
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
File: j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json)
Hash identifier: fx0CXEFB4PU3v0a6TdHpp8leBzcyXGcXI/dzbemsnq8=
Subject key identifier: 2A:E1:3D:32:E1:5A:70:5A:FD:4D:9D:79:98:FB:BA:EF:45:54:DF:8A
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01A0D6F103944D391AEAC9ECE09C9DE770B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
Manifest number: 1605
Signing time: Fri 25 Sep 2026 05:01:54 +0000
Manifest this update: Fri 25 Sep 2026 05:01:54 +0000
Manifest next update: Sat 26 Sep 2026 05:01:54 +0000
Files and hashes: 1: 0wV5g4EVRhgoKZWB0l4u4NCoebc.roa (hash: x9f29Pup33svef1VwpyK5xHxGxbt4thAXHF+Oyzm5bM=)
2: 4CZjW2K05gjTWVSm5HCC1YhuGFM.roa (hash: YUklznotWSasG+NPzST/0VXBFbDg9f0JqUM1FXRqVpI=)
3: 7Y-dcG1ts9XBr6M2neYbzLiBIE0.roa (hash: fa0hkAmckPv2az2FBEeIwpMqvvWjXXDG2d/nbEmckOA=)
4: CRGHJQj4lZiRn9TWiVjqPSQiI_s.roa (hash: LhY2OVqSV8kBseD85misaxGvwCTS5KLte3vYc1JA8OE=)
5: Dja78ruX4o7MO5yCfGzKSVMuXBo.roa (hash: 2yO1oHN3Azbfysz52/wvWwgKaNjr723EJVJe38YhZHk=)
6: JKAnK2en3odHT3-Pq6Exoze1jvQ.roa (hash: qU0dNd/ElxDWuoJrBPmPXPS+v87iZmcyX83uBVkJOdg=)
7: L4Sbl1-z8UK2yeLo7GSPcqGMg8Q.roa (hash: 1f411shku7kLw/HnC23Axo3jTM4GmplRNwgHj+KtHeU=)
8: MPO8HbcFWMOeE2iBKVv-IWpWPxk.roa (hash: CZOBmBd1hbGjq3AqK4WkUgTLjxnhfpm1Rc52Dylmg/w=)
9: MpLOwnyu2anoLVlED_5oFKlDxB4.roa (hash: 8o1FX8BBhwIHnjoaP2OfRA6v8Ril1Bvaqiop7L5Ytzg=)
10: QsaJUx8IySwAVJKdDaCVAV_WeG8.roa (hash: vu/oFsB63dNb0RilkgFUkxuOJfKjYLkKFMHoBUDzCU4=)
11: RQYIGLLVSIftKc72IB8Q5fGhyLA.roa (hash: du2s9GjbjtVis5okEfEtz3NF056oJiz3iauob6CPdOw=)
12: S2NE7ivxA_6uSF3faj9xM7QLVgw.roa (hash: qDphZ//ssVu7S99t/OF3SeD4wpZPqNUE9vHt5D6PaMI=)
13: W_DUPmMWXfw6_1KwWt3waPIqT-s.roa (hash: cneq7hYbqTf+UiD+t4E82O4maYI9qUbQh2f/R56QLF8=)
14: imB7m_SSkD-EKaGcH3WYOVA3UFA.roa (hash: QaG4X81jQlLRNJJxryf942TxAMPUaQpIxGX6diK8mSM=)
15: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: nGaXxBwawj9VNaPv0uZB0VIjyY1UBf2OtmYVTwfKRbk=)
16: jNFp8uu97p0HfNSrTxSiTKFelak.roa (hash: MfowC1d2p1Ow84C7z3He8tKQKNnjmw+gsQpMY8A2caQ=)
17: lLhmEw7IEMb-qUjY7M3kCd8cWOA.roa (hash: ynq1BksMwSLgFJR9WzfdR5gm2pKZhnJLRvt2UFC0YIk=)
18: rcJDPkI4eynfWrTLoSdqLg60fG4.roa (hash: EXzqiGJMATe2PwXCIjt1gE9L/khTBoqYQQscvLJnOxM=)
19: s1BOsr_SL1rErib0eleQtkSspyY.roa (hash: YIrdM89Nie4pypUTkAA2EhoG4aHCBtnPq36XIULi8J4=)
