
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json)
Hash identifier: IDaTPuv+QKE9GQyyWvyL0FW4PxF5t0vN28s7i+U47N8=
Subject key identifier: 1A:CF:1E:CD:A8:E2:B2:4A:5A:89:AD:37:D0:B4:59:1D:17:DC:46:72
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 019F85D723BBDFD95A5EB549929541CEA656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
Manifest number: 19E6
Signing time: Tue 21 Jul 2026 18:01:36 +0000
Manifest this update: Tue 21 Jul 2026 18:01:36 +0000
Manifest next update: Wed 22 Jul 2026 18:01:36 +0000
Files and hashes: 1: 3Uhad0KFSfjXI_TbydoftNMdE3g.roa (hash: j9tyqYt4el5e/EHBRQPaMKBm+kYVSqQDGKdC5+GV1fw=)
2: EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa (hash: BrnZ+O7PpPP2CgQz6l0MWy62IQSvfZEBI+G8ayJnLRE=)
3: GCKLMhjEZ4tgpahsAAW0b7v-pbY.roa (hash: vfauSOW8KSxhKm84diH34kDOUYgfp1RoadLmCV5cdWc=)
4: W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa (hash: fb2PFmFnYQYmWpVf2HANiiXyOyVRMMcnLRhOHSluDkI=)
5: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: EOYlCIZt8o4LHAVOObc8uKdCMv82UK3d2O+55WoND0g=)
6: fuQjo-R8V7RgupEifO88mUFsfq4.roa (hash: XgKKf+T/JHflu47fZ8lbK7Ea+coPaRrFsg001BzHny4=)
7: m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa (hash: RVNHVX31tSGpQABOxa6EqSIdwiAZEEfgy9G0c8Rv6CQ=)
8: njVUBNP2pawlmJYfjO-aqV7rHxg.roa (hash: KsrtTqSnlW3K+gpEPkMgT8sO+EsW0Fbd90twROTiMXk=)
9: qSxlathEcN6ZfWcqIYKI4rq_zNk.roa (hash: LYI2xAakIbFGxMC1GmxnDwbT1/w57IsHNS5Uguz6j68=)
10: tA_6j6gquShwOWQHuXqZmv-DGJ8.roa (hash: MBd1V9peNX1ONVT7gAUeTBj/y3gvMH+RO35qWdORDv4=)
11: xrlQxD2aCilEx5MBkW5ICdMkjmI.roa (hash: XyJhHEW8YK45zRLRx/h09ilca39SOfBBhQAfbZq7s3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:23:bb:df:d9:5a:5e:b5:49:92:95:41:ce:a6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jul 21 18:01:36 2026 GMT
Not After : Jul 22 18:01:36 2026 GMT
Subject: CN=1acf1ecda8e2b24a5a89ad37d0b4591d17dc4672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:60:89:a7:09:d9:54:98:b9:7e:03:46:ae:
a5:77:44:cf:14:53:98:fd:7f:20:b3:9d:72:1b:ca:
3f:82:e8:0c:0e:b8:f4:e0:25:66:18:83:c8:9a:fa:
d9:30:3a:77:09:6a:17:1b:0a:db:9f:8c:d9:9f:de:
7c:d3:3c:28:cb:56:66:c5:51:23:e9:6c:92:aa:39:
c9:da:7d:51:9b:ad:9d:07:fb:27:bc:90:8e:43:d0:
7b:b0:2e:48:ba:74:1c:55:34:58:31:ca:54:40:a8:
72:c7:8c:56:91:21:5b:90:b4:fb:19:93:d8:76:6c:
34:e0:2a:ae:1c:b1:b3:9e:62:70:e8:26:bd:e4:43:
16:f4:7b:13:c5:ac:d1:38:e6:d8:c1:73:4b:33:bd:
8d:83:4c:e8:f4:87:6d:ea:43:ce:8d:6d:9b:d9:57:
8b:36:f9:47:26:e6:a7:51:f9:eb:19:71:b0:eb:39:
68:97:1f:01:21:8c:c0:f2:41:fe:2b:ca:e4:9e:f2:
34:94:de:c6:d1:e4:92:43:c8:c5:da:b2:5e:2e:5f:
8a:54:d3:6c:e5:ae:1b:52:06:3b:62:6c:26:69:0e:
cc:08:92:d3:13:ca:00:80:a1:93:9c:ff:5e:37:a6:
7b:49:11:db:cf:d7:21:11:d5:0b:c3:fc:53:63:1a:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:1E:CD:A8:E2:B2:4A:5A:89:AD:37:D0:B4:59:1D:17:DC:46:72
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:12:11:79:d3:89:8b:e2:77:bb:da:fc:85:7d:a3:f9:dd:16:
44:dc:e4:ce:43:50:c8:93:93:b5:3c:e1:47:d6:cb:fe:02:cc:
58:f5:de:29:e4:d7:32:c8:78:10:15:8b:d3:4d:24:00:98:47:
e1:b5:fa:4c:ee:de:25:ef:c7:78:b0:d8:65:1f:90:5d:2f:1d:
5b:7c:89:ce:d3:34:35:9c:41:75:5b:1e:af:ae:73:a6:bf:b2:
da:64:43:0c:02:ea:fe:95:b2:1c:7d:f3:7d:3e:d8:4e:76:c3:
f0:1b:08:5a:53:32:66:87:0d:b5:1b:cd:e8:ce:2a:45:df:0f:
b9:49:57:47:73:23:2e:e6:16:d7:a4:4a:c4:03:3e:16:f6:7a:
c5:d3:93:03:43:34:f1:e1:0f:9e:bc:17:1a:74:c9:9f:2a:49:
06:80:f2:60:8d:33:7a:87:7e:eb:7f:f3:56:d1:dd:d7:4b:2c:
01:02:61:41:0c:31:a5:c3:38:59:99:52:d5:28:be:33:f5:8c:
49:7f:d0:9e:8a:04:f9:e4:90:02:13:10:d2:5c:ea:c4:dd:60:
b4:5d:ce:ff:2f:91:3e:e9:2b:79:e3:10:da:e6:dd:bc:ce:04:
16:4f:23:fe:20:a6:ce:b7:5a:a0:c6:5c:7a:4c:37:e4:00:6f:
93:78:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:10:51 2026 by rpki-client