
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
File: j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json)
Hash identifier: NUN8W0to4JrAtwaerF4DWvS4MxD3790KiytnRAKyleU=
Subject key identifier: C8:7B:FB:A4:B5:3F:52:40:CE:E3:1F:08:65:67:65:51:C5:72:EB:76
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01A1DA938E9D9B3381A0193D85DEE48B27C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
Manifest number: 168C
Signing time: Sat 14 Nov 2026 15:01:05 +0000
Manifest this update: Sat 14 Nov 2026 15:01:05 +0000
Manifest next update: Sun 15 Nov 2026 15:01:05 +0000
Files and hashes: 1: 0wV5g4EVRhgoKZWB0l4u4NCoebc.roa (hash: x9f29Pup33svef1VwpyK5xHxGxbt4thAXHF+Oyzm5bM=)
2: 4CZjW2K05gjTWVSm5HCC1YhuGFM.roa (hash: YUklznotWSasG+NPzST/0VXBFbDg9f0JqUM1FXRqVpI=)
3: 7Y-dcG1ts9XBr6M2neYbzLiBIE0.roa (hash: fa0hkAmckPv2az2FBEeIwpMqvvWjXXDG2d/nbEmckOA=)
4: Dja78ruX4o7MO5yCfGzKSVMuXBo.roa (hash: 2yO1oHN3Azbfysz52/wvWwgKaNjr723EJVJe38YhZHk=)
5: JKAnK2en3odHT3-Pq6Exoze1jvQ.roa (hash: qU0dNd/ElxDWuoJrBPmPXPS+v87iZmcyX83uBVkJOdg=)
6: MPO8HbcFWMOeE2iBKVv-IWpWPxk.roa (hash: CZOBmBd1hbGjq3AqK4WkUgTLjxnhfpm1Rc52Dylmg/w=)
7: MpLOwnyu2anoLVlED_5oFKlDxB4.roa (hash: 8o1FX8BBhwIHnjoaP2OfRA6v8Ril1Bvaqiop7L5Ytzg=)
8: QsaJUx8IySwAVJKdDaCVAV_WeG8.roa (hash: vu/oFsB63dNb0RilkgFUkxuOJfKjYLkKFMHoBUDzCU4=)
9: S2NE7ivxA_6uSF3faj9xM7QLVgw.roa (hash: qDphZ//ssVu7S99t/OF3SeD4wpZPqNUE9vHt5D6PaMI=)
10: W_DUPmMWXfw6_1KwWt3waPIqT-s.roa (hash: cneq7hYbqTf+UiD+t4E82O4maYI9qUbQh2f/R56QLF8=)
11: YJkYtuoHk8a3jVb1let2egcsqWQ.roa (hash: YLZuYMUOmJcYoz9pqTB22lS0t10y56S08gmDL66+LcM=)
12: d6eWFXUNKhuhUBI5n9jr46RdIyE.roa (hash: OqUlEH91xHaOrAXvLHbnarDEhWKSDbrc8ksOYymfmUg=)
13: hzNe4dFhgHd6MzhrSRCVdSqxQW8.roa (hash: lgWuoQ75Y33cgaR+Mh71ZLZPfJA3Voe5i1wrhcO2ir8=)
14: imB7m_SSkD-EKaGcH3WYOVA3UFA.roa (hash: QaG4X81jQlLRNJJxryf942TxAMPUaQpIxGX6diK8mSM=)
15: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: +KRsXz3208Bdt2Qk4fM7zAgxp7euvv0jkPdzaOOhcKQ=)
16: jNFp8uu97p0HfNSrTxSiTKFelak.roa (hash: MfowC1d2p1Ow84C7z3He8tKQKNnjmw+gsQpMY8A2caQ=)
17: lLhmEw7IEMb-qUjY7M3kCd8cWOA.roa (hash: ynq1BksMwSLgFJR9WzfdR5gm2pKZhnJLRvt2UFC0YIk=)
18: rcJDPkI4eynfWrTLoSdqLg60fG4.roa (hash: EXzqiGJMATe2PwXCIjt1gE9L/khTBoqYQQscvLJnOxM=)
19: s1BOsr_SL1rErib0eleQtkSspyY.roa (hash: YIrdM89Nie4pypUTkAA2EhoG4aHCBtnPq36XIULi8J4=)
