
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File: jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier: wHDSxTRWhUNHvsapNwZr6cM+KWwZNELbisYdkDYRbfc=
Subject key identifier: B3:FC:03:32:6A:23:69:52:F7:C8:44:38:1B:63:B0:3F:23:39:E2:E5
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 019DCD8782A34ECB09E4244C8DA9A0BF049C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number: 128A
Signing time: Mon 27 Apr 2026 06:01:43 +0000
Manifest this update: Mon 27 Apr 2026 06:01:43 +0000
Manifest next update: Tue 28 Apr 2026 06:01:43 +0000
Files and hashes: 1: 16y6Dm3S-0XHkZbYn6cxfAo_YFw.roa (hash: irAMsjmRujbnUilwywkGQLVJ9AE8/s362qDrKSsSxPI=)
2: 1s1Anh1QdawOquhsQec7nqu-SG0.roa (hash: 6504PhSQMgZrsrEiZwvBZyN4RItbFrKjL7CmPL9wxiY=)
3: 2dvNjFNNGXzYwjJ3gSoiKOH6YQ4.roa (hash: igNQ1yKZeqJtmX3Z7Md10ja7c0/HQ0NFLXG1rlvOgqU=)
4: 7fjgR8MdkVqNxOuk17l6YOZkEXc.roa (hash: V6auew69PK5NifvnfyykYZCVCycoyXF8cQaN55tYK2g=)
5: 7mCn109sqofRWDcNGOrrWERitmM.roa (hash: n6j8KsGkcRSlMvVC+mLJUCmxgZJPqcyhJhHOVryX78M=)
6: 8pNY12YDpGrnDKduWHlcW7mEsQE.roa (hash: zQP2Qnvl73y+y1TLtAVLaO6F1EdYkhaAokyupxVYD9g=)
7: Ae4-OOb-2nImKqdi1MxBgmBoWVs.roa (hash: KwsDySAe+eP5dCXWhiEtsf9rm3LNfZPilz1MOuwv4sU=)
8: E8ElCrVyI4_ySp06Rt8AWdsuCgg.roa (hash: Z4ccaVcUKd9ryOCQ6FjnIiZPSIyvXcv04G23hVd1GlI=)
9: FVA4oJspHiHRrvb4oPtG_h-PCUc.roa (hash: 8Bxg+XWjUfh7Zdnhw++FwSqxGhF6WD8KSM27CCqW1Hk=)
10: G_rLb1NHBdbT4ggKLzWbI18udZ4.roa (hash: 4GIc2uDLUKOt0yM8/St7IKalsIdESkoGix2DNQwzQiI=)
11: JyOt5cnB4v3T3UZPKw92X0tNe54.roa (hash: MUq1toHmKuuf364qjeKbDPNwnyp28heyE703+cnlITE=)
12: OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa (hash: 2ZqSdW69STHjs36+tEpGmZ3SaSTt9SUQC7OzgPN8IYo=)
13: Or5GdPC3i4DomxvbtpMmobgK3sg.roa (hash: vyasvDlNnRIIOt+N/kTnXMKrvV2imQsfb6nc8t1wEWc=)
14: P9AAwlJ1hAyoBTMnpPtV2ahht98.roa (hash: w/3W+982HT12bpaYdt1kWDUaV8RUnkWfWrwrtVX09Bo=)
15: TmyYIBkphXsirlJCQTVa7k6Uie8.roa (hash: hhCTErkRmXxcMcTjpwytmP+hxldbDBaVoTRSyv8AD3g=)
16: U54ysbZkY5VZdk9US_e6p5PbtYo.roa (hash: 6ImtQrN9Qno/6BCfX5vtA/mlfgTEGIkC5LMPJvJrH/w=)
17: U7oXbPR9C9b39Cn3HMYf0C_-Xuo.roa (hash: HqG/neowXQp3hyj34sle61tnf6dsEZFjdso7+Oknl5c=)
18: Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa (hash: Sr6wUGNDgEARiAEw7iKuRuPr56/2v7RjVXYJB+eoKWA=)
19: WQYEipD2j9z75du2QB8SySPDnxI.roa (hash: CV6p+h2jprm7Gg9PLiJzpVym5xmpbUgS8b6EhM9ktlE=)
20: c3wcGPfeUV88q6TA4u7y7Mms2vQ.roa (hash: wYvAqUgZsKTLwhxzM00Aba7HLAIWb47vx7l+YCHWjTQ=)
21: hciHi1rbAPXC_QOxKxCBhhQcO_o.roa (hash: gpGy+g3ryjDdMYoZqZQTJLY4xwgqtQLamwKVVCAZNpQ=)
22: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: Pal2IDjv1plRSBHJ+/fvmx9PVhwLlIKSniyan9vEsFg=)
