
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File: jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier: OF+AW88JuYoW+Pm77zcGBP2ha+nECJd3jvtlHnInFbE=
Subject key identifier: 20:87:0E:78:92:3B:D7:F0:D7:07:CF:71:34:89:03:BA:1E:F8:6E:C6
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 019EB7330E198697163537A06EEA8AF983CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number: 1303
Signing time: Thu 11 Jun 2026 15:00:36 +0000
Manifest this update: Thu 11 Jun 2026 15:00:36 +0000
Manifest next update: Fri 12 Jun 2026 15:00:36 +0000
Files and hashes: 1: 16y6Dm3S-0XHkZbYn6cxfAo_YFw.roa (hash: irAMsjmRujbnUilwywkGQLVJ9AE8/s362qDrKSsSxPI=)
2: 1s1Anh1QdawOquhsQec7nqu-SG0.roa (hash: 6504PhSQMgZrsrEiZwvBZyN4RItbFrKjL7CmPL9wxiY=)
3: 2dvNjFNNGXzYwjJ3gSoiKOH6YQ4.roa (hash: igNQ1yKZeqJtmX3Z7Md10ja7c0/HQ0NFLXG1rlvOgqU=)
4: 7fjgR8MdkVqNxOuk17l6YOZkEXc.roa (hash: V6auew69PK5NifvnfyykYZCVCycoyXF8cQaN55tYK2g=)
5: 7mCn109sqofRWDcNGOrrWERitmM.roa (hash: n6j8KsGkcRSlMvVC+mLJUCmxgZJPqcyhJhHOVryX78M=)
6: 8pNY12YDpGrnDKduWHlcW7mEsQE.roa (hash: zQP2Qnvl73y+y1TLtAVLaO6F1EdYkhaAokyupxVYD9g=)
7: Ae4-OOb-2nImKqdi1MxBgmBoWVs.roa (hash: KwsDySAe+eP5dCXWhiEtsf9rm3LNfZPilz1MOuwv4sU=)
8: E8ElCrVyI4_ySp06Rt8AWdsuCgg.roa (hash: Z4ccaVcUKd9ryOCQ6FjnIiZPSIyvXcv04G23hVd1GlI=)
9: FVA4oJspHiHRrvb4oPtG_h-PCUc.roa (hash: 8Bxg+XWjUfh7Zdnhw++FwSqxGhF6WD8KSM27CCqW1Hk=)
10: G_rLb1NHBdbT4ggKLzWbI18udZ4.roa (hash: 4GIc2uDLUKOt0yM8/St7IKalsIdESkoGix2DNQwzQiI=)
11: JyOt5cnB4v3T3UZPKw92X0tNe54.roa (hash: MUq1toHmKuuf364qjeKbDPNwnyp28heyE703+cnlITE=)
12: OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa (hash: 2ZqSdW69STHjs36+tEpGmZ3SaSTt9SUQC7OzgPN8IYo=)
13: Or5GdPC3i4DomxvbtpMmobgK3sg.roa (hash: vyasvDlNnRIIOt+N/kTnXMKrvV2imQsfb6nc8t1wEWc=)
14: P9AAwlJ1hAyoBTMnpPtV2ahht98.roa (hash: w/3W+982HT12bpaYdt1kWDUaV8RUnkWfWrwrtVX09Bo=)
15: TmyYIBkphXsirlJCQTVa7k6Uie8.roa (hash: hhCTErkRmXxcMcTjpwytmP+hxldbDBaVoTRSyv8AD3g=)
16: U54ysbZkY5VZdk9US_e6p5PbtYo.roa (hash: 6ImtQrN9Qno/6BCfX5vtA/mlfgTEGIkC5LMPJvJrH/w=)
17: U7oXbPR9C9b39Cn3HMYf0C_-Xuo.roa (hash: HqG/neowXQp3hyj34sle61tnf6dsEZFjdso7+Oknl5c=)
