
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
File: J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json)
Hash identifier: uCHinOn/nRuWnNpDuygw0T0goIf3lP/JnNPjDt3reZA=
Subject key identifier: 96:38:3E:9E:41:0E:6B:DF:9A:2B:E8:CC:5F:3F:AD:D4:BF:8A:69:45
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 019EB68E31604FBBCE39044AB06AFEB2C2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
Manifest number: 0EB9
Signing time: Thu 11 Jun 2026 12:00:32 +0000
Manifest this update: Thu 11 Jun 2026 12:00:32 +0000
Manifest next update: Fri 12 Jun 2026 12:00:32 +0000
Files and hashes: 1: GVQM2fhWiAA1vaxgASrTGcM3NXg.roa (hash: qmify2cyOKHa4dPo1mFD43WN2hWzTZnDzaDfO9d6xj0=)
2: ILvL_afGBYqG8JBvyBOjNle1meU.roa (hash: FpoDCBUDymC1x5/mCiLH7CBZidOwMMBt/UJmW1vuU7I=)
3: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: 0RfhpMfk6hMnD/LYqc44MiuC5RpAalzt6K5khnRLjA4=)
4: MPe538bYpU8guVH5-86a4aQXXWo.roa (hash: r21A8jzF/GtpSrRHEgbvnBNm4NeKTp/0Wc3vPf+aR0s=)
5: MuaQsZpK85YLuwzSbgYhrnef72s.roa (hash: bdvuUkwflnueXXPnGyW7DncDokUJqOrDxizqAK6rLFQ=)
6: OIf5o3TuUaTGCWR1GyZJ8zyr1DU.roa (hash: Id91w3MsfuN+1fBJYgr9h61G7NpSD3kW83pc4b6qwCg=)
7: WRGpi7HwRnNDY3PI2oGKfGXaKgI.roa (hash: LFMATL8ZKYUpfJmXC93H6TmCx5lCUajaaJNv71P4C9w=)
8: _jP7HoE6xSVGQtiue_1k6La3slE.roa (hash: lNbPgbdDGD01z1JbLvmrn22+TQAyCpvm6Vuj52vD43Q=)
9: c_so8ZAo99s903KgX6q1bd_ayQY.roa (hash: qk06hv+tknoEnl/WncFnILZI0t8DHr6k+PuJJrOlT6s=)
10: l-al53GTn2U3_oux5KceKXfKkVM.roa (hash: VwmHIGN92Mm8C6FgCJrZ5LFSIkTya2qnm7OsmBE8eyE=)
11: nI8D-AwVuUhZS_gQCeDbQORZ77k.roa (hash: zi3GVIgGpTx+NCwINdJlKP5OnWevf0ir3DqN9LIx3e8=)
12: zsjg_uNpmMmffhFlupWb75dFOf8.roa (hash: HE/uSl70PUzAoBt7ot8n4K8Er2xcIutkfXUuzgDxPFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:31:60:4f:bb:ce:39:04:4a:b0:6a:fe:b2:c2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jun 11 12:00:32 2026 GMT
Not After : Jun 12 12:00:32 2026 GMT
Subject: CN=96383e9e410e6bdf9a2be8cc5f3fadd4bf8a6945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:11:d4:50:d7:b8:e3:ee:82:bc:3b:d1:a3:
bf:72:20:95:c4:54:0a:43:3f:2e:90:ab:18:7a:a2:
da:4c:5d:8a:64:81:64:94:0b:c1:04:ce:7f:9c:74:
ec:53:02:07:14:f0:fb:ac:1c:ce:16:cc:4e:d6:44:
11:29:10:8a:7a:0c:3d:14:04:cd:2c:79:c4:d0:97:
f3:ed:0d:ce:a3:f8:ea:c0:cb:0e:2e:68:ed:e5:d7:
85:a1:0e:37:f2:9d:28:ff:bd:73:f6:08:46:91:ad:
a5:46:d3:a6:64:61:0c:7c:72:40:c4:fb:8a:02:b5:
9d:01:7c:29:73:5c:94:a0:9d:31:a5:6e:3c:dd:22:
66:1a:25:1d:fb:a4:38:a4:09:57:c9:08:9a:ff:30:
fb:e3:d3:36:04:b7:ee:c3:7b:00:d1:09:7d:95:c3:
7c:fa:08:4b:d4:09:9d:cf:13:4b:35:ca:30:e1:99:
63:f0:39:9b:f5:2f:1e:21:ad:87:75:db:d4:06:eb:
06:ae:fa:9c:18:97:f3:37:50:7a:e2:2b:5b:8c:2e:
fd:ea:11:14:9d:7f:81:cf:f2:06:0b:e2:0e:5e:54:
ce:66:ea:bb:c6:9d:f4:e9:45:58:67:ec:41:09:53:
d3:16:30:25:a0:a2:b9:fc:d9:11:60:ea:6e:bc:d6:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:38:3E:9E:41:0E:6B:DF:9A:2B:E8:CC:5F:3F:AD:D4:BF:8A:69:45
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ba:e6:10:d0:ee:3d:c6:35:6d:4d:4a:84:ee:3c:54:b6:f6:
a9:f0:ce:5a:99:ed:6b:3a:31:de:06:1b:62:07:eb:f7:e0:9c:
5b:2d:4b:a9:b4:7d:5f:55:ca:b2:39:df:5c:f8:c4:b5:3e:6c:
83:1f:bd:ac:b3:da:88:2f:f3:30:0d:73:8e:7e:2a:3f:75:11:
5c:12:77:af:28:52:ec:16:97:bc:37:c9:03:41:33:e8:ab:9b:
bb:ca:92:10:9d:5e:a1:2d:d4:e5:f4:f6:4c:b6:2b:e2:a3:5a:
49:46:e3:26:70:f4:de:67:89:e8:16:69:25:2e:25:8b:83:ef:
8d:76:3b:5b:c9:dc:46:07:88:0d:6d:aa:8a:fb:47:90:25:65:
75:e2:be:d6:b8:4a:61:2e:76:6f:91:b2:ca:41:a6:d9:5e:41:
a5:26:75:02:f8:c0:78:7c:61:b3:50:98:b7:e7:8b:98:02:c0:
0f:f0:1f:26:25:15:64:48:48:29:31:6a:3c:66:93:76:22:e4:
16:fd:9a:68:8c:f0:39:ea:76:2b:24:a5:9c:ea:f4:a9:c4:61:
82:27:e9:ca:7f:70:c4:9a:8f:9c:f2:83:45:46:1f:cb:ab:fe:
19:bb:e6:9c:c9:b2:e1:93:39:e4:bf:65:52:b1:04:3f:de:ac:
b3:06:9c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:50:27 2026 by rpki-client