
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json)
Hash identifier: pVL+7qTon1u1jT/Rm8mCleiFd5BdiSrROSXAm7ndWLY=
Subject key identifier: 44:03:3F:3F:81:00:04:51:D8:88:BE:E1:E2:14:93:34:3E:AE:EF:79
Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404
Certificate serial: 019FA03A95D58874F25F2225276F3EC654B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
Manifest number: 06A5
Signing time: Sun 26 Jul 2026 21:00:21 +0000
Manifest this update: Sun 26 Jul 2026 21:00:21 +0000
Manifest next update: Mon 27 Jul 2026 21:00:21 +0000
Files and hashes: 1: 3ni1lXz0xo-b4HoXI3wRu6vJL-c.roa (hash: 7b3P7fNZC5J3JcfQvJqiC/2neHH6f8kadDw6/l3P8/Y=)
2: AmdO1jA2vkBtxkn2vv7Y1wu4dFM.roa (hash: wY1LZtovvbzyHM2W8YhMwLuam5z9V3nwmwDqM8gEEF4=)
3: BYtnuImtTGdi14Pvw9xlRKAL65k.roa (hash: hUoeJXbJ5fZg7WKvqap5HxU1pLmROBa7LXCxisf4SP4=)
4: CNFp8fRkRFtEQks7R0O2wgi6-xA.roa (hash: bXlKDyyKKGdmKBfoGxYPygp5JG45Ozo2FLYDRNT3VpM=)
5: HrFuB2F4P326FdIKDHmR_z_oGqs.roa (hash: d1+J0bs8Jd4Tmg8E7c67C6CZ18CYNi+0jZ3ouxTsd3M=)
6: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: ypOuWeDvKe2tuzHetuOv3LOvymzqucdHsj7Aamjs/QY=)
7: YlYX0-EwdZ0RjwlcesbIkWVsVTo.roa (hash: 12tzR601qVt1Vj7EME9V9wBl6cqsNdP8VmiHIJgAu5Q=)
8: cNqycsZxVsHcATCP8JWqqaoM9SI.roa (hash: CX+xOUuMFEXPOxevDnRNct6cRUm/jc1q9b58M6PTWZo=)
9: gE3k0i8jHZvr5aE-wjNKPwzJxvE.roa (hash: CuCVWX3Bl6EYyE6nnbYJN+zyPfahHe62RUo//GoIy9o=)
10: lBlo6PUCc6IqER-nFwmpK7D7yqo.roa (hash: Z5uCFtdD3Jko3O/Znx9FA924V5ua0wn5UjLkJKE8KyE=)
11: qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa (hash: qH3mt9TzRYD5CJqPjTYWZEejOSD69A/a1ZIdDauUkQo=)
12: urqr3QuscnM9Gexd4HqCzda04Hs.roa (hash: +eFtvrmvtLAGjqTjuO2JbNNCYDwjSBJV6qDXXX+HoPY=)
13: vsRZs78l22h0vnp-DI6scU3LKUA.roa (hash: 4WpHfFl6tIuHybFbUi60kzMtYBl55u5TXUCckR5iGfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:95:d5:88:74:f2:5f:22:25:27:6f:3e:c6:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255876412d20fbb6cab823481782ac47703b4404
Validity
Not Before: Jul 26 21:00:21 2026 GMT
Not After : Jul 27 21:00:21 2026 GMT
Subject: CN=44033f3f81000451d888bee1e21493343eaeef79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:f3:0f:7e:89:80:e1:88:1d:4c:9a:c9:54:
d4:2f:2b:30:6a:a6:94:09:e3:2e:fc:49:0d:08:61:
5b:da:57:ce:1c:57:96:a1:7f:b9:17:fd:cf:fe:46:
51:bd:8e:12:b1:d3:c6:37:12:86:ff:99:03:5b:33:
c7:47:6e:bd:a2:7b:89:c1:93:85:04:24:e6:99:90:
1b:5e:da:b2:dc:ba:26:54:50:77:d5:4c:95:d7:0a:
09:34:78:f3:03:8d:76:2a:02:2c:f3:28:82:10:de:
35:be:e0:df:8d:f6:8a:83:ea:07:02:bb:1b:29:b8:
46:eb:78:98:9f:a8:27:83:8c:16:5e:63:a8:88:6d:
f9:bf:08:24:06:bc:d2:4a:fb:21:28:3f:ad:7e:10:
32:07:57:9d:0e:97:11:81:91:4b:62:c7:f1:51:69:
d0:48:ae:00:98:63:d6:8d:12:ec:70:8e:a1:b3:ec:
4e:a0:5a:83:6b:0b:0d:fe:c4:6b:c5:92:eb:26:90:
df:23:6d:43:93:a5:a6:f9:63:a6:45:4f:2f:a7:40:
b1:18:6c:32:27:9e:2d:ee:cc:39:4a:cc:b7:19:47:
ff:72:68:fe:b8:12:15:1f:86:36:8f:31:63:49:db:
9f:1d:c3:55:f3:0f:ac:27:e9:4d:8c:23:22:70:70:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:03:3F:3F:81:00:04:51:D8:88:BE:E1:E2:14:93:34:3E:AE:EF:79
X509v3 Authority Key Identifier:
keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:65:f6:46:73:87:91:d3:40:62:32:7a:0b:6c:37:8a:17:be:
44:b8:65:76:15:ad:de:a8:0f:1f:63:d9:82:82:ef:27:b2:7a:
3d:d5:f6:6f:91:44:07:f3:8b:ec:4b:b9:5d:e0:ce:cc:bc:bd:
a4:b8:a1:37:e1:1d:d7:2e:e5:a2:ef:a2:61:1e:80:5c:e3:7d:
14:70:dc:96:0e:30:83:ca:47:f1:a1:13:9a:fd:03:62:6e:1b:
e5:18:9b:5c:6a:42:15:48:3b:31:aa:77:32:9f:71:44:03:96:
8d:c4:71:d1:f8:0b:d0:20:bd:ac:c1:e8:1c:27:7f:3c:23:dd:
f6:22:61:e5:90:5d:e4:9c:58:1d:be:74:7b:a7:62:e1:3f:93:
fd:cf:fe:78:92:22:59:9d:b7:d8:eb:9f:3a:09:72:05:2c:46:
7e:15:32:89:29:60:69:a1:3e:51:01:de:5c:ce:54:05:ac:1d:
c3:8c:5d:8f:12:cf:4a:d3:77:df:83:46:cc:dc:d1:ee:25:15:
44:38:a4:dc:22:84:e1:ac:cc:27:ee:c1:8a:23:a7:83:5b:04:
21:cd:8e:d3:a8:d1:d4:53:ad:d1:6b:c1:d4:79:b7:35:8c:ed:
45:8b:62:e0:53:80:01:fc:89:5b:9b:c8:9f:65:e4:14:1f:e7:
2d:20:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:47:34 2026 by rpki-client