
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
File: J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft (raw, json)
Hash identifier: xxYXOPM0PLCBbanbaNMTe7QZ0TWss58ksIAZlSFhcBw=
Subject key identifier: 11:9F:42:8E:B5:10:8B:F0:4C:CD:BA:4F:7E:E6:93:D4:54:95:1C:3F
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 019DCFAC211ADEFF77C5989CA0A8689EF763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
Manifest number: 1A01
Signing time: Mon 27 Apr 2026 16:00:57 +0000
Manifest this update: Mon 27 Apr 2026 16:00:57 +0000
Manifest next update: Tue 28 Apr 2026 16:00:57 +0000
Files and hashes: 1: 0EAd0NIVQFpYF8Sfry0-sg27DIU.roa (hash: AM+vkkVy+PRlTYsSrmQEunL3834jj/6I3kNZmcTiVSQ=)
2: 1-3OySvVtg6j55zm7RvKKKD2txc4.roa (hash: NIlV04qTE8fz3k+qGrSn4IT9heA3wwx6JbYylqq6SPI=)
3: 1AlxxMUZolJLdZHPVyV2UoSe358.roa (hash: 9ehijIeVwQp7RL+YUW6sio1uU2Yn7VaTLU6Oe4mOvfE=)
4: 3WBdory9XqQbfC4TyXJx63N3UFw.roa (hash: nahNFLPGEU3gQRtFtbIkO4bhI0n9GpvfWrrSsEPAAWY=)
5: D7n5z-X4QhT0cqePH5_ymEPmodc.roa (hash: o8sKCnE2zp0a9Xj0y7an5x9MEDGoNlR5ZqyI5pidfw0=)
6: EugaGmrAg66bJHbDR050z2x8ppM.roa (hash: l112VfNQG03RqXUG4DN5iFKyE8XjBnUNtDrz/Dolok0=)
7: F5NbQDwuDql8YpH3L-ZJg9ShqS0.roa (hash: mjnepbUc5lCxSNEcHUqBuIxj9G2yoTLDmwdW50NPFrU=)
8: FFLikyFmH-Abpg8kwz_BXxHfNCU.roa (hash: cMgG0SrLZjSK1IoPjyUitd4xe4z4i4cE22ZF/9OmiC0=)
9: H3GT4590I-wlLcRehIEn90WLp0w.roa (hash: 9Fh6QD3KXc86AyaAkfv2S/ORqPuK9LKKtkaebRdEzQ0=)
10: HzNF72M-JUjvY2auMIhPMaZbcu4.roa (hash: jIE8nOAj+oK6NNaSyEYskPrjUE0ya5pmThUjASHeDg0=)
11: J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl (hash: 0pqPnddLq9QNXDRxurxxX4CBDlGZ5R/Vb4BUQofmTQQ=)
12: KAwmeFKkJNecLC_dhlCgmutRBdg.roa (hash: 4iHI08OHJ2NSksCBP3bSg9muJPVbkbXbMCBVzC/LIqU=)
13: LPhThbsTW9RteYTnU5fllHszvgw.roa (hash: Lr7N0csN9qpepByS3CiyJwbJBLIH11PFa4xdBV/iINk=)
14: MjQcicBRkl2ilK5k2Pj8MfAGk7c.roa (hash: owxcLAA7ehhKXpfItnOOd54/kefAYWqbpCPsXKgpLSI=)
15: Q1vTPTsAyiBhd4B6ICPubVT5RAA.roa (hash: QYiqA7g6apA/hS3xz4OT+/HBNbSOo0h0b476zf/bHvU=)
16: R91CcPNkUtu6XE-ZUwryAs6c8dA.roa (hash: lK0bjp1+iJCnWnbzkCHfNgNGHNMPkAnpfr0Ad8hVlWw=)
17: RYOv6aUqLpghBooPnLiPIJva3Vc.roa (hash: nCAcdQ0uag0iZJQO2UEBxU6XP8PFkKhEwcZr+vuW0SI=)
18: Tc5xm-6wNZTyj1dJnc4HQrGeS-o.roa (hash: vIzC9sIZH6YUu+Ppt3sLWqdbfBwlSwyCWej1tNmuxcU=)
19: U-qi4IuWNyY_2ScOGuO5wDkIP5g.roa (hash: vLUhnxRWvdCmmMvb1mJXW0MVOezf9HqsIWcCip83cUs=)
20: U8RgryHUq2JAAsgHSpUUEEa9flU.roa (hash: e5+nqmhm/ol/qrImk3F60PKlgocSXFLw4tFumPg6bGE=)
21: XkCpQ4xWLE9dlV83IDE1saD3b2k.roa (hash: bDYpXnq431ghla3lAMtwBrRxAdHF9JaPOSyXTvPRRR4=)
22: aHs-rF7InSlshvWZMPlqLeGf8BQ.roa (hash: cnpHyXi6Xup8rUbntENTMIwHeI0OtwJDt5zJW7zxTYM=)
23: dorf3vXiF8po1xw2yVEc19fH3qg.roa (hash: aKIMUfFNrtICIbFoumkp4rd3G4RSV0nPoRkpF++bDVw=)
24: dt_sesUw1jCIshOtSv8VduDtfqM.roa (hash: +LfBzD6Ek6GfCiZXW1OnTJegtkF9IIfufLlAfANB8ls=)
25: eQteGe3dUsvEvumdMFEyVqvLcUI.roa (hash: i/PVqNV8H6klhROm0PX4mdNPbEa+iKND/8anAmOUj6s=)
