
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
File: _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json)
Hash identifier: jLPqp+YZgsxGyZ8AyQGwr+7/o6lXZBw4Gr90ulRMVeg=
Subject key identifier: 94:22:B8:B7:95:55:5B:BE:A4:90:64:7D:26:47:AF:15:24:A2:AC:FF
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 01A08CB15EFE2192443797B5C137ABF6F8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
Manifest number: 1A5E
Signing time: Thu 10 Sep 2026 19:00:29 +0000
Manifest this update: Thu 10 Sep 2026 19:00:29 +0000
Manifest next update: Fri 11 Sep 2026 19:00:29 +0000
Files and hashes: 1: 06pvda0HGfo4YEYPGpGmXC6pc6Y.roa (hash: EHWs8d7V2Xw60HILi+lG9QLvqYdWqwG17JXDByqVTf4=)
2: 0qb9sAGkBvYUU1loJseXlz25OJ8.roa (hash: m0/HWEMnf/XDbGuQAyqai3DBn5WtxpMTkpZaFwmohUU=)
3: 1CTEFp3Jvu1F6k0C2ZBodYWIJDs.roa (hash: QqXzCs08vUdvWpceemZhSOwsQeTszW8Ksi9FXrp8nQE=)
4: 8PB8h-ISSr84nGZyoSJpxK03xZI.roa (hash: Cew3GhEYpI4Z/2ax+94ohovUkb4oKZoSCX7ODBgVNmM=)
5: IvkQusFVMgz0ZI6M1X5qqmaNPyw.roa (hash: ZoLWMz91Ei85Q0Gy+4SDhp1FLqI4f9bOpK4hh8GaK/8=)
6: NNRjD7YhPe6-EjPeFBa4lVzPKw8.roa (hash: xUYG1EGs/Kb2jGbZ4wzN7JCg3UzLO4J02OnlyyP+rbI=)
7: QiTXesEnDUMy1VzzXBZ1a1EV7ao.roa (hash: AmaLGYuWMfv3G3fabRyFwE+8Jn7gj+JYPPZU6wIdzfM=)
8: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: DvRfHGfumIW6MGG5kYRuGqCFQQBx2jOCALh5NI0qTak=)
9: cIdkjRc0JvHWTaaO3mTRRgEBkoU.roa (hash: ptn5S1Yuf3bTojyRJRd81I1o+BdvHo6hZHXrG2ciiWg=)
10: eRFPbbhCM3fQeuHtAy-_UUJuBNg.roa (hash: 3nMJ/JSGaAPLFOCeRvG2BF5qk6+epYjQPD3rGjOwh4Q=)
11: iRG6zhI_HArOTibBs1JV2QE0L_s.roa (hash: 8mVwvZAIQVh0/wtwoWgJ8lPinuzQ8kyjmM21PvKhN0s=)
12: jJ7bTrKqTB9Ie-vB0SBJ5-Gx8Sg.roa (hash: o7j7tuDcWPE6XNy+iCXCizaUbQy3SeVO+VUusUMlj2g=)
13: o4kcznAm2T0ASiz1k23GlpFApQo.roa (hash: 0h+QZjz610NJvNnLCynCQNNnIrDvurMXfFwfYmM8IOM=)
14: wgPfSToKC9FTCAvt-lOgja8J3iY.roa (hash: PycEQ97+AB+dOAuBHC6DWVd/AycBCpoV++Dya2/jh+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:5e:fe:21:92:44:37:97:b5:c1:37:ab:f6:f8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Sep 10 19:00:29 2026 GMT
Not After : Sep 11 19:00:29 2026 GMT
Subject: CN=9422b8b795555bbea490647d2647af1524a2acff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:ff:b6:00:5f:4a:e1:4c:c2:fe:cc:b8:c4:
00:e8:96:da:54:6c:2e:0f:16:ce:32:9c:95:11:33:
d3:0b:6e:67:a5:cb:e6:09:74:2b:75:18:7b:ff:b4:
0c:53:ed:8e:38:b5:11:d8:92:25:91:5f:34:74:01:
8e:f7:2a:3c:3a:50:e1:31:eb:59:53:e4:30:3b:78:
22:98:9d:59:aa:de:2b:5f:6e:75:86:a0:00:fb:c9:
49:a4:7d:b3:6f:45:c9:06:f7:ae:4c:32:3e:2c:d7:
f2:aa:c6:c4:85:61:c8:fc:98:5b:16:96:f4:3d:90:
d5:1e:cb:16:68:b3:c3:24:9a:67:d7:3b:e2:a2:ec:
04:3a:3f:0d:1f:38:4f:7c:e8:d8:c5:a4:f2:31:da:
01:8f:67:11:90:38:6a:74:49:97:35:d8:ac:e3:90:
5c:c5:25:5b:3e:58:ca:74:e6:50:9e:ca:d0:ee:93:
f0:09:d7:76:fd:9f:a5:bc:ba:2c:05:fc:d8:46:f3:
12:64:5e:d4:65:39:66:8a:71:38:28:09:bb:7a:81:
60:6a:ce:90:6b:5c:51:70:13:c1:54:51:2a:fa:3e:
c6:64:27:57:ba:8b:cc:0c:c7:68:f1:4b:e9:7f:57:
3c:89:3f:6a:5d:24:78:21:e1:fc:b4:91:de:7a:cc:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:22:B8:B7:95:55:5B:BE:A4:90:64:7D:26:47:AF:15:24:A2:AC:FF
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b0:34:27:e1:93:8a:ee:70:13:b7:9d:88:21:7d:e7:1e:cc:
da:64:47:91:14:e8:a1:72:15:49:69:b8:6b:f1:49:ad:10:80:
10:9c:cb:d1:07:b2:12:45:bd:d3:f9:51:41:14:30:a0:d0:b1:
cd:66:ad:a3:17:58:bb:78:22:f8:3e:a9:11:c3:2e:95:88:cf:
ce:ed:08:8e:ea:24:9b:2f:9f:db:76:12:36:a7:d4:18:1a:4c:
d5:7d:53:5b:4b:ec:25:0a:54:39:d1:43:d7:f4:39:5a:ee:c8:
e3:b3:7e:b1:1d:03:8d:04:a8:58:f4:17:4d:1e:7e:15:eb:87:
b9:e0:4c:7d:9e:6c:b2:63:cf:19:94:6a:07:b0:df:8a:33:61:
f5:1c:5f:fa:20:dc:e0:cb:63:f5:a0:13:3b:66:f3:a7:c4:52:
06:10:d5:df:b3:42:36:57:fe:ab:fd:9e:c7:cd:dd:db:93:68:
89:34:b5:47:fe:c2:7a:a3:51:9a:f3:0d:99:e9:9d:57:43:df:
e7:28:7b:04:59:a7:53:f1:e4:dd:af:01:05:a8:86:9c:24:56:
36:29:92:3f:fc:06:04:ce:b7:20:98:a2:f2:c7:1b:8e:a2:be:
7b:b8:6f:72:49:02:d7:9f:e9:17:14:0a:4d:4d:a8:36:ff:81:
26:bc:dc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:57 2026 by rpki-client