
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
File: e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json)
Hash identifier: DRjgiy2dq8Av8CGDa/YTjrsXAuv4gBZSFIqPRELeF2U=
Subject key identifier: D9:EA:43:A3:57:26:E9:BC:96:81:8D:E5:89:BA:19:5B:A8:06:10:05
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 01A08C0C8D7A8705C6F6EA564FD12FA19551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
Manifest number: 0591
Signing time: Thu 10 Sep 2026 16:00:27 +0000
Manifest this update: Thu 10 Sep 2026 16:00:27 +0000
Manifest next update: Fri 11 Sep 2026 16:00:27 +0000
Files and hashes: 1: 3WwCnnTd8cSzdKjbYhNI8g53NPE.roa (hash: aIhbguXWgQO1tJI+20Jt3xw4Dn8zy1ZDD/ntTtEtp2c=)
2: 4kwKLdh3RM_T2CHdwfr7djNqFPw.roa (hash: fMhCuCyOrPdsWFDfGoHBSeCFarYrpqQUzcCOvftK41o=)
3: 7V5o0G742Xx6wwekFHlHI_pH6s8.roa (hash: 5RA9pDaVBJdJXOc6UztowcHA38lXbN2dK51pTKu1n/4=)
4: FwV9_soW4dQWq_CwmZwM9y_Yg24.roa (hash: xPzL9Tf4VzlH+kYxMAxG9MOUeYhbFQVm/oBhO2qB2hw=)
5: KFPTzEg4Y0L6aJGjreTB0eGWtcY.roa (hash: 8tieHB2/IwsPF3XmJYABOmkTWjKNGkzX0/aPiwcDseA=)
6: KvNF-GNwZ3nupnOa4r1l2jy1zCI.roa (hash: atOFPKEzfFHxFdsBH5bVAxThEg5GX7FYolGtUJKktyc=)
7: M5z_FJkpC3bqs6y8rNLlO6L7mt4.roa (hash: pnzeAaisjISO2SuVi7e+PqwovvETfQV3LOc/UO86oM4=)
8: RFitIfzbelUgTTUVvMm_6P7Qua4.roa (hash: k1QiINtX4yKyCSBsMvwbViWzQ/ACbhcMG/vPDPVXV8c=)
9: S1JnSXKRylQf_Uh5rIFy-LkjUjc.roa (hash: vNnVXt5NopYDCqipg2PS3dWJG6ySbA9t5QTX1gIkUow=)
10: VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa (hash: kAYhfT6Miw9r4z05yf2O6XBU1ToH3EWuwwXPo6D2N2A=)
11: X6gkbQD7XKjlpDCPmtrSBjhNhNY.roa (hash: J9AA0VeAPAZJB/+l+EvDES1QGP6dLWqo5ps91vAe5bc=)
12: bY71skCcBRy3_7E1b-YloIxj3EI.roa (hash: wz4302B/D0gTMZmb2I2/ICofgsbTDyh3vJJUmvhGTb4=)
13: cxrFYholN9HvJ-us9fmJgzA0WI0.roa (hash: Wwa5EX50bfWPI0XbhpID/ZlbhKK3J9mlKgRfeQnAMPQ=)
14: dIdr6CdHDFmEHdvXrAfl7icIYxY.roa (hash: WfzmExFAW5iLs+d61FaP+J5J9DI0CoXqdTMcrCDFzqo=)
15: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: 1MsrzTH5/JGvzLde+XHOS7OSSTq9WjuEb5A7aWMHtGg=)
16: hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa (hash: DEovq/0Otm5xzo+ikKL6F1zlfXWLyId8aTGFI9Mt6iE=)
17: lwr4ujjVRZ9lTT6n38RaTmGl6zA.roa (hash: 0muOjArSKM5mL3HgrEoutlOx4J3NtUU/jA3sEiadzN8=)
