
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
File: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json)
Hash identifier: m1+gaPqvFvw8pU8gr66kjs2mfpH7Smnl/jSDp+pixn0=
Subject key identifier: CB:C7:57:A9:74:BE:AA:C5:A1:F5:A4:FC:E2:66:E5:46:72:C7:41:4D
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 019DB16A81B43119199F9671B56098F785C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
Manifest number: 18DA
Signing time: Tue 21 Apr 2026 19:00:40 +0000
Manifest this update: Tue 21 Apr 2026 19:00:40 +0000
Manifest next update: Wed 22 Apr 2026 19:00:40 +0000
Files and hashes: 1: CE6rRh7gwkNwQsNCEV_5-qvby8o.roa (hash: +C6crj3tlveY40cfyaDLAmJKc2kjvGSJAnx+Tun2pBQ=)
2: H-Z-59qkp7uHQPcWeenVARkWiac.roa (hash: HKW7RkaEKR+tAOc8fjxLJQH13xKLm1JBXk6SPdfsZ20=)
3: J7hqwzNBUJIFCvPHnt3UCUaIkS4.roa (hash: dwuiTVtxcw0Gm8ehWtdolENkQjfHnVWwxpd27Y3PhYA=)
4: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: IGWe2mtbqY6mGCMvHCMiRLh/O9Au2t3R4CAAH3cuooA=)
5: MjvomoUdbRCYMRTivd64oJucyR4.roa (hash: cQeTekUSkTsAQzZ5llLXfmDS9liZjdYx7jCgTSy2Qs0=)
6: dwe_m7iK2njmUFFGe9nnrN8FZV4.roa (hash: utaiyLTsrEWxNDIzyZ7TNXdP2ryHcGA9G92URVMLgOY=)
7: ixjloOI87OkWVNhgbhDEEFBTJ_A.roa (hash: cx+C+iENlLKYVwuPtzW+PgZZj9Jz/VMG8suoQFDv4vY=)
8: j2qKFrWfusxDiFzkFOC9pNjdNeM.roa (hash: eedi82Numcyo5s6BIiJHhclTJ6KJqgbKjG36ZSW5eFU=)
9: m3RaVncm_gBlS4tVezr7XBZHrR4.roa (hash: NCcn02MU0AdzNYn2EHJlZXzwGScb4dWUGw8AznxeOaE=)
10: pxvwZ83GQsd2xDFU232Uh7bybX4.roa (hash: wTQyNgjrlPNNWRBqCTTjBvEsBojPl8WoXlgNibVwY1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6a:81:b4:31:19:19:9f:96:71:b5:60:98:f7:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Apr 21 19:00:40 2026 GMT
Not After : Apr 22 19:00:40 2026 GMT
Subject: CN=cbc757a974beaac5a1f5a4fce266e54672c7414d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:cf:c5:5c:4f:98:ed:95:56:86:c2:55:b8:
e8:4e:02:8d:28:0d:95:a9:01:d6:22:7a:3e:2f:99:
97:c1:1e:0e:39:c7:00:93:66:f2:6b:82:c3:2c:e9:
b4:bc:fa:ca:cb:32:91:0e:41:03:56:a8:11:48:e3:
de:af:27:1a:1f:c1:cd:8b:2b:55:62:e1:76:74:6f:
45:3c:26:31:a0:30:47:d1:c8:1c:21:75:8c:c6:2b:
35:c3:f3:49:90:b0:a1:c7:c7:18:6d:c3:c6:ce:da:
0d:51:54:b4:81:c4:40:72:87:8d:0d:6d:a4:25:22:
36:4d:09:35:73:d0:b1:1a:bf:34:9d:c8:a7:47:1f:
cb:1d:71:1b:ee:d7:c0:61:aa:fe:0e:9a:7b:fc:df:
8d:7b:20:a9:0f:a7:69:70:7f:7a:61:c4:42:f8:2a:
bf:72:09:16:47:5f:87:1a:59:3f:af:4c:6b:31:6a:
00:c4:66:ae:75:54:ea:9b:fe:25:bd:52:b0:ae:84:
06:3a:18:ba:f5:69:b7:b5:d3:82:37:de:5f:92:8f:
1e:8d:3b:34:7b:82:a8:a4:f2:5d:a7:dc:c3:ba:c8:
05:36:b6:9c:7b:1b:5d:d8:cb:9d:4e:d7:c8:dd:c1:
1e:19:99:fd:94:f6:d8:96:d3:57:3f:58:63:de:56:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C7:57:A9:74:BE:AA:C5:A1:F5:A4:FC:E2:66:E5:46:72:C7:41:4D
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e2:55:67:bc:0f:a9:f4:d7:6f:5c:4c:0e:da:91:4c:9b:5a:
f7:bc:5e:80:6e:50:d9:37:1a:af:b1:f6:5b:0a:d2:14:85:24:
94:43:9c:cb:58:79:e6:29:46:4f:83:40:15:ed:05:62:fe:e2:
48:83:f8:3d:07:02:82:3d:69:40:db:f3:25:cf:f9:e9:7b:90:
55:db:a5:c3:b9:6a:e5:f3:6e:c2:8f:8e:21:43:84:13:9d:84:
db:bd:15:81:79:c2:07:1f:27:3c:af:72:9e:89:9b:6c:0e:19:
48:f9:44:82:95:fd:e3:b5:2b:bd:ab:34:c8:58:76:37:48:5a:
22:00:6d:43:9e:3c:91:5c:f4:1e:44:a0:50:17:c9:22:d1:75:
20:af:4d:5b:e4:a9:be:f9:40:02:6d:d5:27:05:ad:56:08:99:
69:d2:89:84:0a:e6:b3:26:3c:f6:6c:3e:c8:da:3e:f0:89:11:
05:aa:80:c7:59:0b:6c:2d:b0:99:5c:bd:49:8c:a1:4b:e6:bb:
f9:26:1a:c9:90:35:1c:12:7f:86:d7:78:b9:e8:02:6c:b9:c1:
6f:e8:b0:52:b0:53:d4:f0:51:51:b9:dd:d5:de:70:56:cf:5d:
3d:ba:57:7d:82:e3:21:14:3b:4f:89:c0:56:59:7c:22:c4:fa:
3a:27:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:01:48 2026 by rpki-client