
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File: EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier: myyITUO+UEPz9PsVDjLBs6iyIdVqCzNNbN3VS0pbsRs=
Subject key identifier: 32:FD:76:9E:DA:7F:14:D0:75:62:57:26:D5:2C:73:87:F2:D2:AE:58
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01A0C2FB550D9619AC22FE8DA25283093561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number: 1AB2
Signing time: Mon 21 Sep 2026 08:00:46 +0000
Manifest this update: Mon 21 Sep 2026 08:00:46 +0000
Manifest next update: Tue 22 Sep 2026 08:00:46 +0000
Files and hashes: 1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: paam+M7c/e36v6ImHNKJDFlrQriy1hUqcNosqD886tk=)
4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:55:0d:96:19:ac:22:fe:8d:a2:52:83:09:35:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Sep 21 08:00:46 2026 GMT
Not After : Sep 22 08:00:46 2026 GMT
Subject: CN=32fd769eda7f14d075625726d52c7387f2d2ae58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:fe:a8:b1:94:ff:9a:24:a7:71:12:15:86:
e2:cf:8b:0e:dc:14:df:b6:2e:6a:53:79:96:e8:67:
69:81:db:5b:2f:21:fa:1e:c8:a0:ab:d8:d4:b9:3c:
91:80:76:6f:ff:48:99:68:7b:a7:da:25:ac:35:33:
7e:01:73:29:8f:67:63:29:30:13:c2:c3:82:7f:1a:
b2:16:6a:06:91:d8:18:b5:34:74:a4:6a:e1:8b:9d:
31:b5:b7:2c:6d:4a:0b:f8:16:c7:39:0d:ce:a6:b9:
02:36:df:24:99:c0:d7:3f:fa:96:ac:1c:19:d0:b1:
ed:5f:c6:36:bd:6a:eb:7f:c7:a6:de:c8:98:4b:6a:
05:ae:a5:22:41:1d:0d:6d:d8:0b:0f:b1:42:c9:f7:
03:8d:61:fa:0c:df:13:a8:20:fa:a5:b8:b0:85:51:
4f:eb:f3:68:cd:43:de:a6:95:6d:0c:5b:02:63:eb:
32:6a:2e:91:3c:2b:61:4d:a4:28:5a:54:ef:5c:96:
c3:76:fa:56:da:a0:68:02:ac:79:fc:c5:c1:b0:19:
47:01:2f:06:2f:31:24:0e:8c:49:b8:7a:4b:50:5f:
38:a3:af:6d:a0:af:44:33:d9:d9:1d:4a:95:a6:52:
40:76:e8:25:41:43:2f:4d:cc:08:fd:73:29:a0:ae:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FD:76:9E:DA:7F:14:D0:75:62:57:26:D5:2C:73:87:F2:D2:AE:58
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:83:9a:d3:f5:33:8c:ac:86:b9:66:0d:f1:37:ac:6d:77:b2:
5d:af:80:1d:36:2d:72:17:65:4f:1a:ab:5c:f7:c2:6e:be:18:
1e:bd:07:64:f5:b4:f9:83:4a:6c:85:32:07:de:07:2c:f1:23:
10:49:a1:4c:d7:ba:a6:2b:67:98:e7:bf:d6:6d:21:f6:17:f6:
19:e1:ad:3b:60:ba:f3:c2:70:03:3a:93:c7:e6:f8:ec:17:42:
de:76:57:e7:25:f8:87:f4:44:89:c1:57:df:82:f4:0c:bd:5f:
5f:69:64:6c:85:5a:ae:8f:71:eb:5c:c6:fb:30:8c:78:35:bb:
e6:b4:8a:6f:9a:20:5d:c2:fc:4c:f7:b3:76:39:26:94:b8:73:
b5:09:9c:70:b4:af:35:14:8c:14:c7:3f:8e:c6:8f:4c:b5:68:
d9:f9:ca:83:0b:58:bc:d9:08:92:18:87:f1:8f:0c:e5:1d:4e:
3d:39:f3:b2:85:fe:e9:28:d2:21:36:64:a3:82:fa:c5:6b:71:
f0:15:72:f8:2f:7b:be:5a:79:61:2b:58:87:10:a0:87:62:f0:
9c:f2:74:62:a1:3b:78:2f:60:52:aa:12:4d:d8:cb:88:96:5c:
34:38:3d:2f:03:0f:11:4f:a4:c9:88:b4:4e:5c:b3:55:fc:e9:
4f:ce:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:44:45 2026 by rpki-client