
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
File: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json)
Hash identifier: tCJbrhGWZWAOBMeRtZCqMcUcdO5YmLlW8XerxNMMjS4=
Subject key identifier: 41:64:EA:DF:AE:94:23:32:98:47:D3:3C:5D:8D:25:5E:12:52:4F:34
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 019EBFC92D89896CE80EE5505CAC317BAA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
Manifest number: 1966
Signing time: Sat 13 Jun 2026 07:01:33 +0000
Manifest this update: Sat 13 Jun 2026 07:01:33 +0000
Manifest next update: Sun 14 Jun 2026 07:01:33 +0000
Files and hashes: 1: CE6rRh7gwkNwQsNCEV_5-qvby8o.roa (hash: +C6crj3tlveY40cfyaDLAmJKc2kjvGSJAnx+Tun2pBQ=)
2: H-Z-59qkp7uHQPcWeenVARkWiac.roa (hash: HKW7RkaEKR+tAOc8fjxLJQH13xKLm1JBXk6SPdfsZ20=)
3: J7hqwzNBUJIFCvPHnt3UCUaIkS4.roa (hash: dwuiTVtxcw0Gm8ehWtdolENkQjfHnVWwxpd27Y3PhYA=)
4: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: G3Pv6YM8/iQgfv3zHCU+BtR3Hx1LJSxKVCtOIrW7esI=)
5: MjvomoUdbRCYMRTivd64oJucyR4.roa (hash: cQeTekUSkTsAQzZ5llLXfmDS9liZjdYx7jCgTSy2Qs0=)
6: dwe_m7iK2njmUFFGe9nnrN8FZV4.roa (hash: utaiyLTsrEWxNDIzyZ7TNXdP2ryHcGA9G92URVMLgOY=)
7: ixjloOI87OkWVNhgbhDEEFBTJ_A.roa (hash: cx+C+iENlLKYVwuPtzW+PgZZj9Jz/VMG8suoQFDv4vY=)
8: j2qKFrWfusxDiFzkFOC9pNjdNeM.roa (hash: eedi82Numcyo5s6BIiJHhclTJ6KJqgbKjG36ZSW5eFU=)
9: m3RaVncm_gBlS4tVezr7XBZHrR4.roa (hash: NCcn02MU0AdzNYn2EHJlZXzwGScb4dWUGw8AznxeOaE=)
10: pxvwZ83GQsd2xDFU232Uh7bybX4.roa (hash: wTQyNgjrlPNNWRBqCTTjBvEsBojPl8WoXlgNibVwY1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c9:2d:89:89:6c:e8:0e:e5:50:5c:ac:31:7b:aa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jun 13 07:01:33 2026 GMT
Not After : Jun 14 07:01:33 2026 GMT
Subject: CN=4164eadfae9423329847d33c5d8d255e12524f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:fa:8b:15:75:2a:bc:59:57:60:8c:bc:66:
13:3c:76:96:8d:2b:ec:f0:27:c5:43:a4:0a:8c:1c:
a3:e2:51:6e:05:cc:36:19:52:08:e3:c1:6d:67:fc:
af:d9:be:cc:31:8f:88:6d:f9:d8:5a:4b:d4:88:4c:
6f:e6:bc:46:93:27:9a:32:5a:d3:1d:17:c6:fc:21:
27:a6:9e:b6:21:01:d0:b6:1a:51:26:2c:57:35:d8:
bf:4d:1b:66:26:34:63:92:41:ef:0a:a0:e2:4d:e0:
4a:51:bb:5f:c9:15:01:e4:b5:c6:28:32:7a:58:b4:
20:d4:5e:ae:1b:98:cd:82:27:97:e6:51:d2:1a:51:
14:84:15:7e:90:68:21:f2:93:c5:d4:b5:37:07:9c:
d6:f5:d5:e8:b6:83:8d:51:38:c7:7c:41:d9:8c:ac:
d7:bc:ac:ba:d9:b5:1f:cb:a5:0d:0a:ac:db:43:b9:
41:68:46:05:a9:a2:f6:10:e1:a5:51:2b:8d:10:6f:
83:c2:29:74:6e:c4:90:8a:68:bd:f5:f1:f3:27:50:
bb:e7:34:69:c9:92:b8:fa:e5:69:06:c8:7b:b3:8b:
19:0c:3d:38:90:6e:e3:f7:f1:84:8c:d0:82:18:2c:
1c:55:91:7b:4a:1f:22:c6:af:1a:12:09:22:a3:35:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:64:EA:DF:AE:94:23:32:98:47:D3:3C:5D:8D:25:5E:12:52:4F:34
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6a:10:9d:73:d2:aa:1d:4b:b2:55:32:76:92:3e:02:1d:9f:
34:ee:ca:35:a7:fd:6e:ca:97:f0:4c:64:33:d0:75:fc:13:34:
d8:84:b8:c8:78:14:7a:65:c8:e0:21:3e:55:9f:7c:09:0c:95:
1e:2d:aa:30:67:16:c5:93:49:0a:e3:1e:48:2d:ef:09:78:fa:
48:6b:7f:c0:b0:6a:11:f9:51:bb:53:40:6b:05:07:af:71:7f:
64:29:9c:5e:30:2f:dc:ab:f6:98:38:a1:d0:b3:50:57:3a:a7:
2e:a5:92:9e:76:cc:86:46:19:24:e4:bd:b6:c8:39:67:e1:1c:
97:6b:f4:a5:a7:0c:84:40:6c:a5:4f:53:9f:a6:8e:7f:aa:06:
e3:58:34:e4:bd:b0:96:03:3b:59:44:0e:8f:0a:85:42:51:c2:
d2:80:9a:ff:a7:64:63:af:57:8d:d5:4a:f0:b0:7e:cb:06:0c:
2c:76:87:20:dd:07:45:de:98:5b:e2:cc:a6:7f:dd:27:f1:e4:
b8:1d:04:b1:45:a8:a1:36:61:7b:bf:74:1b:b7:84:5a:c0:7e:
d5:39:aa:46:2d:8a:5a:2c:93:ba:db:e4:5f:ea:95:9f:9b:b9:
24:52:5b:30:00:2c:5d:6c:d2:85:13:e1:f1:fe:7b:bf:c7:15:
95:67:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:14 2026 by rpki-client