
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File: EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier: IAFwEwypBPhY2XQ4BF2hVYGVLm5VFfbdNNhe/3qCt9Q=
Subject key identifier: 3C:BA:E3:F9:D0:E6:49:28:1A:41:6B:E4:A0:00:1A:CB:EC:27:58:44
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 019DCF06DCFB01D13BCB3B61EC8020EB9DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number: 1928
Signing time: Mon 27 Apr 2026 13:00:26 +0000
Manifest this update: Mon 27 Apr 2026 13:00:26 +0000
Manifest next update: Tue 28 Apr 2026 13:00:26 +0000
Files and hashes: 1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: //+FKwGwMET/JpA1AJ0uF5HXaTK8XcmMX/GVqRAvCFk=)
5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:06:dc:fb:01:d1:3b:cb:3b:61:ec:80:20:eb:9d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Apr 27 13:00:26 2026 GMT
Not After : Apr 28 13:00:26 2026 GMT
Subject: CN=3cbae3f9d0e649281a416be4a0001acbec275844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:62:af:3f:36:be:12:43:1b:5a:7d:92:ea:
17:12:90:25:14:f9:68:ed:3e:ad:09:84:57:4a:f3:
d9:f1:c1:f7:d3:7e:44:c4:8a:2c:09:cf:ba:c1:ed:
24:0c:23:b8:fe:59:76:39:69:81:62:2f:0f:48:65:
af:ea:f6:2b:d5:62:5a:66:b1:da:65:92:0f:d2:af:
67:4a:cc:d2:8a:f5:e7:fd:91:5d:d4:e0:27:b6:57:
3d:45:c6:cd:bf:98:b7:47:05:64:94:b3:78:e1:12:
d7:8a:22:42:b6:c2:7e:23:98:46:11:6a:ad:ad:99:
58:cc:52:6a:f5:e7:4b:cf:cb:4e:56:73:2f:02:58:
38:e9:bf:86:5e:c8:cc:3b:61:7a:8d:fb:ea:f7:5a:
3b:a8:bc:94:0d:9e:3f:2f:ca:ee:03:30:22:70:40:
cc:39:03:ed:b3:f1:d2:b9:25:3b:19:79:cc:f1:bf:
59:89:1a:66:42:1c:f8:54:08:25:ef:c1:8a:2e:00:
88:be:8c:df:9a:79:0a:2c:79:dc:38:25:6e:62:ec:
17:7b:66:0e:75:52:35:f3:56:d5:65:3a:0b:6f:0d:
26:a5:64:a6:59:e8:f9:f5:dd:a7:5c:fa:30:e7:f2:
93:96:90:44:21:f5:b9:ae:7b:75:13:96:fe:fd:03:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BA:E3:F9:D0:E6:49:28:1A:41:6B:E4:A0:00:1A:CB:EC:27:58:44
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:28:7d:56:cc:80:fd:e9:bc:3a:fc:70:ff:f6:46:fb:79:39:
bc:be:68:d6:70:98:07:8d:f1:3d:25:cf:77:86:a2:26:69:00:
3c:4e:01:96:09:9d:15:87:86:17:4f:33:9e:63:42:5c:76:20:
7f:70:93:e9:7d:86:4e:4f:3a:f2:6e:0e:b0:2a:b1:10:30:c5:
26:4c:2d:1c:ba:e9:28:ec:54:2a:4f:8e:37:91:4a:9c:4d:fd:
bc:58:64:4c:1a:00:e6:c8:40:fc:72:49:d1:9c:af:8a:0d:70:
67:77:3e:3a:4f:65:8a:7b:f3:98:1e:33:4c:b8:8f:be:dc:d3:
fd:77:f5:42:0c:c5:09:48:8f:6e:88:35:33:8a:6a:54:87:eb:
47:da:cd:24:46:fc:83:ba:40:0d:d9:13:f8:0e:98:bf:b2:77:
f7:c5:34:1b:61:4c:c8:6e:b3:b2:ad:aa:51:39:d1:d4:8d:c3:
5d:a5:6f:8b:ed:39:bc:1a:4d:2f:fa:4c:65:ef:e4:75:b4:98:
0c:f4:f0:dc:13:bf:21:32:8d:d4:4a:28:43:67:f9:d1:a7:ca:
af:1b:4e:0c:2a:bb:2c:44:7d:36:5b:83:54:cf:f5:5a:14:52:
e8:e1:35:ed:2d:3d:df:d0:8c:4a:19:36:c8:bd:27:87:64:1d:
13:a4:21:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:53:57 2026 by rpki-client