
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
File: eouukjMFpxxSam_PV8KdbBakJp4.mft (raw, json)
Hash identifier: osi6dwvaIaYjjFGnjwCJSflzIF6mcG29xTj5vs3mH1c=
Subject key identifier: 37:14:37:A9:95:CD:EF:32:F1:F4:41:EA:8D:74:C1:3E:4A:2A:DA:15
Authority key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Certificate issuer: /CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Certificate serial: 01A17FCF950946FA2F8D388D723DEC13C8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
Manifest number: 0AAE
Signing time: Wed 28 Oct 2026 00:01:12 +0000
Manifest this update: Wed 28 Oct 2026 00:01:12 +0000
Manifest next update: Thu 29 Oct 2026 00:01:12 +0000
Files and hashes: 1: 154jS1WAxPSKvlDuz3dZQ-NJKB4.roa (hash: BQ+b6cY2XC1wZW6d7GyZMWhKS4X49iRWT/Qhsjy2bC8=)
2: 3nvUvwvEjqd3uWLnNIzRMp_zPiQ.roa (hash: ZMtKKhbkG+SDaRB5Lwcy2nYq4Nmjcr5Fa6/+zE0C+Ds=)
3: FHMjbX0IJDdqyEToEwSwoRuR5V0.roa (hash: YxH1J7UH0j4zUBBu+nrlsjMCK+B7Hki4fUgV/yDwRhg=)
4: IIJ2gsln0l29u6el3Eh-HktxhNU.roa (hash: hpFkKXItKpqq2JN40ze2IGY7K6qDmlOUrlI13Wk9e4Q=)
5: L7GiwrmGsi08SN1UfHEqVnVu1AA.roa (hash: 7wa4EsdE/WysdCyKnSTXhP8nr8JMGrz87uD0iFulFFs=)
6: TU-8xo3zxQlZ9Vc3tqDJtRhO49M.roa (hash: qTCQKHn0kgblk7uexSC93IsYL2hwEcyFRz+mRa2HS+M=)
7: ZM3NnUF6UrHsYWg874QSJMv3LVQ.roa (hash: U0mmm5WylI1aW5jQ5uN9xR9+rLvFkZvRgOuHb7F4UHs=)
8: dz0vm_90sWc-8UHgdpZFYKLHSj4.roa (hash: d+huGlJ3i2+T89DB/7T0JlJpyWXcAU1t15bZAT6WMNs=)
9: eouukjMFpxxSam_PV8KdbBakJp4.crl (hash: a9pHhHqbmOQbw8/T5SSi6CNdm/k+TFD3t0tqS3FQXMk=)
10: fP5lnaixv32xkJUP4tzX9zmPJ_k.roa (hash: 8VvbMuKU+y3oQaViW4mboQO5kLKfP4tHhfvRHYz43Uo=)
11: hFqXENq7P7QUMtqEsRtgqERPZCs.roa (hash: q+KMtUDFdWB6VE5Bue6DG/HBife4LzHOWxTx2yB51Oc=)
12: uEomgdbx0SSJXLdsKU7C7Kj9JB4.roa (hash: av9XRWGuqwu2vAyclOm2BKAsr7aCyfHw7tRuLe1myAQ=)
13: wHo6BLbDFnhgnKBwGLy-iYQWCGg.roa (hash: yMDj58isIoriuJ6YdO0L7kXO5CBKfE9W4hFmW/e2jCU=)
14: y4tDu3FkwgGi_ljE0cjspoos_Ws.roa (hash: Qpmm04CAh6W7l0obYKDEXOip2/wcUrUPq0Vb4fmoE9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:95:09:46:fa:2f:8d:38:8d:72:3d:ec:13:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Validity
Not Before: Oct 28 00:01:12 2026 GMT
Not After : Oct 29 00:01:12 2026 GMT
Subject: CN=371437a995cdef32f1f441ea8d74c13e4a2ada15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:0c:d1:be:5f:b3:45:91:f6:8a:e1:67:f2:
56:ed:82:04:73:8c:ac:1d:4c:47:aa:a6:4c:b9:71:
39:b5:fe:24:ed:11:14:77:4f:6d:0b:fb:da:28:a8:
62:53:87:11:75:d8:cc:72:e1:0b:fc:c0:8c:13:c5:
a6:2e:1b:d2:31:7a:38:8e:d7:ad:e0:98:1a:4c:d8:
75:f1:a8:56:c6:e3:c7:67:22:9f:69:a3:03:b7:e3:
a6:24:b5:b0:32:cf:c9:c6:f0:b1:40:cd:81:8b:16:
0c:bc:83:a1:a1:7c:4c:0b:0e:64:43:ca:b7:8e:11:
bb:25:c0:07:01:a9:77:c4:e6:ed:48:c6:84:b1:c8:
ee:d2:f1:5d:96:5f:7f:66:7d:a0:4b:a2:1f:16:cd:
c4:19:13:b5:60:38:4b:8e:c7:e4:f7:5c:f4:15:f7:
9b:9e:c2:19:f1:01:bd:f7:b3:90:ff:f9:4c:3b:80:
7f:f4:08:7e:63:b9:ad:4e:00:75:88:13:71:b2:9d:
