
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
File: raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json)
Hash identifier: rxisYaZSeQt9hGTBhOz/FqShmafuFGGFrVcIB+nLX0I=
Subject key identifier: 2B:E1:E9:01:DB:23:2C:7E:C6:67:16:8A:6D:A9:F4:22:34:FB:BF:BF
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 019CE6A3DFF02B081D04DF7591F9AB8359F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
Manifest number: 18A2
Signing time: Fri 13 Mar 2026 10:00:25 +0000
Manifest this update: Fri 13 Mar 2026 10:00:25 +0000
Manifest next update: Sat 14 Mar 2026 10:00:25 +0000
Files and hashes: 1: 6g2jAj3wPlnIocB3gv_q01JRNMI.roa (hash: BoIPgQYmO7xfoT6Wc1Gklqbq8ldWVr0gxcD6FGVAfrw=)
2: J78VM0qajB7rh9yu3sFqYPoFQ5E.roa (hash: +P584eQDqt5VMIbzVnH+2JMF7g7sBvRvoJsnsuzsctc=)
3: LCiiiyNl3fmiTu2hqQ6fBJ-TTbU.roa (hash: sFqRolKm0Znj/M6WIHuOprIWndPgzew2UV2ZOuaE3Bo=)
4: Mg5spav-Aj8VvIh1-2RHRBIttEU.roa (hash: SH1KuCQgQ4RFoHS3pbRrLNbrSAXCyG9eS+C3l6//Hf8=)
5: Oz2typdgzDQc0ctUseKKMFhx06Q.roa (hash: syifUOQ+Jq/Hybnjzbf9hzjzGqX0Taf7r/ZLA0VrpP0=)
6: fMF9qnlP4WB5LHh5V8LwNwc9f4Q.roa (hash: fmzVayjcNIPJoq0/A+Ybi5cj066xRm3fDk6Fawjmxcg=)
7: hMCrIUKHXGHOtkHZ8Y6eI3UIeCw.roa (hash: rMGJFYfVplpRpoCAdt4v/1BCKdLOOcSLzsmFWHhqGnQ=)
8: lPiHeORLKEKfujHMYKmMKgjplak.roa (hash: jBAhlOJ7x1dzG58s1VItmsDLFO+pFQTxwtJmgsn2S2o=)
9: q0e2mOxIUzAfYPRIbushYUqYPEk.roa (hash: mjQc3SMPF6rvuC90lgX5o3Yun+cCb8geikGE6fcJ2cw=)
10: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: COKWU/RRB3n5Nk7GOojXMXzGYjKuajPcV40MOkR9xQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a3:df:f0:2b:08:1d:04:df:75:91:f9:ab:83:59:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Mar 13 10:00:25 2026 GMT
Not After : Mar 14 10:00:25 2026 GMT
Subject: CN=2be1e901db232c7ec667168a6da9f42234fbbfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:1e:6a:7a:63:3e:ec:2f:4e:ed:56:ec:c6:
fc:a5:28:78:fd:38:a6:3d:0e:ef:0c:42:39:30:38:
84:af:b8:e9:67:a6:c4:a4:1b:d6:dd:13:f9:e7:c2:
90:cb:f3:32:73:04:e9:2c:52:ba:a6:ef:0a:d9:2c:
8b:b4:f5:22:46:8d:1e:10:58:68:55:f6:b3:a2:28:
f9:b6:fe:4b:e2:e5:1d:c5:fd:62:99:b9:8c:d4:22:
69:98:6d:57:40:2b:86:f0:ae:ac:89:61:e7:e8:4f:
43:bb:50:04:1d:98:08:5f:16:30:b1:f7:84:ec:0a:
95:63:ab:06:bc:59:23:06:b9:d8:dc:a0:de:d4:8e:
de:2e:6b:1a:5b:f6:24:92:11:23:f9:f7:fa:63:bd:
3a:25:ac:68:5a:85:64:81:e0:ac:b5:14:6e:92:96:
ca:cd:0c:71:d1:30:6f:27:f0:d7:00:64:4a:80:d1:
08:48:ab:77:7b:25:e6:52:7d:76:c1:16:24:ae:a6:
4e:b1:74:d4:76:fe:f4:73:8f:50:1e:5c:5e:90:2b:
