
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
File: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json)
Hash identifier: 9wZgtw0oAJsPQy1cFPBpGDRnk275gclQANRJq5xHocE=
Subject key identifier: 7D:C9:27:29:45:D4:50:15:DE:48:D6:51:7F:E7:7F:67:C1:D0:21:0C
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 019D284E2582C5E2B551E9E7C4C6AB4D80A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 04:01:43 +0000
Manifest this update: Thu 26 Mar 2026 04:01:43 +0000
Manifest next update: Fri 27 Mar 2026 04:01:43 +0000
Files and hashes: 1: CE6rRh7gwkNwQsNCEV_5-qvby8o.roa (hash: +C6crj3tlveY40cfyaDLAmJKc2kjvGSJAnx+Tun2pBQ=)
2: H-Z-59qkp7uHQPcWeenVARkWiac.roa (hash: HKW7RkaEKR+tAOc8fjxLJQH13xKLm1JBXk6SPdfsZ20=)
3: J7hqwzNBUJIFCvPHnt3UCUaIkS4.roa (hash: dwuiTVtxcw0Gm8ehWtdolENkQjfHnVWwxpd27Y3PhYA=)
4: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: ohdQg6LHldDHP2FuEycQpIudMeh4LWV7uKh+rDlvP3o=)
5: MjvomoUdbRCYMRTivd64oJucyR4.roa (hash: cQeTekUSkTsAQzZ5llLXfmDS9liZjdYx7jCgTSy2Qs0=)
6: dwe_m7iK2njmUFFGe9nnrN8FZV4.roa (hash: utaiyLTsrEWxNDIzyZ7TNXdP2ryHcGA9G92URVMLgOY=)
7: ixjloOI87OkWVNhgbhDEEFBTJ_A.roa (hash: cx+C+iENlLKYVwuPtzW+PgZZj9Jz/VMG8suoQFDv4vY=)
8: j2qKFrWfusxDiFzkFOC9pNjdNeM.roa (hash: eedi82Numcyo5s6BIiJHhclTJ6KJqgbKjG36ZSW5eFU=)
9: m3RaVncm_gBlS4tVezr7XBZHrR4.roa (hash: NCcn02MU0AdzNYn2EHJlZXzwGScb4dWUGw8AznxeOaE=)
10: pxvwZ83GQsd2xDFU232Uh7bybX4.roa (hash: wTQyNgjrlPNNWRBqCTTjBvEsBojPl8WoXlgNibVwY1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:25:82:c5:e2:b5:51:e9:e7:c4:c6:ab:4d:80:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Mar 26 04:01:43 2026 GMT
Not After : Mar 27 04:01:43 2026 GMT
Subject: CN=7dc9272945d45015de48d6517fe77f67c1d0210c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:59:87:15:14:68:25:53:fd:f9:61:e3:8e:
a8:1d:4a:0f:d9:78:85:5d:ef:b5:a3:c3:73:5c:2d:
26:f8:dc:c9:bb:87:43:92:d8:fd:2b:f2:d6:33:34:
e9:bf:96:10:85:70:16:e9:e6:1c:f6:cb:56:b3:d4:
20:9f:cd:88:b9:c6:1f:83:ab:cd:93:0b:95:87:04:
45:38:f2:95:7b:bb:37:57:5f:87:e8:c1:a3:85:0f:
9c:a8:09:90:99:1a:29:58:e7:6c:90:3b:f3:a9:c3:
bb:52:40:6c:19:1c:84:89:fa:19:7f:30:a8:5a:0b:
55:0d:c1:96:f5:25:a3:2d:ab:86:8c:bf:f8:23:08:
b2:fa:40:61:66:69:7a:1b:e3:97:69:48:08:71:cd:
15:0a:3e:0d:12:c1:63:36:ce:45:a6:91:40:86:69:
e7:ce:ad:6f:71:e0:1d:e7:5e:97:87:29:ae:15:3a:
dd:ff:ad:8c:d9:d8:d2:c9:33:32:46:b6:82:be:36:
c4:42:34:15:2f:eb:d3:5b:1c:22:e7:d2:b0:96:55:
21:34:b2:63:33:b4:19:94:bc:7e:52:a3:03:19:7c:
60:18:cf:c7:c5:f2:20:d2:a1:54:82:50:e7:df:5a:
5d:4d:e7:61:b6:37:07:1a:25:5a:d8:e4:89:21:98:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C9:27:29:45:D4:50:15:DE:48:D6:51:7F:E7:7F:67:C1:D0:21:0C
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:21:22:1d:3e:f3:f8:26:7b:53:6c:9f:e6:33:cd:3c:68:7b:
d2:0c:d8:31:ed:b0:7d:4e:e8:92:92:da:87:ec:54:c6:8e:2f:
8f:6d:eb:d8:d3:75:db:62:88:35:2f:07:9a:bc:99:73:c7:4a:
f5:09:a4:cd:d5:7c:1c:c9:a7:a5:9c:a0:27:4a:01:e7:90:ce:
f7:f2:50:4d:5d:11:d3:7a:0c:ba:dc:38:ef:85:ea:ba:e9:b8:
68:6a:ef:de:48:40:62:d0:d3:fb:a1:b9:6a:54:d5:aa:16:fc:
a4:a9:1f:36:22:c7:d4:01:27:f4:98:fc:d8:7d:27:a2:1c:c9:
c2:85:51:33:91:5d:ff:06:ca:c8:6b:cc:a2:44:63:39:bd:9e:
af:eb:bc:50:89:3e:13:0e:46:d6:80:b9:34:31:cd:11:70:6c:
9b:0d:08:11:66:a8:d0:38:85:02:91:c7:c4:0a:d7:54:09:d7:
d2:dc:a7:81:6c:de:c9:d9:23:cf:1f:98:17:09:55:cc:ba:3f:
fd:57:b6:35:37:8f:38:84:62:c3:c5:49:9c:98:62:55:09:f8:
d8:98:e3:b8:82:f0:c4:be:f6:cf:14:94:a8:c1:6c:f1:9f:fa:
d6:02:a6:ce:57:87:f2:b2:16:0a:72:18:03:91:8f:26:ed:c8:
12:7d:9e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:59 2026 by rpki-client