
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File: Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier: T9ijZYt7aOE1smRX0D/bKPSw9DuzSCTVOKu3pJc9DJk=
Subject key identifier: B9:D4:73:61:02:15:33:59:61:10:20:87:9E:A0:C0:45:27:E3:03:B5
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A15BC2E2F0C77714B17198646E0CE6DC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number: 0A41
Signing time: Wed 21 Oct 2026 00:01:01 +0000
Manifest this update: Wed 21 Oct 2026 00:01:01 +0000
Manifest next update: Thu 22 Oct 2026 00:01:01 +0000
Files and hashes: 1: 1FZG6wB87qloa1UbjayKMtrq8-A.roa (hash: quaCh4MjQgJ28N6zhE6aOSaSzuiG0zl0jXtQZOOkACY=)
2: 1olwn7ICW7wQ7rzv6lV7Sb-PQEg.roa (hash: z8lX2g4b2x4FJkwuYbzNJJZEhTP25jGzuB3PKLYYUCk=)
3: 5lBFGUAoZxbYBVNbtiraNCntgkY.roa (hash: D2AWufXWx23fxF8Lz5Xwtrbq4J1toTvFTMMwNaB2tNg=)
4: 6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (hash: 6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=)
5: 6Slb6ctAjkaetdPp9fu-qsq12hU.roa (hash: nI/JTPazexs9LlS7qZJ1qYqSPfTJGwhci4GC3G7Xc0Y=)
6: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (hash: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0=)
7: 7WCK9V1amL7VfvRQvmwfuLID77I.roa (hash: dSLJNNz7Yonxdt/qjaMstXNcLqH1Gi7MhACN+SvlT3Y=)
8: 8dN_y6FCHmSwh9zyOdGKc-Xa3Xc.roa (hash: AzOTxMcQLVwli/cilDsxwDkXYXmhghgIjsMcqtIyLUc=)
9: 9YMsNSl9uqbLQlhpMDCKts3pRbc.roa (hash: WgiyYz+dNNGuW/Et9LEhQWTMq/N/0yU1nPwcWEo5s64=)
10: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (hash: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg=)
11: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: t+c67s5/n2N7aZWdbfsAdy2xDDq2u7kjaqt4crzItIw=)
12: GhIcthy_Bt7RZmc3Srzmgu8Z0kA.roa (hash: nWrFbHNPHUtu9F2zSIqhUDca6rtxXZo5ycbC2prOvIg=)
13: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (hash: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ=)
14: KGz7A7bTE88v8gErdsKgHCUC2LI.roa (hash: +mLqNnbl4FhK35X4O0rVUkitsCTraJ0mv2xz6w3UBIQ=)
15: MbRan6OrTVgecR6FfgRRIDuxgPc.roa (hash: SlpR7LyUtBASFkbDWJJxH3uK9Z/DaHWNWAtgRxEYHi4=)
16: NYMiViosdH9_4pb4GrGmYXreRLk.roa (hash: +zZYAlnSqEknoj1ol6xGExD0ML3HjwlMnuE300t6plo=)
17: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (hash: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q=)
18: OZRl0EIZvzMHZGy3Mgu3BOnL2cQ.roa (hash: iLj5NBVnsGW8zwXege6rDcdJrlo0iKYwZQK/cL/VEYQ=)
19: QGn7qwBSb-aDCmcB72sRlQjFuqY.roa (hash: viTlkuXOKEHPRGpj/iXhEKABilpBEiqBOa97D8tnSRE=)
