:1b:9f:32:93:b5:43:9d:d5:b3:dd:5d:a6:65:0b:18:
c4:94:81:8f:02:e3:f4:85:ce:b6:ed:fa:cb:9b:80:11:01:d0:
d7:24:03:07:a2:a0:96:bc:26:ad:80:74:3f:a5:5e:c7:16:ed:
86:71:54:97:4b:e4:45:53:9f:2e:d1:86:c6:c4:4a:6c:e0:3f:
2f:da:25:35:d2:24:ee:f8:34:83:ba:fd:99:25:c6:e9:d3:41:
2e:d4:3c:5a:f8:ad:c9:0e:0b:50:53:17:89:0e:28:ea:a4:26:
7c:52:e9:25:83:4b:f2:ec:7f:0f:fd:61:26:8a:1a:94:b7:25:
74:38:19:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg04sHLaS4uN/oS/cT7FVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2
MmU1NmUwHhcNMjYwMzI1MTUwMDU1WhcNMjYwMzI2MTUwMDU1WjAzMTEwLwYDVQQD
Eyg5YzY2MmM3NmQyNTUzNzFiNzEwYWNiNjY5NWY0NjdiNTY1MGMxODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3iDWrapIDVx4xmlz1Yom7usYBc+
mg7pAWPEmcL+TqVSQcojHfB7DgY4ix7rjpXhim1vkFiCkqyo8r+UTazxMrqGXTAj
3YRoaZq6ct623R/yCGGu/40fmb7qKv/bHDY4xj+gny6uxOFfLmScjdcUa0iEnEuN
K67gAPPgUWincqJ8EJJQFhwfonYzr5BooPf6mXM5waOR7mLaV6wRxTIKejZ1DsQC
S5kqXGD0pnAEBXGA2D3+TD5Bw+1mvLTY8gaaOFbufNbvmiBlD3laQ4lQi3j24hht
4b6YxPq3tOZWegSpzsRbjQqgtSJMbL0dDC2flktn02HIyb8mSnjTxnXylQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxmLHbSVTcbcQrLZpX0Z7VlDBgfMB8GA1UdIwQY
MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt
YjBiMzVhMzRlMzg4LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4
LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmz+zhdBJ
Wq5LndJAirpuBFib6SlgSVR6OPmOyuFrZMSVr+92CvinX3yrauyCosYdue4TfuRE
XFlmvcGUzC4RqWJH6Sfr7n4XneJbglpk7MW/P/1FXNk4aq/cKLj2KrME2f00ZPYf
pnhPbG+nh0r07mq3eYiZ5FSnPN5Obc11QL2JG58yk7VDndWz3V2mZQsYxJSBjwLj
9IXOtu36y5uAEQHQ1yQDB6KglrwmrYB0P6VexxbthnFUl0vkRVOfLtGGxsRKbOA/
L9olNdIk7vg0g7r9mSXG6dNBLtQ8WvityQ4LUFMXiQ4o6qQmfFLpJYNL8ux/D/1h
JooalLcldDgZag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:53 2026 by rpki-client