
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
File: k-JyYRE58V0DfXpL5UVpbNKFOGc.mft (raw, json)
Hash identifier: tyaWg/oT+SigizWriV3nK3yon69B6cWmTOib7TrRpG8=
Subject key identifier: 2D:28:51:49:8B:B2:DC:69:3D:F7:32:68:27:51:A3:00:4F:D9:87:7C
Authority key identifier: 93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
Certificate issuer: /CN=93e272611139f15d037d7a4be545696cd2853867
Certificate serial: 01A0C4B2528C60204264F978615C9C81CBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
Manifest number: 021E
Signing time: Mon 21 Sep 2026 16:00:15 +0000
Manifest this update: Mon 21 Sep 2026 16:00:15 +0000
Manifest next update: Tue 22 Sep 2026 16:00:15 +0000
Files and hashes: 1: 4g2sjyOA2S88ULGM_X6L9fja_a4.roa (hash: T/G8ygcKFjJNJsjuU7faDGLDHIo+LXS8+f+JHgj88Xc=)
2: 6_HtVCNf0Z8RR7WQweJmunkcFhQ.roa (hash: H//sNvbW8q6Jr+E30OLRetMY0kia9eUAQ2KhFNgiTUs=)
3: 7n0wkQwarTtnYv8PrRiMrWmkikg.roa (hash: dsJKZ1TCZYVerK75Wiv1ffLxPP075w9GEHIB+oUlOx0=)
4: EhpBhJARc4X2eG8NnhZ_KCq4Tqk.roa (hash: S4p02xann0rC2wLhbi5Psq0nb1Jxkjtlkr7kCAMN7Kc=)
5: K-KFv2ywyMppzBzTy_lEtojdLTU.roa (hash: 28NmMoA3sjhuKkfN3w+6Un5F6/GD1m7hb06udz3zdRI=)
6: OS9El_lE1YFidGkD6u7b5PW_Swk.roa (hash: kc1xeHQSX9yaoh8FDTkRuRX1sg9TtwB9rWtzmmLQbkU=)
7: RA43K4xHLg-UdXvnE5BBpylAcLE.roa (hash: fhI37DL7Mkohtwdyy2ionkNQqG8nPhswdJI9hVbypAg=)
8: WRfWp6HbqiLrJdTcEFqGTR_haxY.roa (hash: zRStM1z0fS/dDt32gvvFhDITrhGZhwjd4CFo2EuaBzY=)
9: abZqCK-5KuH2tfKsI4SD5xjvWzE.roa (hash: GEORyf1vDmMauAzxfhABnWujhX3+RLKPCLKT2awN3CE=)
10: cujgpcZMo-u6-uAPJgjn05vZZY8.roa (hash: /gwhlQJjmiLq2vNQ7oIXxqrvTIMx9w5D/yDlNU/SfBg=)
11: k-JyYRE58V0DfXpL5UVpbNKFOGc.crl (hash: NYk7C9bDLQpXx4gJrCBU+i2cKVgPsMz1Z4KBmUiuNjU=)
12: zuanRU6GjD_pKM_NpLif7F2dutc.roa (hash: Iwopv9pLKL4yIGea+CD2F7DsAC5y9wfK3pZKzWTqDe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:52:8c:60:20:42:64:f9:78:61:5c:9c:81:cb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e272611139f15d037d7a4be545696cd2853867
Validity
Not Before: Sep 21 16:00:15 2026 GMT
Not After : Sep 22 16:00:15 2026 GMT
Subject: CN=2d2851498bb2dc693df732682751a3004fd9877c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:9d:f2:54:97:d4:37:96:45:9e:20:6a:57:
c6:2d:95:2b:9b:f2:10:46:52:e6:07:96:d2:07:c0:
55:86:c6:5e:5d:0c:04:99:ba:87:0c:22:a5:ee:bd:
fa:24:41:7c:01:f4:df:2a:a4:30:b0:f4:86:f0:35:
8c:98:a4:99:a3:20:57:92:c1:54:66:07:22:1c:3c:
73:c9:8a:4d:7c:12:fa:72:7f:95:51:02:83:a2:86:
8f:4a:63:fd:f8:ea:81:77:2a:6c:3e:5e:8d:01:7b:
b2:22:48:71:13:d8:95:87:00:f7:67:43:53:91:66:
af:dc:7f:42:33:6a:2d:6e:51:54:65:a1:37:0b:44:
43:ea:d8:c3:fe:cd:77:b1:8e:e6:cb:0e:6e:ad:a1:
77:ca:d4:59:b1:d0:73:35:35:66:a4:c5:15:ce:35:
26:0e:98:24:a5:62:78:df:85:cf:d0:9b:7f:09:de:
78:da:70:b1:d1:df:c6:4f:9c:cf:99:b1:25:1f:dc:
b6:b2:92:b6:83:29:f6:9b:ec:de:4f:d7:3f:f5:99:
c3:c4:fd:8a:8a:d7:ae:94:f3:a3:17:0a:19:37:3c:
6a:dc:bc:38:c6:7e:94:a2:15:71:99:ed:38:10:1f:
63:7e:ba:c5:4e:1c:30:b9:b1:46:dd:6c:de:6d:dd:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:28:51:49:8B:B2:DC:69:3D:F7:32:68:27:51:A3:00:4F:D9:87:7C
X509v3 Authority Key Identifier:
keyid:93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b9:69:fc:df:f8:7a:77:e5:3f:c7:7c:97:0b:b8:79:19:e7:
ee:2d:31:f9:33:cb:17:ac:cd:f2:57:79:46:53:c7:36:04:71:
e8:be:4a:34:18:19:8c:bb:c1:96:da:5e:e1:23:b9:8d:9d:ab:
1b:c2:8e:8f:71:e2:c4:fd:e1:95:a0:64:49:8e:7d:28:1e:ec:
e6:37:19:17:e8:15:1e:90:55:99:e8:f6:34:32:5b:9c:6f:54:
7b:3b:ca:76:de:07:97:f6:2b:e3:37:55:9b:4d:01:0a:c5:13:
d3:f6:0d:c9:1c:15:a8:75:fe:20:af:17:9d:20:91:e3:d9:af:
e5:cd:15:3c:00:de:ad:f4:c1:2d:2f:28:b0:46:4f:dd:f9:c1:
a0:3a:14:46:5b:3f:bf:98:3b:e9:f9:53:07:b7:db:84:44:7d:
82:63:0b:0b:8d:1e:6f:3d:ec:c9:1c:3b:18:e7:15:88:1f:00:
02:e3:12:3a:ac:c0:52:9f:83:1b:71:3f:18:af:8f:fc:32:a8:
ff:47:98:ae:94:dc:ea:f5:8d:91:78:a9:ef:58:1b:33:88:6e:
18:5c:47:c5:27:f3:3d:80:a1:6e:23:17:a7:64:3c:97:11:17:
e2:6e:61:3d:3e:2f:ac:57:2c:c1:01:09:ca:75:29:38:66:c2:
9f:cf:77:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:34:38 2026 by rpki-client