
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json)
Hash identifier: 3YWTOL/jDplZoKFVAi6/rBAUNuQUTyeBssE04DxO0fU=
Subject key identifier: 09:CD:30:53:9A:AA:CB:B5:56:9A:8F:1A:33:BE:30:0C:C5:52:EA:3E
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019CAAFD808DEB7A15176A722461FF7380AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
Manifest number: 1881
Signing time: Sun 01 Mar 2026 20:01:06 +0000
Manifest this update: Sun 01 Mar 2026 20:01:06 +0000
Manifest next update: Mon 02 Mar 2026 20:01:06 +0000
Files and hashes: 1: 1-QjCvQyEiSSrXN04KWll_jRfeW0.roa (hash: RMz19B8NK0lDXxzH2DOAYRkrqiIKDr84AiR/LHs2BHU=)
2: 1-X27IuJGjEWD538xJuX4fc13cFQ.roa (hash: h9nhsX5bhwK6F3kmXdBDjN240g4PwWDk5C/hsalPlfw=)
3: BOjpyE22EDrXW2wH5ueNqr-_t7M.roa (hash: JzVtX64VS2LC7Jo6NzhZJ9tn4S0/NMOoGFR3UGv+gFE=)
4: BvDqb9cc-WJGTsR3tIgfxMVXMzg.roa (hash: M3gvEkXIu3VF4OHCFfprYhRQqSznoxtSmwJpexYP1d8=)
5: EeCtLuBTD9Vnd2ZnCvIwFMY3lbQ.roa (hash: xhrDK2dmq7qtYkf86RQax67dAPsbZo2ArZ5UCuQLz7I=)
6: GxCZoQUkV5fBAXhSL4DEgTYGJQo.roa (hash: G9NhBuAJ9tyZxN2RMYoM+cN+FlYgn+5It9aPaKFMmf0=)
7: M88D89mcwOgwS0smNU2-YZ_Y7Ns.roa (hash: sFx8wL28VJls261Z4+Yoo4E3wUg010twMp4FzjomCF8=)
8: OFU4rYQAL-sOvU42wXKsJPFLqgo.roa (hash: gfh4xBU+FrULOBmBwbJZ1n1nb4fdCqFs8mhTRC5PTWk=)
9: PpN955svl-HLDw6fLf58eCV0ziY.roa (hash: AoTlEjxNh1f4w0jTYiNps1tCHpqZbK+PCcDLj0smKN8=)
10: SrEzEjwK-3uKVpak9gMqzGNpdCg.roa (hash: 42ZM42HvDr7NNH3ONprmjvWUIm8DwnTLbUUIzVU2/1Y=)
11: Y3NRzC9hifQe9usbuWmpK6keugQ.roa (hash: VJqsHGvkgw+GazL84ykrZQy43X4CZ0v3NwjmAtv8RIs=)
12: b6_1YvrxO5H13PgeqX9yvKDmS8Y.roa (hash: LmP1grhJtls1Giy8pUC8zHO3rUSGz/0KggmC8aeJ/z0=)
13: bUNfA-Av4UmqF4BtunXlZ21q724.roa (hash: qQU2e8dztU2kTJC7bA4kqu6ev957L6OyeDRTaJouBzU=)
14: d0Se-Q1hirJpXCWc1a3yM36OdkM.roa (hash: WUitFtPR3eqhcQYIVu73IqaLIgnHpMyqoNV1i8MCbTQ=)
15: fJVUUHPA2PMcN0st0PbAgYkXKuw.roa (hash: aUscwIj6WUdJlI5efFgW5oAZ5dGdU9hgEbv9zQfdoL8=)
16: iznH3vVYi9D8I6W0a_m2eZRKsNE.roa (hash: wZkljNiGiuoftSlkxO1vcP+VKneTmBt0zwFDnL+VZJg=)
17: jwqLq-su-FeQFPMunwZCdpiE4yQ.roa (hash: 0DD9DnMv2SCd06HIdn93/9sFlkj49ZuqQQMpvkACvaM=)
18: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: /gIMuPNTdmLoTmlvEtTnYTSJMe6kjw1PwfTsYWNcI+8=)
