
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
File: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json)
Hash identifier: XkJh29gp0LG8nTOcFa1tuQQbegT2jJ8318cUmvNeNvs=
Subject key identifier: A4:09:3F:88:BE:A4:FF:D1:2C:D5:64:50:BD:CC:CB:75:53:DB:6F:A4
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 01A1DE39AF0BE8046EA19F1608C4EB1AD0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
Manifest number: 1B05
Signing time: Sun 15 Nov 2026 08:01:24 +0000
Manifest this update: Sun 15 Nov 2026 08:01:24 +0000
Manifest next update: Mon 16 Nov 2026 08:01:24 +0000
Files and hashes: 1: CE6rRh7gwkNwQsNCEV_5-qvby8o.roa (hash: +C6crj3tlveY40cfyaDLAmJKc2kjvGSJAnx+Tun2pBQ=)
2: J7hqwzNBUJIFCvPHnt3UCUaIkS4.roa (hash: dwuiTVtxcw0Gm8ehWtdolENkQjfHnVWwxpd27Y3PhYA=)
3: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: Tn9txwUO1EWT6/UswhPkvJ8Lg/w6PGYFA49E+m8ojkk=)
4: MjvomoUdbRCYMRTivd64oJucyR4.roa (hash: cQeTekUSkTsAQzZ5llLXfmDS9liZjdYx7jCgTSy2Qs0=)
5: My7nFs0Vdg40cSVzVAWWgDYiiWQ.roa (hash: xMnqeo8kv1TT3K5je0MfFlhPp2VhqBwqS4yOebCmHHo=)
6: dwe_m7iK2njmUFFGe9nnrN8FZV4.roa (hash: utaiyLTsrEWxNDIzyZ7TNXdP2ryHcGA9G92URVMLgOY=)
7: hVI8QpUF6r-7T1ydDal0FAOErp0.asa (hash: eBJoQYgzHLkhlMbNBG7c3qKGn19DEMueFJ88acOdrks=)
8: ixjloOI87OkWVNhgbhDEEFBTJ_A.roa (hash: cx+C+iENlLKYVwuPtzW+PgZZj9Jz/VMG8suoQFDv4vY=)
9: j2qKFrWfusxDiFzkFOC9pNjdNeM.roa (hash: eedi82Numcyo5s6BIiJHhclTJ6KJqgbKjG36ZSW5eFU=)
10: m3RaVncm_gBlS4tVezr7XBZHrR4.roa (hash: NCcn02MU0AdzNYn2EHJlZXzwGScb4dWUGw8AznxeOaE=)
11: pxvwZ83GQsd2xDFU232Uh7bybX4.roa (hash: wTQyNgjrlPNNWRBqCTTjBvEsBojPl8WoXlgNibVwY1s=)
12: s5LlLi4ld2vBJszDYqPE5bC6NUQ.roa (hash: xBO3s6pJR+C6uL7cUKX1XBoCQVOuPGpiKn7J6K0u+hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:af:0b:e8:04:6e:a1:9f:16:08:c4:eb:1a:d0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Nov 15 08:01:24 2026 GMT
Not After : Nov 16 08:01:24 2026 GMT
Subject: CN=a4093f88bea4ffd12cd56450bdcccb7553db6fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:a2:4c:1f:13:af:ba:15:27:75:bf:4f:be:
95:5e:b1:af:66:62:e8:cf:b5:c4:ee:c3:f8:ed:a7:
6d:84:62:dc:7f:fc:ef:74:cf:62:be:6b:9c:76:e0:
da:c4:2c:e7:f5:bb:c5:f2:de:56:b0:70:86:70:69:
11:36:ca:8e:84:1b:90:b5:35:c8:7b:a3:67:e6:92:
eb:85:2c:e5:95:d2:24:b2:5b:72:89:0c:48:ae:89:
6f:d1:50:56:ea:4a:55:11:ae:d6:e7:64:1a:ea:13:
d3:5e:c0:42:75:47:eb:07:94:6e:20:b4:f8:d3:79:
d7:27:7c:2b:5b:0d:f0:c7:90:ca:e1:c9:8e:bd:2a:
cc:4a:95:ce:98:30:64:34:cf:e2:e3:9d:84:9e:00:
5e:79:f1:68:15:b1:5c:f4:47:df:ff:13:02:c1:e0:
e8:f3:ea:ae:86:82:1f:c6:29:24:e1:3d:77:e6:01:
7a:b4:53:60:4f:c5:ad:95:5f:fc:40:79:59:70:ec:
1d:59:a7:ca:66:ac:47:a0:78:02:40:e5:7b:7f:a5:
a0:36:52:28:d4:9b:7d:36:8d:09:7a:cc:aa:2c:ef:
4f:04:af:49:96:ee:03:98:b3:9d:c8:48:c5:65:2c:
53:3b:f2:2b:6c:e3:98:59:d8:bd:17:86:91:8b:a2:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:09:3F:88:BE:A4:FF:D1:2C:D5:64:50:BD:CC:CB:75:53:DB:6F:A4
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5a:6c:e5:43:58:ea:f8:d5:cd:1c:c4:c9:86:3d:61:f2:34:
6f:3c:6c:be:54:46:62:14:97:c7:9b:7f:b3:54:ef:84:cb:72:
e0:e1:95:23:56:6c:14:1d:a6:7c:b7:c4:fd:65:cb:c6:23:70:
0c:93:2f:6e:75:e5:bf:0e:6b:50:0d:62:59:c6:3e:92:cc:be:
c1:b0:77:81:c9:07:cc:64:56:41:c6:42:d1:71:0d:d5:cd:f2:
8a:e1:1d:c7:3c:cc:61:35:4a:64:3a:c3:69:8f:7e:d4:3f:56:
76:5e:11:1b:16:39:15:78:e8:54:28:5f:c7:1d:9b:f3:14:18:
5f:ba:7e:50:f3:7d:fe:9e:d1:57:46:63:26:a9:88:bb:84:39:
8d:cf:ff:8b:9c:53:36:59:20:a9:16:0e:29:03:75:1c:0a:bc:
3f:b7:ae:ee:6a:8b:ef:61:f8:b6:90:88:67:04:e9:9e:3b:75:
e8:2d:c3:53:49:50:ce:af:86:6c:82:3a:69:04:6f:10:3e:f6:
db:ed:25:36:df:72:50:ff:8d:5d:87:2a:49:53:4f:cd:2e:57:
b7:2a:98:8d:51:02:d0:22:1d:9a:6d:f9:12:23:33:ac:81:ff:
1f:a1:4e:be:9d:04:df:3d:8e:50:57:ca:0d:42:41:04:26:b7:
55:45:22:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:35:52 2026 by rpki-client