
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json)
Hash identifier: T0foNJnwvwncZbmQYed1Hb6gkIRJxWLzzGLPzoiIIpA=
Subject key identifier: FE:33:F4:F3:DF:F2:02:F1:3B:CA:66:B4:59:38:74:87:C5:11:96:D6
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial: 01A1DB6F7D7B10140451CF47F501E1A78107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
Manifest number: 1831
Signing time: Sat 14 Nov 2026 19:01:19 +0000
Manifest this update: Sat 14 Nov 2026 19:01:19 +0000
Manifest next update: Sun 15 Nov 2026 19:01:19 +0000
Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=)
2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=)
3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: k/d0JOA/Bdd/FqMaO0xWiEJJd2e6kXjLhHIDOPIWUMY=)
4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=)
5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=)
6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=)
7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=)
8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=)
9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=)
10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:6f:7d:7b:10:14:04:51:cf:47:f5:01:e1:a7:81:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Validity
Not Before: Nov 14 19:01:19 2026 GMT
Not After : Nov 15 19:01:19 2026 GMT
Subject: CN=fe33f4f3dff202f13bca66b459387487c51196d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:3a:41:f6:a2:22:9f:9c:4a:5e:bf:e7:33:
63:7d:b3:c8:64:54:36:87:ca:38:6f:91:0d:78:c2:
b9:f9:a2:0e:78:d2:69:4d:56:14:b9:22:12:0d:6d:
da:b1:e0:be:6a:b7:a3:58:3f:d4:74:8c:18:a4:a1:
81:14:b1:b4:ff:3d:31:ee:60:52:3d:45:04:e5:c3:
90:3d:e1:96:b6:a8:6d:46:fe:d2:0a:23:d2:2f:6e:
1b:50:56:77:a7:1c:39:e2:6b:d5:ac:03:51:5e:1e:
d6:14:c0:a7:8b:da:52:45:61:f4:59:03:2a:15:6b:
ae:92:1c:9a:1c:7a:80:79:3f:cc:50:6f:24:4d:da:
b5:ff:e2:ca:ac:7a:e7:dc:02:7c:be:0e:78:a5:89:
3c:1f:6c:7b:e4:e0:11:6f:1d:b5:d4:fc:7e:81:d3:
78:17:f5:78:90:10:57:7a:98:cb:1e:4c:db:0b:1c:
0a:eb:43:ef:63:dd:f7:9e:97:88:59:3b:b7:1d:0a:
b5:cf:a4:1c:53:32:fd:9e:27:10:5b:cd:30:60:f3:
1c:17:42:ae:e3:b0:b9:6b:16:99:b8:fb:18:16:8b:
bc:50:32:b7:4f:99:eb:18:22:5a:b5:89:9b:ca:d9:
03:84:5e:e6:f4:36:04:85:c2:4f:a9:ab:89:21:54:
84:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:F4:F3:DF:F2:02:F1:3B:CA:66:B4:59:38:74:87:C5:11:96:D6
X509v3 Authority Key Identifier:
keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:dd:40:4c:c1:af:0f:90:96:ec:3c:9a:69:e0:26:25:d2:c8:
61:0e:c0:44:39:99:97:2d:26:8c:cc:ed:05:43:76:45:70:28:
d1:cf:71:5c:ea:f8:b0:e3:d3:ee:3d:80:1c:b2:f7:45:be:2d:
e3:e4:33:5d:1f:26:2d:f3:1f:17:3f:da:bd:01:fc:c9:7a:68:
1c:c0:0d:7d:74:b7:c9:0d:64:62:e8:d3:54:98:9c:0d:a3:25:
ba:a4:79:66:2f:d2:76:95:d5:3b:70:71:30:01:34:a2:e3:15:
2d:d4:74:11:d9:ba:45:f0:5b:ef:90:38:47:e9:66:f0:49:f6:
c5:c0:eb:8a:40:c3:77:9f:bc:8b:e3:b7:34:c1:09:2b:63:9a:
29:11:9d:5f:01:c7:46:cc:28:4b:0a:aa:b8:66:3e:f5:86:82:
5a:ae:e7:58:80:b7:77:1d:51:c9:5d:7e:a6:21:16:c6:3d:af:
5b:d2:fc:b4:fb:c5:4c:54:c9:7d:25:df:12:ef:00:8c:5d:7c:
d1:c0:2b:00:c8:fb:01:a5:b2:c8:6b:ad:8b:40:71:0c:ba:54:
83:7b:cc:8f:65:0b:4c:cb:0f:0d:70:06:09:3e:4f:f4:7f:d6:
7d:cd:37:3d:fd:4c:56:d3:5a:88:b9:bc:13:7e:4d:40:55:ad:
f5:51:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:32:56 2026 by rpki-client