20: QqeydQshq5wVgPFowaH8kSdulJE.roa (hash: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc=)
21: S7aozI9FvqzyVV9qPBI0-pBgja0.roa (hash: RZcrxAGTaObIV2NJYPIxgsFk5KxFbecqZdjcxq2F6wI=)
22: SXWGoki_NUQ9PQVZrdM0Hw_QNv4.roa (hash: wTDBOiQk6iaZWimbuWiLB8VRAHOMx16PDKlmETFmMKc=)
23: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (hash: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4=)
24: UZKdyiYuEJgK1CXf4lhc7ZkfKPU.roa (hash: 2bdOr/wIOcULD+99fYfl0oPnDBufy+6gGb+f1589cJ0=)
25: Zi0NjMEtFw5voPHGZoxrA-l2oWA.roa (hash: rEeauSC/jqbljS/hWUZuNo4LDWDnXsLsoGbI9r4RZdo=)
26: clZodLAFWFzf94TZLnuJ0a-wAJo.asa (hash: VVttTdxIL6mPE72qJiimWHq833VONqQxL8m8fNbx8sY=)
27: dUNUWDt_0kJ2DS1ugt0Ii3WwX7g.roa (hash: oQQoKXMtu0U1IsU0j0ZWo2KwQtbcMi8+QdULtf86sM4=)
28: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (hash: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98=)
29: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (hash: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM=)
30: ktR5aIXX8DCSaPyU0JqULEOdpDU.roa (hash: k4DH/NgsWxNDC6QhLfhwddBpbOTI6E+3vgE3oTuzzck=)
31: l3-NhbJzA_XVE-TmzzNypY-VV5c.roa (hash: ZUBG94tef4wB8hBuRGaTGpnWf6HCKUPgbpaFu4tpF7Q=)
32: lPksXWHNEjk8KBU1rNqMSJ5_KXw.roa (hash: wA7yzfQgmx3kHbuFrXJdkVaMKtNXen5NHHeqTyxqclU=)
33: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (hash: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU=)
34: npFTFWkQvJEB-uPZw7_yc1bOCYg.roa (hash: +mXvNAxr4u+gG4g9s2iT2e/7Fxy7fLo5N61r3XWKELI=)
35: remQI3vXY-CwDxRRv5Pj5NwA140.roa (hash: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg=)
36: vit3FI0YIMfjDCvKP-WGp2Vf7C8.roa (hash: 4CxQdDOXcl5lKbs0eX2DlAuxNnLP4vZ7ksKuT8r2+Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:c2:e2:f0:c7:77:14:b1:71:98:64:6e:0c:e6:dc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Oct 21 00:01:01 2026 GMT
Not After : Oct 22 00:01:01 2026 GMT
Subject: CN=b9d4736102153359611020879ea0c04527e303b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:39:fb:10:fc:a3:e3:fd:52:0c:4f:64:fc:
f2:f5:55:84:76:0f:7d:b8:17:73:85:13:ff:0e:ef:
4e:61:60:ea:b5:76:ca:05:d6:44:1e:4e:6c:1e:b6:
52:40:d4:3c:6e:95:07:50:2e:49:be:d4:09:4c:32:
a8:c8:48:e8:f0:74:cf:56:6a:88:c1:c4:33:18:67:
c6:fa:c8:d6:0d:61:a3:bc:dc:c9:5b:d4:13:05:8e:
0d:96:6d:d6:2f:42:46:47:b6:12:9d:18:82:b0:1c:
53:2b:09:e6:4d:51:04:e1:77:3c:67:57:34:14:f5:
a1:85:57:d3:0e:f0:6c:1f:47:09:e2:98:d8:63:c4:
cd:f5:ec:4f:d1:15:86:79:2c:31:f3:86:ff:91:6b:
a3:c5:6b:34:a3:e0:51:03:d5:41:37:ec:6f:ee:37:
