
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
File: k-JyYRE58V0DfXpL5UVpbNKFOGc.mft (raw, json)
Hash identifier: FvvKM3eo9XbKkHR9tvqyiJ16UzF/HqBpV9DcyF5yk54=
Subject key identifier: 22:96:37:5A:24:EA:84:6D:63:9D:F9:BE:42:BF:3C:F3:9A:87:DA:5E
Authority key identifier: 93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
Certificate issuer: /CN=93e272611139f15d037d7a4be545696cd2853867
Certificate serial: 01A13C6E7C9DC27B9DC6AB78182B4798B045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
Manifest number: 025C
Signing time: Wed 14 Oct 2026 22:00:36 +0000
Manifest this update: Wed 14 Oct 2026 22:00:36 +0000
Manifest next update: Thu 15 Oct 2026 22:00:36 +0000
Files and hashes: 1: 4g2sjyOA2S88ULGM_X6L9fja_a4.roa (hash: T/G8ygcKFjJNJsjuU7faDGLDHIo+LXS8+f+JHgj88Xc=)
2: 6_HtVCNf0Z8RR7WQweJmunkcFhQ.roa (hash: H//sNvbW8q6Jr+E30OLRetMY0kia9eUAQ2KhFNgiTUs=)
3: 7n0wkQwarTtnYv8PrRiMrWmkikg.roa (hash: dsJKZ1TCZYVerK75Wiv1ffLxPP075w9GEHIB+oUlOx0=)
4: EhpBhJARc4X2eG8NnhZ_KCq4Tqk.roa (hash: S4p02xann0rC2wLhbi5Psq0nb1Jxkjtlkr7kCAMN7Kc=)
5: K-KFv2ywyMppzBzTy_lEtojdLTU.roa (hash: 28NmMoA3sjhuKkfN3w+6Un5F6/GD1m7hb06udz3zdRI=)
6: OS9El_lE1YFidGkD6u7b5PW_Swk.roa (hash: kc1xeHQSX9yaoh8FDTkRuRX1sg9TtwB9rWtzmmLQbkU=)
7: RA43K4xHLg-UdXvnE5BBpylAcLE.roa (hash: fhI37DL7Mkohtwdyy2ionkNQqG8nPhswdJI9hVbypAg=)
8: WRfWp6HbqiLrJdTcEFqGTR_haxY.roa (hash: zRStM1z0fS/dDt32gvvFhDITrhGZhwjd4CFo2EuaBzY=)
9: abZqCK-5KuH2tfKsI4SD5xjvWzE.roa (hash: GEORyf1vDmMauAzxfhABnWujhX3+RLKPCLKT2awN3CE=)
10: cujgpcZMo-u6-uAPJgjn05vZZY8.roa (hash: /gwhlQJjmiLq2vNQ7oIXxqrvTIMx9w5D/yDlNU/SfBg=)
11: k-JyYRE58V0DfXpL5UVpbNKFOGc.crl (hash: jzVxxD9KEy7WCcwmyS2Kzm7w/ORQLMFm9UAz8QOFgCU=)
12: zuanRU6GjD_pKM_NpLif7F2dutc.roa (hash: Iwopv9pLKL4yIGea+CD2F7DsAC5y9wfK3pZKzWTqDe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:7c:9d:c2:7b:9d:c6:ab:78:18:2b:47:98:b0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e272611139f15d037d7a4be545696cd2853867
Validity
Not Before: Oct 14 22:00:36 2026 GMT
Not After : Oct 15 22:00:36 2026 GMT
Subject: CN=2296375a24ea846d639df9be42bf3cf39a87da5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:88:ec:22:00:09:f5:28:81:e8:e2:33:c6:
6a:58:0f:86:88:68:df:2c:a6:60:59:90:08:8b:64:
52:1d:b1:a1:9a:72:aa:63:06:9b:14:c3:4e:10:2b:
7d:c3:15:e6:99:ca:86:78:f1:a7:3f:8b:ef:a8:2f:
07:38:de:f7:c8:6a:b5:ae:55:5f:5f:82:45:ec:fd:
57:66:aa:dd:43:3b:5d:5f:33:14:59:3a:ed:ad:d5:
b0:54:fe:f7:c9:49:48:2f:7b:68:0c:e4:93:84:18:
18:96:53:42:85:8e:06:dc:09:1f:52:21:05:25:cb:
b3:5d:28:73:cb:71:3e:fb:c7:8a:3d:d4:1e:0c:05:
99:f5:33:40:83:c9:4a:b6:e9:3f:1d:bb:a2:9f:7a:
33:08:e1:3d:88:ba:5c:42:07:9d:3a:a3:35:49:08:
4b:a8:96:29:29:06:4a:82:34:0e:83:34:af:a2:5d:
24:9d:d4:3a:98:63:e1:47:cd:25:ef:04:0d:28:13:
db:23:e9:04:a3:9f:5a:dd:97:1b:5a:15:cd:d7:33:
f4:1a:45:7d:be:44:be:ad:29:a3:9b:75:4c:c2:01:
03:d5:44:7d:90:cd:e7:83:7b:21:90:f8:c3:66:89:
34:03:41:f5:cb:b8:d8:c4:be:08:2f:d9:2d:5c:19:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:96:37:5A:24:EA:84:6D:63:9D:F9:BE:42:BF:3C:F3:9A:87:DA:5E
X509v3 Authority Key Identifier:
keyid:93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:05:96:da:e4:29:eb:e8:d2:8b:24:da:75:2c:5d:9c:7f:52:
55:60:9c:4c:87:ea:0e:15:03:97:92:32:cb:68:82:c9:2a:8f:
5a:13:45:3a:a4:92:3a:1a:f3:e9:96:d3:10:44:63:0d:37:17:
76:42:3c:52:06:fa:50:4c:55:96:03:46:bb:f4:94:e4:d2:fa:
18:ea:78:06:9a:bd:91:cf:32:0d:a5:25:45:ca:5e:3d:e0:05:
34:d8:cb:7f:ce:3a:59:ef:bd:20:82:a7:17:2a:2d:f0:eb:c7:
a8:ab:4d:c4:4f:c1:a7:d9:75:d1:e6:5f:3e:d7:e9:56:7b:6c:
97:3a:1d:1d:13:fe:fb:bc:7c:4a:8e:7a:45:c0:cd:1c:58:ab:
42:be:da:9c:97:ae:63:62:c7:bc:10:cb:aa:b6:fc:10:12:24:
cb:f6:08:4a:12:9e:0c:38:24:30:e8:0d:97:8b:8e:1a:d5:fc:
86:8d:08:28:1d:60:41:e7:90:af:ad:72:21:ff:e2:58:e6:d7:
15:96:93:0c:33:18:5e:40:d3:ff:93:7c:2f:11:5e:9a:db:df:
b5:ce:5c:e2:17:28:c8:15:8c:64:81:ad:35:49:fe:70:f6:38:
40:cf:f3:85:c7:3c:40:80:fd:66:f0:85:2d:3f:b0:4e:3a:d8:
e6:9b:3a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:47:25 2026 by rpki-client