
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
File: EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json)
Hash identifier: AwzwKqvwcvOJ1RpfjcnxgnS1/NdTWkW5+66klkUHU+k=
Subject key identifier: 60:9F:03:F8:6C:9C:78:0D:C8:23:9E:DC:8F:C9:F4:3B:F0:91:A4:F3
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019CCB2CD89426E8ACA6746A5E5802F7D240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
Manifest number: 0B11
Signing time: Sun 08 Mar 2026 02:00:39 +0000
Manifest this update: Sun 08 Mar 2026 02:00:39 +0000
Manifest next update: Mon 09 Mar 2026 02:00:39 +0000
Files and hashes: 1: 0E3xILl8WVZPEgrYoNWZoMVkTpg.roa (hash: vQCOMzQ12V3c85FGpIjN0usTjxM0EfMLxP/m3PtHPDI=)
2: 4GFqVoHAvDJGSMikiQZjE6m3ycA.roa (hash: 3KzMwiSXOiNOWFGVkqOkBvCJJti1SV8n9AZF2X4+w0A=)
3: 89u9unREIWHzHaE6spWcBTF1lJo.roa (hash: 8xhdQpe85q4z4HC4KzOm7n7h5SGt2CLfQ4BpETrnUNI=)
4: A7H1tgL8F0JNM-wT3DtOlJr42CQ.roa (hash: +lATpBJei82aRdaABJ/OsdQoCTQWkmUoS+oR2diqRMc=)
5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: Tpvx3GO+Inhs1Ge0sox8mgQHP/+GoRnuSMxLebRAjSg=)
6: FyMBoEGioj_dsmDJj-ikFJwt8rk.roa (hash: um7JctGs28pyaDiqpyjltt0/B/jCArUTgznU+S7I78U=)
7: GkQSlEUvi4fNNDdQ901XpFZgHGc.roa (hash: BPA4YpVmwzK85pZgbFRFxFl8S/GQjk30Xmm4tS0QUjA=)
8: Iq9lD_A_wVuXIGB9_YCE7m3U36k.roa (hash: st8orOWixkeCqgnnv2s4K71CFl64bN16idijAh1uNRg=)
9: SJ5lDIB3IGqaDmQaI30m-Ngpckk.roa (hash: utGuqYI8PGSeG8YzzGcnX5WML/j07lId3Gwa7KppOww=)
10: baD6BNxvBtAZt2bomqpQxEMkpqQ.roa (hash: FsrOSFA/yaAmgb8veo0ogll2yJD1vN0y0H3JklgTWeg=)
11: nvxQJqPj5xCQW67tgi211cFPXTQ.roa (hash: xfa8KDdjeEdqxYcvOvQdbP9fHGnZD3QGyADGsxwOr6I=)
12: oQ_KE9PwO8rtARvYNMIq29bG_kw.roa (hash: fD+hSNE7/TxZ3JitmRrU2Ab6kP20foK2b96iquwU1Z8=)
13: v_z54US9Vmz52vw7_c20ggObm9I.roa (hash: tUdF74bDSAZc0TUS9t0KZ7bOC/c/n0wIxweAiJZQRqw=)
14: wROyQ7eCk4vKyt_qosbSZQbCg6Q.roa (hash: msFAqkGBHCct32VvHQhjNj/X2yHNxatrSYDVfKZEtiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cb:2c:d8:94:26:e8:ac:a6:74:6a:5e:58:02:f7:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Mar 8 02:00:39 2026 GMT
Not After : Mar 9 02:00:39 2026 GMT
Subject: CN=609f03f86c9c780dc8239edc8fc9f43bf091a4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a9:c7:d8:d7:b8:53:ca:2c:e8:ac:f4:34:f8:
f0:d6:d0:af:23:ed:5b:90:37:18:3a:cd:f0:63:3f:
71:22:99:c0:39:36:eb:1a:35:88:44:f6:a1:b1:fb:
b4:a7:d3:ea:e7:9b:00:85:49:21:da:7b:57:ac:fa:
99:48:dd:fb:7b:74:82:f7:f8:56:ca:1c:71:bf:b9:
9f:cb:28:4e:a4:0c:48:d5:44:94:41:2c:57:8f:94:
39:38:be:0d:31:7e:00:8a:f8:ca:f9:e4:73:eb:a4:
38:08:dd:71:a3:6a:a4:b8:3f:72:38:dc:21:32:cb:
fd:92:a2:77:2e:ee:5c:0d:b9:7f:ab:31:3b:9c:2e:
b6:9f:22:59:90:14:7c:bb:92:5a:e1:0c:3d:a6:9a:
58:f9:6d:42:0d:2b:31:da:f3:d2:ac:cb:b8:13:28:
35:38:cd:24:9d:f8:45:93:84:43:48:85:ce:4c:d7:
08:e1:c2:b4:81:d3:ec:a9:d4:8e:bb:c9:ae:28:46:
cc:8e:db:a3:0e:0d:b7:1f:ad:d8:5f:f9:df:bf:72:
b4:19:0d:2c:eb:00:72:c8:de:e9:cc:9c:0d:47:da:
f3:79:e9:26:15:95:42:21:1b:60:e2:b2:d7:91:e0:
a4:42:9d:d3:ec:76:51:55:cb:12:5a:1e:bd:33:59:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9F:03:F8:6C:9C:78:0D:C8:23:9E:DC:8F:C9:F4:3B:F0:91:A4:F3
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4f:e8:0b:a2:c8:9a:91:3f:23:d3:2e:1a:e0:d6:6f:0c:d5:
74:29:71:8d:0e:a2:15:46:0f:0b:3c:de:62:59:e8:6e:cc:f0:
6e:e1:9c:c8:cd:38:37:c6:27:94:7e:b7:63:4d:73:17:25:1b:
87:b3:6e:d6:2a:0a:36:e2:e3:e2:32:6e:47:36:ef:ad:68:6f:
e0:b6:c6:bf:23:97:34:06:8b:98:95:15:b9:4a:43:0a:33:98:
e4:e0:b6:f1:ab:4c:45:43:e6:ec:c3:51:53:d3:a0:8c:9b:5b:
a1:54:4f:a2:ff:36:93:5f:73:17:4b:4f:2e:70:e5:9b:ea:e0:
50:50:99:c8:a0:e8:91:fe:6d:f2:8c:4f:91:26:bf:a0:6c:09:
f6:99:8e:7d:38:09:43:a2:a0:18:bf:a6:91:13:3b:55:be:9b:
bd:2f:c7:b2:ee:2e:43:bd:18:10:19:96:f8:29:c5:7f:0d:55:
8b:69:21:d2:e3:74:8b:62:c8:a4:1d:05:12:4d:42:d6:53:09:
73:09:f0:ef:40:4a:ba:30:05:54:4d:f8:6b:87:3c:06:de:60:
05:91:cf:19:99:ec:2c:7b:33:8d:38:b9:16:bd:44:5f:81:6c:
1d:5c:b9:e2:5e:31:ac:46:78:b8:c1:87:0f:6f:a3:1f:ce:77:
fe:79:bb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 04:59:22 2026 by rpki-client