
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File: EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier: kCfMNc6DREUSSrJ7OAZz8Mx23XBBcaExixsXBuuxmUg=
Subject key identifier: F7:63:32:20:BD:78:29:A8:B8:DC:DC:6E:02:2A:58:F4:31:9E:A7:58
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 019CDBB2447058797F435C295395EDAA062B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number: 18AA
Signing time: Wed 11 Mar 2026 07:00:19 +0000
Manifest this update: Wed 11 Mar 2026 07:00:19 +0000
Manifest next update: Thu 12 Mar 2026 07:00:19 +0000
Files and hashes: 1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: HH1tsZO5p0zoxrzKPz7P+73E0MWj0XgRHH34uARLdq0=)
5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:b2:44:70:58:79:7f:43:5c:29:53:95:ed:aa:06:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Mar 11 07:00:19 2026 GMT
Not After : Mar 12 07:00:19 2026 GMT
Subject: CN=f7633220bd7829a8b8dcdc6e022a58f4319ea758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:48:4f:88:1f:76:e2:d6:03:18:67:5d:6d:
85:dd:da:5a:05:a1:a6:12:9e:78:ab:f5:45:d4:72:
c3:d5:7d:3b:06:d6:aa:58:27:43:2a:95:9d:f6:72:
60:d5:8a:44:8a:2f:66:17:3c:62:b0:bd:81:f5:11:
ba:ae:60:7a:98:61:5f:ce:b8:01:92:ca:6b:97:3c:
1b:54:d9:6b:67:e4:21:53:c8:08:fc:05:5f:da:53:
8f:91:25:3f:35:9e:34:d8:80:c5:82:71:32:dc:dc:
7b:b9:31:16:2d:a9:77:4c:2f:20:a3:50:4b:e6:98:
3a:79:68:6c:24:4c:2f:2b:90:ae:56:8d:a3:de:bc:
45:9a:04:d6:43:31:05:79:95:3c:62:e6:b5:9c:ff:
c2:3c:61:a1:b7:b4:82:fc:70:e8:4e:ab:0d:46:3c:
7b:41:37:83:b8:87:74:dd:17:5d:c7:b9:26:cd:4c:
63:4c:e0:f5:82:92:c0:59:76:ea:47:0c:32:c8:28:
20:ff:80:14:e3:1f:aa:a5:37:8a:8a:98:ea:bb:ab:
67:92:95:17:61:a9:1e:35:d3:6c:d3:96:85:99:26:
92:fb:42:dc:02:1d:df:e1:bf:fa:42:4d:dd:29:a4:
4e:a4:f8:11:a0:b2:bc:3c:19:97:54:42:e5:c0:02:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:32:20:BD:78:29:A8:B8:DC:DC:6E:02:2A:58:F4:31:9E:A7:58
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:57:4a:d0:1b:e8:53:ab:ab:ae:3e:7c:90:5b:d8:27:2d:55:
c7:f1:45:47:96:3b:07:4b:25:86:34:83:f0:5b:6c:8d:66:42:
a9:86:76:09:ec:f5:f4:05:2a:8c:9c:b1:11:4d:ad:92:12:37:
23:a9:c8:09:56:89:21:e0:6f:5d:07:09:a5:0b:67:22:c1:34:
d1:7c:ee:91:07:9e:4f:09:da:3a:b6:eb:d4:10:20:bf:c9:3f:
9b:1a:51:af:3c:d3:d9:10:a0:e8:2d:0c:60:5d:8f:72:2e:87:
48:af:33:dd:14:f5:2f:0c:50:94:cc:29:44:c0:af:c1:11:83:
59:e9:90:60:ca:e6:28:48:47:6f:30:b4:64:7c:a1:3c:50:ba:
eb:11:bd:5b:d4:ca:36:32:0c:73:20:5e:20:d6:cd:cf:1a:f9:
e9:6c:da:ad:c2:59:1e:c2:38:da:a3:1e:50:80:cf:4b:91:75:
3f:9b:c5:53:03:ec:21:b2:7f:20:9f:15:ba:b5:66:e9:9a:1d:
21:20:a1:2c:32:cd:25:ec:6d:f0:eb:c2:4b:d6:f6:11:de:9e:
25:78:52:56:39:f0:2f:2c:c1:fb:08:5b:61:33:d9:e8:59:04:
99:7a:df:ee:12:c3:93:f4:43:61:89:14:25:2b:71:6b:91:df:
be:02:c6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 09:57:38 2026 by rpki-client