
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
File: Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft (raw, json)
Hash identifier: K7+dK+AC4EOYdWVGHPcYLaVgk6LdVS5VlY1GylSnMR8=
Subject key identifier: B5:EC:E5:58:4B:FB:70:0F:B4:2D:D1:C6:E5:FB:41:80:4B:7D:1D:7E
Authority key identifier: 25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
Certificate issuer: /CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Certificate serial: 019FA89922412447206226F2FB1B4A4507FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:35 +0000
Manifest this update: Tue 28 Jul 2026 12:00:35 +0000
Manifest next update: Wed 29 Jul 2026 12:00:35 +0000
Files and hashes: 1: E8Rsl4KrJ2bB5_Rfw9PrqH-_Rww.roa (hash: ZghT8FZLyUyNijt6JooUTBYMS4vPsVtDcAcNCiWbMl0=)
2: Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl (hash: Mq4G/Aw+/a3R8DC5PhpMrpkgklIktRR7G5YDGh6nlm0=)
3: LG5ACCxjsn9gAetcW2FEaVC1hM8.roa (hash: O5GeNCN69rioddVsAyHKyodh+4FAIXpSbx5Ep56Txi4=)
4: NfkWRTmas65GbmdGapyBWOQnVH4.roa (hash: jdk95gQhWP1t1SiRHYhWzmeo+n/TinPmU1aZwAHQUgQ=)
5: Y8wHASs4uwjaXw93d7ZmcJAO92s.roa (hash: KCJ5/rSroMOOlReNhIaegplnICQUmLU8q249qtBdRcQ=)
6: eNJDQxkz_xTpdhZ0EB_Y7GIkyPg.roa (hash: ZfkYPeWj2nNNj75ZWAdhOzBe550shTgoGilyVfjwfls=)
7: h9kEZ8UFchng7Fgn18sKMWP2dfE.roa (hash: 29jgxbbdfoE54njVDtPkxlAECQ/NKqThVd1YymiTX4c=)
8: lWr4T5NYOmXmlAYyYQWlxejw1BI.roa (hash: 770wW1gHirnDOoWXVO3FowhcJur6VTlLtB/KZU4KJCo=)
9: o7u9_rM58d_eJS8rqXm5Q6yp0hY.roa (hash: 85JKegfS68K2mPCjggg+VXJ0GnsAJpfJYFPqh4TXPig=)
10: ynbYqYyfZyXeHoyWrTqWExQpgXQ.roa (hash: yQ1YPBiClS93xPqE7Nhocbohgivg5SS5R1oRoKVhUUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:22:41:24:47:20:62:26:f2:fb:1b:4a:45:07:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Validity
Not Before: Jul 28 12:00:35 2026 GMT
Not After : Jul 29 12:00:35 2026 GMT
Subject: CN=b5ece5584bfb700fb42dd1c6e5fb41804b7d1d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:c1:03:6d:e0:dc:9a:9b:58:dd:84:9f:83:
63:05:d3:ab:44:da:d7:eb:20:99:f2:b3:15:12:a7:
0d:37:dd:3c:1a:a8:32:df:72:6b:37:47:a5:32:26:
0c:3d:b4:0e:90:57:70:a7:1f:7d:22:29:11:74:44:
6d:54:d8:75:11:b5:32:35:87:b9:48:f9:f9:d3:3f:
72:9a:dc:12:e5:a4:2a:85:20:be:69:a0:b7:0e:a3:
d5:fc:ec:41:22:d9:24:30:bc:28:df:53:67:9f:30:
23:01:20:65:41:c0:69:40:be:c8:10:d2:8c:c2:1c:
5a:d9:e8:d0:c2:2c:ab:b4:7f:f9:c1:56:6d:7e:1c:
dd:33:e5:96:34:ae:3d:8e:06:16:e6:78:d8:2a:8a:
de:db:e8:13:07:38:a2:81:5a:b1:fd:b0:55:5c:61:
68:8f:12:4f:ec:40:cd:e7:05:75:77:e3:dd:08:54:
67:d2:e2:eb:6f:61:e2:ba:cc:df:5a:31:fe:fe:c5:
92:ca:85:20:53:11:1a:15:4e:da:53:2c:7e:83:aa:
ef:dc:5a:ee:54:ea:04:3f:12:95:45:94:30:0e:25:
69:f4:d4:18:e7:0a:16:d9:45:27:5c:e9:fb:ca:54:
d0:75:d4:e7:b7:c1:3e:e5:27:53:ad:d6:14:09:44:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EC:E5:58:4B:FB:70:0F:B4:2D:D1:C6:E5:FB:41:80:4B:7D:1D:7E
X509v3 Authority Key Identifier:
keyid:25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ba:ba:e3:b8:38:62:89:9c:6f:f7:ea:b5:41:88:9a:e9:65:
f2:5a:14:f9:bb:b9:f4:78:40:52:66:3f:f1:bc:4b:b5:c9:e8:
aa:f9:98:84:c6:e1:00:f2:5a:ae:c3:4b:f8:c0:64:d8:7d:80:
47:74:a4:55:59:0d:bb:ca:9d:34:e2:96:06:b9:21:5c:cd:d9:
91:e7:e9:51:c9:8c:86:07:8d:4e:3a:31:6f:d4:5c:4b:c4:10:
56:20:71:93:7f:06:d2:22:06:ae:31:8f:f5:b2:ee:38:7a:bc:
8f:77:3b:e8:64:88:e5:7d:74:c1:14:55:7f:9a:71:5e:52:20:
80:26:aa:ea:0f:d7:b9:39:72:7a:3c:bb:59:94:24:9e:d1:90:
02:66:44:69:59:04:a5:98:53:c4:4c:35:4e:75:21:c0:27:dc:
05:95:0e:81:3f:c7:a6:bf:04:77:d4:ef:2f:70:27:d7:dd:cd:
52:49:1e:59:40:09:1d:13:4b:05:e7:f7:e3:af:fa:15:52:b8:
8f:b8:1d:50:b6:e9:2c:f9:f8:47:0f:c3:f8:77:4b:aa:b0:43:
95:5f:20:65:8e:2d:bf:a3:42:a1:87:19:a6:b2:14:bf:91:20:
16:bc:9a:1b:1a:cf:d2:89:ce:e2:7f:fc:67:4a:d0:59:5a:8b:
62:9d:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:14 2026 by rpki-client