20: up1zEmwsr4UewSJwCVlJIJ_n7tY.roa (hash: NUm9ibISZrUPLETjtapJYdNCpp/S4jJUYB0Y34lZ4c8=)
21: vTjdy81Ui1f2cDgZ1hxqEJxmLlo.roa (hash: VYtXHqRevYtaXeI9lQQ4d+QNrCRIHyo5F1ekiS2/Np0=)
22: yxBWMEqUTuUpppX4kQbNWZMUag8.roa (hash: GfoDixWxoGP9Yf1RA/HAN8eaFxjgurmqtoh7fzztQM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f1:03:94:4d:39:1a:ea:c9:ec:e0:9c:9d:e7:70:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Sep 25 05:01:54 2026 GMT
Not After : Sep 26 05:01:54 2026 GMT
Subject: CN=2ae13d32e15a705afd4d9d7998fbbaef4554df8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:a1:d5:37:63:26:78:c1:ab:0f:06:eb:31:
4e:85:98:af:ae:da:0f:dd:cc:04:af:e3:0d:f3:00:
86:0b:d1:bc:1f:23:68:70:7a:02:61:91:c5:96:fa:
0b:a8:31:99:86:f5:a8:9a:94:95:0f:4f:ea:77:2d:
47:a9:64:c2:4d:f8:69:6e:44:31:3c:51:d4:58:34:
96:5f:47:32:81:5f:9c:48:52:dd:b9:ea:24:28:35:
92:90:ad:a1:26:bb:a6:bd:92:bb:48:4a:b8:b7:22:
d5:ae:dc:6b:8d:80:53:5c:2d:0b:ac:ac:f2:16:04:
26:a8:ca:f0:21:d3:9a:f1:30:cf:fa:fc:91:9f:af:
08:a2:87:ec:bd:05:24:07:9f:7b:ee:d6:2c:a2:ff:
2e:44:d7:c8:3d:71:31:d1:21:bf:89:39:5b:e9:50:
79:0c:a3:b8:f5:40:e4:35:db:03:69:dd:dc:16:29:
1a:b5:f2:ae:9b:51:fd:96:d9:af:5d:ad:32:40:2c:
1e:01:7a:6b:7b:21:d4:7e:6d:fd:7c:ca:2a:dc:a3:
05:a6:63:ec:0b:9c:49:ab:4d:7a:f8:f5:85:2e:93:
d5:62:bf:5e:a9:57:ca:f3:3a:3d:6c:27:b4:56:99:
53:ec:57:66:a1:0e:11:a0:cd:fb:95:d4:43:68:c5:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E1:3D:32:E1:5A:70:5A:FD:4D:9D:79:98:FB:BA:EF:45:54:DF:8A
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e5:88:f6:30:52:7e:03:11:46:14:03:c1:eb:9b:24:ff:bc:
1a:f4:da:29:d3:8b:2f:86:5e:bd:c1:94:b1:0d:77:f1:f8:17:
cb:7f:c4:05:4e:0e:3c:e5:bd:b5:1d:fb:74:8f:37:0e:99:38:
85:98:7b:37:4f:4c:d1:fe:45:70:36:29:81:d9:af:c3:43:66:
f1:3f:43:99:f0:19:f3:d3:3b:dc:32:9d:57:cc:c6:35:cb:64:
c5:a6:d0:fa:ae:00:e4:92:fc:6d:61:1e:3f:74:d4:03:81:5f:
08:95:f1:15:3d:13:ad:cc:1a:27:30:8f:8c:f5:86:cc:eb:2b:
d2:71:be:e0:74:02:16:45:63:86:cb:e7:47:6b:e7:99:1a:a3:
3d:f8:95:24:84:d7:6f:dc:98:0c:93:c6:1d:5f:cc:f0:ba:84:
ff:95:d8:87:56:d1:be:36:e9:db:d3:2c:1b:55:3b:6f:96:c1:
52:52:4f:ff:25:bf:d0:61:c5:f8:ac:c9:4a:bf:53:76:9f:ab:
f0:26:3b:33:14:84:e5:b5:53:6c:85:3b:5f:cb:65:c6:6a:c3:
0d:7e:8c:d5:86:64:a5:65:e3:cf:af:a6:93:81:16:95:6a:d0:
f1:27:8a:c5:63:6b:ae:e7:0b:b0:88:a2:f6:56:99:cd:c0:e3:
d8:6a:13:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:24:56 2026 by rpki-client