
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
File: j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json)
Hash identifier: 0L8c/NM6yB+4g9QntMzK3ByGGLlw12lzU0g86BIH5Eg=
Subject key identifier: 78:46:13:20:01:3D:98:8C:47:05:0A:EA:80:74:44:9B:C5:E3:4F:B4
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019DE52244F405951525D87C3497B3E2AB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
Manifest number: 147A
Signing time: Fri 01 May 2026 20:02:01 +0000
Manifest this update: Fri 01 May 2026 20:02:01 +0000
Manifest next update: Sat 02 May 2026 20:02:01 +0000
Files and hashes: 1: 0wV5g4EVRhgoKZWB0l4u4NCoebc.roa (hash: x9f29Pup33svef1VwpyK5xHxGxbt4thAXHF+Oyzm5bM=)
2: 4CZjW2K05gjTWVSm5HCC1YhuGFM.roa (hash: YUklznotWSasG+NPzST/0VXBFbDg9f0JqUM1FXRqVpI=)
3: 5h6kFRQXVVJn7vc_7-eg5_4Zx1M.roa (hash: 7n1WW6ereLymBeWVUlfPXwnYkLa0bK40qeD55u+vgDQ=)
4: 7Y-dcG1ts9XBr6M2neYbzLiBIE0.roa (hash: fa0hkAmckPv2az2FBEeIwpMqvvWjXXDG2d/nbEmckOA=)
5: CRGHJQj4lZiRn9TWiVjqPSQiI_s.roa (hash: LhY2OVqSV8kBseD85misaxGvwCTS5KLte3vYc1JA8OE=)
6: Dja78ruX4o7MO5yCfGzKSVMuXBo.roa (hash: 2yO1oHN3Azbfysz52/wvWwgKaNjr723EJVJe38YhZHk=)
7: JKAnK2en3odHT3-Pq6Exoze1jvQ.roa (hash: qU0dNd/ElxDWuoJrBPmPXPS+v87iZmcyX83uBVkJOdg=)
8: MPO8HbcFWMOeE2iBKVv-IWpWPxk.roa (hash: CZOBmBd1hbGjq3AqK4WkUgTLjxnhfpm1Rc52Dylmg/w=)
9: MpLOwnyu2anoLVlED_5oFKlDxB4.roa (hash: 8o1FX8BBhwIHnjoaP2OfRA6v8Ril1Bvaqiop7L5Ytzg=)
10: OY4yu33kRTHXIDvS06hD5g3ZU1I.roa (hash: MO3P51CXchSgKn4Y84H+Th8p16bdsxGFK2fbYdmXi5Y=)
11: QsaJUx8IySwAVJKdDaCVAV_WeG8.roa (hash: vu/oFsB63dNb0RilkgFUkxuOJfKjYLkKFMHoBUDzCU4=)
12: RQYIGLLVSIftKc72IB8Q5fGhyLA.roa (hash: du2s9GjbjtVis5okEfEtz3NF056oJiz3iauob6CPdOw=)
13: S2NE7ivxA_6uSF3faj9xM7QLVgw.roa (hash: qDphZ//ssVu7S99t/OF3SeD4wpZPqNUE9vHt5D6PaMI=)
14: W_DUPmMWXfw6_1KwWt3waPIqT-s.roa (hash: cneq7hYbqTf+UiD+t4E82O4maYI9qUbQh2f/R56QLF8=)
15: imB7m_SSkD-EKaGcH3WYOVA3UFA.roa (hash: QaG4X81jQlLRNJJxryf942TxAMPUaQpIxGX6diK8mSM=)
16: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: P/+5BqY3ytfhXsTrwDkgsjNkjxznkvVvNBEXrTSPB/o=)
17: lLhmEw7IEMb-qUjY7M3kCd8cWOA.roa (hash: ynq1BksMwSLgFJR9WzfdR5gm2pKZhnJLRvt2UFC0YIk=)
18: rcJDPkI4eynfWrTLoSdqLg60fG4.roa (hash: EXzqiGJMATe2PwXCIjt1gE9L/khTBoqYQQscvLJnOxM=)
19: s1BOsr_SL1rErib0eleQtkSspyY.roa (hash: YIrdM89Nie4pypUTkAA2EhoG4aHCBtnPq36XIULi8J4=)
20: vTjdy81Ui1f2cDgZ1hxqEJxmLlo.roa (hash: VYtXHqRevYtaXeI9lQQ4d+QNrCRIHyo5F1ekiS2/Np0=)
21: yxBWMEqUTuUpppX4kQbNWZMUag8.roa (hash: GfoDixWxoGP9Yf1RA/HAN8eaFxjgurmqtoh7fzztQM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e5:22:44:f4:05:95:15:25:d8:7c:34:97:b3:e2:ab:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: May 1 20:02:01 2026 GMT
Not After : May 2 20:02:01 2026 GMT
Subject: CN=78461320013d988c47050aea8074449bc5e34fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:e6:cb:3c:99:e2:a3:eb:5b:b5:8a:70:66:
ef:5a:0a:65:ab:4b:08:59:11:d6:0e:7e:7b:75:e9:
7f:66:86:1f:e8:b8:50:8f:3c:86:d3:00:62:07:d5:
