
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File: e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier: BLvirSz+s1gaXzld3ptrX4jSUGOvlkAPgj7TW/THW9Y=
Subject key identifier: 0F:0D:72:95:1B:20:C6:DB:BD:E3:3F:A2:CE:C4:E5:8D:A2:9E:BB:7B
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 019D9B5089631141DC27F7465775D35C94ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 12:00:39 +0000
Manifest this update: Fri 17 Apr 2026 12:00:39 +0000
Manifest next update: Sat 18 Apr 2026 12:00:39 +0000
Files and hashes: 1: I2q3ifUktwdWLFVk814q3GS4fWI.roa (hash: IGOlAHTyV8D50YrVyxyBur7sPUQLiEB5K2gkPY8V5KM=)
2: Or_Trx_pyk3P2RfQHAGvSoa3E_o.roa (hash: D6cpvG3bXYxnFOjIpxhw7hO0pHmMSae7H7JteYOOGpA=)
3: OxGf8ePayJwU09gGZnySyoA8iyo.roa (hash: yf38tU7zRVwzX10bjvQIj5OiLgW6pM5L8OevnEJQOXA=)
4: Tn1byzDG3LC_-4W5cdtymqE-7H8.roa (hash: Lg0SZJ99rab4Y0en6j2xpoNxdMlIboyOteh0f0kPzyU=)
5: VqNP0Im1R2Xhcy1xVWos-OfuEPE.roa (hash: iduPoCIxSjpp0ZSpvCwLlS/MLtsMgKgNiTHnlQR8wrA=)
6: YueSZbKV98CmzxsiRfWA83jDNEs.roa (hash: pu97V45FIqBvOF8XHHzv+H1DedOkRlyDXAiuHDoYLCw=)
7: cGSyEqlaNLY1LymfACjH5x7qwiY.roa (hash: PPsjXk3d3JTucJBSEkB9JMB6kS1QWHypumoBDsX0uds=)
8: e71RJyBktjssZjwClroR216iOMA.crl (hash: HR/82DQ0EPMnlc1tOSGOq8vJk+AJczzBoLB/z+N6C5o=)
9: oeuzQUYyPkW-V2UkOlxP_jVk-4w.roa (hash: c4HWnVLhY5gwzEC9ub/fPbXgeg83cue7m376DrPhXoA=)
10: w2zX0OlEApQBeN-eJRqrMs7-KhQ.roa (hash: VAl4aNgTKdrb4Wh3EXu5ag7LbozTNcCxOnMz/M31Mvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:89:63:11:41:dc:27:f7:46:57:75:d3:5c:94:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Apr 17 12:00:39 2026 GMT
Not After : Apr 18 12:00:39 2026 GMT
Subject: CN=0f0d72951b20c6dbbde33fa2cec4e58da29ebb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:7e:da:55:7d:f5:da:35:86:4d:dc:20:7a:
61:55:bf:7a:15:d4:e1:fb:a6:12:bb:e1:80:7d:cb:
ff:76:99:9c:c0:e9:cb:36:2e:64:0f:58:96:92:a7:
8e:52:a1:11:59:86:78:f5:42:68:50:75:d0:c4:0e:
aa:ed:5f:5a:99:fe:f9:c7:5d:14:c6:14:65:6d:26:
94:42:8b:e4:23:61:32:d5:9a:7c:67:3c:78:63:22:
88:42:21:2e:ee:76:93:d5:d6:6d:53:c9:88:e0:33:
33:7f:dc:1e:dc:54:79:dd:59:a9:1d:6b:77:11:ee:
33:5a:2b:b3:4e:b9:9c:0d:57:76:c3:4a:f9:62:d8:
67:46:94:5a:d5:d2:37:ec:b3:ac:93:7a:0e:8a:a1:
7f:a2:50:81:e2:bb:8d:ad:ac:53:65:1d:a3:08:1f:
26:3c:cb:a3:d4:ec:76:2b:81:87:fd:49:40:a6:17:
2e:68:a8:74:94:6d:05:e6:c2:f4:7c:3b:dd:3e:b3:
d9:6b:33:0c:be:70:53:36:8d:bd:c2:6d:07:95:48:
a3:bc:c3:97:85:8f:ae:02:43:26:e9:2b:c1:91:4b:
ce:4a:05:6f:94:65:c4:5b:32:2f:7c:8a:dc:cc:b3:
00:a9:92:6d:cc:25:86:35:14:44:63:f5:ad:5e:7f:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:72:95:1B:20:C6:DB:BD:E3:3F:A2:CE:C4:E5:8D:A2:9E:BB:7B
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b5:fb:65:77:c7:e2:90:88:d9:2e:3b:7e:66:f3:05:72:6d:
0e:d3:9c:c2:54:6d:3d:4d:9f:89:45:f0:84:f8:77:6a:b4:5c:
52:e6:cc:27:f8:74:86:a4:c9:6c:e9:22:d0:0d:7f:bc:aa:9b:
b3:bb:c2:76:e0:ac:be:21:2f:8e:ce:5d:ef:65:93:b1:44:a4:
04:c2:ea:d8:6c:53:04:27:0f:52:6e:66:ae:5f:eb:5c:8c:9e:
f9:ae:5f:76:a6:23:fa:f4:f8:a1:10:ad:cc:f7:7c:da:66:01:
41:8b:d5:c2:e3:fa:1d:a7:a1:de:e8:59:d0:f6:06:54:47:c3:
c3:17:01:98:7d:d0:39:ff:23:f4:1e:48:74:a2:ca:b9:38:85:
d1:34:93:d1:f1:8b:2d:aa:de:77:3f:b7:d4:a3:83:1b:0f:ed:
30:ba:df:6e:53:f8:81:1e:40:da:6d:1a:24:a7:48:ff:bc:14:
27:69:be:d6:f5:d4:8e:08:54:b2:f5:b4:77:53:ad:7e:cd:da:
9e:de:e4:96:46:22:97:87:87:50:35:d6:b3:31:a2:d0:ed:cc:
92:7d:c0:6d:bf:9e:b6:e3:02:2e:07:df:13:83:a8:4f:cf:f6:
19:6f:c5:bc:13:ca:44:39:e6:c8:7e:20:bb:cc:cf:fa:ee:f9:
15:fa:51:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUIljEUHcJ/dGV3XTXJTtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh
MjM4YzAwHhcNMjYwNDE3MTIwMDM5WhcNMjYwNDE4MTIwMDM5WjAzMTEwLwYDVQQD
EygwZjBkNzI5NTFiMjBjNmRiYmRlMzNmYTJjZWM0ZTU4ZGEyOWViYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Z+2lV99do1hk3cIHphVb96FdTh
+6YSu+GAfcv/dpmcwOnLNi5kD1iWkqeOUqERWYZ49UJoUHXQxA6q7V9amf75x10U
xhRlbSaUQovkI2Ey1Zp8Zzx4YyKIQiEu7naT1dZtU8mI4DMzf9we3FR53VmpHWt3
Ee4zWiuzTrmcDVd2w0r5YthnRpRa1dI37LOsk3oOiqF/olCB4ruNraxTZR2jCB8m
PMuj1Ox2K4GH/UlAphcuaKh0lG0F5sL0fDvdPrPZazMMvnBTNo29wm0HlUijvMOX
hY+uAkMm6SvBkUvOSgVvlGXEWzIvfIrczLMAqZJtzCWGNRREY/WtXn+KKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8NcpUbIMbbveM/os7E5Y2inrt7MB8GA1UdIwQY
MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt
OTdjOWFhYjgyOGYyLzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy
LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrX7ZXfH
4pCI2S47fmbzBXJtDtOcwlRtPU2fiUXwhPh3arRcUubMJ/h0hqTJbOki0A1/vKqb
s7vCduCsviEvjs5d72WTsUSkBMLq2GxTBCcPUm5mrl/rXIye+a5fdqYj+vT4oRCt
zPd82mYBQYvVwuP6Haeh3uhZ0PYGVEfDwxcBmH3QOf8j9B5IdKLKuTiF0TST0fGL
Laredz+31KODGw/tMLrfblP4gR5A2m0aJKdI/7wUJ2m+1vXUjghUsvW0d1Otfs3a
nt7klkYil4eHUDXWszGi0O3Mkn3Abb+etuMCLgffE4OoT8/2GW/FvBPKRDnmyH4g
u8zP+u75FfpR9w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:11 2026 by rpki-client