
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
File: e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json)
Hash identifier: nxldJuCzJDtDeapqX1nXbwKWbwH6gmJrz0YJGy/1VWM=
Subject key identifier: 8F:FF:ED:51:F5:FF:87:4E:2A:50:9E:C7:D1:9B:79:2F:5D:81:10:16
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 019DCE2BD5E49F5DB5B94634821B7B0BB9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
Manifest number: 0421
Signing time: Mon 27 Apr 2026 09:01:12 +0000
Manifest this update: Mon 27 Apr 2026 09:01:12 +0000
Manifest next update: Tue 28 Apr 2026 09:01:12 +0000
Files and hashes: 1: 3WwCnnTd8cSzdKjbYhNI8g53NPE.roa (hash: aIhbguXWgQO1tJI+20Jt3xw4Dn8zy1ZDD/ntTtEtp2c=)
2: 4kwKLdh3RM_T2CHdwfr7djNqFPw.roa (hash: fMhCuCyOrPdsWFDfGoHBSeCFarYrpqQUzcCOvftK41o=)
3: 72Wb5Ky01kvhl4QhfLQ5L_ylSiI.roa (hash: vZhU/38tVfKMQXtXEf0zL9xQr8OezLicNnuxASDwPqs=)
4: 7V5o0G742Xx6wwekFHlHI_pH6s8.roa (hash: 5RA9pDaVBJdJXOc6UztowcHA38lXbN2dK51pTKu1n/4=)
5: FwV9_soW4dQWq_CwmZwM9y_Yg24.roa (hash: xPzL9Tf4VzlH+kYxMAxG9MOUeYhbFQVm/oBhO2qB2hw=)
6: KFPTzEg4Y0L6aJGjreTB0eGWtcY.roa (hash: 8tieHB2/IwsPF3XmJYABOmkTWjKNGkzX0/aPiwcDseA=)
7: KvNF-GNwZ3nupnOa4r1l2jy1zCI.roa (hash: atOFPKEzfFHxFdsBH5bVAxThEg5GX7FYolGtUJKktyc=)
8: M5z_FJkpC3bqs6y8rNLlO6L7mt4.roa (hash: pnzeAaisjISO2SuVi7e+PqwovvETfQV3LOc/UO86oM4=)
9: OFbPbs8o84Mx2w-OctCFEzyYygU.roa (hash: K9++GIp3S1SPKzxtPCf5MbshLgMP0x4lB/emAZ332gc=)
10: RFitIfzbelUgTTUVvMm_6P7Qua4.roa (hash: k1QiINtX4yKyCSBsMvwbViWzQ/ACbhcMG/vPDPVXV8c=)
11: S1JnSXKRylQf_Uh5rIFy-LkjUjc.roa (hash: vNnVXt5NopYDCqipg2PS3dWJG6ySbA9t5QTX1gIkUow=)
12: UnPZZ3Kg5vEIC6EGE2a0fCR05Us.roa (hash: nCSgngo72sAUBIAPkqY1n0nS+kfpLh6FUfGBWOhDNHw=)
13: VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa (hash: kAYhfT6Miw9r4z05yf2O6XBU1ToH3EWuwwXPo6D2N2A=)
14: X6gkbQD7XKjlpDCPmtrSBjhNhNY.roa (hash: J9AA0VeAPAZJB/+l+EvDES1QGP6dLWqo5ps91vAe5bc=)
15: bY71skCcBRy3_7E1b-YloIxj3EI.roa (hash: wz4302B/D0gTMZmb2I2/ICofgsbTDyh3vJJUmvhGTb4=)
16: cxrFYholN9HvJ-us9fmJgzA0WI0.roa (hash: Wwa5EX50bfWPI0XbhpID/ZlbhKK3J9mlKgRfeQnAMPQ=)
17: dIdr6CdHDFmEHdvXrAfl7icIYxY.roa (hash: WfzmExFAW5iLs+d61FaP+J5J9DI0CoXqdTMcrCDFzqo=)
18: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: VzyK+WdbaQseNeDf/x/7dssQnsMxWAf/7dI2bGR0dv4=)
19: fISbt3TEt5z7hvgEykaWZ1xKNyY.roa (hash: CfyvMhS9ewbjRLfiApY3927/WtEF1gMMScOXv02Vkr4=)
20: hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa (hash: DEovq/0Otm5xzo+ikKL6F1zlfXWLyId8aTGFI9Mt6iE=)
