
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File: EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier: 36QnPOSroMKi3qwTNAk7g5V8fnpLE7JfIXyqiKI9Huc=
Subject key identifier: D3:DF:B8:6A:D6:1D:9A:D9:A6:72:30:A6:FE:65:DF:CB:5C:81:E5:20
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01A0D0801EA4AFC1BB2EB86B8FFA946D5F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number: 1AB9
Signing time: Wed 23 Sep 2026 23:00:52 +0000
Manifest this update: Wed 23 Sep 2026 23:00:52 +0000
Manifest next update: Thu 24 Sep 2026 23:00:52 +0000
Files and hashes: 1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: AzpSf4vmmuMgbWavro6dqFOmRSNMf2noqfH5miOdWU0=)
4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:1e:a4:af:c1:bb:2e:b8:6b:8f:fa:94:6d:5f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Sep 23 23:00:52 2026 GMT
Not After : Sep 24 23:00:52 2026 GMT
Subject: CN=d3dfb86ad61d9ad9a67230a6fe65dfcb5c81e520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:46:da:12:0a:a5:ac:af:34:c4:9a:47:72:
02:5e:32:e5:46:89:75:07:2b:49:9c:95:86:da:f2:
24:54:35:f9:2c:bf:25:1a:19:f1:a0:f9:d8:47:41:
c3:a3:b4:92:ac:ce:a0:47:6c:06:7b:dd:c8:3a:d0:
60:a7:a2:bb:49:1a:ab:b9:b2:22:34:ee:7b:b0:72:
dc:c9:66:11:4b:8e:73:78:17:3f:7f:1b:e4:91:e9:
5a:7d:ef:6f:cc:8a:1a:d0:e9:d7:ce:e4:97:3b:d6:
0d:4a:9b:54:f3:d6:c7:ef:69:25:12:39:ad:51:de:
ca:09:1b:75:09:48:f0:f5:35:19:77:4a:4b:74:d3:
16:17:d3:f1:59:7d:68:18:08:5a:25:e7:06:63:52:
60:4e:40:62:eb:d2:34:fd:ae:b0:3a:5c:f6:cd:f2:
5f:32:0a:c1:ee:53:3a:4a:65:4c:bf:d3:80:6f:84:
00:d8:64:fd:5a:7a:1a:48:51:19:1a:75:10:99:b7:
89:25:9b:e8:74:1d:05:9f:70:8b:a5:5d:f1:9c:1d:
42:4c:56:e5:63:45:44:d2:b1:2e:7a:d4:56:79:5a:
61:35:42:12:6f:82:b7:5e:88:b3:d8:a5:c4:9f:a4:
c2:00:4a:a3:6c:37:2d:af:8c:07:38:b5:6b:4e:c6:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DF:B8:6A:D6:1D:9A:D9:A6:72:30:A6:FE:65:DF:CB:5C:81:E5:20
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9e:00:10:ea:f3:30:1e:f2:76:84:16:4a:47:86:94:02:8c:
55:cc:20:16:1c:a9:6c:b3:af:69:a0:c8:bb:4e:29:9c:41:9f:
45:9a:5d:7e:59:da:35:c0:72:f0:f6:04:31:ea:a3:1e:4d:1d:
6c:a4:aa:07:ef:bc:55:32:b7:d8:fa:3e:ef:6f:aa:b5:e0:6e:
e7:2b:ad:08:a8:e6:c6:d6:e2:c7:23:ea:63:5d:8a:85:d7:31:
50:01:4d:05:58:ae:41:f9:ae:56:15:3b:4a:68:70:38:8f:b0:
e2:b8:ca:7d:11:a4:c7:36:d4:7c:6e:c6:4e:50:0f:0e:4e:52:
b2:b7:c1:5e:b3:c8:81:30:65:74:99:c8:4a:fd:d1:93:cf:4f:
99:f3:07:6f:d4:cb:8c:dd:77:8e:7e:a1:f1:34:5b:20:97:3a:
d8:0b:e7:df:d8:3d:d1:14:e9:3f:dd:17:54:c5:62:e4:5f:c1:
ab:1c:b5:87:61:aa:cd:98:e9:07:6d:e3:e0:bf:fe:0d:a5:a0:
d6:68:1b:55:36:c1:e4:c7:f4:d9:a6:fe:b7:4f:b5:01:5c:80:
73:bd:ad:1f:4d:a6:14:f1:ca:0d:e8:2d:bb:56:32:9d:2a:3e:
4c:04:26:6a:95:46:ab:57:78:4d:1a:9d:dc:e5:1a:db:34:d8:
26:e2:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:12:19 2026 by rpki-client