
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File: jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier: 3neFUBBtqcnutCy2lzGa5A5/PmGAoDxM0mvwILiTRsM=
Subject key identifier: 67:6B:E9:87:B1:23:67:EE:32:E3:21:3C:36:45:E9:5B:49:65:7E:DF
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 019CE4108DC855FD352C97EE7E20D88061E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number: 1210
Signing time: Thu 12 Mar 2026 22:00:15 +0000
Manifest this update: Thu 12 Mar 2026 22:00:15 +0000
Manifest next update: Fri 13 Mar 2026 22:00:15 +0000
Files and hashes: 1: 16y6Dm3S-0XHkZbYn6cxfAo_YFw.roa (hash: irAMsjmRujbnUilwywkGQLVJ9AE8/s362qDrKSsSxPI=)
2: 1s1Anh1QdawOquhsQec7nqu-SG0.roa (hash: 6504PhSQMgZrsrEiZwvBZyN4RItbFrKjL7CmPL9wxiY=)
3: 2dvNjFNNGXzYwjJ3gSoiKOH6YQ4.roa (hash: igNQ1yKZeqJtmX3Z7Md10ja7c0/HQ0NFLXG1rlvOgqU=)
4: 7fjgR8MdkVqNxOuk17l6YOZkEXc.roa (hash: V6auew69PK5NifvnfyykYZCVCycoyXF8cQaN55tYK2g=)
5: 8pNY12YDpGrnDKduWHlcW7mEsQE.roa (hash: zQP2Qnvl73y+y1TLtAVLaO6F1EdYkhaAokyupxVYD9g=)
6: Ae4-OOb-2nImKqdi1MxBgmBoWVs.roa (hash: KwsDySAe+eP5dCXWhiEtsf9rm3LNfZPilz1MOuwv4sU=)
7: E8ElCrVyI4_ySp06Rt8AWdsuCgg.roa (hash: Z4ccaVcUKd9ryOCQ6FjnIiZPSIyvXcv04G23hVd1GlI=)
8: FVA4oJspHiHRrvb4oPtG_h-PCUc.roa (hash: 8Bxg+XWjUfh7Zdnhw++FwSqxGhF6WD8KSM27CCqW1Hk=)
9: GGzRSfoVy0Nu-jsvuPVqdfmtr8Y.roa (hash: dY65QrN8XEoMPf47U2fyURlBpZdOUXmMg4ELu09RDqM=)
10: G_rLb1NHBdbT4ggKLzWbI18udZ4.roa (hash: 4GIc2uDLUKOt0yM8/St7IKalsIdESkoGix2DNQwzQiI=)
11: JyOt5cnB4v3T3UZPKw92X0tNe54.roa (hash: MUq1toHmKuuf364qjeKbDPNwnyp28heyE703+cnlITE=)
12: OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa (hash: 2ZqSdW69STHjs36+tEpGmZ3SaSTt9SUQC7OzgPN8IYo=)
13: Or5GdPC3i4DomxvbtpMmobgK3sg.roa (hash: vyasvDlNnRIIOt+N/kTnXMKrvV2imQsfb6nc8t1wEWc=)
14: P9AAwlJ1hAyoBTMnpPtV2ahht98.roa (hash: w/3W+982HT12bpaYdt1kWDUaV8RUnkWfWrwrtVX09Bo=)
15: TmyYIBkphXsirlJCQTVa7k6Uie8.roa (hash: hhCTErkRmXxcMcTjpwytmP+hxldbDBaVoTRSyv8AD3g=)
16: U54ysbZkY5VZdk9US_e6p5PbtYo.roa (hash: 6ImtQrN9Qno/6BCfX5vtA/mlfgTEGIkC5LMPJvJrH/w=)
17: U7oXbPR9C9b39Cn3HMYf0C_-Xuo.roa (hash: HqG/neowXQp3hyj34sle61tnf6dsEZFjdso7+Oknl5c=)
18: Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa (hash: Sr6wUGNDgEARiAEw7iKuRuPr56/2v7RjVXYJB+eoKWA=)
19: WQYEipD2j9z75du2QB8SySPDnxI.roa (hash: CV6p+h2jprm7Gg9PLiJzpVym5xmpbUgS8b6EhM9ktlE=)
20: c3wcGPfeUV88q6TA4u7y7Mms2vQ.roa (hash: wYvAqUgZsKTLwhxzM00Aba7HLAIWb47vx7l+YCHWjTQ=)
21: hciHi1rbAPXC_QOxKxCBhhQcO_o.roa (hash: gpGy+g3ryjDdMYoZqZQTJLY4xwgqtQLamwKVVCAZNpQ=)
22: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: m2ymfquclMTAOyQU8b6pmoVbp5DvMwwDkF6S5Cte8i8=)
