
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier: 272OdWYNdWnyz7GXSpSAwAxSeTWQzlsAW0YvMVcoviU=
Subject key identifier: 3A:64:7C:86:DA:CF:09:B0:DF:BA:C4:0C:10:4A:2A:F8:A5:61:8E:55
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01A1A82711C1BCB779791566CB546FA09EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number: 1086
Signing time: Wed 04 Nov 2026 20:01:35 +0000
Manifest this update: Wed 04 Nov 2026 20:01:35 +0000
Manifest next update: Thu 05 Nov 2026 20:01:35 +0000
Files and hashes: 1: 1EgCfIUZHYf24SrWg9kAOto8Duc.roa (hash: AUpadmn7SxPiN/E2rAaCXCpLwYoRDkhN/Jxbn7p885k=)
2: 3GHhVMraDxdiiAskPewL35crdjo.roa (hash: XPSOg6gcqzCXxPqB2AsSmHrynZ5hN5FT4lGxnzezIrw=)
3: 8MnxyjCOrSvQ6i3dnWv8KYTCZVY.roa (hash: 0JK4Fw26Ffv1CbJTN1h1lmvQzBmi4JhkRYBwfgGlUiI=)
4: B19k1PitIujJpaB0ZKwK-7amv2k.roa (hash: 5KywPlZFag+pODjYDKN24Y+tX6ip9dFPHCvilImjUlk=)
5: CI5OA6QXqxDb_vQORKk6q2XDhKs.roa (hash: EhsJRsPXMO4K43zEnBLLLlr95wCN5evyvOqkDdEQez8=)
6: C_i3BFwSyufK3kEKnj8AwQJSM-g.roa (hash: RqeBg4qnPKs7LMu02pA0RKL7OpjvJCoQwZAVatnEMK4=)
7: G978p2Z4fjPEzTOjuXppglSIr4s.roa (hash: Nz/5Sv/BTu9yF7BMhupkYJxi7TJYJJ/JoGGvUftlZv8=)
8: Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa (hash: pGrQx5S2KxHTpkTBouQo/IMtimjqQRdhpHgfquKymNk=)
9: M8jgCbSmS_f7pdpfIZJACPF9zFQ.roa (hash: pXnnl9PZijaHt9S33eJN6xuH7nQxj7MBnjM8e2gGQQQ=)
10: NZeiCNkAFPPe6mRmV3vIotIey6I.roa (hash: 1okB9NoMuO2fNW/qbueY6s54GpzzWp1KSEo2FrjzOoM=)
11: QFBIL98nhWZihq6X9otfp-26AW8.roa (hash: 7lXr8KdBRuxrgLdmbnp5sqy+5Eu7YOk4bILMk23Cxhg=)
12: YFekMV6k_znI9JX_sw8Tv3F6sTI.roa (hash: m5Hdd1gjDtnmRTylaY7LXFqGy5f9ant1wS9vgjPqwac=)
13: ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa (hash: yNA9Iud4iZ26wPkbKHA01kAUSSNsLVBFRoknHNyK1a0=)
14: aagIksMopc799P33hATJVhYhv50.roa (hash: iIkNSdTVd4sXcPwrjUX8C5eltdaFk4s2uMI1T070mOQ=)
15: c4DyAsvFXbG5o7jFYYQSHpcqttU.roa (hash: 4O/PlJ6tXg3HjZe3texYnbvtJFDsgoqM8xcWPLuCcns=)
16: iKgelSgdHhyAKexXbXYmueOaeUg.roa (hash: +J08ylKBec0E8mLjnpla5kSjNS7Y7MzYev03SpaSkmY=)
17: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: c6Do7Be9xVGT4lh95PMqCYHQcgVzGK7VL5t0XjHKb+I=)
18: rmDqg6_mwNfYbcdrFON7FhlqYh0.roa (hash: jIARmAph/9tdERae1K6C9u4rfY/UdNtYyTUK8kLHly0=)
19: vk8AdaRmwdGEey0-KpqMAa5y-4s.roa (hash: gP9M2HbDQuUF4XHqQmNFAfst7z43j3AWmXSU5dk3Lk4=)
20: xJUfKNZ1xwiWMdelR8iN_NauVcs.roa (hash: W+SoqO5Yn7RcvEpB633UMr3Dz2Q++VpVK6LVgymGZUo=)
21: yFniHWXO7_eCIiqp5zEklB0-E4M.roa (hash: AVejDieEOPpUjiHa4BQgEX+ocNwhYeJQ16YzzFkL1AM=)
22: zACbew-GGDfV_PK86Nbolx1SxaQ.roa (hash: D57qhpDyGLmWHribQIP+4h8O4QGVd3pMoP+ytRMK0jc=)
23: zSrZfDynMxjHsni65bw3lNFxjdo.roa (hash: B3r/Ky/6d0oUxMT1wJmgm/sCz+cdvAcj1deLNp7FbDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 20:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:27:11:c1:bc:b7:79:79:15:66:cb:54:6f:a0:9e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Nov 4 20:01:35 2026 GMT
Not After : Nov 5 20:01:35 2026 GMT
