
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json)
Hash identifier: 74de7dlXqFcxoLdy9ZbRBcmLIToM8SsN72rYoqOCXyY=
Subject key identifier: 9E:31:F2:7E:7D:21:B4:24:F7:87:B6:D0:FA:DB:33:16:70:F9:C2:76
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 019E2100051E01654F537F05C36918E7ACD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
Manifest number: 1945
Signing time: Wed 13 May 2026 11:01:49 +0000
Manifest this update: Wed 13 May 2026 11:01:49 +0000
Manifest next update: Thu 14 May 2026 11:01:49 +0000
Files and hashes: 1: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (hash: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8=)
2: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (hash: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ=)
3: 2RHKEFUbX-V0Mf6y31Iq5dGlemY.roa (hash: 22aNA0RqHM/lo1ZuXKI24lPSyNZYgt9FvnHMilKuHJY=)
4: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (hash: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg=)
5: C58HKVenwwmbh1jkwoeqIUWdglo.roa (hash: dbM/VaOE1y6PqBg/KjdbXvgt9ovsuviuBnEC3nra0Jo=)
6: GEKxvGic2KzXVJsj3dcok72CGco.roa (hash: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw=)
7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: kQCXTvycJQ+2k8j4iyCmPlgu4ihgtmvZXza7JN0Tc1Q=)
8: TN_g4sfmmPrHK_oZ30J7gNWtpIY.roa (hash: m5dgi6YlmiEMbhGuQK1tT2ie/bg//bcOLn6xqpAH6Zs=)
9: U_DCEtPw_hUMwrzj8r6wUIXBPig.roa (hash: zOV0/cSp312KHscfdmAUHtLOyMQW+m7fH0EzuAciKbU=)
10: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (hash: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk=)
11: XVl9Jn76mWQ8ncaJ_wDuumCSFsA.roa (hash: Hs6XsuXHPXeVRFbGDUcPFLc6y5U4gwmlkZ/AR7/NeXE=)
12: XuBKY0oAARsXVXjq7u8JeDvNOcU.roa (hash: vlWZjrm0v836+Ch01+GkfQiIKmv/HzSaOumEGtSwczo=)
13: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (hash: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA=)
14: k_MSpCKVnChWzSccoFJBjl40Vo8.roa (hash: VdSgjLWna9h9svrbMMSXJmkEe/+wqNq0RNqZ0DwPUZc=)
15: pWHrs5rw_KgbSRJAL6KONruKqFc.roa (hash: AB3huwEj/N+euzlEzjByisO3oP/M0v+P+iouNnZD7xs=)
16: unZltpWjHIJfFpLIwg4b58uUsuU.roa (hash: hb7AVSL7Cg4MYbwSNaPjN4NWBI4LlWAD7QoGarhaIFE=)
17: xyAifHL4yJafsXbZXrkrgodDKkI.roa (hash: 5dlJ/03oKMrYHI2ijFPlXqVyiklmxqeJzGBSWajGiKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:00:05:1e:01:65:4f:53:7f:05:c3:69:18:e7:ac:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: May 13 11:01:49 2026 GMT
Not After : May 14 11:01:49 2026 GMT
Subject: CN=9e31f27e7d21b424f787b6d0fadb331670f9c276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:b2:6a:8c:02:63:04:9f:3c:a1:d6:f9:1b:
fb:b6:a1:5a:5b:be:ef:4a:89:60:34:c2:18:fa:1b:
13:50:f4:81:9c:1a:1b:06:4a:31:e1:eb:7a:18:be:
fd:0f:31:4d:23:d8:e1:c4:ab:b3:ff:de:fe:59:88:
4d:72:ce:c9:3d:b5:23:5d:f0:58:0d:63:38:86:f0:
ef:16:d0:67:51:81:e2:76:0d:bb:94:24:b2:5b:7a:
a4:98:26:48:f2:d5:21:42:ef:53:47:81:16:b5:f7:
a2:5e:bd:f2:28:aa:e9:73:a1:bf:c2:0d:91:f5:e0:
9d:79:9f:35:16:22:34:83:4d:71:b7:26:cd:34:ee:
76:1c:c6:00:7b:60:8f:a5:53:d4:bd:6a:b5:43:68:
8f:d7:e5:ca:21:bb:d9:3f:7a:72:04:0d:cc:9a:33:
4e:a7:c6:d0:45:89:b1:13:cc:a5:ca:a7:ef:11:88:
24:eb:89:d3:58:21:ca:da:c5:60:30:b9:e3:cf:7a:
53:61:00:60:c1:94:52:56:37:84:a2:8a:d5:a1:f7:
e3:8c:0e:6b:43:bb:fa:fc:f5:2a:84:1f:45:93:2e:
e8:1f:17:63:13:12:6c:be:d7:93:56:05:12:20:0d:
d4:f7:84:7d:14:da:95:c9:51:89:33:b8:a9:3c:72:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:31:F2:7E:7D:21:B4:24:F7:87:B6:D0:FA:DB:33:16:70:F9:C2:76
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a6:75:c1:5f:80:27:7f:03:35:81:72:5c:bf:80:9a:73:69:
4f:02:df:be:e9:0e:a6:b7:87:14:bc:71:85:59:ec:39:9f:72:
ce:99:3f:15:64:22:fa:42:90:51:6a:2d:ff:0e:92:19:54:50:
51:0d:72:51:a9:e0:9e:e0:69:a8:c0:ee:c3:a0:71:61:3c:2c:
25:33:fa:bf:ed:ed:ad:70:94:1a:10:a8:8d:0e:32:13:1a:c4:
50:08:71:c7:a3:b4:34:e5:c9:37:f0:e2:d3:16:f0:65:e2:ea:
73:3b:5d:05:24:76:c2:ca:b3:7e:ba:ed:31:39:72:2c:73:97:
38:1d:ab:47:07:09:7b:f3:b8:39:00:68:db:48:fb:2b:ce:99:
fd:c7:65:09:dd:ec:c8:08:3d:dd:eb:69:e0:8f:65:f1:5a:31:
e9:91:5f:43:d6:e7:b9:37:95:96:06:1f:39:8b:cd:14:8a:6b:
89:40:f5:84:07:5c:bc:de:1f:1a:ed:33:b2:7a:3a:99:47:1e:
fc:c3:b8:3a:ec:6e:35:a9:08:c9:87:06:da:1b:7a:d8:13:7e:
08:e8:e2:b8:a7:66:10:a3:1e:1a:92:ff:c2:f4:05:97:18:c5:
84:8d:8c:e2:d4:fe:22:6b:aa:0c:4a:82:8e:eb:fa:c0:61:91:
4b:c2:a2:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hAAUeAWVPU38Fw2kY56zVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky
MDVmM2MwHhcNMjYwNTEzMTEwMTQ5WhcNMjYwNTE0MTEwMTQ5WjAzMTEwLwYDVQQD
Eyg5ZTMxZjI3ZTdkMjFiNDI0Zjc4N2I2ZDBmYWRiMzMxNjcwZjljMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIKyaowCYwSfPKHW+Rv7tqFaW77v
SolgNMIY+hsTUPSBnBobBkox4et6GL79DzFNI9jhxKuz/97+WYhNcs7JPbUjXfBY
DWM4hvDvFtBnUYHidg27lCSyW3qkmCZI8tUhQu9TR4EWtfeiXr3yKKrpc6G/wg2R
9eCdeZ81FiI0g01xtybNNO52HMYAe2CPpVPUvWq1Q2iP1+XKIbvZP3pyBA3MmjNO
p8bQRYmxE8ylyqfvEYgk64nTWCHK2sVgMLnjz3pTYQBgwZRSVjeEoorVoffjjA5r
Q7v6/PUqhB9Fky7oHxdjExJsvteTVgUSIA3U94R9FNqVyVGJM7ipPHLrfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4x8n59IbQk94e20PrbMxZw+cJ2MB8GA1UdIwQY
MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt
ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm
LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6Z1wV+A
J38DNYFyXL+AmnNpTwLfvukOpreHFLxxhVnsOZ9yzpk/FWQi+kKQUWot/w6SGVRQ
UQ1yUangnuBpqMDuw6BxYTwsJTP6v+3trXCUGhCojQ4yExrEUAhxx6O0NOXJN/Di
0xbwZeLqcztdBSR2wsqzfrrtMTlyLHOXOB2rRwcJe/O4OQBo20j7K86Z/cdlCd3s
yAg93etp4I9l8Vox6ZFfQ9bnuTeVlgYfOYvNFIpriUD1hAdcvN4fGu0zsno6mUce
/MO4OuxuNakIyYcG2ht62BN+COjiuKdmEKMeGpL/wvQFlxjFhI2M4tT+ImuqDEqC
juv6wGGRS8KilQ==
-----END CERTIFICATE-----
Generated at Wed May 13 15:13:54 2026 by rpki-client