21: o-2kICnoHNfivNsTLGTpqOYwstQ.roa (hash: YkVOT+LP7w8mTJUbnwv0gEvNf1idVM4c+qYZj2+A7Oc=)
22: r9B02vmajGoqzJg47qEQQvo3CxE.roa (hash: SlXFzGDnnfIbDGN67Fp7Oc2RR984LeMf9GzRFDPOlaA=)
23: w0LVoZ_uYiC7toDXnKtxvHDd4Jo.roa (hash: 6prvU2oZ/9BgwQzBcdZM3Omry4kQSL9zaJJkXMdKxqU=)
24: xp4XInmvIX6CC9Ex-JmVHgrbPgs.roa (hash: RHkZbfHLGorgQEqsyMXzjKwc68C6UanDs4STBF1Ck9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:d5:e4:9f:5d:b5:b9:46:34:82:1b:7b:0b:b9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Apr 27 09:01:12 2026 GMT
Not After : Apr 28 09:01:12 2026 GMT
Subject: CN=8fffed51f5ff874e2a509ec7d19b792f5d811016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:9f:33:83:a9:d6:d3:9e:35:2e:4e:00:15:
2d:ba:18:17:30:4d:9a:b8:20:b3:b6:15:6a:42:ec:
b2:9a:a0:88:b8:b3:f4:97:b2:39:b4:39:33:fb:c7:
f5:4b:98:85:9f:df:9d:98:06:ce:fc:e5:1b:60:01:
b5:28:3a:ee:04:86:6a:9f:cd:f3:50:09:15:84:2d:
62:61:92:93:0c:64:b2:7d:cf:68:b4:44:66:3c:73:
f9:6b:77:d3:da:b7:1e:3e:d7:7e:56:d6:19:03:38:
da:14:a7:b5:ff:c6:12:1d:d7:1d:c8:98:f6:e8:7f:
74:09:ad:e5:cc:df:50:5e:c3:c2:23:f9:4a:71:5c:
3e:44:dd:29:ef:ce:c7:53:6a:f4:ac:c2:92:71:f5:
12:1c:4b:e3:b9:39:28:57:b3:60:58:6b:a5:44:aa:
d5:3a:89:ae:f6:bc:f0:7a:f0:3f:37:b2:d2:df:61:
89:2e:f2:e9:b9:77:71:83:e0:5a:ed:8d:53:7e:62:
18:3d:18:7e:30:a0:dd:77:e5:91:09:f7:b2:3a:51:
74:f1:10:78:07:3b:63:1f:b9:9a:9b:0b:ec:c3:45:
9d:f8:58:52:2d:1c:fb:5c:ca:a7:1c:5e:86:83:b3:
cc:7c:59:60:40:7c:74:22:95:d7:10:b9:34:e6:83:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FF:ED:51:F5:FF:87:4E:2A:50:9E:C7:D1:9B:79:2F:5D:81:10:16
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c8:5e:b5:7c:52:72:2e:50:f9:ed:4a:41:37:b1:d3:9a:93:
14:0a:72:59:9b:74:1a:63:40:50:6b:41:8d:20:0d:0e:64:cd:
a0:68:dd:f7:15:38:32:4f:b1:4f:89:db:b5:f2:c9:8f:31:3a:
dc:1e:de:5c:c7:b6:9c:e0:43:38:03:66:7e:3e:66:2a:eb:95:
7b:37:c8:78:07:82:9b:11:62:36:0e:6d:c0:ee:6c:ad:df:d0:
ee:ee:32:4d:79:2d:84:fc:53:8a:3d:c4:a3:df:a7:af:18:7e:
d6:4a:4d:9a:4e:5f:21:0e:74:d2:2a:ca:1a:08:97:c2:3a:91:
0b:dc:00:4e:bd:96:d1:2d:86:d3:97:52:f9:18:28:aa:d2:40:
08:bb:8f:83:26:28:be:3f:91:6b:fd:01:19:e9:68:66:c6:3b:
73:14:16:0b:81:b4:b3:7b:01:de:dd:fe:39:ab:80:19:79:c2:
a6:5b:1d:cd:f4:7e:40:d6:9f:56:c7:2e:11:d0:cc:14:56:24:
9b:4e:59:bb:5d:9e:11:8d:9c:ba:86:2d:f5:26:fe:d8:de:fc:
a2:4d:54:41:8d:f4:5e:29:67:6d:3e:f5:5c:7e:97:23:e9:41:
86:f8:e0:9d:be:3e:52:37:b2:09:d8:2f:a3:12:a3:3b:b6:05:
16:a8:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:00:13 2026 by rpki-client