19: wEezPkEzN7e4KBElW04dGq39yXE.roa (hash: tPPcQRNIUmCvUpl1+b0ZJ2Bt31w7/vOz4ZjosTuObmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:80:8d:eb:7a:15:17:6a:72:24:61:ff:73:80:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Mar 1 20:01:06 2026 GMT
Not After : Mar 2 20:01:06 2026 GMT
Subject: CN=09cd30539aaacbb5569a8f1a33be300cc552ea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:16:a6:80:46:c9:24:55:a1:4e:3e:54:12:
8e:13:be:23:7d:17:44:6b:c7:2d:d7:50:08:1c:9f:
d2:8e:c6:43:f4:42:00:13:58:21:e3:36:3a:88:d5:
e8:60:09:3e:2c:4c:2d:c4:af:50:a9:25:ca:8c:b9:
f6:e7:99:b6:5e:94:31:03:65:ca:31:db:ce:7c:b1:
60:ad:6e:e5:47:d5:82:a1:e5:a6:c7:4b:48:25:47:
0a:3a:d6:08:a6:15:c3:24:d6:a6:23:06:2e:1f:96:
eb:83:f1:fc:6d:8a:03:af:a9:31:da:d3:5a:62:77:
16:83:64:f4:67:f7:82:42:98:d7:a2:11:f3:3d:19:
5e:e4:78:96:ef:9e:02:b3:69:b3:b1:df:03:6b:4e:
5f:52:5c:54:6c:f3:f7:f2:70:eb:4c:15:56:30:e9:
89:8f:19:bb:50:48:b7:7c:b4:b4:1f:e1:3d:18:c7:
45:e4:ac:57:e2:47:40:7a:fb:13:1b:4d:da:88:d1:
63:3f:06:99:1e:ce:f6:39:f2:73:2c:cc:73:9b:60:
fa:b6:d4:34:ee:e2:c6:f7:00:ee:fa:88:ad:f6:67:
d9:85:b4:e7:fd:a9:15:c3:98:b5:1a:5a:ec:38:83:
82:3d:06:c0:ff:ea:8c:e3:23:56:1e:ef:21:fe:f9:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CD:30:53:9A:AA:CB:B5:56:9A:8F:1A:33:BE:30:0C:C5:52:EA:3E
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0a:6d:51:03:9a:50:5a:d8:06:1a:a3:92:50:f0:c0:70:d2:
7f:82:be:e4:27:b8:e2:7a:a7:b0:0f:d2:20:9a:3a:aa:8e:4c:
a8:cd:fc:98:aa:5c:cf:69:9d:b1:04:fb:37:1d:73:24:25:4a:
cd:57:9e:69:50:3f:bb:eb:7c:15:9c:c3:06:70:f5:ac:2f:c7:
88:bb:98:97:d7:9d:37:08:98:23:4b:95:3f:4d:24:e5:61:c3:
b5:60:31:6a:3d:82:41:81:d7:a3:38:8b:7d:6b:f9:a4:fe:ee:
a2:a9:de:62:c4:a7:77:cb:5b:57:57:e0:ef:8d:9f:cd:fa:d3:
94:9d:6e:9d:6a:47:fe:bb:91:3e:db:fc:ea:67:2c:8f:e6:4f:
39:c1:a4:27:62:05:ab:96:9d:de:35:bf:0e:22:ea:80:46:b6:
83:a4:a1:8e:a2:7c:33:e8:6a:17:2b:12:47:48:9b:1a:33:f6:
5b:f1:3a:ea:dc:4a:e3:52:15:10:8d:d0:f0:42:60:f9:27:9f:
a1:52:81:cb:47:4e:76:07:35:bd:23:8b:33:c3:b4:1e:c0:34:
d7:0c:43:a5:a6:4d:5e:0f:1c:65:39:6a:77:92:45:20:20:c4:
e9:35:d5:d6:40:70:45:63:72:e5:4a:fa:96:74:f8:34:3c:d1:
ac:97:cd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:09 2026 by rpki-client