18: w0LVoZ_uYiC7toDXnKtxvHDd4Jo.roa (hash: 6prvU2oZ/9BgwQzBcdZM3Omry4kQSL9zaJJkXMdKxqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:8d:7a:87:05:c6:f6:ea:56:4f:d1:2f:a1:95:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Sep 10 16:00:27 2026 GMT
Not After : Sep 11 16:00:27 2026 GMT
Subject: CN=d9ea43a35726e9bc96818de589ba195ba8061005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:1c:d6:a7:a7:a9:c6:a6:e7:79:39:03:4b:
dc:9c:e8:c1:77:c4:dd:44:ef:49:b7:c2:15:00:db:
18:e7:e8:52:cc:ff:9a:2e:01:03:c2:8f:6c:47:d9:
f0:9d:67:cc:b9:03:78:c4:20:ef:4d:00:36:e9:f1:
cf:bd:1b:34:4c:93:0d:9d:33:47:7b:a3:1c:58:17:
83:be:af:dd:c0:35:04:df:e8:cf:25:27:7b:56:ba:
11:34:ce:6d:fc:9e:83:16:e3:0d:ea:80:b3:61:1e:
94:5e:59:43:8e:f6:23:f7:bc:ce:dd:b8:18:60:51:
cb:81:dd:05:6a:d8:d3:52:61:a9:76:ed:cf:b3:23:
9d:ea:e5:82:7f:32:65:f6:78:e3:f0:5e:5d:d4:c4:
70:5a:43:93:c6:d8:71:94:85:e8:ae:63:6f:02:37:
d0:74:b6:a2:c0:41:90:bc:fc:a4:6e:d6:6f:10:34:
83:00:92:fe:dc:f9:8b:6a:94:f2:56:99:d7:0e:62:
cb:70:e8:ce:74:5c:fb:3a:b0:f4:92:0a:ea:1d:1f:
77:db:e6:44:d3:4d:24:a0:bb:a7:a9:b5:14:42:43:
1e:3b:f7:75:2b:74:8b:d2:1e:f9:ac:e1:dd:0f:a6:
06:b6:4d:24:fc:09:39:c6:17:b2:03:5c:d3:74:c7:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EA:43:A3:57:26:E9:BC:96:81:8D:E5:89:BA:19:5B:A8:06:10:05
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fe:04:bb:67:b4:a8:8d:a0:d7:a7:91:51:46:f4:12:2d:ef:
92:9f:46:da:84:4f:16:ae:55:2b:eb:90:3e:e1:07:ab:69:7e:
ed:e2:ae:73:a6:6d:99:25:a7:17:52:3c:1e:6d:5c:e1:c8:c1:
00:4d:1d:05:6c:c1:4b:4f:53:ab:45:31:24:ef:3f:17:b9:53:
eb:6d:10:8d:12:0e:2e:3a:c3:b0:60:e3:15:33:ae:98:af:3f:
8f:c5:04:ba:74:cd:c6:98:54:5c:ad:7e:aa:ac:20:e0:a7:ca:
0a:f5:3f:d3:a8:f5:a3:d2:d5:6c:15:f4:bd:f0:01:e3:91:35:
c0:76:52:b1:4a:cf:59:d1:08:d0:f7:bd:c5:87:19:75:3b:f8:
39:3c:38:86:d5:4d:50:a7:ef:be:6d:d0:19:99:82:14:04:77:
ea:b7:01:a5:eb:d2:3b:a9:c6:45:ec:b0:74:ac:cc:62:32:f9:
bf:ca:50:50:4f:c1:6c:72:c5:69:bf:a6:fc:00:92:ff:a9:23:
90:ff:b2:9f:a3:10:93:6d:3d:81:e6:4b:e5:1c:02:64:f8:32:
f6:09:b9:e2:25:bf:92:4d:f3:74:ff:16:33:b7:86:66:e2:eb:
e8:6b:7b:e3:a3:0a:ae:85:bd:e3:e7:11:6e:b3:a0:fc:e6:c2:
9b:61:7e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:06:13 2026 by rpki-client