
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File: EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier: e1wJtQTBK6ynymvPN9qkyjW2BonZqtRoBrr2WMw14Dk=
Subject key identifier: BF:63:B1:07:7F:6B:53:F5:30:71:0D:41:E8:6C:A5:89:F1:A3:1A:5E
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01A1C1E5FF3E0B61367C0F4F9CF3E532915C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number: 1B36
Signing time: Mon 09 Nov 2026 20:00:38 +0000
Manifest this update: Mon 09 Nov 2026 20:00:38 +0000
Manifest next update: Tue 10 Nov 2026 20:00:38 +0000
Files and hashes: 1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: +YmIIGA7gHCxCUsYi3j9rlKLUFW+gy8OxJjmmgsGlkc=)
4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:e5:ff:3e:0b:61:36:7c:0f:4f:9c:f3:e5:32:91:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Nov 9 20:00:38 2026 GMT
Not After : Nov 10 20:00:38 2026 GMT
Subject: CN=bf63b1077f6b53f530710d41e86ca589f1a31a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:17:ee:a6:09:40:ae:9c:29:96:72:c6:a2:
c6:a0:c4:bd:d5:48:13:29:09:5a:0b:53:38:d7:26:
84:96:76:07:a5:77:c0:0d:d8:05:5e:af:65:5a:70:
4f:a2:ad:f6:2c:b8:b2:2c:92:2d:f1:46:2e:9c:88:
f9:b7:cc:4f:55:ac:21:3b:43:99:d1:54:2d:fe:89:
67:c4:5e:6b:54:2f:e9:12:bb:ba:34:04:c5:2c:e0:
4b:50:db:ea:d6:78:e8:00:4b:f5:aa:f3:a5:54:01:
6a:f5:35:ba:e9:52:4d:a7:f9:32:42:fa:4f:52:5a:
12:63:4e:b2:a5:22:57:ed:57:f2:72:b1:50:af:01:
6a:25:7f:7a:2b:27:c6:c4:56:ab:ca:19:f9:c9:8c:
c1:b2:b6:8d:1a:68:cb:dd:30:e0:3b:3d:ef:37:93:
e2:f8:3f:85:be:29:48:21:62:92:ea:e6:a0:84:ff:
8c:ef:f4:2c:fa:4c:4d:06:71:61:c3:c5:9d:e1:5c:
76:4f:9b:e9:38:d7:37:53:1e:08:5a:cf:44:5c:49:
78:a7:c8:8d:72:b0:80:38:ec:fd:6f:30:8c:4d:38:
ed:26:86:9b:65:7b:14:53:e2:43:ef:88:4d:91:9e:
63:3c:cf:c1:c7:8b:b4:e5:65:7e:30:24:7b:f4:17:
6b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:63:B1:07:7F:6B:53:F5:30:71:0D:41:E8:6C:A5:89:F1:A3:1A:5E
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:c4:2d:01:31:b5:5a:c0:78:db:f8:2a:45:1b:20:d2:72:f0:
db:2c:e5:92:e5:26:be:eb:2d:d5:a9:e6:c2:fd:16:d0:b7:16:
4f:19:17:fa:52:8a:5e:30:b4:fc:fe:d4:4c:87:49:91:34:da:
d9:5a:5e:27:cf:00:41:cc:9a:42:a3:9e:71:14:83:68:c3:d2:
25:98:4f:7d:7e:c1:b3:85:1a:30:d2:fa:ea:cb:68:0b:ef:e5:
6f:58:80:42:f5:03:4b:e8:c4:1f:63:fd:da:2c:67:b6:2e:07:
13:41:28:07:0b:4a:b0:55:29:82:f8:97:7b:8c:c9:d6:d7:ee:
d1:a4:9c:d7:05:e4:7f:88:ac:cc:a5:a6:db:44:25:e0:97:c5:
d6:21:2e:94:2f:ee:69:cf:4b:b3:6e:b7:6a:7e:e5:7f:19:11:
d4:21:5f:2e:8c:8e:d2:a2:28:4b:d0:2c:7d:49:0c:e7:48:11:
ca:d8:8a:05:8e:5e:e9:2a:d4:84:9b:63:24:4f:56:b8:38:90:
fe:bf:28:2d:20:77:b6:59:6d:ba:c7:f8:18:6c:03:89:50:17:
bd:e5:c1:c8:72:de:ee:0f:cb:df:47:68:27:55:a2:53:9d:c0:
81:b4:e2:4a:20:1d:ba:72:b7:77:9d:14:4b:27:df:9f:74:a5:
87:04:2e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 05:44:45 2026 by rpki-client