
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier: LE46PSssNGGe0C6ECzaEGC7x84A6eFrscWzk9Ey20TU=
Subject key identifier: CE:76:06:AC:0E:30:2D:51:C9:3B:7F:71:71:F8:BE:68:64:84:7C:5F
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 01A0BCC313775688E420A7287AE45F2D5162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number: 1A77
Signing time: Sun 20 Sep 2026 03:01:36 +0000
Manifest this update: Sun 20 Sep 2026 03:01:36 +0000
Manifest next update: Mon 21 Sep 2026 03:01:36 +0000
Files and hashes: 1: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (hash: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4=)
2: 1-LUBueVBqdwiFLK1gsB1AnGbiPQ.asa (hash: L6rsU1pcQ3cdDgJa7jGbs1XAAZhtjuh8eTrAlkKyq8Y=)
3: 3fCUHErbv2WtYx--n4nf1Q6-Ubw.roa (hash: VmDuAyLIouZrOeMJRlVFLUwqzbhKM9CHSnO4kIRdwDo=)
4: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: zCHLnY+whXeBfxfuE/tgJMN7hrmyMvXUjNYI7CYO69g=)
5: BbRIR3kI21VUGCXjSDWllMbS-8k.roa (hash: EEgGaz+LiLIszuH7ULNxtMHJjtmHM3CUdnjiO3tprKI=)
6: O73kgAQ-kXlFxK4kvQOyEoxMTXA.roa (hash: ETBQDnDgpIBgdAIaW/tfoxKMAV0hJkP0bltM4DA6Q48=)
7: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (hash: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4=)
8: c7YCMDtvilpnAcHhUKUpazLH8YQ.roa (hash: p8eFTJPY5mhYNqyxOeRrt26FdTu0eyXi+YCF788HwNI=)
9: i22LYTAh0PcLuwu7sEyCzT-6xXM.asa (hash: DPM18lmzzP7eVh2MT51XAxQN2uj0C+J8vlqNWZv6bek=)
10: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (hash: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo=)
11: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (hash: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c3:13:77:56:88:e4:20:a7:28:7a:e4:5f:2d:51:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Sep 20 03:01:36 2026 GMT
Not After : Sep 21 03:01:36 2026 GMT
Subject: CN=ce7606ac0e302d51c93b7f7171f8be6864847c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:bc:6c:5c:07:a6:0e:0c:28:6f:b3:cb:89:
d4:ea:08:18:a5:96:8d:cc:f5:e8:02:6b:89:2c:65:
95:d9:6b:cf:25:85:70:d3:d9:53:ad:8b:85:78:7d:
1c:c9:5b:ad:24:71:13:77:5c:23:ff:c6:4a:d1:cc:
ac:ef:78:9e:c7:ff:91:f7:be:a2:a0:73:d6:a5:45:
98:9b:49:1c:30:ed:61:53:47:28:78:bc:0f:1e:a6:
7d:11:be:c5:7b:e1:1b:e3:c2:c1:63:e6:19:d8:a3:
4d:e1:72:05:52:59:0e:42:0b:6c:dd:54:59:94:3c:
47:0b:b8:c2:f8:38:19:45:6a:7f:8b:39:39:ea:b5:
bd:01:a8:cb:0e:9a:01:ab:59:40:a3:e7:48:2e:d1:
64:38:63:4e:88:7a:6b:22:4c:0c:8d:00:d4:77:b6:
8c:f2:75:71:12:c1:fc:1c:ea:a4:48:48:84:df:93:
ac:15:69:a9:31:2c:d3:f4:9a:b7:9a:80:03:a4:67:
87:70:36:b8:1c:f4:62:f8:6d:4b:95:48:e2:4c:35:
a6:ff:4a:94:cd:29:ea:63:ad:ef:eb:50:83:cb:68:
e2:ea:c8:50:2e:11:a2:3c:f4:f5:ac:53:fb:dd:31:
b7:d9:7e:78:b3:16:e0:5d:f4:5e:fa:ee:28:bf:7f:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:76:06:AC:0E:30:2D:51:C9:3B:7F:71:71:F8:BE:68:64:84:7C:5F
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:76:b8:5a:5a:cd:08:83:c9:c5:c8:15:03:cf:bc:e8:0b:03:
f9:46:87:5f:59:40:c5:97:15:a8:10:82:8b:9d:26:53:32:17:
59:9c:d5:fb:73:79:ec:13:d4:74:18:c2:67:7e:ab:91:80:77:
d1:81:48:98:f5:93:67:f3:5c:9a:23:67:d6:a0:4a:58:3d:36:
82:7b:0b:9c:89:61:86:b7:db:5c:5c:e4:fa:41:2e:46:f4:e5:
8b:1a:ef:b2:3a:c5:1b:c1:ea:71:29:99:40:9a:02:8d:c9:59:
5b:a4:2b:e6:b5:c6:c1:c5:8c:8b:ae:c7:77:25:0c:f4:81:a5:
a4:13:42:9b:2c:10:4d:59:ad:74:ce:b7:1a:06:19:a1:a0:cd:
a3:8e:3b:2f:bf:1c:4e:72:8e:85:3a:86:a6:cb:02:10:1f:db:
45:48:57:c0:c0:e6:c7:9e:20:24:d6:cb:44:62:c4:a4:e6:6d:
bc:a9:e5:73:76:10:61:44:4e:7f:f2:45:63:ac:8c:4d:d4:88:
ed:10:a2:a5:59:4f:a6:c1:1a:28:23:ae:cf:0d:7c:e5:a9:18:
15:e4:9f:f2:33:c8:f5:b5:c7:a0:e3:a4:47:ce:92:ae:8c:43:
b9:a0:92:43:ab:da:9d:4f:e5:de:93:b8:20:c4:85:2e:cd:f6:
d7:6a:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:22:11 2026 by rpki-client