
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
File: EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json)
Hash identifier: 9aU05gwcvF5ccqxS3fyRe/hJSkfVFHeZ+ml+rm/S63c=
Subject key identifier: 65:C1:45:9F:AB:A4:60:50:76:4E:FA:88:50:94:A5:7A:95:C2:94:D3
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019CE259E32BA80AA54588DF02441542E67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
Manifest number: 0B1D
Signing time: Thu 12 Mar 2026 14:01:07 +0000
Manifest this update: Thu 12 Mar 2026 14:01:07 +0000
Manifest next update: Fri 13 Mar 2026 14:01:07 +0000
Files and hashes: 1: 0E3xILl8WVZPEgrYoNWZoMVkTpg.roa (hash: vQCOMzQ12V3c85FGpIjN0usTjxM0EfMLxP/m3PtHPDI=)
2: 4GFqVoHAvDJGSMikiQZjE6m3ycA.roa (hash: 3KzMwiSXOiNOWFGVkqOkBvCJJti1SV8n9AZF2X4+w0A=)
3: 89u9unREIWHzHaE6spWcBTF1lJo.roa (hash: 8xhdQpe85q4z4HC4KzOm7n7h5SGt2CLfQ4BpETrnUNI=)
4: A7H1tgL8F0JNM-wT3DtOlJr42CQ.roa (hash: +lATpBJei82aRdaABJ/OsdQoCTQWkmUoS+oR2diqRMc=)
5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: WaDndXLs4xgN6w7H345LFV5uAy3TuO3qR6zqhRHrZRk=)
6: FyMBoEGioj_dsmDJj-ikFJwt8rk.roa (hash: um7JctGs28pyaDiqpyjltt0/B/jCArUTgznU+S7I78U=)
7: GkQSlEUvi4fNNDdQ901XpFZgHGc.roa (hash: BPA4YpVmwzK85pZgbFRFxFl8S/GQjk30Xmm4tS0QUjA=)
8: Iq9lD_A_wVuXIGB9_YCE7m3U36k.roa (hash: st8orOWixkeCqgnnv2s4K71CFl64bN16idijAh1uNRg=)
9: SJ5lDIB3IGqaDmQaI30m-Ngpckk.roa (hash: utGuqYI8PGSeG8YzzGcnX5WML/j07lId3Gwa7KppOww=)
10: baD6BNxvBtAZt2bomqpQxEMkpqQ.roa (hash: FsrOSFA/yaAmgb8veo0ogll2yJD1vN0y0H3JklgTWeg=)
11: nvxQJqPj5xCQW67tgi211cFPXTQ.roa (hash: xfa8KDdjeEdqxYcvOvQdbP9fHGnZD3QGyADGsxwOr6I=)
12: oQ_KE9PwO8rtARvYNMIq29bG_kw.roa (hash: fD+hSNE7/TxZ3JitmRrU2Ab6kP20foK2b96iquwU1Z8=)
13: v_z54US9Vmz52vw7_c20ggObm9I.roa (hash: tUdF74bDSAZc0TUS9t0KZ7bOC/c/n0wIxweAiJZQRqw=)
14: wROyQ7eCk4vKyt_qosbSZQbCg6Q.roa (hash: msFAqkGBHCct32VvHQhjNj/X2yHNxatrSYDVfKZEtiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:59:e3:2b:a8:0a:a5:45:88:df:02:44:15:42:e6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Mar 12 14:01:07 2026 GMT
Not After : Mar 13 14:01:07 2026 GMT
Subject: CN=65c1459faba46050764efa885094a57a95c294d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:c2:9f:f7:9b:d3:85:80:e9:70:39:3f:f6:
73:8b:46:0f:db:49:fb:0d:77:ba:76:12:71:18:76:
7a:5f:9d:d1:6a:bf:e2:de:08:2f:5f:4b:4d:8e:5d:
0b:4a:93:ae:59:c5:24:62:44:a2:45:de:0b:ad:41:
27:29:c0:2a:ba:22:32:1f:f1:54:6e:5a:14:eb:40:
90:c7:d8:5f:84:fb:fe:85:8a:9c:05:96:8a:13:a4:
f5:13:10:78:76:57:52:cf:52:49:45:cb:b6:78:98:
15:b9:66:3b:b3:0c:85:1e:a2:cc:f4:5c:e6:17:ba:
8f:89:01:7e:74:4a:18:9c:a3:15:4b:f8:95:0c:a1:
a4:c2:90:4b:b9:94:2d:ee:02:13:c7:4f:f4:3e:26:
ce:42:be:70:4c:1b:49:e8:d8:fe:5a:01:95:b5:bb:
60:bd:ff:e9:b8:29:71:8b:86:65:21:c5:0b:fb:ee:
59:1c:13:b7:39:43:55:b7:93:00:83:43:d1:69:10:
f2:9d:f2:11:b5:48:a4:cf:74:68:92:2f:1f:2d:72:
80:2e:90:6b:a8:d4:b6:7b:3d:e6:49:16:f6:cf:7a:
b2:8a:e6:e7:be:fc:43:4a:5b:10:f3:2b:d2:4b:42:
a3:92:b9:39:ea:cb:d2:54:c4:b7:d5:6d:de:17:4e:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C1:45:9F:AB:A4:60:50:76:4E:FA:88:50:94:A5:7A:95:C2:94:D3
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ea:c0:01:82:32:de:15:bc:e6:dd:28:8e:e4:73:72:9e:4a:
48:79:b5:4b:22:6f:ce:b4:fb:60:63:8f:b8:5e:78:60:f3:ae:
7a:b6:6d:57:7c:cd:83:90:1a:69:91:08:23:52:5d:54:15:7e:
cb:c1:32:b7:ec:7c:09:ef:ff:49:41:6d:d3:89:8b:58:0d:95:
72:a9:1f:ac:dc:5d:0d:0b:d1:ed:60:25:2b:48:b6:46:74:02:
82:ee:cb:73:ee:b6:eb:23:29:42:2a:a5:2a:4a:2d:02:0a:98:
f5:f6:eb:52:30:4c:3e:69:86:19:cc:f8:96:56:eb:b9:a8:15:
ff:f2:07:08:17:bb:ed:21:40:83:4a:c8:b5:5a:e4:49:17:73:
a2:b1:7a:6b:63:d6:78:bc:c4:7d:23:1a:1d:ef:3d:87:f0:36:
7b:aa:04:87:c8:19:0b:85:f7:19:f3:cb:87:54:fd:af:73:07:
67:9d:0a:9f:99:e6:7f:b7:6f:3a:81:05:4d:af:e3:a8:c4:57:
4f:5d:4e:b3:1d:4f:a3:71:3f:8a:11:92:66:ae:da:ac:49:8f:
38:56:44:30:6d:4e:2c:38:19:57:f1:2f:12:d4:16:b2:77:08:
56:79:d3:9d:bc:91:68:9a:f6:2e:4e:fe:b8:40:2c:b4:2a:a7:
ba:0b:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 20:39:51 2026 by rpki-client