
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File: Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier: lsb//5bRF0enJ7b0DhI+SMzoTV7edugygjBgfLEhKww=
Subject key identifier: 59:B8:01:7A:3A:A9:A1:FC:FD:C3:B5:A4:86:DC:CE:95:8E:1B:42:DB
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A1DE0304C2AB193354F92273B0A5AF3446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number: 0A8B
Signing time: Sun 15 Nov 2026 07:01:42 +0000
Manifest this update: Sun 15 Nov 2026 07:01:42 +0000
Manifest next update: Mon 16 Nov 2026 07:01:42 +0000
Files and hashes: 1: 1olwn7ICW7wQ7rzv6lV7Sb-PQEg.roa (hash: z8lX2g4b2x4FJkwuYbzNJJZEhTP25jGzuB3PKLYYUCk=)
2: 5lBFGUAoZxbYBVNbtiraNCntgkY.roa (hash: D2AWufXWx23fxF8Lz5Xwtrbq4J1toTvFTMMwNaB2tNg=)
3: 6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (hash: 6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=)
4: 6Slb6ctAjkaetdPp9fu-qsq12hU.roa (hash: nI/JTPazexs9LlS7qZJ1qYqSPfTJGwhci4GC3G7Xc0Y=)
5: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (hash: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0=)
6: 7WCK9V1amL7VfvRQvmwfuLID77I.roa (hash: dSLJNNz7Yonxdt/qjaMstXNcLqH1Gi7MhACN+SvlT3Y=)
7: 7umQIn2F3PtoJHU4mEh8tRWSGjw.roa (hash: /7hKE4zSs1lxHGTqybsH4pyb3rpOeMyCxNN8B46A10I=)
8: 8dN_y6FCHmSwh9zyOdGKc-Xa3Xc.roa (hash: AzOTxMcQLVwli/cilDsxwDkXYXmhghgIjsMcqtIyLUc=)
9: 9YMsNSl9uqbLQlhpMDCKts3pRbc.roa (hash: WgiyYz+dNNGuW/Et9LEhQWTMq/N/0yU1nPwcWEo5s64=)
10: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (hash: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg=)
11: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: uWihKfJuz96Fu8CtIz0QJ+8AZXOjq4daStFFhCReYE8=)
12: EzehS4lEWxea1goC3uSmUBkfXw8.roa (hash: nQIZ+5RqYNsZnmvNJO60ak7iXV9gihXN6MTD5vlRsQo=)
13: GhIcthy_Bt7RZmc3Srzmgu8Z0kA.roa (hash: nWrFbHNPHUtu9F2zSIqhUDca6rtxXZo5ycbC2prOvIg=)
14: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (hash: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ=)
15: KGz7A7bTE88v8gErdsKgHCUC2LI.roa (hash: +mLqNnbl4FhK35X4O0rVUkitsCTraJ0mv2xz6w3UBIQ=)
16: NYMiViosdH9_4pb4GrGmYXreRLk.roa (hash: +zZYAlnSqEknoj1ol6xGExD0ML3HjwlMnuE300t6plo=)
17: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (hash: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q=)
18: OZRl0EIZvzMHZGy3Mgu3BOnL2cQ.roa (hash: iLj5NBVnsGW8zwXege6rDcdJrlo0iKYwZQK/cL/VEYQ=)
19: QGn7qwBSb-aDCmcB72sRlQjFuqY.roa (hash: viTlkuXOKEHPRGpj/iXhEKABilpBEiqBOa97D8tnSRE=)
20: QqeydQshq5wVgPFowaH8kSdulJE.roa (hash: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc=)
21: SXWGoki_NUQ9PQVZrdM0Hw_QNv4.roa (hash: wTDBOiQk6iaZWimbuWiLB8VRAHOMx16PDKlmETFmMKc=)
22: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (hash: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4=)
23: Zi0NjMEtFw5voPHGZoxrA-l2oWA.roa (hash: rEeauSC/jqbljS/hWUZuNo4LDWDnXsLsoGbI9r4RZdo=)
24: clZodLAFWFzf94TZLnuJ0a-wAJo.asa (hash: VVttTdxIL6mPE72qJiimWHq833VONqQxL8m8fNbx8sY=)
25: dUNUWDt_0kJ2DS1ugt0Ii3WwX7g.roa (hash: oQQoKXMtu0U1IsU0j0ZWo2KwQtbcMi8+QdULtf86sM4=)