20: up1zEmwsr4UewSJwCVlJIJ_n7tY.roa (hash: NUm9ibISZrUPLETjtapJYdNCpp/S4jJUYB0Y34lZ4c8=)
21: vTjdy81Ui1f2cDgZ1hxqEJxmLlo.roa (hash: VYtXHqRevYtaXeI9lQQ4d+QNrCRIHyo5F1ekiS2/Np0=)
22: yxBWMEqUTuUpppX4kQbNWZMUag8.roa (hash: GfoDixWxoGP9Yf1RA/HAN8eaFxjgurmqtoh7fzztQM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:93:8e:9d:9b:33:81:a0:19:3d:85:de:e4:8b:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Nov 14 15:01:05 2026 GMT
Not After : Nov 15 15:01:05 2026 GMT
Subject: CN=c87bfba4b53f5240cee31f0865676551c572eb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:de:8e:8d:41:a0:be:9c:00:05:dc:6f:32:
af:5f:7f:64:0f:0e:b7:e8:51:a4:19:7e:14:13:79:
11:38:e3:17:21:4a:6e:d7:63:a6:12:f8:10:13:e3:
04:92:68:12:7c:ea:2f:16:9a:09:5c:28:3d:cb:b9:
0d:7f:32:8c:50:91:41:3b:13:2f:a2:25:74:c5:bb:
4a:25:53:3c:a8:1e:56:3d:b7:ea:d9:39:1c:8c:20:
c4:73:df:8e:1c:2d:0b:47:3f:d7:c0:8a:f4:6c:0c:
24:d5:c7:07:5c:31:48:9c:1a:b5:dc:aa:e5:3e:fa:
11:44:5f:30:0c:13:8f:8c:b9:24:aa:10:d3:6c:3f:
52:b8:3f:8c:5e:df:46:5f:b8:2b:7c:28:78:90:56:
17:13:4d:50:45:f4:e7:cd:ce:0a:7b:0c:06:b1:2b:
c6:f7:4b:d9:2b:89:5e:d7:38:16:05:34:ed:28:7b:
d5:54:c0:65:ac:d4:d3:67:a7:f7:01:71:fa:ce:77:
d3:de:97:15:95:51:f7:5a:70:f9:82:60:ab:1c:1c:
b6:e8:6b:87:99:28:e7:8d:e8:a3:1b:10:ad:91:cd:
2b:db:62:7a:b8:2a:e4:31:68:c6:ef:ef:82:e0:87:
7e:5f:f8:09:cc:4a:e4:92:57:65:c6:51:23:6c:df:
c0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7B:FB:A4:B5:3F:52:40:CE:E3:1F:08:65:67:65:51:C5:72:EB:76
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7a:dc:7a:8d:6e:64:f8:77:89:a4:7d:38:e3:0d:0d:ab:72:
9e:ab:1d:61:f0:cc:cb:e8:bf:87:03:63:4c:60:fd:56:57:eb:
2e:4d:cc:cd:54:86:49:62:ae:15:d0:94:59:99:6e:1f:b7:6f:
de:4d:d2:bd:f9:74:83:f2:4b:7a:3d:54:a9:4a:d3:93:b9:e1:
fd:5c:94:14:2b:95:4b:23:09:d7:b3:0b:05:60:87:95:1a:49:
50:41:83:0b:21:71:48:be:92:14:27:42:b4:33:e5:ac:31:b9:
3c:c7:ad:75:a9:30:b8:c4:b4:10:40:d1:7e:14:74:0e:f3:fd:
32:3b:be:b6:42:40:7b:d0:e5:5e:7f:47:37:34:ee:de:1f:0c:
a3:c4:90:4f:ae:a4:b7:a4:98:18:7e:62:75:84:7d:71:50:31:
d5:b0:bf:c6:0c:3f:b6:5a:60:1c:00:f4:9e:4d:16:d1:33:06:
0b:20:c3:74:ff:46:29:27:59:06:01:46:8d:5c:7b:3a:23:f2:
b5:ea:e4:62:a8:e3:85:a5:1e:ce:9c:f9:bb:0a:54:31:83:32:
34:39:f0:09:12:03:ac:53:c1:2d:b9:92:54:e2:d8:30:50:02:
fa:ed:ee:74:61:81:57:fe:40:1f:f5:77:4d:4e:23:45:8c:90:
6f:63:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:52:43 2026 by rpki-client