
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File: jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier: 49XxZWP15yxc9zRlNVmrVGKotsbwCgtdWXHTPXunoeo=
Subject key identifier: 52:8F:73:AC:F2:A7:47:60:89:FA:72:1D:EC:E6:84:9B:E4:31:84:1A
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01A08BD5F958AF732F7C8C898012A530EBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number: 13F8
Signing time: Thu 10 Sep 2026 15:00:50 +0000
Manifest this update: Thu 10 Sep 2026 15:00:50 +0000
Manifest next update: Fri 11 Sep 2026 15:00:50 +0000
Files and hashes: 1: 0SsVKDB-etOOcOJQzIHSYo6Hluc.roa (hash: H/DwF92N2tX0k/2d7XIAaSBcDnUSEy8mxFtoeNIE6Kw=)
2: 0wUdxJ4suYobkrI0m3nFXE-K2KU.roa (hash: FQiCUFsTMLuwkmXx5bpC/mi0OyHn67NhNJuEJfN64/4=)
3: 16y6Dm3S-0XHkZbYn6cxfAo_YFw.roa (hash: irAMsjmRujbnUilwywkGQLVJ9AE8/s362qDrKSsSxPI=)
4: 1s1Anh1QdawOquhsQec7nqu-SG0.roa (hash: 6504PhSQMgZrsrEiZwvBZyN4RItbFrKjL7CmPL9wxiY=)
5: 2dvNjFNNGXzYwjJ3gSoiKOH6YQ4.roa (hash: igNQ1yKZeqJtmX3Z7Md10ja7c0/HQ0NFLXG1rlvOgqU=)
6: 7fjgR8MdkVqNxOuk17l6YOZkEXc.roa (hash: V6auew69PK5NifvnfyykYZCVCycoyXF8cQaN55tYK2g=)
7: 7mCn109sqofRWDcNGOrrWERitmM.roa (hash: n6j8KsGkcRSlMvVC+mLJUCmxgZJPqcyhJhHOVryX78M=)
8: Ae4-OOb-2nImKqdi1MxBgmBoWVs.roa (hash: KwsDySAe+eP5dCXWhiEtsf9rm3LNfZPilz1MOuwv4sU=)
9: FVA4oJspHiHRrvb4oPtG_h-PCUc.roa (hash: 8Bxg+XWjUfh7Zdnhw++FwSqxGhF6WD8KSM27CCqW1Hk=)
10: G_rLb1NHBdbT4ggKLzWbI18udZ4.roa (hash: 4GIc2uDLUKOt0yM8/St7IKalsIdESkoGix2DNQwzQiI=)
11: JyOt5cnB4v3T3UZPKw92X0tNe54.roa (hash: MUq1toHmKuuf364qjeKbDPNwnyp28heyE703+cnlITE=)
12: K0d-nr6FyB_kVSGyDh66Rm6xuvo.roa (hash: EjAMOySbpY1BQojVyP+4Fblh4A/2sP9R9ArCHE0eUrI=)
13: OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa (hash: 2ZqSdW69STHjs36+tEpGmZ3SaSTt9SUQC7OzgPN8IYo=)
14: Or5GdPC3i4DomxvbtpMmobgK3sg.roa (hash: vyasvDlNnRIIOt+N/kTnXMKrvV2imQsfb6nc8t1wEWc=)
15: P9AAwlJ1hAyoBTMnpPtV2ahht98.roa (hash: w/3W+982HT12bpaYdt1kWDUaV8RUnkWfWrwrtVX09Bo=)
16: TmyYIBkphXsirlJCQTVa7k6Uie8.roa (hash: hhCTErkRmXxcMcTjpwytmP+hxldbDBaVoTRSyv8AD3g=)
17: U7oXbPR9C9b39Cn3HMYf0C_-Xuo.roa (hash: HqG/neowXQp3hyj34sle61tnf6dsEZFjdso7+Oknl5c=)
18: Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa (hash: Sr6wUGNDgEARiAEw7iKuRuPr56/2v7RjVXYJB+eoKWA=)
19: WQYEipD2j9z75du2QB8SySPDnxI.roa (hash: CV6p+h2jprm7Gg9PLiJzpVym5xmpbUgS8b6EhM9ktlE=)
20: c3wcGPfeUV88q6TA4u7y7Mms2vQ.roa (hash: wYvAqUgZsKTLwhxzM00Aba7HLAIWb47vx7l+YCHWjTQ=)
21: hciHi1rbAPXC_QOxKxCBhhQcO_o.roa (hash: gpGy+g3ryjDdMYoZqZQTJLY4xwgqtQLamwKVVCAZNpQ=)
22: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: m2UAbqFQThtIeO0FWztfannbhg4UgCc9clcENZLzlmA=)
