
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json)
Hash identifier: Ut6ax3YA8beuN1FMyXbgjVq7boh9xvFMsEXHYEkWmj8=
Subject key identifier: 7F:CF:58:FC:9E:CF:0A:9A:C9:27:A4:5F:71:84:3D:0D:86:C6:32:A6
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 01A08C0DC5C0FC8D508E17470E2BC39EBF2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
Manifest number: 1A85
Signing time: Thu 10 Sep 2026 16:01:47 +0000
Manifest this update: Thu 10 Sep 2026 16:01:47 +0000
Manifest next update: Fri 11 Sep 2026 16:01:47 +0000
Files and hashes: 1: 1-QjCvQyEiSSrXN04KWll_jRfeW0.roa (hash: RMz19B8NK0lDXxzH2DOAYRkrqiIKDr84AiR/LHs2BHU=)
2: 1-X27IuJGjEWD538xJuX4fc13cFQ.roa (hash: h9nhsX5bhwK6F3kmXdBDjN240g4PwWDk5C/hsalPlfw=)
3: BOjpyE22EDrXW2wH5ueNqr-_t7M.roa (hash: JzVtX64VS2LC7Jo6NzhZJ9tn4S0/NMOoGFR3UGv+gFE=)
4: BvDqb9cc-WJGTsR3tIgfxMVXMzg.roa (hash: M3gvEkXIu3VF4OHCFfprYhRQqSznoxtSmwJpexYP1d8=)
5: GxCZoQUkV5fBAXhSL4DEgTYGJQo.roa (hash: G9NhBuAJ9tyZxN2RMYoM+cN+FlYgn+5It9aPaKFMmf0=)
6: M88D89mcwOgwS0smNU2-YZ_Y7Ns.roa (hash: sFx8wL28VJls261Z4+Yoo4E3wUg010twMp4FzjomCF8=)
7: OFU4rYQAL-sOvU42wXKsJPFLqgo.roa (hash: gfh4xBU+FrULOBmBwbJZ1n1nb4fdCqFs8mhTRC5PTWk=)
8: PE_Tce8xM1SvQOyoivmCZY3zjes.roa (hash: /ZeTOmr+gWLHHVZJAewm9ieoBEFRx12ej0Ep29z8u/w=)
9: PpN955svl-HLDw6fLf58eCV0ziY.roa (hash: AoTlEjxNh1f4w0jTYiNps1tCHpqZbK+PCcDLj0smKN8=)
10: SrEzEjwK-3uKVpak9gMqzGNpdCg.roa (hash: 42ZM42HvDr7NNH3ONprmjvWUIm8DwnTLbUUIzVU2/1Y=)
11: Y3NRzC9hifQe9usbuWmpK6keugQ.roa (hash: VJqsHGvkgw+GazL84ykrZQy43X4CZ0v3NwjmAtv8RIs=)
12: b6_1YvrxO5H13PgeqX9yvKDmS8Y.roa (hash: LmP1grhJtls1Giy8pUC8zHO3rUSGz/0KggmC8aeJ/z0=)
13: bUNfA-Av4UmqF4BtunXlZ21q724.roa (hash: qQU2e8dztU2kTJC7bA4kqu6ev957L6OyeDRTaJouBzU=)
14: d0Se-Q1hirJpXCWc1a3yM36OdkM.roa (hash: WUitFtPR3eqhcQYIVu73IqaLIgnHpMyqoNV1i8MCbTQ=)
15: fJVUUHPA2PMcN0st0PbAgYkXKuw.roa (hash: aUscwIj6WUdJlI5efFgW5oAZ5dGdU9hgEbv9zQfdoL8=)
16: iznH3vVYi9D8I6W0a_m2eZRKsNE.roa (hash: wZkljNiGiuoftSlkxO1vcP+VKneTmBt0zwFDnL+VZJg=)
17: jwqLq-su-FeQFPMunwZCdpiE4yQ.roa (hash: 0DD9DnMv2SCd06HIdn93/9sFlkj49ZuqQQMpvkACvaM=)
18: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: W/gzehWA/Jx61eYg6MUnRs4nrS70D0BneqPHyDq9FZg=)
19: ozxuboQujXdiImUQ23259rgJxTU.roa (hash: mUzByNgDOakmOWXkp+P9oysXEw/ks3+fUkO7YTuj2Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 16:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:c5:c0:fc:8d:50:8e:17:47:0e:2b:c3:9e:bf:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Sep 10 16:01:47 2026 GMT
Not After : Sep 11 16:01:47 2026 GMT
Subject: CN=7fcf58fc9ecf0a9ac927a45f71843d0d86c632a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:02:62:6f:f3:5b:89:e9:46:8f:92:3f:da:
40:e2:e7:9a:ff:78:f9:da:d7:a7:68:76:22:81:df:
c9:8d:0a:96:d1:f0:9c:01:2c:64:91:68:8a:4a:73:
86:ac:d2:b6:70:59:be:02:9a:2b:c7:a3:8f:f8:3c:
ec:03:43:46:6c:d8:f5:52:5e:4a:b9:27:1c:2c:84:
c4:36:fb:9d:41:93:11:a4:30:5e:29:d3:8b:08:62:
6e:1b:44:62:9a:4e:40:05:21:4c:d9:e7:af:2b:16:
12:d1:f8:54:d3:8a:36:27:0a:88:35:df:ef:07:03:
62:76:b6:9b:08:06:9f:36:35:e7:3a:52:bf:88:1d:
f3:96:c8:20:7a:a7:02:74:d1:1c:6f:ff:30:56:d4:
57:1f:b3:03:a0:8f:fa:59:fb:a5:e9:fc:a2:68:c8:
1f:b1:08:86:97:a2:96:13:b0:7b:8a:9e:7a:d5:10:
2f:7b:bf:29:b1:65:5a:77:38:63:c9:36:ab:a3:ad:
0d:21:ad:a2:5f:d1:0e:4f:1a:cd:21:91:21:0f:2d:
c3:27:20:16:ed:74:21:d9:32:28:fe:32:c1:b3:fb:
aa:93:12:c5:59:7b:73:e8:3a:f5:d6:50:58:59:ae:
0d:78:17:d1:6f:f6:28:10:05:02:db:cd:d0:de:ef:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CF:58:FC:9E:CF:0A:9A:C9:27:A4:5F:71:84:3D:0D:86:C6:32:A6
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d6:8e:5d:bd:3d:59:a2:4c:69:fe:45:d7:2c:5c:aa:de:cd:
5a:71:9b:2d:55:2b:74:0b:76:cc:f0:40:e9:1d:a9:19:c0:fd:
e3:4c:52:12:1d:69:c4:99:8a:8a:6a:04:62:f2:37:39:97:4a:
e8:0c:1b:5c:96:03:a5:cc:64:9f:00:ab:67:57:9b:cd:52:19:
f8:2e:d1:b9:b2:4b:8a:2b:a4:d3:70:cc:dd:f3:ef:7e:24:8e:
42:8e:e9:70:16:90:6d:8d:60:11:35:2b:fa:35:e2:0f:72:57:
eb:cd:02:fa:e3:03:7f:d5:cd:d0:c0:37:0c:4f:b5:f6:c4:d7:
68:e2:c7:a2:d3:c1:8d:83:62:1b:ed:ce:63:3f:e7:56:e6:11:
7e:22:f9:1b:fc:94:47:36:5f:d6:c8:56:6f:d8:4c:f2:a4:d7:
d6:a7:81:bb:02:81:81:6f:aa:c7:4a:c6:89:2a:cd:16:de:ff:
87:09:b6:55:ba:22:b6:6c:7a:0d:ca:b2:37:55:ff:29:82:67:
a3:3d:76:63:30:2e:cc:72:c1:5f:4c:64:db:70:5b:07:60:59:
bc:0a:70:68:e7:6d:a8:1f:3b:ec:70:ab:c2:42:fa:9f:99:42:
79:81:a3:5c:c3:13:1c:cd:65:4a:3b:a0:0f:2a:87:37:68:b4:
a0:e1:7f:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDcXA/I1QjhdHDivDnr8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy
NzAxMjMwHhcNMjYwOTEwMTYwMTQ3WhcNMjYwOTExMTYwMTQ3WjAzMTEwLwYDVQQD
Eyg3ZmNmNThmYzllY2YwYTlhYzkyN2E0NWY3MTg0M2QwZDg2YzYzMmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVwCYm/zW4npRo+SP9pA4uea/3j5
2tenaHYigd/JjQqW0fCcASxkkWiKSnOGrNK2cFm+Aporx6OP+DzsA0NGbNj1Ul5K
uSccLITENvudQZMRpDBeKdOLCGJuG0Rimk5ABSFM2eevKxYS0fhU04o2JwqINd/v
BwNidrabCAafNjXnOlK/iB3zlsggeqcCdNEcb/8wVtRXH7MDoI/6Wful6fyiaMgf
sQiGl6KWE7B7ip561RAve78psWVadzhjyTaro60NIa2iX9EOTxrNIZEhDy3DJyAW
7XQh2TIo/jLBs/uqkxLFWXtz6Dr11lBYWa4NeBfRb/YoEAUC283Q3u9SmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/PWPyezwqaySekX3GEPQ2GxjKmMB8GA1UdIwQY
MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt
YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh
LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtaOXb09
WaJMaf5F1yxcqt7NWnGbLVUrdAt2zPBA6R2pGcD940xSEh1pxJmKimoEYvI3OZdK
6AwbXJYDpcxknwCrZ1ebzVIZ+C7RubJLiiuk03DM3fPvfiSOQo7pcBaQbY1gETUr
+jXiD3JX680C+uMDf9XN0MA3DE+19sTXaOLHotPBjYNiG+3OYz/nVuYRfiL5G/yU
RzZf1shWb9hM8qTX1qeBuwKBgW+qx0rGiSrNFt7/hwm2Vboitmx6DcqyN1X/KYJn
oz12YzAuzHLBX0xk23BbB2BZvApwaOdtqB877HCrwkL6n5lCeYGjXMMTHM1lSjug
DyqHN2i0oOF/tw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:38 2026 by rpki-client