cd:d7:64:2f:22:67:6b:62:43:ad:53:ac:00:b8:86:
a9:9d:37:ee:85:60:0e:62:b7:a9:02:3c:ff:d3:c0:
b0:ce:be:a5:98:58:cd:aa:1c:ae:08:50:6f:e9:90:
b5:3b:e8:69:64:74:e3:ca:61:61:06:63:39:ee:e0:
94:63:60:ef:36:3f:1b:a7:da:43:b1:65:27:e4:6d:
a6:1a:0f:50:a6:4e:1e:4b:96:eb:16:d7:c9:d3:c3:
be:fc:d5:d6:47:a2:0f:a0:77:3e:84:31:8b:74:70:
9c:da:60:1e:75:b2:02:7d:bf:ca:ce:44:80:dc:2c:
cd:60:7e:c6:9a:7d:1d:b4:d5:68:78:4d:eb:2b:d4:
3c:35:ad:62:0a:d2:85:5b:d7:f0:66:15:aa:4d:4c:
c0:92:ec:71:6f:f5:e4:29:17:f3:95:50:08:bf:6a:
69:c3:9b:5a:16:18:1a:35:7b:af:96:ac:28:f6:90:
ce:46:50:ec:37:8f:7d:a3:a9:dd:47:80:65:82:59:
64:e7:19:8b:44:09:bd:8f:4c:95:e3:01:2a:d9:df:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:46:13:20:01:3D:98:8C:47:05:0A:EA:80:74:44:9B:C5:E3:4F:B4
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a2:93:fa:3b:c0:01:ec:94:bd:3a:00:2c:76:3a:66:27:57:
39:e4:23:9b:66:7a:9b:ac:bb:aa:f5:83:f7:84:ba:dc:81:be:
1b:04:2a:9d:ac:1d:21:f9:bc:ab:19:8c:dc:21:b4:40:c4:17:
dc:0f:a3:5a:b0:a2:cb:f1:ef:54:da:ed:0e:82:2e:b8:ac:18:
ff:6f:76:53:04:ec:c4:6e:59:39:b0:66:69:7b:6f:9c:69:c2:
5e:ac:67:1a:5a:8f:89:5b:03:11:cc:cc:66:20:83:0c:4a:4e:
40:4a:7a:e1:26:4e:1c:7c:5c:b0:88:cb:74:d5:8c:20:21:d9:
7f:89:a7:29:77:72:90:e1:14:79:01:04:54:48:fc:bb:9b:51:
1e:e0:32:fb:98:0a:f4:af:cf:eb:c1:3f:e1:ed:18:c0:c1:72:
2b:4d:62:45:60:00:85:9f:18:68:c6:ec:3d:01:ae:56:ee:a8:
ad:ad:76:02:b1:11:fe:fc:bc:54:12:3b:e6:b1:02:e2:9e:9b:
cc:34:69:c1:b2:99:10:0d:01:3f:01:74:d2:65:2b:86:8b:38:
63:48:4f:47:70:ef:23:5b:c8:68:14:ed:f1:3a:3f:e9:c7:55:
3f:15:7c:a6:4f:71:81:cf:35:75:5e:52:7d:38:8a:54:84:27:
cf:59:64:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3lIkT0BZUVJdh8NJez4qtHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2
MmU1NmUwHhcNMjYwNTAxMjAwMjAxWhcNMjYwNTAyMjAwMjAxWjAzMTEwLwYDVQQD
Eyg3ODQ2MTMyMDAxM2Q5ODhjNDcwNTBhZWE4MDc0NDQ5YmM1ZTM0ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+HmyzyZ4qPrW7WKcGbvWgplq0sI
WRHWDn57del/ZoYf6LhQjzyG0wBiB9XN12QvImdrYkOtU6wAuIapnTfuhWAOYrep
Ajz/08Cwzr6lmFjNqhyuCFBv6ZC1O+hpZHTjymFhBmM57uCUY2DvNj8bp9pDsWUn
5G2mGg9Qpk4eS5brFtfJ08O+/NXWR6IPoHc+hDGLdHCc2mAedbICfb/KzkSA3CzN
YH7Gmn0dtNVoeE3rK9Q8Na1iCtKFW9fwZhWqTUzAkuxxb/XkKRfzlVAIv2ppw5ta
FhgaNXuvlqwo9pDORlDsN499o6ndR4Blgllk5xmLRAm9j0yV4wEq2d8RuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhGEyABPZiMRwUK6oB0RJvF40+0MB8GA1UdIwQY
MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt
YjBiMzVhMzRlMzg4LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4
LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqKT+jvA
AeyUvToALHY6ZidXOeQjm2Z6m6y7qvWD94S63IG+GwQqnawdIfm8qxmM3CG0QMQX
3A+jWrCiy/HvVNrtDoIuuKwY/292UwTsxG5ZObBmaXtvnGnCXqxnGlqPiVsDEczM
ZiCDDEpOQEp64SZOHHxcsIjLdNWMICHZf4mnKXdykOEUeQEEVEj8u5tRHuAy+5gK
9K/P68E/4e0YwMFyK01iRWAAhZ8YaMbsPQGuVu6ora12ArER/vy8VBI75rEC4p6b
zDRpwbKZEA0BPwF00mUrhos4Y0hPR3DvI1vIaBTt8To/6cdVPxV8pk9xgc81dV5S
fTiKVIQnz1lkNg==
-----END CERTIFICATE-----
Generated at Sat May 2 01:33:33 2026 by rpki-client