23: kdpA_FGh8De_3t0XAUAZBxl2atQ.roa (hash: sVcoVUKOIe+5ShYkg7UX2nsGLKYp9ktHdUjuoSG4OfU=)
24: oIjvZ5LFpREEoQ8CBQGoijsn0Nc.roa (hash: M99QhtER9HJAO8F9G3t/LufEuGbqke6cpdVhyWm1xXw=)
25: pdLh7xvaX1CZetTeKzwrGS9oqdo.roa (hash: BdAcKY+3HpnFAKISEO/MKuSBunkmIg8PdCaI4X/Vc8E=)
26: plcJAoUt3ObRYB80UXn3jJwsM50.roa (hash: 73gdO7zUcUNZgeuvyNGHXSPiLSUGsq/a2kFDPmZUlgA=)
27: xKH-si1DhOiUdanbclaUXyvQ8oI.roa (hash: cqd69YqhAEhayTiTYZKqWDUypDcoPpQi51cHl699YCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:f9:58:af:73:2f:7c:8c:89:80:12:a5:30:eb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Sep 10 15:00:50 2026 GMT
Not After : Sep 11 15:00:50 2026 GMT
Subject: CN=528f73acf2a7476089fa721dece6849be431841a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:41:8c:15:84:3b:fe:82:53:8b:33:92:b5:
01:0a:4e:8c:82:01:fb:79:28:d0:6e:44:ae:ad:6a:
bb:5f:52:86:2c:ef:c8:ad:35:d5:17:26:56:11:90:
01:a4:23:ba:8e:0e:62:c3:67:4b:bd:8c:12:a2:6b:
cc:87:b7:c1:c3:50:fa:36:4f:79:f5:5f:b9:74:36:
2a:f7:60:4f:b9:f7:71:6c:fc:ef:f6:bd:c8:38:c1:
9b:04:e1:f6:a5:bd:ea:05:84:8f:8a:42:2a:03:ab:
c6:b7:e4:45:e0:3a:e4:76:20:73:ab:bd:08:b7:11:
c3:ae:0b:c7:fa:3c:f4:3a:e8:06:46:73:2a:8e:c4:
2a:97:a0:33:7d:03:fd:01:89:9f:fd:ed:bc:48:92:
bc:75:11:d6:1e:7f:d2:a3:36:26:cd:2e:96:db:13:
45:03:86:06:fc:c9:27:5c:36:6e:f1:16:5c:97:13:
6e:82:ff:5e:a1:fd:0d:58:e2:ab:77:fa:7a:02:96:
b7:8f:6d:1d:26:f5:fc:4d:cb:39:3a:27:8a:fc:6c:
79:97:1e:62:7d:3e:87:92:f6:43:93:7a:33:95:12:
5f:7c:cb:f8:06:27:8b:b5:e0:43:87:f7:9b:f2:a3:
d0:76:53:93:87:a1:e3:58:c5:24:47:9c:56:1f:85:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8F:73:AC:F2:A7:47:60:89:FA:72:1D:EC:E6:84:9B:E4:31:84:1A
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ec:a6:2a:8a:b2:58:90:af:ef:62:bf:f4:2b:52:53:c7:63:
b4:1e:16:14:36:81:ff:4f:d4:6f:bf:41:2e:fa:c2:50:84:7c:
0d:15:fe:11:99:2b:ce:8f:16:c4:69:d2:75:3e:0e:18:dd:13:
95:ce:e6:e9:8e:0d:9c:45:43:6b:da:8f:59:ac:e0:35:da:25:
9d:88:c1:85:6d:5c:23:24:6c:43:62:45:9b:12:f2:73:c5:5b:
08:43:05:38:e0:4f:51:aa:99:e6:3a:41:f0:8d:77:52:2f:d4:
13:60:96:e3:ba:85:05:80:57:55:e9:44:95:9a:46:79:16:1e:
38:31:40:3c:3c:58:9d:99:3f:83:78:98:a3:3d:df:03:a6:8c:
5e:08:d1:6c:4e:b1:1c:90:90:25:53:36:68:04:a4:b8:7e:63:
25:53:fa:a2:78:c6:fc:94:36:71:cf:d2:17:e2:84:69:07:5c:
fd:8d:3c:26:bf:59:9a:ee:57:cc:07:65:96:d1:40:8d:76:6e:
2e:c1:20:50:49:73:2b:20:bb:72:1c:1c:5d:d2:1a:af:31:19:
8f:93:5f:40:a7:1d:86:9a:67:7d:a0:8e:8d:a0:46:38:a1:b1:
d3:85:fe:35:9c:00:7e:d8:ca:a7:fa:b9:d3:ce:4d:46:00:1e:
98:29:93:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:31:28 2026 by rpki-client