50:e3:a5:0e:ee:32:0e:a8:f0:c9:bc:69:59:4e:1e:
ff:51:fc:f0:05:bd:73:13:fc:55:b5:77:80:69:f7:
1c:57:7d:75:7e:43:be:00:62:3f:ad:d4:99:43:78:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E1:E9:01:DB:23:2C:7E:C6:67:16:8A:6D:A9:F4:22:34:FB:BF:BF
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:dd:6d:c9:d4:5a:72:50:f5:9f:96:c2:ac:05:b9:28:95:a7:
cc:4c:fd:ee:fb:5f:65:19:d5:40:0e:fa:87:99:53:4f:55:4d:
be:bb:12:46:73:da:d3:e4:30:8e:1f:9a:48:fd:17:61:5a:3b:
d9:47:df:eb:0c:53:bb:c1:79:d1:ae:f6:fc:42:d6:37:20:e5:
e7:60:2a:34:9b:74:b3:83:e9:f8:66:04:6d:d6:94:59:ac:6d:
21:54:01:14:1b:8e:e9:da:56:4d:a3:01:5c:2e:2d:9d:bc:04:
72:e7:80:3f:55:51:21:d6:70:bc:59:d1:eb:90:a1:13:83:7e:
c3:1a:28:dc:73:19:33:0b:ac:37:d5:aa:1e:87:f7:e7:cc:7f:
4c:28:bd:ca:c5:99:e0:50:b8:98:66:fb:fb:a8:bf:65:95:62:
d8:8c:e6:e5:6c:41:64:b3:14:d1:d7:a8:04:9b:b4:e2:34:34:
19:76:ca:ed:2f:0a:39:27:35:03:33:d7:6e:96:4d:e7:c0:ee:
cc:64:9f:6b:64:0b:b5:16:38:63:ad:21:8b:8f:72:b8:bc:61:
fd:ad:0f:de:51:14:1a:9c:b3:a8:cd:7b:8e:1b:d0:d5:5d:eb:
10:66:bc:6c:5a:a5:e8:93:61:89:b1:29:10:82:46:ee:b4:2d:
ca:82:55:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmo9/wKwgdBN91kfmrg1n1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1
YTRkYTMwHhcNMjYwMzEzMTAwMDI1WhcNMjYwMzE0MTAwMDI1WjAzMTEwLwYDVQQD
EygyYmUxZTkwMWRiMjMyYzdlYzY2NzE2OGE2ZGE5ZjQyMjM0ZmJiZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUYeanpjPuwvTu1W7Mb8pSh4/Tim
PQ7vDEI5MDiEr7jpZ6bEpBvW3RP558KQy/MycwTpLFK6pu8K2SyLtPUiRo0eEFho
Vfazoij5tv5L4uUdxf1imbmM1CJpmG1XQCuG8K6siWHn6E9Du1AEHZgIXxYwsfeE
7AqVY6sGvFkjBrnY3KDe1I7eLmsaW/YkkhEj+ff6Y706JaxoWoVkgeCstRRukpbK
zQxx0TBvJ/DXAGRKgNEISKt3eyXmUn12wRYkrqZOsXTUdv70c49QHlxekCtQ46UO
7jIOqPDJvGlZTh7/UfzwBb1zE/xVtXeAafccV311fkO+AGI/rdSZQ3gW5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvh6QHbIyx+xmcWim2p9CI0+7+/MB8GA1UdIwQY
MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt
OWQ1ODc1ZDg2MzczLzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz
LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVt1tydRa
clD1n5bCrAW5KJWnzEz97vtfZRnVQA76h5lTT1VNvrsSRnPa0+Qwjh+aSP0XYVo7
2Uff6wxTu8F50a72/ELWNyDl52AqNJt0s4Pp+GYEbdaUWaxtIVQBFBuO6dpWTaMB
XC4tnbwEcueAP1VRIdZwvFnR65ChE4N+wxoo3HMZMwusN9WqHof358x/TCi9ysWZ
4FC4mGb7+6i/ZZVi2Izm5WxBZLMU0deoBJu04jQ0GXbK7S8KOSc1AzPXbpZN58Du
zGSfa2QLtRY4Y60hi49yuLxh/a0P3lEUGpyzqM17jhvQ1V3rEGa8bFql6JNhibEp
EIJG7rQtyoJVBQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 17:57:45 2026 by rpki-client