
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
File: 7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json)
Hash identifier: r0T4Y+xX1c6xpXUu4S9OvAtF0hk463hlUbQcnpUP3w8=
Subject key identifier: EB:42:95:19:02:D1:F9:ED:34:F6:8A:A8:E7:78:D6:8D:43:A4:D7:F0
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 01A0B4D190E2D16DA3D1C7E2ACF91B883D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
Manifest number: 1A74
Signing time: Fri 18 Sep 2026 14:00:27 +0000
Manifest this update: Fri 18 Sep 2026 14:00:27 +0000
Manifest next update: Sat 19 Sep 2026 14:00:27 +0000
Files and hashes: 1: 03adZJbb-O1p_CXcQ_4M0jgNEFw.roa (hash: ew9gGSBHBbQPEdarHkUHaR6ktGIwejsj7yNx1KPoThQ=)
2: 1-AaYw2BfaY3XhYhRX7k0ikSXO9w.roa (hash: WyNldQk+XZoMO0b/C5jIYmrjIYQhy0dv0+KOkKWcQSE=)
3: 1P4VHJbsu8-KA_CDbuA3mLdiyQo.roa (hash: QETOSgaKr5YFSXBkowwoHjS2zVlXL1HHWJzh0UPdErQ=)
4: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: cGczsnhrvcXh/DdZ4CP7R6xSQQM+Cux3f4wYasZJYto=)
5: Fx8cnnhYnA6BH8cJUcV9Vz-n8OM.roa (hash: nBn8KMz1/qrlmEp5tnjRaNg0XQIu3L/8mlSSo9e/i1U=)
6: HsnhtW3Vo1ScMXDm_04rDrcrO8A.roa (hash: 5+GIeXFw3kg0H6nKxy1DPIUv8/Ly7H/qd2V/EdogjOk=)
7: JHDYQiALesWvByATRJ3bFGKf440.roa (hash: 4qi7uVDpfuqHxI2PwRXSylbhTlTDmB3nFH/RQRca9I4=)
8: M-xhOdJhOt1IVpAo6jVDD6VitCU.roa (hash: waOg7nDr7fSZGGvzIuGjBg6JCLXByvSxzjfTgEkG9Iw=)
9: RMbFoCYqNcmYffu8B7XKQZOpe9g.roa (hash: Bc8GrrG0ePgUPfQVi+zdsUsnCNOP4l8CwIx91Qrbgs8=)
10: RkJgzEGbgGQVpYMhyuLt_ciEWs0.roa (hash: s24XvC1lX1fQ9pY/tvq7aXzmmQIz7/1F7PGbhhoCpbM=)
11: YUZAH4o6lSlfa8V06bR-tRKZeJY.roa (hash: RWEnsTCPJnS0wvgpBfvSOdsOCDY+GRhBVGGh8MqvS3c=)
12: bKHn0qb-Jdo8C-QdUH0EoddC6R0.roa (hash: t7W3AEy6SZzLhzfSNb31m9y8L46P7EJQYuCD/DSTk0I=)
13: eidiHBPgQKzRSZT9OwGu9tKmDIg.roa (hash: wDu3wVyoIZQVKXQBVdzTm8+ss6XGOx6VqYvXUN2hobg=)
14: hO16bUk7sgMxRq4iY5R-8zAg_pw.roa (hash: muh9Cwq/x+krpQXeGbq5yotjMWT1VH8PKPWrvuCsuXA=)
15: k6jLYVH6C0z0KMYaezVQiNE4EPU.roa (hash: 7jskiw03SWhNj59VRgx4kkxZFbjnSw3URxMXrNwyUt0=)
16: ygT4_ge1ohdgPGNfdC3uMhbevTo.roa (hash: QzMQwc/7YDt82Fn8x4yXez6Z6w0QENNYIpCBlAJaBv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:d1:90:e2:d1:6d:a3:d1:c7:e2:ac:f9:1b:88:3d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Sep 18 14:00:27 2026 GMT
Not After : Sep 19 14:00:27 2026 GMT
Subject: CN=eb42951902d1f9ed34f68aa8e778d68d43a4d7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:61:52:f3:ed:88:f6:c1:89:6f:85:32:21:
49:4b:58:db:11:20:81:25:5c:9b:f8:da:ef:16:f0:
c7:c2:ac:38:66:ba:61:71:75:8f:60:d5:f6:4e:64:
c9:7d:a4:07:52:4c:2b:ce:62:43:19:75:88:5a:96:
6b:2f:82:52:f1:e9:66:0c:7e:9b:01:96:9f:02:4c:
97:7a:cf:89:3c:07:e3:70:cf:cd:f8:54:73:b3:5d:
7b:f1:1b:91:68:0c:de:ac:35:8d:7e:59:20:23:ed:
a5:3e:1e:ea:f4:67:28:cf:f7:5e:0b:a0:6b:f8:c0:
d8:7a:a0:14:01:df:0f:9e:ba:c3:ae:2a:83:66:15:
17:98:21:66:65:45:1f:e1:2e:dc:6c:47:3c:5d:4b:
34:b1:ae:2f:b3:f0:a5:36:4a:f8:33:3f:fa:37:0f:
42:a6:a5:5c:5e:df:9f:d5:fd:a6:cb:51:fe:64:37:
97:e1:65:98:cb:70:35:a3:3e:d6:b6:c0:b4:d3:83:
6b:18:11:70:f8:7a:3d:8d:e3:0c:59:ee:b2:c6:c1:
72:42:4f:8a:23:d6:23:e8:e7:0a:a2:28:e3:a1:7d:
b9:dd:10:87:25:2a:40:35:48:d3:da:0e:96:2b:34:
85:d7:89:b1:ef:da:08:53:93:a9:e5:3d:78:0b:62:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:42:95:19:02:D1:F9:ED:34:F6:8A:A8:E7:78:D6:8D:43:A4:D7:F0
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:ca:de:ce:93:9b:a8:6c:6c:a3:1f:87:5c:51:5d:a4:30:d2:
b1:c5:1e:ec:20:03:fa:2a:36:aa:34:0c:01:1c:07:03:fc:da:
3d:7b:63:12:eb:45:2c:d6:dc:ec:15:cc:36:dc:ad:7f:02:e1:
f8:43:a4:de:58:80:15:e0:9e:2b:84:fd:11:a4:70:ca:c9:b1:
29:ef:a1:d2:e1:08:6e:1f:dc:77:ff:75:32:07:2f:19:19:2b:
20:fc:89:b2:e3:c7:4c:dd:55:7d:3d:98:9f:07:7b:97:ec:cb:
85:f5:a5:a6:0e:17:fa:42:5c:12:87:9a:5e:51:dc:0f:68:41:
b2:b4:13:e3:5b:a5:76:e5:43:4c:2f:1b:1e:96:b7:46:5d:33:
39:5f:4b:99:d1:ee:81:59:eb:e9:42:c7:87:db:f9:d4:b6:cf:
6c:ae:0d:dc:23:f5:18:dc:21:c3:f0:18:32:c9:73:16:50:80:
b9:71:16:cf:95:fb:6a:61:e4:c1:a1:84:3f:5a:10:f4:aa:d9:
5a:e7:86:77:28:41:22:5e:fe:01:e0:a9:70:fd:06:71:8e:28:
de:a9:57:95:98:d9:96:c4:3f:f5:8b:2b:7c:81:41:4e:06:4f:
40:0d:a9:6c:0e:db:44:a1:f1:e4:da:a3:c7:35:4e:2f:f3:d3:
a4:41:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:58:37 2026 by rpki-client