23: kdpA_FGh8De_3t0XAUAZBxl2atQ.roa (hash: sVcoVUKOIe+5ShYkg7UX2nsGLKYp9ktHdUjuoSG4OfU=)
24: oIjvZ5LFpREEoQ8CBQGoijsn0Nc.roa (hash: M99QhtER9HJAO8F9G3t/LufEuGbqke6cpdVhyWm1xXw=)
25: pdLh7xvaX1CZetTeKzwrGS9oqdo.roa (hash: BdAcKY+3HpnFAKISEO/MKuSBunkmIg8PdCaI4X/Vc8E=)
26: plcJAoUt3ObRYB80UXn3jJwsM50.roa (hash: 73gdO7zUcUNZgeuvyNGHXSPiLSUGsq/a2kFDPmZUlgA=)
27: xKH-si1DhOiUdanbclaUXyvQ8oI.roa (hash: cqd69YqhAEhayTiTYZKqWDUypDcoPpQi51cHl699YCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:8d:c8:55:fd:35:2c:97:ee:7e:20:d8:80:61:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Mar 12 22:00:15 2026 GMT
Not After : Mar 13 22:00:15 2026 GMT
Subject: CN=676be987b12367ee32e3213c3645e95b49657edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8a:2c:8b:e7:d8:7d:79:2e:1d:c0:94:5b:6b:
05:5e:9e:9c:51:19:4c:ac:d2:73:45:8b:3b:31:b4:
62:c6:59:46:04:65:47:5f:bf:4e:e6:a6:fb:76:31:
8b:9b:7d:a0:3f:e4:9f:10:34:b2:7b:3f:c6:47:c9:
51:15:e1:64:5e:9d:b9:63:de:be:7e:de:86:d4:17:
cf:33:26:95:63:30:e6:79:fb:81:95:c2:d3:3e:89:
f7:b8:42:58:33:c2:c1:a2:bf:c3:05:1a:30:3e:26:
41:d2:ea:87:78:39:a2:c7:76:ee:bf:af:dd:97:bf:
5c:9d:b5:6e:f5:22:18:12:06:dc:65:98:8d:1b:fe:
09:06:5e:75:45:39:36:4d:6a:ef:4c:16:d7:6e:52:
9a:8c:19:d2:53:61:e4:2c:0f:20:2b:b1:0d:b8:7f:
2e:05:d9:fc:99:ea:03:8a:ec:ab:09:96:f0:59:7c:
3c:ea:b7:bc:73:b8:f4:fd:d3:5d:81:bc:e5:2b:02:
f2:a7:7a:8f:7a:f4:06:2d:7f:67:7a:c4:77:85:ca:
4a:75:12:d8:ba:fc:cf:a3:f9:6b:0e:4c:cf:41:f0:
30:b8:db:48:56:d1:c6:9d:28:3f:19:ba:a8:eb:86:
db:73:5e:86:d2:54:18:f7:23:35:15:4b:4e:6f:10:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6B:E9:87:B1:23:67:EE:32:E3:21:3C:36:45:E9:5B:49:65:7E:DF
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e3:c0:45:79:b2:00:71:56:6e:f8:dd:c1:03:17:cd:b7:22:
b3:a0:6c:2b:bc:6f:f4:62:bb:19:df:d1:be:ec:4f:ed:25:33:
85:44:a4:ad:9a:ae:7d:d5:a8:77:1a:93:0b:22:95:2c:7b:cf:
f5:b5:f0:12:85:25:1d:38:ce:49:b0:80:6a:9b:fc:89:fe:75:
bb:ab:7a:56:df:42:20:54:c8:e1:f8:82:54:d4:ce:03:09:6d:
a4:ac:28:d4:fb:22:18:4b:81:79:bb:5a:48:88:3d:1e:85:19:
c7:77:75:aa:30:ca:c7:a0:93:65:2b:a7:1a:bf:df:72:e5:13:
b3:6b:14:a4:f5:1d:bf:8b:eb:98:dc:89:f6:ef:52:d5:74:43:
67:72:5c:bc:dd:2c:e0:b1:1c:b4:a1:53:41:60:b9:19:d9:89:
d6:99:f9:e2:f0:31:dc:64:3c:46:e2:19:fa:59:83:c8:6e:b4:
80:04:3d:6a:c0:b4:d7:c9:1a:f7:59:2e:cc:17:63:08:76:6c:
0e:ab:99:f1:2f:3a:0f:31:d1:f2:ae:6c:3c:e1:11:40:82:6c:
ed:8b:f2:ef:e7:5b:b5:44:7d:ce:82:bd:c7:e8:0c:29:36:09:
8b:23:47:b1:ca:7c:00:b8:d7:a8:21:36:8a:10:17:33:19:0c:
7a:58:6d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:25:24 2026 by rpki-client