
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json)
Hash identifier: 8jsVpQz/eCWYJvgci/IO2y4BM3EwV7oNK+/0asMfbVQ=
Subject key identifier: 81:19:13:7D:99:C4:2E:3C:6F:98:A3:E5:3E:CE:80:F4:BF:B5:B7:C2
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 019CBFCD997E8B249C2EE7E0329B1F6BA6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
Manifest number: 144A
Signing time: Thu 05 Mar 2026 21:00:48 +0000
Manifest this update: Thu 05 Mar 2026 21:00:48 +0000
Manifest next update: Fri 06 Mar 2026 21:00:48 +0000
Files and hashes: 1: 3BxH_bEdWRum2rhs_55rh-xY-JE.roa (hash: L7QbNE/A+wkbmeuga30Pjc/Z4164/JddJVT41mQnxHE=)
2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: ZvH/MopcSJgMClb/M8EVBygaKYBz0iROY3xzGqgnStU=)
3: 7ejZ3K5XJXw42cK_JDpws_LBqPY.roa (hash: Y1PAS81Ngu/ibCqA+GXn0uait9upSnAxeVEYWJyyRbo=)
4: 9-ZkpJLZAxXzbNNccpqxr1yI3TQ.roa (hash: JAqKnj2bS/riQd9C2Ai/D19XD9DVFg+M8BKlm0uu5lQ=)
5: Ki5lgptZeKqxkVY1rSUS3fFpdNo.roa (hash: wCDh26IbseWW9odw6/4vFdpDTBtddnVSe0afNNR63xE=)
6: Mvc6dRwMPV0p3nS-xgeT1pSks3s.roa (hash: tEWtg/ml85Q9O/bjcJjCkBkPWgRPJZDdFKAGmtBJpW8=)
7: XcFzjI2uuV84oN4qh53dtgVk0G4.roa (hash: vDuNqlBbw47k7/TAAtk4TmMaBj19DDFnRfvi0NtLZ1E=)
8: XjB8pSYFTRWu3aeuPZfoCPdtSU8.roa (hash: clM1FhXerIaxDZVMbA4484QAmARB0GCCeaDtZ15BS4A=)
9: _CwOTtU3okI82pLwtmx5rCYmqBw.roa (hash: mdVcgR96055cvSGaX98e3jUXv5Q46o7z7n7mSva9LM8=)
10: eWht4CqsRozCLydJERnRuTN-Adw.roa (hash: rBx2jxtcduhOc94/W12cQD59jQKweQjaDhzj2mHD0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:cd:99:7e:8b:24:9c:2e:e7:e0:32:9b:1f:6b:a6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Mar 5 21:00:48 2026 GMT
Not After : Mar 6 21:00:48 2026 GMT
Subject: CN=8119137d99c42e3c6f98a3e53ece80f4bfb5b7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:e7:38:1b:a1:bd:19:c6:32:99:11:08:e8:
4a:7f:e3:09:68:13:07:5b:15:40:e1:db:49:b8:b3:
85:9e:24:0d:b4:42:f7:41:81:86:7e:44:86:c4:86:
17:45:5a:7c:a5:95:91:cc:78:b4:03:8d:07:ec:48:
cc:4d:bf:43:2b:d7:15:33:fa:c6:b3:e5:5a:5b:5f:
91:7a:e3:4d:39:20:b8:3a:af:0a:ab:66:04:03:b8:
36:11:e2:0f:2f:01:4f:11:58:85:1d:4e:46:b6:ce:
64:0c:15:51:e5:84:9d:5d:1d:c1:88:af:fa:94:e4:
76:c3:1c:17:65:8f:24:36:c7:50:ba:e4:38:6d:50:
97:3e:42:b1:0f:38:88:30:b9:00:ef:82:ab:af:a1:
9e:99:8f:09:14:85:cd:55:e0:a9:a7:87:9d:ac:39:
ea:1a:f2:77:c3:c4:a3:b4:12:d8:11:59:ce:63:36:
16:01:a8:d3:25:64:32:da:3f:07:78:05:31:0e:63:
2d:f0:d9:c6:34:99:ef:34:cc:71:f4:a2:aa:f9:81:
9f:00:6d:5e:1d:84:47:e0:e3:87:57:a3:b6:c9:68:
d2:09:fa:ba:0a:65:1a:67:1f:a2:23:3d:97:2a:e5:
1c:4f:63:c7:77:27:02:af:6d:6b:e1:e2:80:56:c1:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:19:13:7D:99:C4:2E:3C:6F:98:A3:E5:3E:CE:80:F4:BF:B5:B7:C2
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c1:7c:55:ee:9a:6e:8e:84:3c:0e:13:53:e5:6c:c7:36:f6:
1a:1c:d7:07:3e:d1:2e:e7:28:0f:a2:5f:9b:0f:d5:16:a1:52:
09:87:77:50:de:18:61:66:84:76:54:97:82:df:d8:5d:bb:86:
d2:35:2e:2f:7a:34:d1:d3:bd:17:8e:fa:18:d4:fc:72:16:06:
a4:16:26:f7:0f:ce:49:92:d1:73:11:af:b4:c3:5a:f7:fb:b7:
97:85:09:25:d8:22:3f:d2:33:84:f6:f5:f9:7b:71:f3:6e:7c:
7a:f8:6a:12:0c:76:00:8a:37:68:52:0d:39:2c:8b:fb:19:ab:
ae:1b:36:22:2e:ed:30:bf:88:11:71:4b:ec:3f:03:e4:88:06:
7f:d0:41:d1:8b:af:09:b4:8c:66:61:73:98:24:f3:67:c3:ec:
02:ef:bd:60:25:21:84:46:67:b3:8e:30:ca:d0:b8:5b:08:02:
70:10:9d:02:13:9f:e0:3f:83:59:df:d0:59:31:ef:32:68:b7:
26:a7:63:3a:be:14:dd:3b:a1:d7:fc:3e:c0:db:3c:3a:77:9f:
ef:e9:61:9f:b5:0b:71:bd:32:c3:ae:f4:0a:8e:41:a2:c4:07:
1d:6a:5a:78:d3:60:f5:8e:cf:3a:08:85:ed:10:ae:42:4c:d8:
cb:52:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:21:30 2026 by rpki-client