
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
File: E9rSS2ZH6yz6hzmJxtZtF060tYY.mft (raw, json)
Hash identifier: yTzsoLp5myZtDyEKJufVr0T18fdy3QKMsEkqNSasMw8=
Subject key identifier: D5:2A:23:18:FE:45:AE:85:B9:AA:45:60:F6:12:74:2B:29:4A:E2:14
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019F92B615A1E5721CB2AE5B11B58A84298E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
Manifest number: 0146
Signing time: Fri 24 Jul 2026 06:00:34 +0000
Manifest this update: Fri 24 Jul 2026 06:00:34 +0000
Manifest next update: Sat 25 Jul 2026 06:00:34 +0000
Files and hashes: 1: 5FYGYJ3CTJgz_RO6RtjrvdukztM.roa (hash: WXX9l7hN5GLWTcdL5pzYOVjuzZXZGjSqNLVxArCt+5I=)
2: E9rSS2ZH6yz6hzmJxtZtF060tYY.crl (hash: 4v5FALaarQbIR5ixCuPIuZi7E+Vkr9H2i3WjZenMC4E=)
3: EU6S0HJNgtU92lCj2E5oAPOEdLs.roa (hash: 1lpHBr2sLsew7tFbnn94rLgLk3IsikjEq2tOn5QLKjw=)
4: MDPAodA0zvA2NWT7ER8dOVR7L88.roa (hash: mJmiRwrgZ5I3NJ+cWSYWfQPR/ysaLHDjUSeXrv0sX/Y=)
5: b3e-kztK16dNJ4hjcUxvpEGWdz0.roa (hash: 8EZoV6vzVeuipBhh3IecuZX3yaL/9h5v2euKRytgqTI=)
6: dpL5ZtEitf4atUPkEQBrdg3AXa4.roa (hash: rbxc/D01AOG8KldlHELzWOgJqjk9Wg1ayGFfbIWBJws=)
7: hOGDR0EybYX5uiEIH4dx1wBVH0I.roa (hash: YqwjG2i8QtY5ZfAttTtEJOybBG61FVR5wpzHYZpRL/g=)
8: lBW5YHPb8dUMIQp7Ni-iMJP_E4Y.roa (hash: cbZo3D7fpp0X2deua8SfRD7Y1+8SplMIfDE6x9KtmDE=)
9: q9AZ9P7QUfekPrQysKLIfDnMJbU.roa (hash: LLX9K9xCwxCQlj+HJY24QlDZarm7oVsZ3lkpY8WxkSM=)
10: uNi1GWE-vm98aOz8PbUTScKWUd0.roa (hash: 2DDJ/sYmsUqQUvarD2q6Qibfp+tAmVVdlr8pKbLjGSg=)
11: yRZVehU6pPF-e8bf4h76KS5NUpg.roa (hash: kz7zsud3YYXglVH2w964aIAQdIKUpEdRIscf5oZrTlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:15:a1:e5:72:1c:b2:ae:5b:11:b5:8a:84:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Jul 24 06:00:34 2026 GMT
Not After : Jul 25 06:00:34 2026 GMT
Subject: CN=d52a2318fe45ae85b9aa4560f612742b294ae214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:05:8d:54:4b:ab:53:ad:bc:51:0f:55:89:
ce:b6:37:0e:93:fe:1a:79:83:83:18:45:55:b4:30:
fc:7f:77:7c:e4:b7:81:9a:e3:f7:b6:7c:b1:cc:89:
ec:c8:6c:b4:18:0c:f1:a4:3f:51:f1:4e:98:ac:e5:
01:e9:f4:4d:a9:33:49:e0:99:e0:31:4d:83:ab:1d:
d3:ac:8c:91:47:29:e0:bb:35:0d:91:36:94:25:88:
57:e7:1e:7a:64:7c:43:ae:84:72:01:d3:30:cd:90:
db:22:a7:89:2d:fc:62:de:de:08:3b:ff:54:28:f5:
d2:ba:af:59:82:93:39:ac:14:22:16:3b:66:d7:b9:
af:f0:5d:e3:c2:ba:9c:7b:b1:a6:af:ac:43:f2:5a:
d9:29:43:17:96:f1:79:48:29:87:93:42:3c:88:09:
6b:ca:0e:a8:c9:5b:d7:ef:d1:79:f0:28:34:09:37:
93:8d:58:69:52:f5:eb:2c:63:6e:47:ad:65:9c:64:
cf:41:55:b5:5e:82:89:83:10:03:93:d1:e9:67:51:
71:19:88:8a:30:4f:3d:ea:86:20:d7:42:76:88:ef:
65:b3:73:83:c2:47:bf:27:37:db:3e:3c:a5:17:11:
97:e0:3c:98:76:98:58:fc:5a:79:9a:92:8a:77:b3:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2A:23:18:FE:45:AE:85:B9:AA:45:60:F6:12:74:2B:29:4A:E2:14
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:22:88:04:d4:0d:8e:1b:c9:84:65:5c:92:ee:91:61:08:8e:
f5:42:eb:42:da:1e:10:a1:6b:85:0a:00:c2:a7:9b:20:d2:13:
1c:e0:7c:6e:b6:6d:5b:ee:79:ad:d3:4d:39:f3:41:b2:c5:c3:
f9:eb:eb:5f:67:49:07:db:26:8c:2f:af:f5:9a:85:69:e2:63:
67:41:79:35:fa:6d:eb:63:3d:b8:55:f6:ff:46:20:ab:ac:11:
4e:44:e7:7d:ba:3a:ab:a3:6f:30:9e:da:de:aa:64:9a:5a:fe:
eb:a7:1f:51:9a:53:d9:2e:45:22:48:ba:46:45:50:4f:33:6e:
3f:94:bd:93:eb:04:48:7b:04:f5:f3:2d:8d:3d:72:ec:0a:a1:
e7:a9:51:74:56:88:51:4c:16:c5:70:24:ba:74:3e:96:f2:11:
b1:ee:e9:1b:10:1d:fe:bc:bc:68:bf:b7:0c:16:ba:77:9a:e2:
e8:bf:47:e5:8d:6c:92:7a:3d:b0:e2:d3:32:9d:18:fd:ad:b6:
e2:a4:f8:df:d9:03:fd:0b:ca:9b:4c:1e:b6:fd:5e:6a:24:1d:
1b:2c:6b:c9:12:55:af:b6:92:f8:97:1b:49:1c:a0:31:b1:e6:
cb:6f:78:24:d1:4f:79:1b:a6:9a:7b:96:91:b1:8f:39:8f:09:
7e:49:1a:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SthWh5XIcsq5bEbWKhCmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZGFkMjRiNjY0N2ViMmNmYTg3Mzk4OWM2ZDY2ZDE3NGVi
NGI1ODYwHhcNMjYwNzI0MDYwMDM0WhcNMjYwNzI1MDYwMDM0WjAzMTEwLwYDVQQD
EyhkNTJhMjMxOGZlNDVhZTg1YjlhYTQ1NjBmNjEyNzQyYjI5NGFlMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunAFjVRLq1OtvFEPVYnOtjcOk/4a
eYODGEVVtDD8f3d85LeBmuP3tnyxzInsyGy0GAzxpD9R8U6YrOUB6fRNqTNJ4Jng
MU2Dqx3TrIyRRynguzUNkTaUJYhX5x56ZHxDroRyAdMwzZDbIqeJLfxi3t4IO/9U
KPXSuq9ZgpM5rBQiFjtm17mv8F3jwrqce7Gmr6xD8lrZKUMXlvF5SCmHk0I8iAlr
yg6oyVvX79F58Cg0CTeTjVhpUvXrLGNuR61lnGTPQVW1XoKJgxADk9HpZ1FxGYiK
ME896oYg10J2iO9ls3ODwke/JzfbPjylFxGX4DyYdphY/Fp5mpKKd7NJGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUqIxj+Ra6FuapFYPYSdCspSuIUMB8GA1UdIwQY
MBaAFBPa0ktmR+ss+oc5icbWbRdOtLWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMt
MWFhNmZlNDA2YTU4LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMtMWFhNmZlNDA2YTU4
LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCKIBNQN
jhvJhGVcku6RYQiO9ULrQtoeEKFrhQoAwqebINITHOB8brZtW+55rdNNOfNBssXD
+evrX2dJB9smjC+v9ZqFaeJjZ0F5Nfpt62M9uFX2/0Ygq6wRTkTnfbo6q6NvMJ7a
3qpkmlr+66cfUZpT2S5FIki6RkVQTzNuP5S9k+sESHsE9fMtjT1y7Aqh56lRdFaI
UUwWxXAkunQ+lvIRse7pGxAd/ry8aL+3DBa6d5ri6L9H5Y1skno9sOLTMp0Y/a22
4qT439kD/QvKm0wetv1eaiQdGyxryRJVr7aS+JcbSRygMbHmy294JNFPeRummnuW
kbGPOY8Jfkkaaw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:21:15 2026 by rpki-client