
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
File: raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json)
Hash identifier: 6nS9srOQF1iq+dEYmUTXWsL0Gs5UMzNB01uzJT2oevo=
Subject key identifier: AB:72:BE:E8:92:62:92:DD:D8:AB:75:33:EC:9A:04:28:43:07:7B:87
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 019D269638E06611357505C0979AE4AFF1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
Manifest number: 18C4
Signing time: Wed 25 Mar 2026 20:01:12 +0000
Manifest this update: Wed 25 Mar 2026 20:01:12 +0000
Manifest next update: Thu 26 Mar 2026 20:01:12 +0000
Files and hashes: 1: 6g2jAj3wPlnIocB3gv_q01JRNMI.roa (hash: BoIPgQYmO7xfoT6Wc1Gklqbq8ldWVr0gxcD6FGVAfrw=)
2: J78VM0qajB7rh9yu3sFqYPoFQ5E.roa (hash: +P584eQDqt5VMIbzVnH+2JMF7g7sBvRvoJsnsuzsctc=)
3: LCiiiyNl3fmiTu2hqQ6fBJ-TTbU.roa (hash: sFqRolKm0Znj/M6WIHuOprIWndPgzew2UV2ZOuaE3Bo=)
4: Mg5spav-Aj8VvIh1-2RHRBIttEU.roa (hash: SH1KuCQgQ4RFoHS3pbRrLNbrSAXCyG9eS+C3l6//Hf8=)
5: Oz2typdgzDQc0ctUseKKMFhx06Q.roa (hash: syifUOQ+Jq/Hybnjzbf9hzjzGqX0Taf7r/ZLA0VrpP0=)
6: UmBw_yF9KWjZUAQ9ukulqKQYnf0.roa (hash: GXPHkRfD9ruUjXH0INFOCI/KwX1w3gcMApKKReWsSrs=)
7: fMF9qnlP4WB5LHh5V8LwNwc9f4Q.roa (hash: fmzVayjcNIPJoq0/A+Ybi5cj066xRm3fDk6Fawjmxcg=)
8: hMCrIUKHXGHOtkHZ8Y6eI3UIeCw.roa (hash: rMGJFYfVplpRpoCAdt4v/1BCKdLOOcSLzsmFWHhqGnQ=)
9: lPiHeORLKEKfujHMYKmMKgjplak.roa (hash: jBAhlOJ7x1dzG58s1VItmsDLFO+pFQTxwtJmgsn2S2o=)
10: q0e2mOxIUzAfYPRIbushYUqYPEk.roa (hash: mjQc3SMPF6rvuC90lgX5o3Yun+cCb8geikGE6fcJ2cw=)
11: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: ZUYLX4DUxI03wzXTbcEQ8iVCtE+s8P+6oow8PmihSNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:38:e0:66:11:35:75:05:c0:97:9a:e4:af:f1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Mar 25 20:01:12 2026 GMT
Not After : Mar 26 20:01:12 2026 GMT
Subject: CN=ab72bee8926292ddd8ab7533ec9a042843077b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:8e:f3:b6:91:fd:a7:35:99:42:4d:b9:33:
c2:31:8c:b7:e8:ca:3f:17:7a:cd:55:a2:8e:74:92:
bc:54:f5:d3:be:a3:c0:98:75:6f:4e:bc:28:b0:e4:
a3:40:5b:c3:a9:1b:d5:f7:9e:e4:d4:a1:5c:c2:c4:
39:c7:69:ae:6b:26:ed:31:0f:fc:69:4f:07:48:cb:
c5:09:6a:39:89:2c:61:db:a8:3c:09:2b:ae:a1:7a:
5c:74:f7:cc:c7:36:15:75:e8:55:7e:d1:e7:e9:87:
7d:9f:f9:4a:8c:a2:da:e6:2e:8c:9e:82:79:c8:bd:
b2:ef:40:b1:a6:67:ac:68:ab:7b:b4:0d:0c:7b:3a:
03:1a:ff:93:2b:eb:f8:60:20:81:ac:17:4e:0e:75:
9a:11:0f:24:11:54:9c:af:e8:c7:0c:82:c7:3c:6b:
1c:23:ce:9e:b8:33:6f:05:ef:c1:12:b6:d7:c9:eb:
93:0d:4a:6a:a1:0b:f3:ae:01:02:3f:07:ff:3a:3e:
7a:14:bc:af:e2:23:78:3b:05:84:cf:c7:3e:3a:c3:
26:2e:f7:d9:14:aa:06:51:bb:23:3b:c3:af:df:2d:
94:52:35:a7:ad:e7:2a:7b:1c:ff:69:f4:67:6f:83:
16:ce:d6:97:e1:44:a8:06:c4:8d:80:c1:f2:76:56:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:72:BE:E8:92:62:92:DD:D8:AB:75:33:EC:9A:04:28:43:07:7B:87
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9c:b5:21:bf:4c:b7:aa:0d:91:60:a8:9d:cf:3c:52:63:56:
9a:82:d9:9f:a2:dd:81:94:7c:ff:e8:7f:2e:2c:ba:8c:86:04:
9b:5e:ae:c6:36:3a:7a:f2:65:ee:5f:31:66:91:2a:c8:65:aa:
90:d8:23:73:1e:54:ea:2d:d6:88:30:68:ea:f0:2d:2c:66:8c:
b4:9a:67:61:05:5e:a1:aa:da:b4:94:dd:09:8d:4a:f0:3e:03:
66:28:74:91:c1:15:ca:12:af:c4:51:99:cf:e6:ca:2e:91:a3:
a0:74:dc:1b:f1:d8:31:64:3c:ba:fb:c0:a8:19:b0:6b:20:57:
64:ce:73:ec:2b:f9:a6:2b:c3:ac:e9:07:94:bc:de:2c:58:12:
91:39:68:82:51:13:91:cb:fb:27:a1:fd:7c:92:b8:b6:dc:80:
93:30:b8:8c:17:23:89:1a:75:7e:cb:a4:f7:33:0c:3c:d2:35:
19:0d:14:57:56:67:cc:55:e2:17:7c:5c:51:95:f5:52:d8:f1:
b8:3e:b6:fc:10:56:a8:a7:a8:3e:b1:fa:85:6a:4b:9c:72:b3:
41:2d:1c:9a:9d:4a:e9:b2:5a:90:3f:0f:96:97:ae:a5:b1:eb:
4a:ee:3a:16:44:15:27:98:d3:55:6e:92:0c:9e:10:e5:39:7f:
fe:9a:6d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:30 2026 by rpki-client