26: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (hash: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98=)
27: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (hash: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM=)
28: hUyfpzAGZNTkFqAckl18UV9UoeQ.roa (hash: hzlc0UwxwYkt9gwM2DLupk4biKUFCj78FQrLswEPxhs=)
29: ibirQ48q5Aks70oNhLQtQcsKrow.roa (hash: yEMvVkvbKZ7AeXWGjDBDghK37K1B4NtqcFVP4C+umKA=)
30: ktR5aIXX8DCSaPyU0JqULEOdpDU.roa (hash: k4DH/NgsWxNDC6QhLfhwddBpbOTI6E+3vgE3oTuzzck=)
31: l3-NhbJzA_XVE-TmzzNypY-VV5c.roa (hash: ZUBG94tef4wB8hBuRGaTGpnWf6HCKUPgbpaFu4tpF7Q=)
32: lPksXWHNEjk8KBU1rNqMSJ5_KXw.roa (hash: wA7yzfQgmx3kHbuFrXJdkVaMKtNXen5NHHeqTyxqclU=)
33: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (hash: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU=)
34: remQI3vXY-CwDxRRv5Pj5NwA140.roa (hash: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg=)
35: vit3FI0YIMfjDCvKP-WGp2Vf7C8.roa (hash: 4CxQdDOXcl5lKbs0eX2DlAuxNnLP4vZ7ksKuT8r2+Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:04:c2:ab:19:33:54:f9:22:73:b0:a5:af:34:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Nov 15 07:01:42 2026 GMT
Not After : Nov 16 07:01:42 2026 GMT
Subject: CN=59b8017a3aa9a1fcfdc3b5a486dcce958e1b42db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:0d:8a:3d:e7:f7:8e:14:b6:81:73:a9:c1:
cf:0b:d2:86:45:a7:49:13:65:10:e4:94:0c:e0:05:
53:dd:3f:ca:0a:14:91:df:5b:42:c5:4e:4c:ab:b8:
ea:15:93:cb:48:be:e6:86:48:2a:cb:eb:7f:ae:a4:
80:2c:0d:ff:0e:0d:15:e3:af:00:01:09:a2:22:ac:
df:10:67:9c:b0:44:f6:47:7a:ba:0b:69:f9:79:5d:
78:7b:9c:07:df:d4:35:58:2d:ec:7d:c3:37:b5:3c:
ea:9c:0b:a9:7b:65:2e:82:ed:6a:b8:08:8e:db:c0:
1b:30:74:3f:02:b8:72:83:5c:a3:7c:c4:51:3f:87:
de:f0:e6:80:9e:69:d7:51:78:72:3e:69:b4:bf:ec:
d2:c8:05:60:5e:83:b7:12:f1:e1:c5:88:96:9a:9e:
a8:ff:c7:16:67:94:6a:64:60:ee:68:a0:b1:09:e5:
94:b1:8f:7e:dd:4d:f4:49:ce:94:f1:fd:9d:30:7e:
2f:40:d8:68:19:53:cd:c8:81:ae:f7:ff:b3:5e:64:
1a:a0:2b:65:02:0e:98:7c:90:af:3e:98:09:4c:c4:
05:61:0a:b5:4d:30:f1:45:b5:f4:e5:79:73:cb:14:
00:06:0a:89:69:5e:1c:75:da:5f:48:ea:4a:2a:64:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B8:01:7A:3A:A9:A1:FC:FD:C3:B5:A4:86:DC:CE:95:8E:1B:42:DB
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e5:1a:34:27:df:4e:f2:be:86:ee:74:ea:28:0e:1e:b1:62:
28:71:5b:dc:4a:07:e3:77:c7:d9:72:e3:18:63:a1:dc:5b:f3:
34:76:12:ab:43:f0:ce:e4:fb:b6:08:02:8f:cd:8c:26:9d:88:
68:9e:ca:fb:04:18:b0:a1:b1:25:24:55:02:9b:76:ac:21:e0:
7e:02:fd:3d:62:a1:39:b1:23:37:f6:24:7f:da:89:b3:97:73:
84:11:b5:82:e1:9e:d0:4c:4a:22:9e:78:04:2d:fb:31:5d:77:
f6:88:7c:af:7f:27:bc:e7:e3:a9:3c:0e:e3:8a:d1:58:d6:28:
ce:c8:55:cd:3e:ff:04:1c:a1:2b:5a:87:72:5d:cd:c5:6b:5a:
3f:6a:3f:ab:cf:a5:78:6f:55:eb:5b:13:40:63:52:d1:40:08:
d0:88:b8:c5:b4:72:af:62:22:6a:d2:e7:54:e5:f2:72:8b:16:
91:f7:ee:d3:61:7f:b7:08:d3:b3:67:bc:a9:54:b7:a0:8f:04:
de:67:a0:1b:d3:4a:31:99:0e:af:81:0a:7a:bc:d6:2a:b9:13:
44:5a:81:5d:29:3f:80:9a:c3:7a:f4:5a:5a:07:5b:ef:10:dc:
4c:97:36:ec:3c:8f:09:5c:b4:02:5b:f9:85:a4:f2:f0:fa:15:
70:49:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:48:36 2026 by rpki-client