
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
File: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json)
Hash identifier: IPYQsK9HtD6df2hEZBIWgPiDE1dAHkTf57G8OcVabNU=
Subject key identifier: 65:0F:95:68:10:57:0F:56:78:83:91:5D:A5:60:7F:D6:9D:C4:34:1C
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 019CAAC7119DE0CC4D0562B9CAB3F616A25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
Manifest number: 1852
Signing time: Sun 01 Mar 2026 19:01:38 +0000
Manifest this update: Sun 01 Mar 2026 19:01:38 +0000
Manifest next update: Mon 02 Mar 2026 19:01:38 +0000
Files and hashes: 1: CE6rRh7gwkNwQsNCEV_5-qvby8o.roa (hash: +C6crj3tlveY40cfyaDLAmJKc2kjvGSJAnx+Tun2pBQ=)
2: H-Z-59qkp7uHQPcWeenVARkWiac.roa (hash: HKW7RkaEKR+tAOc8fjxLJQH13xKLm1JBXk6SPdfsZ20=)
3: J7hqwzNBUJIFCvPHnt3UCUaIkS4.roa (hash: dwuiTVtxcw0Gm8ehWtdolENkQjfHnVWwxpd27Y3PhYA=)
4: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: feSKk9MsDnNlPAJHraUkdXvlJXYTMRrLpUiaIx5oiXc=)
5: MjvomoUdbRCYMRTivd64oJucyR4.roa (hash: cQeTekUSkTsAQzZ5llLXfmDS9liZjdYx7jCgTSy2Qs0=)
6: dwe_m7iK2njmUFFGe9nnrN8FZV4.roa (hash: utaiyLTsrEWxNDIzyZ7TNXdP2ryHcGA9G92URVMLgOY=)
7: ixjloOI87OkWVNhgbhDEEFBTJ_A.roa (hash: cx+C+iENlLKYVwuPtzW+PgZZj9Jz/VMG8suoQFDv4vY=)
8: j2qKFrWfusxDiFzkFOC9pNjdNeM.roa (hash: eedi82Numcyo5s6BIiJHhclTJ6KJqgbKjG36ZSW5eFU=)
9: m3RaVncm_gBlS4tVezr7XBZHrR4.roa (hash: NCcn02MU0AdzNYn2EHJlZXzwGScb4dWUGw8AznxeOaE=)
10: pxvwZ83GQsd2xDFU232Uh7bybX4.roa (hash: wTQyNgjrlPNNWRBqCTTjBvEsBojPl8WoXlgNibVwY1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:11:9d:e0:cc:4d:05:62:b9:ca:b3:f6:16:a2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Mar 1 19:01:38 2026 GMT
Not After : Mar 2 19:01:38 2026 GMT
Subject: CN=650f956810570f567883915da5607fd69dc4341c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:13:2f:b0:3c:d5:42:82:24:7e:11:e1:85:b7:
67:74:3b:4c:41:b5:3e:62:80:ee:a7:3a:7e:35:e1:
bb:aa:fc:ca:39:8c:5a:ff:ff:16:da:1b:e4:59:a9:
0b:fd:b3:ed:83:ad:02:02:ad:c4:2a:ef:22:23:24:
74:f0:d3:b0:5c:17:f0:8a:a5:c9:57:a2:04:18:7d:
75:a9:03:09:b8:b5:51:95:07:ee:b7:3c:13:53:d0:
a4:92:60:03:4e:f3:61:89:eb:25:12:55:82:fc:19:
94:3b:d8:fc:cb:fb:b4:07:ca:5c:79:08:2c:84:b0:
f4:1a:5c:af:15:93:27:02:8b:75:a6:a8:03:5c:42:
01:cd:f0:04:26:bb:90:22:00:db:b1:55:b8:aa:86:
99:fc:3b:65:3c:bb:13:93:a1:3b:e6:fb:cb:e8:a0:
df:e0:af:8a:69:e2:6e:9a:0a:22:9a:96:5a:18:bc:
1a:2a:a4:37:97:85:01:2d:0c:b8:63:81:87:49:7b:
d2:17:b4:37:ec:9a:24:92:3b:17:a6:87:bc:8f:c2:
dc:c8:24:c3:13:91:87:a8:7c:fc:a5:d8:9b:1b:05:
47:6c:2f:dc:72:f5:b8:52:8d:59:f3:54:09:57:63:
2b:c8:f9:14:d9:1f:07:a4:00:c7:7d:8a:db:c7:2f:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0F:95:68:10:57:0F:56:78:83:91:5D:A5:60:7F:D6:9D:C4:34:1C
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:02:54:bd:d7:3d:8e:e9:d4:ab:bd:89:72:85:26:ae:9f:7d:
87:e2:28:8e:ee:fc:c1:d9:48:8a:e2:53:0b:7d:60:e3:73:82:
8b:86:fc:74:43:48:e1:c9:13:ac:86:cc:cf:c1:aa:28:8b:d2:
ff:21:15:31:32:7c:78:42:b9:c1:e3:60:19:2e:d6:f3:e2:4d:
e7:56:70:dd:fa:e7:80:7b:be:04:ed:59:58:05:42:bc:2c:d1:
26:b3:1b:f9:46:97:ea:42:ae:0f:c0:08:2c:01:65:a2:20:24:
3c:03:da:8e:66:61:b8:91:0c:56:99:d8:50:4a:2b:11:75:39:
d0:b5:05:8f:a4:6c:36:ca:05:5c:22:5c:51:a6:5e:73:72:36:
e5:f3:cf:aa:21:c6:9e:3c:28:02:ae:12:84:b6:91:27:89:dd:
75:82:c8:78:9e:d8:bd:49:d8:4b:7d:8c:de:70:b9:f1:ba:c4:
ba:6b:0e:1d:e5:65:0a:4d:fe:bc:9c:68:af:ce:ff:f0:d9:6d:
fc:a2:ba:f4:d3:71:b8:e0:f5:c2:13:5b:cc:63:88:75:2e:1e:
8b:19:bb:26:24:6d:cf:d3:67:1d:b7:db:e1:c3:bb:16:2b:43:
78:66:2a:ee:4c:3c:3d:6e:bd:aa:db:39:a1:a6:30:24:47:3c:
73:41:d4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:27 2026 by rpki-client