18: Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa (hash: Sr6wUGNDgEARiAEw7iKuRuPr56/2v7RjVXYJB+eoKWA=)
19: WQYEipD2j9z75du2QB8SySPDnxI.roa (hash: CV6p+h2jprm7Gg9PLiJzpVym5xmpbUgS8b6EhM9ktlE=)
20: c3wcGPfeUV88q6TA4u7y7Mms2vQ.roa (hash: wYvAqUgZsKTLwhxzM00Aba7HLAIWb47vx7l+YCHWjTQ=)
21: hciHi1rbAPXC_QOxKxCBhhQcO_o.roa (hash: gpGy+g3ryjDdMYoZqZQTJLY4xwgqtQLamwKVVCAZNpQ=)
22: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: CVwVFm7HrnBjTbltceUeHqA5kugJ2zhxGw7suXntDAQ=)
23: kdpA_FGh8De_3t0XAUAZBxl2atQ.roa (hash: sVcoVUKOIe+5ShYkg7UX2nsGLKYp9ktHdUjuoSG4OfU=)
24: oIjvZ5LFpREEoQ8CBQGoijsn0Nc.roa (hash: M99QhtER9HJAO8F9G3t/LufEuGbqke6cpdVhyWm1xXw=)
25: pdLh7xvaX1CZetTeKzwrGS9oqdo.roa (hash: BdAcKY+3HpnFAKISEO/MKuSBunkmIg8PdCaI4X/Vc8E=)
26: plcJAoUt3ObRYB80UXn3jJwsM50.roa (hash: 73gdO7zUcUNZgeuvyNGHXSPiLSUGsq/a2kFDPmZUlgA=)
27: xKH-si1DhOiUdanbclaUXyvQ8oI.roa (hash: cqd69YqhAEhayTiTYZKqWDUypDcoPpQi51cHl699YCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:0e:19:86:97:16:35:37:a0:6e:ea:8a:f9:83:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jun 11 15:00:36 2026 GMT
Not After : Jun 12 15:00:36 2026 GMT
Subject: CN=20870e78923bd7f0d707cf71348903ba1ef86ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:27:f7:5f:fd:7e:c2:02:62:71:2f:57:54:
18:cd:4e:be:53:64:40:6c:c4:a3:0c:43:35:7e:e1:
7f:a1:13:5d:53:ae:39:85:54:ec:89:4a:4a:4f:73:
b6:1c:b0:1e:78:a3:a9:67:f7:f8:6b:58:1f:3e:ec:
ba:d6:e0:c9:e5:fe:8e:05:4d:7a:d2:db:36:ad:af:
c6:ef:ed:7f:84:38:c9:af:a5:90:34:0e:a0:a0:24:
a1:bd:37:c3:43:e6:62:69:23:24:bc:b9:ef:70:b5:
25:ec:10:a2:e4:1d:f0:56:57:dc:d2:81:6d:81:49:
57:0c:17:2f:38:05:75:e3:a7:d2:94:df:bb:ff:2b:
14:13:fd:f7:29:b6:08:19:6e:ab:ab:db:83:d3:72:
a6:68:ce:8d:5f:5e:08:4b:73:81:1d:98:b4:05:97:
b3:d1:74:15:4a:9d:e1:34:d5:9e:cd:4b:aa:8d:9e:
eb:03:b4:06:2d:69:e0:ae:ec:6c:56:ef:a9:4b:02:
7b:07:1a:e9:9e:74:b9:b7:7f:a3:4d:b2:18:42:4a:
fe:d9:d9:a4:90:f8:e5:bd:22:e0:a5:3d:9d:1e:4b:
e9:6e:58:f4:49:3e:49:ef:f1:a9:51:ab:f6:a9:60:
48:a0:fd:cc:85:a3:69:b1:1c:2f:31:ad:5a:1d:c0:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:87:0E:78:92:3B:D7:F0:D7:07:CF:71:34:89:03:BA:1E:F8:6E:C6