23: kdpA_FGh8De_3t0XAUAZBxl2atQ.roa (hash: sVcoVUKOIe+5ShYkg7UX2nsGLKYp9ktHdUjuoSG4OfU=)
24: oIjvZ5LFpREEoQ8CBQGoijsn0Nc.roa (hash: M99QhtER9HJAO8F9G3t/LufEuGbqke6cpdVhyWm1xXw=)
25: pdLh7xvaX1CZetTeKzwrGS9oqdo.roa (hash: BdAcKY+3HpnFAKISEO/MKuSBunkmIg8PdCaI4X/Vc8E=)
26: plcJAoUt3ObRYB80UXn3jJwsM50.roa (hash: 73gdO7zUcUNZgeuvyNGHXSPiLSUGsq/a2kFDPmZUlgA=)
27: xKH-si1DhOiUdanbclaUXyvQ8oI.roa (hash: cqd69YqhAEhayTiTYZKqWDUypDcoPpQi51cHl699YCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:82:a3:4e:cb:09:e4:24:4c:8d:a9:a0:bf:04:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Apr 27 06:01:43 2026 GMT
Not After : Apr 28 06:01:43 2026 GMT
Subject: CN=b3fc03326a236952f7c844381b63b03f2339e2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:74:93:b5:cc:5e:c1:1d:4a:54:3b:2c:a0:
93:37:98:da:3b:78:0f:9c:20:63:4d:17:bf:13:38:
08:7d:ee:5d:3e:85:b8:49:88:2d:ab:dc:6e:ac:aa:
74:ea:44:53:e0:af:e7:88:4d:fa:f0:c0:d9:47:2e:
50:8d:4b:a8:1f:d5:14:25:67:11:77:d9:d0:62:b9:
24:b8:ef:f0:9a:87:dc:9a:13:ff:d8:47:4d:23:b1:
9f:9c:a0:12:53:c2:ac:c4:d5:5f:94:88:64:36:0f:
ec:85:eb:68:e2:a0:34:cc:40:f9:20:0b:2e:5c:c2:
57:af:5c:d7:ff:b5:f5:e9:6c:33:4a:ab:4d:ab:de:
ea:b7:74:a7:28:6d:10:9c:7d:2b:b9:41:fb:97:8a:
a4:b1:01:4d:77:8f:45:72:dd:5e:44:61:16:9d:5e:
dd:1f:e5:15:1a:bf:26:34:c4:97:d7:98:57:2d:65:
04:13:16:a6:be:93:eb:5f:d1:d4:ca:bb:94:f0:a2:
61:c8:34:99:69:b9:e6:02:6a:c2:ee:b1:fb:44:83:
d1:41:9b:92:1f:c0:79:c9:9c:cf:f9:c6:3d:1e:2c:
a2:c1:bd:f2:a1:ff:c7:eb:e5:11:ce:c9:c5:59:26:
86:a2:be:b7:e7:f5:12:ac:88:b9:b6:94:40:e0:78:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FC:03:32:6A:23:69:52:F7:C8:44:38:1B:63:B0:3F:23:39:E2:E5
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:da:96:4f:28:2a:bf:c4:3c:0a:78:06:1a:44:51:76:a5:bf:
11:b5:3b:3a:f5:99:94:ec:15:15:9b:f1:d7:cb:1c:c2:22:e3:
bc:04:c3:9a:ff:97:b0:4b:cd:e5:7e:1a:72:7b:48:d0:98:39:
25:ad:6d:87:46:9e:77:6b:7f:ff:bd:9b:e0:84:bb:b9:f3:fc:
e0:de:55:7a:9f:98:de:04:80:0a:9a:19:c5:cc:62:2e:f3:76:
24:2a:32:89:5c:3b:6f:3c:60:c3:bb:56:ae:06:31:24:76:35:
46:db:bb:93:86:e7:7d:80:ad:63:0a:42:83:c0:a6:d2:73:e4:
cc:3f:f9:6e:6b:eb:79:25:71:54:04:b5:40:2b:44:5b:20:c7:
39:e3:f6:a7:b8:a6:89:56:04:cd:a2:6e:e1:44:ef:57:37:ea:
08:41:f2:3d:85:da:8e:02:7e:54:23:6c:d0:d8:a2:28:58:66:
f5:ac:f5:3e:3f:e5:90:19:f6:c4:16:c5:2a:9b:8c:25:e7:77:
14:5c:ed:d1:1f:16:92:22:f9:73:66:b4:9b:66:87:f8:5a:d2:
bd:bd:5e:2c:44:4c:7b:e2:5f:f5:78:60:7f:74:01:0c:ca:16:
c0:3e:ed:53:b3:66:ae:41:2d:88:4a:94:35:db:0e:61:3f:92:
ab:a5:69:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:40:52 2026 by rpki-client