7b:bc:f1:37:9a:d0:da:3d:a4:ac:e5:99:29:8c:58:
8f:1d:ef:05:d7:9c:0f:24:38:86:d3:6b:17:15:e6:
c5:b1:46:62:26:f5:30:67:2a:df:f1:7d:a1:d1:04:
6e:19:00:e0:9f:26:d3:cf:e3:b2:d6:0b:05:c9:72:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:14:37:A9:95:CD:EF:32:F1:F4:41:EA:8D:74:C1:3E:4A:2A:DA:15
X509v3 Authority Key Identifier:
keyid:7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3b:24:96:f7:a4:6a:d6:86:7d:9c:7c:1f:cb:b1:ca:36:d6:
66:b2:e7:1f:a3:47:74:c1:ff:2b:89:01:ee:c8:76:90:5b:f8:
c9:09:77:62:1d:c9:83:4e:d4:07:d7:ff:9d:34:4c:c9:07:67:
88:f1:ef:63:1b:08:68:8b:ca:40:92:48:45:57:26:8e:38:f1:
2e:4a:10:ae:ed:a7:fa:4a:d0:8e:95:dc:36:47:54:57:a0:d8:
61:75:92:86:68:39:c0:18:dc:45:74:18:2b:78:1d:19:95:06:
4b:55:b5:b8:89:17:be:d1:23:1f:ec:cf:7e:d0:b6:b0:03:c4:
89:aa:02:a2:74:6a:dd:35:8e:cc:59:88:11:3f:4c:67:11:d9:
89:c5:1b:49:c8:35:29:f7:5f:88:97:01:cb:9d:3f:06:3d:07:
cb:62:57:34:6b:9d:40:de:1a:7c:a5:4b:33:d4:94:f5:8d:f2:
72:e0:ca:1f:c3:bc:f4:10:ad:be:80:76:ab:b0:60:75:cc:9b:
08:e5:4d:8c:cc:34:2d:ed:8d:44:5d:15:d6:01:82:b4:84:7a:
a9:d9:79:7d:df:f7:1b:67:57:e1:c6:01:5f:31:f0:5d:42:38:
ac:27:17:97:b7:a5:8f:9a:c8:9c:3b:cf:b8:31:b3:9f:d8:92:
89:ab:b0:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/z5UJRvovjTiNcj3sE8jrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOGJhZTkyMzMwNWE3MWM1MjZhNmZjZjU3YzI5ZDZjMTZh
NDI2OWUwHhcNMjYxMDI4MDAwMTEyWhcNMjYxMDI5MDAwMTEyWjAzMTEwLwYDVQQD
EygzNzE0MzdhOTk1Y2RlZjMyZjFmNDQxZWE4ZDc0YzEzZTRhMmFkYTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpkM0b5fs0WR9orhZ/JW7YIEc4ys
HUxHqqZMuXE5tf4k7REUd09tC/vaKKhiU4cRddjMcuEL/MCME8WmLhvSMXo4jtet
4JgaTNh18ahWxuPHZyKfaaMDt+OmJLWwMs/JxvCxQM2BixYMvIOhoXxMCw5kQ8q3
jhG7JcAHAal3xObtSMaEscju0vFdll9/Zn2gS6IfFs3EGRO1YDhLjsfk91z0Ffeb
nsIZ8QG997OQ//lMO4B/9Ah+Y7mtTgB1iBNxsp17vPE3mtDaPaSs5ZkpjFiPHe8F
15wPJDiG02sXFebFsUZiJvUwZyrf8X2h0QRuGQDgnybTz+Oy1gsFyXIG7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcUN6mVze8y8fRB6o10wT5KKtoVMB8GA1UdIwQY
MBaAFHqLrpIzBaccUmpvz1fCnWwWpCaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW91dWtqTUZweHhTYW1fUFY4S2RiQmFrSnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yYTFlNWMtMTAxMC00MDk4LTk0Yzkt
ZGUwYzU3MGJhODUwLzEvZW91dWtqTUZweHhTYW1fUFY4S2RiQmFrSnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yYTFlNWMtMTAxMC00MDk4LTk0YzktZGUwYzU3MGJhODUw
LzEvZW91dWtqTUZweHhTYW1fUFY4S2RiQmFrSnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTsklvek
ataGfZx8H8uxyjbWZrLnH6NHdMH/K4kB7sh2kFv4yQl3Yh3Jg07UB9f/nTRMyQdn
iPHvYxsIaIvKQJJIRVcmjjjxLkoQru2n+krQjpXcNkdUV6DYYXWShmg5wBjcRXQY
K3gdGZUGS1W1uIkXvtEjH+zPftC2sAPEiaoConRq3TWOzFmIET9MZxHZicUbScg1
KfdfiJcBy50/Bj0Hy2JXNGudQN4afKVLM9SU9Y3ycuDKH8O89BCtvoB2q7Bgdcyb
COVNjMw0Le2NRF0V1gGCtIR6qdl5fd/3G2dX4cYBXzHwXUI4rCcXl7elj5rInDvP
uDGzn9iSiauwwg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:14:21 2026 by rpki-client