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8a:db:62:cd:55:90:cb:c1:b1:29:42:f2:79:e6:88:33:18:
ef:f1:fd:87:dc:ae:41:fb:b7:c9:02:e5:92:4d:07:bd:42:89:
f5:38:6a:a5:40:18:63:c0:7f:ca:73:f0:50:13:82:3b:b2:0c:
17:34:c7:c0:55:24:9f:fd:7c:37:e5:d2:95:fb:65:f8:fd:43:
ef:90:ad:eb:81:47:55:f8:86:50:e6:c0:ec:dc:9b:3b:c2:9b:
b0:d2:00:52:dd:cd:3c:cc:52:c0:9d:fc:22:cd:26:32:91:4d:
cf:ee:2e:6f:be:30:94:25:f4:b4:d2:a8:29:19:e3:65:92:dc:
02:45:6d:2e:b7:0f:fc:af:97:eb:83:33:c3:82:56:a8:45:c3:
87:6f:75:88:97:54:73:ce:2d:c4:7e:29:61:3b:8d:77:dc:5a:
f3:50:6a:a2:f7:0d:d2:43:ab:53:dc:9c:12:1e:8d:a1:62:48:
88:8c:30:69:e4:27:9a:ad:77:f3:11:1a:bb:7c:c4:b4:fb:04:
2e:02:2c:1c:d6:71:fe:f6:e3:8f:a3:81:99:74:15:d5:23:dc:
f4:ed:92:87:aa:44:ec:19:3c:d1:c5:46:43:3f:79:7c:33:94:
52:e2:50:3b:8d:50:a3:8e:09:01:1f:78:81:c3:6c:d3:d4:63:
83:f6:b9:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63Mw4ZhpcWNTegbuqK+YPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk
NGYzMTgwHhcNMjYwNjExMTUwMDM2WhcNMjYwNjEyMTUwMDM2WjAzMTEwLwYDVQQD
EygyMDg3MGU3ODkyM2JkN2YwZDcwN2NmNzEzNDg5MDNiYTFlZjg2ZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK8n91/9fsICYnEvV1QYzU6+U2RA
bMSjDEM1fuF/oRNdU645hVTsiUpKT3O2HLAeeKOpZ/f4a1gfPuy61uDJ5f6OBU16
0ts2ra/G7+1/hDjJr6WQNA6goCShvTfDQ+ZiaSMkvLnvcLUl7BCi5B3wVlfc0oFt
gUlXDBcvOAV146fSlN+7/ysUE/33KbYIGW6rq9uD03KmaM6NX14IS3OBHZi0BZez
0XQVSp3hNNWezUuqjZ7rA7QGLWngruxsVu+pSwJ7BxrpnnS5t3+jTbIYQkr+2dmk
kPjlvSLgpT2dHkvpblj0ST5J7/GpUav2qWBIoP3MhaNpsRwvMa1aHcB11QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCHDniSO9fw1wfPcTSJA7oe+G7GMB8GA1UdIwQY
MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt
NjMzNDhjZGJmMDI0LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0
LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIrbYs1V
kMvBsSlC8nnmiDMY7/H9h9yuQfu3yQLlkk0HvUKJ9ThqpUAYY8B/ynPwUBOCO7IM
FzTHwFUkn/18N+XSlftl+P1D75Ct64FHVfiGUObA7NybO8KbsNIAUt3NPMxSwJ38
Is0mMpFNz+4ub74wlCX0tNKoKRnjZZLcAkVtLrcP/K+X64Mzw4JWqEXDh291iJdU
c84txH4pYTuNd9xa81BqovcN0kOrU9ycEh6NoWJIiIwwaeQnmq138xEau3zEtPsE
LgIsHNZx/vbjj6OBmXQV1SPc9O2Sh6pE7Bk80cVGQz95fDOUUuJQO41Qo44JAR94
gcNs09Rjg/a51Q==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:57:11 2026 by rpki-client