26: k70Hscj98f7iu-7lS91WJLMOGOg.roa (hash: qZAml61fc9EJPJ+5idHBkUiuoGzsk6xQwJ2qpPlbpFU=)
27: m7gY7tgEZEhnmCq-HkAcQ1-8HbE.roa (hash: xODHFAEs2OHYrHZKfEYMuN4r2rdZ9JfZ6XFxFdIMEYo=)
28: nJIWhXF5E_3OsKvezQcMuvFTje4.roa (hash: ysclIta5Nb4QhQEFGOS+ZWWgIylyZJMATCIjNw5UY0s=)
29: oDrrwj_J2YbGDvH96R1q32wibOg.roa (hash: enzCHScTPelD74ea898lsenkjGHLvXoRBcBQQihmhlo=)
30: sWfqkNHPcPkhA5a8aSQtoMjSk1g.roa (hash: g17baIMwzbfRDSr/hcX2JdloXizpSVyiXSiXvc7mu2Y=)
31: uhwMHBy0T1Zz_2CZbx4pD5TsJB4.roa (hash: QGGnLHX611kdCZRgFJS0ABfsrwzGsKy+hT++rsHa4HM=)
32: vkLy7286dxrhKN8_vNXJRiO43tI.roa (hash: zEYD3rV5MA0KRfFUZNuyB8fBP2X5IdnwsvbIbCutsO4=)
33: zeDR4o_SfBOszT4AEUW1U8duE-E.roa (hash: DV7X0NS//RjfJsh5Wd8yUdRAZCxK0Mc4AEjjwna5jWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:21:1a:de:ff:77:c5:98:9c:a0:a8:68:9e:f7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Apr 27 16:00:57 2026 GMT
Not After : Apr 28 16:00:57 2026 GMT
Subject: CN=119f428eb5108bf04ccdba4f7ee693d454951c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:13:15:26:f8:9d:41:c0:5e:92:a4:f0:1a:
80:75:79:0e:a0:c7:12:a5:31:eb:38:6a:cd:f9:81:
2a:be:02:f4:bb:ce:53:85:42:a1:97:61:f3:4c:6a:
dd:35:82:8f:f0:44:53:9f:41:20:f6:71:f2:67:c5:
d9:de:cf:02:b9:a8:83:9b:80:ad:23:c2:99:7a:a2:
73:5b:6d:fc:66:ec:07:5e:23:7c:87:dd:59:8b:24:
f9:1d:8b:db:87:11:47:ed:3c:32:c3:8f:f2:d9:c0:
37:bb:34:ce:00:cb:2d:31:65:95:7a:28:59:89:e4:
ef:fd:b3:0e:0b:c9:f6:1c:b3:92:11:bb:9f:09:a1:
1d:49:96:44:46:85:c4:85:7f:de:dc:63:06:d1:23:
b8:e4:55:2f:f8:f4:96:94:f1:6c:df:9a:28:81:2e:
eb:d6:cd:ed:db:2e:a3:de:41:c6:19:f8:9f:59:10:
9a:63:0e:2b:34:cd:c7:62:30:e2:0a:e4:83:8e:fe:
2f:7a:e0:6c:7e:f5:ed:31:85:87:1f:42:7a:46:26:
c6:91:67:04:8f:a9:9a:c8:56:fa:bd:4c:3f:5d:01:
94:bc:eb:8b:03:85:84:5e:b5:ec:06:8a:c8:a0:6e:
0c:81:c7:f1:4e:b6:2d:ac:a0:0b:01:4b:41:4b:ba:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9F:42:8E:B5:10:8B:F0:4C:CD:BA:4F:7E:E6:93:D4:54:95:1C:3F
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dd:37:66:21:98:2d:26:bf:51:e9:f4:18:ab:d6:9e:86:17:
e8:e3:8b:cc:47:3f:33:19:8a:3b:16:b3:de:19:49:4d:ab:11:
f4:c4:cd:0d:cb:53:d0:e1:ba:bf:ca:8f:99:87:2c:19:58:90:
0c:71:2f:5d:b1:62:9b:76:0d:cb:7f:ed:b9:12:b7:0b:50:5e:
7c:69:77:e5:33:58:f6:75:b7:80:dd:66:0d:63:2e:86:af:9e:
5a:75:f6:36:7c:7e:fd:56:f9:52:22:52:5e:2b:a4:41:9d:ed:
ae:dd:d8:1f:e6:a1:46:a6:c5:5b:ac:a4:ce:5d:e8:21:bf:91:
b2:39:77:9c:35:af:ab:01:3e:d1:43:8b:f6:38:6c:49:5e:bf:
eb:f1:12:e6:05:84:89:5c:08:4c:db:f4:06:74:40:ff:a7:25:
fd:6a:1a:a2:08:27:a4:5c:43:cb:f6:2f:eb:bb:08:af:07:97:
a1:2d:81:68:52:45:3e:68:25:4b:09:15:30:f0:cf:3e:13:a1:
68:de:40:67:39:7a:f7:76:11:2d:c3:74:90:20:e8:6d:07:84:
2b:13:b9:93:34:b7:09:e5:7f:13:a3:d8:ad:c5:d1:94:ad:fd:
b9:c5:61:3a:41:e5:40:d3:a1:ad:83:ee:c3:64:31:b3:f9:48:
28:25:c5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:50:04 2026 by rpki-client