Subject: CN=3a647c86dacf09b0dfbac40c104a2af8a5618e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f0:cc:dc:12:55:ca:56:9c:4a:73:79:b1:52:
1c:28:80:40:ea:f6:b2:6f:bb:8b:41:c8:76:18:e2:
e1:fe:1f:24:87:81:d4:c3:56:f1:8a:f1:fe:d4:ec:
7c:72:96:49:65:4c:62:2c:9c:6e:06:e8:f8:3c:70:
9e:ff:95:66:ed:36:fe:4f:2d:0e:69:35:59:2a:a5:
34:92:f8:44:75:68:c0:f8:9f:0b:36:76:9f:ff:be:
2b:6c:2b:1e:01:9d:9b:6f:23:46:05:cc:e1:9d:0a:
83:46:a8:ea:c7:51:ea:85:c9:46:3b:81:b7:9f:25:
7f:07:29:a7:7f:5e:ef:52:a0:a9:a4:46:d3:96:0b:
16:ec:d7:a6:dc:a1:d7:c5:cf:68:e0:52:4d:ed:de:
22:4b:1f:1c:76:f1:01:90:67:34:36:80:f5:ec:f9:
e3:c9:e7:ed:e2:6f:9c:2b:03:a2:a6:0a:f5:d2:59:
ec:7d:72:bf:60:45:80:02:46:29:56:74:f1:e8:b5:
9a:50:27:a6:46:d8:5d:4a:59:99:6c:76:a8:c3:0e:
bb:fc:73:ae:97:6c:c1:1b:16:2f:a9:50:47:ca:3b:
53:a5:a2:18:03:1b:aa:bb:56:2d:87:71:32:a9:0e:
0b:95:b9:53:0a:d8:93:90:7a:05:5d:66:a0:46:27:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:64:7C:86:DA:CF:09:B0:DF:BA:C4:0C:10:4A:2A:F8:A5:61:8E:55
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3f:7a:5e:50:25:9c:91:94:cd:04:a8:63:b2:59:e9:a4:7c:
db:38:87:e5:99:cd:8c:43:e4:f6:9c:ca:51:ae:9e:f4:59:69:
c6:84:2e:a3:ad:2e:2c:40:37:49:fb:21:7c:8f:7d:a2:c5:ef:
4f:e0:d2:8d:78:9c:d8:6b:82:ef:2a:c8:6d:c5:c8:2f:e2:7d:
e9:a8:0a:52:07:7e:07:69:36:0a:ce:3d:44:55:70:70:1c:fc:
fa:36:5d:df:a7:e4:b8:9a:7d:92:a2:e2:83:fa:1a:6b:3e:54:
ea:d6:a8:2a:9e:a0:90:ef:8a:99:1e:3d:bb:58:17:b8:15:88:
7e:53:d9:6f:1d:9b:b0:b7:1e:d0:12:ae:f5:14:80:37:74:8c:
69:c5:6d:b4:c2:6c:47:62:96:65:73:3a:23:25:66:3a:d7:e1:
bc:27:00:03:0e:69:10:a2:00:38:f0:c9:5d:c3:3c:67:e5:c0:
15:a3:8c:bc:f1:07:5f:a9:a1:03:cd:b2:9a:0f:d6:2c:d0:4f:
23:f2:5a:1e:88:f4:e4:95:17:b8:08:67:d3:d1:73:16:b8:aa:
ed:eb:16:07:76:0b:b6:c0:c4:77:17:25:73:d3:9d:41:ed:f6:
29:b5:23:3d:ca:74:8a:cb:7f:ed:4b:cf:26:3c:fc:4a:30:4a:
27:5e:37:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGoJxHBvLd5eRVmy1RvoJ7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjYxMTA0MjAwMTM1WhcNMjYxMTA1MjAwMTM1WjAzMTEwLwYDVQQD
EygzYTY0N2M4NmRhY2YwOWIwZGZiYWM0MGMxMDRhMmFmOGE1NjE4ZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PDM3BJVylacSnN5sVIcKIBA6vay
b7uLQch2GOLh/h8kh4HUw1bxivH+1Ox8cpZJZUxiLJxuBuj4PHCe/5Vm7Tb+Ty0O
aTVZKqU0kvhEdWjA+J8LNnaf/74rbCseAZ2bbyNGBczhnQqDRqjqx1HqhclGO4G3
nyV/Bymnf17vUqCppEbTlgsW7Nem3KHXxc9o4FJN7d4iSx8cdvEBkGc0NoD17Pnj
yeft4m+cKwOipgr10lnsfXK/YEWAAkYpVnTx6LWaUCemRthdSlmZbHaoww67/HOu
l2zBGxYvqVBHyjtTpaIYAxuqu1Yth3EyqQ4LlblTCtiTkHoFXWagRidOkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpkfIbazwmw37rEDBBKKvilYY5VMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaT96XlAl
nJGUzQSoY7JZ6aR82ziH5ZnNjEPk9pzKUa6e9FlpxoQuo60uLEA3SfshfI99osXv
T+DSjXic2GuC7yrIbcXIL+J96agKUgd+B2k2Cs49RFVwcBz8+jZd36fkuJp9kqLi
g/oaaz5U6taoKp6gkO+KmR49u1gXuBWIflPZbx2bsLce0BKu9RSAN3SMacVttMJs
R2KWZXM6IyVmOtfhvCcAAw5pEKIAOPDJXcM8Z+XAFaOMvPEHX6mhA82ymg/WLNBP
I/JaHoj05JUXuAhn09FzFriq7esWB3YLtsDEdxclc9OdQe32KbUjPcp0ist/7UvP
Jjz8SjBKJ143Zw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:08:14 2026 by rpki-client