62:fd:ee:3a:7c:48:4f:2a:76:43:a9:c3:08:78:50:
45:ab:ad:ee:d4:d0:da:f8:0f:23:ae:71:51:f1:03:
6e:b9:65:80:dd:0e:e6:10:01:87:dd:9b:cb:26:67:
e2:19:f2:ba:94:e8:21:df:ac:92:24:8c:0a:d2:0a:
cc:9d:7c:e8:02:0a:56:6e:03:8f:2a:51:31:66:26:
8b:14:72:8d:97:39:ba:66:eb:f9:62:4f:c1:ff:bb:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D4:73:61:02:15:33:59:61:10:20:87:9E:A0:C0:45:27:E3:03:B5
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:80:a2:fb:e0:fd:6b:86:27:36:ea:65:eb:d3:bb:10:f9:ab:
be:33:0a:2c:82:64:9b:c4:dc:0c:f8:2b:39:b9:1c:61:6d:64:
08:b1:a6:bd:ba:9a:fb:2d:b8:f9:27:b9:7f:75:5c:2d:4f:43:
38:aa:1d:3e:7e:b5:5d:57:31:b9:d8:9e:24:54:f2:0a:81:0a:
93:f5:20:8d:d6:54:7e:5a:55:06:f0:cc:dc:61:75:32:c7:dc:
2f:a1:4c:87:a5:0f:75:d1:54:4b:97:35:3a:bf:e9:29:b4:23:
62:af:0e:d9:fd:05:2d:3a:3c:56:0f:6f:57:ee:64:dd:d7:8c:
ed:0e:4f:9c:0b:f9:6e:7d:06:8a:52:12:bd:bf:6f:2e:fb:49:
3c:49:92:b4:39:11:c0:e6:25:69:19:c6:a1:55:55:bd:9f:14:
00:f7:44:84:f4:e3:0b:b0:8e:a2:23:0e:c2:6a:73:a6:41:80:
79:51:c9:4c:49:8f:04:1d:5c:6c:08:ea:d8:d5:76:d3:7d:cb:
60:fc:c9:45:c1:d2:d0:1c:64:5f:ae:45:10:cb:49:23:94:e6:
f0:a0:53:dd:50:2a:86:38:12:83:c1:c0:60:be:e6:67:ba:fb:
52:f6:50:54:2d:a1:38:83:9b:ec:37:2c:41:0c:8d:b0:c9:9c:
45:a4:25:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFbwuLwx3cUsXGYZG4M5tyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjYxMDIxMDAwMTAxWhcNMjYxMDIyMDAwMTAxWjAzMTEwLwYDVQQD
EyhiOWQ0NzM2MTAyMTUzMzU5NjExMDIwODc5ZWEwYzA0NTI3ZTMwM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqQ5+xD8o+P9UgxPZPzy9VWEdg99
uBdzhRP/Du9OYWDqtXbKBdZEHk5sHrZSQNQ8bpUHUC5JvtQJTDKoyEjo8HTPVmqI
wcQzGGfG+sjWDWGjvNzJW9QTBY4Nlm3WL0JGR7YSnRiCsBxTKwnmTVEE4Xc8Z1c0
FPWhhVfTDvBsH0cJ4pjYY8TN9exP0RWGeSwx84b/kWujxWs0o+BRA9VBN+xv7jdi
/e46fEhPKnZDqcMIeFBFq63u1NDa+A8jrnFR8QNuuWWA3Q7mEAGH3ZvLJmfiGfK6
lOgh36ySJIwK0grMnXzoAgpWbgOPKlExZiaLFHKNlzm6Zuv5Yk/B/7tONwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnUc2ECFTNZYRAgh56gwEUn4wO1MB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoCi++D9
a4YnNupl69O7EPmrvjMKLIJkm8TcDPgrObkcYW1kCLGmvbqa+y24+Se5f3VcLU9D
OKodPn61XVcxudieJFTyCoEKk/UgjdZUflpVBvDM3GF1MsfcL6FMh6UPddFUS5c1
Or/pKbQjYq8O2f0FLTo8Vg9vV+5k3deM7Q5PnAv5bn0GilISvb9vLvtJPEmStDkR
wOYlaRnGoVVVvZ8UAPdEhPTjC7COoiMOwmpzpkGAeVHJTEmPBB1cbAjq2NV2033L
YPzJRcHS0BxkX65FEMtJI5Tm8KBT3VAqhjgSg8HAYL7mZ7r7UvZQVC2hOIOb7Dcs
QQyNsMmcRaQlJw==
-----END CERTIFICATE-----
Generated at Wed Oct 21 09:25:20 2026 by rpki-client