
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
File: k-JyYRE58V0DfXpL5UVpbNKFOGc.mft (raw, json)
Hash identifier: OhUn4nhy0zt++EoZkF082Gt49IA7rICbVkLKnX+pmTA=
Subject key identifier: 8D:94:06:C3:53:F8:84:C5:36:F3:75:1F:CE:B5:66:F3:73:C1:0E:7B
Authority key identifier: 93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
Certificate issuer: /CN=93e272611139f15d037d7a4be545696cd2853867
Certificate serial: 019FAABE3B159626309A545F77BE07F36762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
Manifest number: 018C
Signing time: Tue 28 Jul 2026 22:00:21 +0000
Manifest this update: Tue 28 Jul 2026 22:00:21 +0000
Manifest next update: Wed 29 Jul 2026 22:00:21 +0000
Files and hashes: 1: 4g2sjyOA2S88ULGM_X6L9fja_a4.roa (hash: T/G8ygcKFjJNJsjuU7faDGLDHIo+LXS8+f+JHgj88Xc=)
2: 6_HtVCNf0Z8RR7WQweJmunkcFhQ.roa (hash: H//sNvbW8q6Jr+E30OLRetMY0kia9eUAQ2KhFNgiTUs=)
3: 7n0wkQwarTtnYv8PrRiMrWmkikg.roa (hash: dsJKZ1TCZYVerK75Wiv1ffLxPP075w9GEHIB+oUlOx0=)
4: EhpBhJARc4X2eG8NnhZ_KCq4Tqk.roa (hash: S4p02xann0rC2wLhbi5Psq0nb1Jxkjtlkr7kCAMN7Kc=)
5: K-KFv2ywyMppzBzTy_lEtojdLTU.roa (hash: 28NmMoA3sjhuKkfN3w+6Un5F6/GD1m7hb06udz3zdRI=)
6: OS9El_lE1YFidGkD6u7b5PW_Swk.roa (hash: kc1xeHQSX9yaoh8FDTkRuRX1sg9TtwB9rWtzmmLQbkU=)
7: RA43K4xHLg-UdXvnE5BBpylAcLE.roa (hash: fhI37DL7Mkohtwdyy2ionkNQqG8nPhswdJI9hVbypAg=)
8: WRfWp6HbqiLrJdTcEFqGTR_haxY.roa (hash: zRStM1z0fS/dDt32gvvFhDITrhGZhwjd4CFo2EuaBzY=)
9: abZqCK-5KuH2tfKsI4SD5xjvWzE.roa (hash: GEORyf1vDmMauAzxfhABnWujhX3+RLKPCLKT2awN3CE=)
10: cujgpcZMo-u6-uAPJgjn05vZZY8.roa (hash: /gwhlQJjmiLq2vNQ7oIXxqrvTIMx9w5D/yDlNU/SfBg=)
11: k-JyYRE58V0DfXpL5UVpbNKFOGc.crl (hash: jSFiiZ6GOXPRty7OABlLVMNr2nt28R2OQANF28m0Znw=)
12: zuanRU6GjD_pKM_NpLif7F2dutc.roa (hash: Iwopv9pLKL4yIGea+CD2F7DsAC5y9wfK3pZKzWTqDe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:3b:15:96:26:30:9a:54:5f:77:be:07:f3:67:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e272611139f15d037d7a4be545696cd2853867
Validity
Not Before: Jul 28 22:00:21 2026 GMT
Not After : Jul 29 22:00:21 2026 GMT
Subject: CN=8d9406c353f884c536f3751fceb566f373c10e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:2e:85:f3:47:46:25:5f:16:1a:40:ce:a0:
31:35:4a:67:5a:f3:24:b0:f6:c7:fb:93:97:3b:1c:
c3:50:09:d3:ef:c5:b5:18:46:9b:85:bb:94:8b:26:
ee:2b:7d:2a:73:3b:ec:f4:53:86:2d:5d:b2:f9:53:
0c:c4:3a:e0:0d:02:31:d0:e2:1e:04:59:7f:03:6e:
2c:07:d1:30:d8:2c:d3:37:80:63:97:04:79:40:2e:
7e:f5:a1:78:de:68:fc:2e:c5:04:93:c2:0e:40:7c:
26:77:1c:81:83:df:a0:eb:6e:73:93:4d:3a:fc:cd:
5f:d3:f2:73:96:c9:f1:73:e3:fd:34:1a:1d:41:6a:
48:e4:d0:e6:86:f9:e7:a6:55:9a:f0:bb:f7:c1:31:
c1:65:4d:7c:70:cd:9c:a4:b8:a0:d7:9c:d0:88:b9:
5f:00:ca:2d:ae:b0:d8:a3:88:37:96:ce:e5:82:b8:
79:07:37:f9:51:68:a7:bb:22:d9:37:d8:ee:aa:c9:
44:2f:a3:3a:a8:ef:ba:e4:7c:63:5c:2b:37:1d:68:
1e:68:1a:cf:27:7c:73:c0:62:4e:de:88:b5:98:8f:
be:48:55:ee:5e:ad:6e:c7:96:5d:bb:d1:61:3f:54:
f6:a1:03:9e:e7:be:cd:6b:5d:e0:f8:4f:0f:d2:00:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:94:06:C3:53:F8:84:C5:36:F3:75:1F:CE:B5:66:F3:73:C1:0E:7B
X509v3 Authority Key Identifier:
keyid:93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a5:f1:fd:90:ee:c8:4f:51:91:5f:25:bf:b3:97:9d:b1:d6:
ec:f7:91:54:2b:97:3e:63:28:4b:4c:a6:c4:7d:c6:32:50:aa:
29:85:54:23:ec:34:a4:fa:85:0f:2d:73:37:19:c7:ab:37:a1:
af:a3:6a:df:b5:1c:90:c1:2f:6e:65:c2:34:79:fe:9c:4e:a0:
88:f3:ce:67:33:65:1a:9f:52:17:7b:2b:b9:46:59:2d:72:96:
87:fc:09:d9:f8:4f:6e:db:c4:c5:8e:f0:9e:87:6f:8f:ab:f0:
57:bd:7f:eb:37:a6:e1:3f:5b:b4:d1:06:2f:f3:99:a6:ac:a5:
35:0c:7f:b5:f9:7d:56:7f:e1:c6:be:6a:d4:95:85:6c:3d:b7:
1f:4c:e3:0e:cc:ba:3c:05:ce:d8:a0:6b:e0:8f:2a:69:da:4c:
f4:ab:ea:64:79:db:a7:26:c9:48:76:43:59:96:70:c0:23:e4:
6e:b0:e6:2f:66:5c:a0:d6:3e:cc:4f:ee:d4:69:67:5e:40:fa:
8d:ea:cd:98:b0:62:6e:61:3e:fd:82:c2:30:6a:15:fe:11:64:
5b:32:94:ab:d9:6e:17:dc:b6:61:62:1f:e7:a4:24:13:a8:c5:
af:35:dc:f1:6f:72:be:5a:9e:af:3c:fe:91:8a:f0:ea:15:41:
36:c8:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:33:56 2026 by rpki-client