
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json)
Hash identifier: kosHS/VhnnfB/JtVzTFeZAujPE9TrOI9/y4h0R4ni28=
Subject key identifier: DB:11:DC:DE:60:20:46:D1:06:74:10:BA:6A:83:A4:71:39:7D:1C:6B
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 019FA1847C4826EBEBC61DC612ADF8EEC824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
Manifest number: 1894
Signing time: Mon 27 Jul 2026 03:00:41 +0000
Manifest this update: Mon 27 Jul 2026 03:00:41 +0000
Manifest next update: Tue 28 Jul 2026 03:00:41 +0000
Files and hashes: 1: 8ZTbVFN88ElJOvnxpynWkBywvcU.roa (hash: Zi7aMmYsFeMT6y4m/OMRvzAw9FlwVPNAsEeEWMyssQs=)
2: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (hash: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4=)
3: D4HmthbydYoqExoa56VFIbe7J5A.roa (hash: 1gmVpoixHN/Zn+8HJ6YdrukA3JeRxcEeBWZ/2aGh+ps=)
4: DKZJyriLpkX0P03xQILHD2FwZEo.roa (hash: x6vx2AQsWgf7sMGXLXxiRwrb7PArAVgKRPBlJd4ah10=)
5: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: O34HvkMkyP+yiCJOZq470EuYJE6vk3hb27FxuRoiRZg=)
6: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (hash: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ=)
7: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (hash: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4=)
8: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (hash: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A=)
9: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (hash: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI=)
10: S3K9bo4j9NjF6L9mhwIsz-LYyHg.roa (hash: FX7C0FNczXeRPZms4zyJ1OukTZNK4zd0GhG7vBTsBvg=)
11: UWgtqXah3liJx-awsYUK3XIS54c.roa (hash: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs=)
12: _d7ohj2Ako_tiSFSE9-jnGs0uoI.roa (hash: mf32LDbJ2Su5F5H62P0/F/PId5oq7GFGgkD8WKRwmPw=)
13: f5svUnEK1n30wRVLtixbJDS7pZM.roa (hash: sILbepz7GhK0jGMQ48sIN5LBYx9eYZB9voFGWkXvx60=)
14: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (hash: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY=)
15: mcS4SdpuWVbabfdpCB_tOwct_TA.roa (hash: hcfOoUJHvls1DL90VCIcUIUdeQTL2YjVgbYPY6TdJAA=)
16: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (hash: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg=)
17: tDoaGy6SLh3swARR-izxiYVQMmU.roa (hash: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:7c:48:26:eb:eb:c6:1d:c6:12:ad:f8:ee:c8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Jul 27 03:00:41 2026 GMT
Not After : Jul 28 03:00:41 2026 GMT
Subject: CN=db11dcde602046d1067410ba6a83a471397d1c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:f9:44:6f:15:a3:0e:87:8f:cc:88:89:30:
44:17:52:f2:51:ae:06:f6:38:52:c2:07:70:49:a4:
3b:6e:18:1a:be:26:de:5d:75:bd:c5:4e:46:dc:fa:
69:5d:7b:cb:34:52:0b:97:ce:81:8c:1b:99:16:be:
43:f1:40:41:b7:f4:03:b4:0a:d1:80:e9:e9:a5:b4:
f4:e7:30:cc:2c:48:e7:d3:e1:1b:c3:5c:50:bf:c3:
e1:1d:19:95:ac:c2:72:b4:03:b3:50:b6:f0:21:09:
fa:4a:24:26:06:3b:84:a1:31:46:dd:e3:03:9b:62:
9d:be:4b:28:2d:e7:ca:d5:66:a3:72:22:dd:73:58:
53:36:6e:4a:ca:21:13:e0:00:ba:11:12:bf:07:cc:
18:5e:84:1e:fc:25:e6:67:d9:4f:2c:83:c2:0a:19:
2a:2a:69:00:7c:d1:53:ba:18:e4:f3:7e:2a:fd:20:
bf:9c:3e:e9:d1:d8:3c:68:19:b7:2e:a7:6a:fd:41:
99:61:2e:e0:eb:d2:d5:f7:09:09:07:0a:8e:87:68:
35:c0:0d:62:29:bb:84:b1:cc:47:a8:7b:a4:2b:e3:
7e:1e:18:80:3c:20:6b:2e:28:d2:4a:32:fa:ee:82:
14:3e:5c:3a:09:13:a3:ff:d6:87:a6:f2:a4:d0:e4:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:11:DC:DE:60:20:46:D1:06:74:10:BA:6A:83:A4:71:39:7D:1C:6B
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:09:8d:08:aa:3c:f1:c6:a0:a1:84:00:23:0d:42:ef:9a:cc:
5a:52:59:ac:5e:63:4b:aa:fd:ba:e3:3a:07:88:b1:3d:d6:76:
ad:62:24:fe:c3:16:c0:ec:69:53:bb:aa:f1:a0:3c:38:3e:f0:
d7:1a:7f:83:7c:3b:bf:d1:bf:9b:a9:b1:a0:16:39:48:bc:61:
1c:ab:bd:7e:ec:ab:fe:80:19:b0:f8:f1:d9:37:03:a7:ff:4d:
54:b0:ae:e5:91:8a:de:c2:db:81:c4:dd:13:a3:74:e8:e7:19:
dc:90:8b:73:26:01:1f:f2:7e:dc:07:84:9d:3f:8b:20:21:7b:
69:de:4e:de:6a:ac:96:46:0e:d3:02:35:21:7f:20:c4:55:d6:
e5:4f:59:60:e7:2e:43:e9:05:af:47:18:c6:35:a2:3b:d0:03:
d4:83:c2:f7:70:d4:d2:24:f4:c9:f9:c9:f8:ef:96:d6:ee:09:
a4:be:1b:28:41:2a:e4:ca:c2:8c:26:fb:c2:8e:e3:5b:7a:17:
80:a5:4b:f2:77:11:b0:71:c1:7b:70:68:e8:ef:4f:62:cd:8e:
ca:91:6d:81:1f:5a:2f:30:bd:ec:43:e3:ce:53:55:d2:8f:15:
cc:e0:f8:40:47:ab:ba:f4:4c:1e:98:83:37:49:4e:00:20:fc:
5c:5e:09:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:14:24 2026 by rpki-client