
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json)
Hash identifier: P/DxgQ+iSoL5AS2O/+yOIG20LMtw15WYUKi0Vb8J4Uw=
Subject key identifier: EC:34:0E:9C:9F:66:77:10:CB:1E:9E:DE:BF:8D:3D:54:B3:B3:59:1B
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 019E9C2A48BB1402C1A30E86545ED5E3915C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
Manifest number: 1593
Signing time: Sat 06 Jun 2026 09:01:17 +0000
Manifest this update: Sat 06 Jun 2026 09:01:17 +0000
Manifest next update: Sun 07 Jun 2026 09:01:17 +0000
Files and hashes: 1: 2CUChmUOOT29mGMWY66DWvJh2WQ.roa (hash: zU1VWPSaWCzOeazo96kB3sWhetiBsHBnhrLCkL6ZTdA=)
2: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (hash: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4=)
3: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (hash: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU=)
4: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: Xls2uQm0DVaqLGCwAzgC5ZkFM7H57zPqCppPvVjEjSU=)
5: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (hash: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk=)
6: DcHyP-EvL5JB0AR6TgnEamGEyXw.roa (hash: 2EXmDj8EeuQdqWCdMyXvAF2OldfFdCBOuc9rEPVXwD8=)
7: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (hash: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro=)
8: SFT1d23h5s56wOshvucHEdfHMus.roa (hash: VF+VBV1f8xNTi+BzW8c6Ab0X5I99oWpbTy8oGRDDLo4=)
9: UkgHwb4aR-vfEVW_chFXeZM7ufs.roa (hash: EApidgvlTKfdDWwQPs4AF7dQdfTiN6dGaqCve1W5gyA=)
10: WGjiujLOuuOMzeq5qZIClszPW1M.roa (hash: O/EAhkWdzhGmiMAnV0b4Fh9oCWFKJcMW6EgTymaPAQY=)
11: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (hash: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM=)
12: cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa (hash: jEMYUPIGrPy+Y+xLvCOsQ36XF8oj9iEL636o4Kzme40=)
13: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (hash: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts=)
14: fhJaK5hMEBAZXRLS4-0O4aZwl2I.roa (hash: xuK8/Y3oUhvmHKsVhHkSHzhFTE1WF3HRAMrbL0YDdBA=)
15: fxFIclzOclkDebowO2HCdBIp7JU.roa (hash: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw=)
16: hOLoSAjKi_Ysduv-PJ2ejNql5Ok.roa (hash: lHppC78Yz/GWXK8KxKeoOvZZKZRlVzNZc6B6F5euHEc=)
17: lfuF0jCiq554Dy69uuASsTOPZ58.roa (hash: 6OAF0vEeoAJWYtA3vCDPsWGl38QU6NBLN+OCMZmyOUQ=)
18: x5SrbAjZFbdB6w5M55a69sLosmk.roa (hash: FE67bVwUc7lNEUOq+r18u7T3FenYnKpS+bSln89Joz0=)
19: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (hash: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw=)
20: yJInE-fPhdu-ABKOdKIoShinhzo.roa (hash: skD34yjii/PhcEF3U0syiUJjraUYJpJM6Jt4QrA1zs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:2a:48:bb:14:02:c1:a3:0e:86:54:5e:d5:e3:91:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jun 6 09:01:17 2026 GMT
Not After : Jun 7 09:01:17 2026 GMT
Subject: CN=ec340e9c9f667710cb1e9edebf8d3d54b3b3591b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:1d:91:a7:4e:3b:53:4b:0d:ae:0b:04:c7:65:
94:a4:99:d6:ad:f0:85:af:fa:6b:6c:f1:f3:ef:7c:
87:25:24:60:73:e2:7f:31:d0:d8:3a:5c:c1:e7:31:
8d:7d:bd:9f:05:77:ae:0a:8d:ed:5f:5b:a5:3f:af:
6e:fd:be:8e:c0:85:07:a5:36:d4:cf:12:b5:33:a6:
22:c0:a7:34:ef:cb:34:1d:03:6b:91:85:ac:e3:96:
6f:6d:cb:4c:a4:c0:74:8e:ea:9e:44:6b:e1:3d:26:
ec:4d:45:f1:b2:2f:c5:d6:64:40:cf:57:45:09:9a:
e3:82:e0:26:77:09:14:4c:73:bc:83:e4:7c:34:8c:
48:f8:62:5a:3e:e7:2e:0f:ea:68:d5:95:b5:53:54:
62:04:e9:c7:ee:1b:21:07:c0:3f:7e:ca:4e:3d:60:
f1:ab:62:bf:38:d3:74:3f:61:ff:fe:96:df:44:e4:
a4:0a:8a:70:6c:ab:48:fe:24:bf:ee:62:c3:e0:d3:
22:43:28:ff:d7:52:68:7a:42:d9:a0:c6:23:f7:9c:
ea:10:df:a2:37:8a:fe:2c:23:77:5a:4c:83:6c:50:
3a:f1:1a:be:27:1f:40:bb:05:88:27:26:1b:c1:bc:
1e:16:d9:f5:74:fd:34:5c:4b:f4:62:25:f7:13:79:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:34:0E:9C:9F:66:77:10:CB:1E:9E:DE:BF:8D:3D:54:B3:B3:59:1B
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7c:f6:5b:89:a1:e3:75:93:b8:80:84:39:b0:ac:78:cd:4d:
a8:94:97:2f:e7:ee:95:73:5f:2d:54:81:8c:93:36:b7:a7:3c:
e7:e7:17:60:fa:62:53:06:f2:94:8f:65:c7:c5:cd:b0:90:42:
14:3f:77:2e:f7:6c:99:47:dd:fa:14:d8:40:56:2e:ea:1c:4e:
f7:e1:f4:71:46:1a:b8:8c:28:eb:cf:81:1f:6b:23:14:6a:96:
86:e6:c9:b2:65:54:4a:94:ca:0a:ea:7d:be:0b:f9:7a:50:2d:
78:d2:5f:29:00:5f:fc:6a:af:91:d3:c3:3a:bf:e5:a6:ef:7c:
b0:60:ae:12:50:47:36:72:c3:8d:56:d1:9b:dd:4d:12:f6:b4:
c5:ac:86:3d:5a:4b:2e:81:dc:b2:26:03:18:e5:d6:52:c4:48:
53:da:dd:9a:92:59:49:60:3e:6d:41:92:d8:3c:1f:11:21:6a:
92:33:66:d1:88:17:50:be:d5:15:b5:a0:34:9c:b5:e6:ac:d7:
9f:95:be:11:b6:5e:43:ce:ed:c6:29:0d:2e:42:dd:55:a1:91:
54:38:c1:00:66:9d:42:bb:6d:23:f8:57:c1:2a:f7:9c:4a:dd:
7e:71:c1:d3:9c:43:d3:f8:12:95:dc:a8:ee:ed:06:ff:77:5e:
48:33:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:52:07 2026 by rpki-client