
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File: EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier: kxIvQSeTOWYmEyMJSZ5Cr/nNYw5AtADX2vpdLWvXHX4=
Subject key identifier: 45:E0:61:54:7F:DF:80:55:9E:12:C1:44:E2:E4:1A:89:C1:09:3D:3A
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019D27DF99CEF35716457C487A199C62FBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number: 1930
Signing time: Thu 26 Mar 2026 02:00:58 +0000
Manifest this update: Thu 26 Mar 2026 02:00:58 +0000
Manifest next update: Fri 27 Mar 2026 02:00:58 +0000
Files and hashes: 1: 1-sDtsx1EMme_ngzlHFFVHxn1GbM.roa (hash: YLpNQq2JWNqBFzY5wTwhQbzICZTjW6U3MS8vPk443Mo=)
2: 3ueobkuqCRrYHcS_Ra615Z2wF5U.roa (hash: K0AzKxQwm7htko0KmC5TywH8R8BPhkqCaEM5jSmKm3g=)
3: 3v5keHAqK4zqhQB_uQznSph1Diw.roa (hash: jCOl+4ngxgebTeflrMMZ3kTPxa3cepM3MbMRipIrhQc=)
4: 5B318zH8NOu9OBi_TuoXg4_JM2k.roa (hash: KdWhEJLnniiRDILznsehxHC1zHSWP6KdhnB/WWL1Hi4=)
5: 6dJJQaLsf-pJV9GESFzivPI_ry0.roa (hash: m4MRzFt8TKcOFXczGZjYk0il1r1Oq6foVjuEdpP4OLQ=)
6: DJFcihK3KyDMA5inHd8qVc8pMd8.roa (hash: 7aHvIhUD1Pwu4HtX5DwhI19v0UPceOldhZKd58QrEWA=)
7: D_g2kJlELMuoefn2HH3Y2o0l5YQ.roa (hash: dyiFDNNm4intjG5QxyjFGbaTlhBNt77Zx7ofZH6deL8=)
8: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: LIB1qQf/JVuSaiDNRgOaRR0C5EzgzIO328vXydM+9YI=)
9: J_Cjuoz4DtLmBi0WfCgJgRq21wk.roa (hash: fA4gjnSI4d76aMPIiYbqAlxasjqqD9PxHceAqm4716Q=)
10: N7wIAVShGLQyli3xNuOZyqJnQO4.roa (hash: AgMVywaJAsy8gUEhbniXUCBpJabLSJ38CmQWxUFEkEI=)
11: NkUv8tT-ajiDpIriTdTmg1rESxQ.roa (hash: seqVba1oO6/3hfFI32i0NdWB9EI7RH+MCROkDPZc0ZY=)
12: OfJWGzh3EJhJDnotwpPBu62vy1g.roa (hash: MhO2XX5OLieGQFxwEuA3XpaP5smjhsn06HFUwLnfiN4=)
13: Q5St4o5PnLG71RuFA0FuChJ4Osw.roa (hash: HXynWQRecp6LxWnPk5zkpfVVgcKnabtZZoWjMww0h6U=)
14: TVQnbaL3VCztBv4q7ycrZZTOHOc.roa (hash: bC6KDiPDLB7pjAOZ1rB1QtdHfKPoray7E8FKc5HGj+g=)
15: X9pqJ_bWAmfpFd9hCW3HufAy5B4.roa (hash: SE7pkhcUNXRDeV5ZRqQnZ58B47F0LyM4s+/68mhkYxQ=)
16: ZUVBQ1r4rM0fNpL1kCVZVyDtAbg.roa (hash: XutBjsWzeDRqYrHe3w88udQRKf0KrHbNkeI/S0YKKn0=)
17: _-TiV1qoAPPw8SPSrMcBVzTznwE.roa (hash: Pvgk+aRssPeQ+g6cPNxNpBek3/VhtaCOTsYLRLNNB4o=)
18: dxo24NAWy8p1m5MAZSvGymiEUY4.roa (hash: 7VqVZBdxevM4HgdNCCGnVCUjB06a91AHxuxhr9+MQqM=)
19: eQ4-ZIb4TKyKtqkQiCmvfHTuVxg.roa (hash: 3JVffmd7aGtX/3AO2YgxeAh6xylwcQTf14sQ9sPkm/g=)
20: gUo1p6uD_hmHy_Es8ZaViYIUYcM.roa (hash: XmO4Qj16EKXwUnXfDGJNcytJJ3pRO0VeewM7ykT31K4=)
21: k-6qmVeKEUGc-0cz5Hnsx9hmUPE.roa (hash: 5Ng2eom8lxcHR5nDEgtd/5I+6rVuKWoiMkhVtoQFVJM=)
22: kdw1-tHkNLYRNNm82dVYo2800EY.roa (hash: XNpeXsK3ii0TUySxPOEOyCSQ4r7TJIfM5e7YmPFrHxs=)
23: mrh0y_ObvDXVw_6YS_au-VzRPaA.roa (hash: doqouYnXlAtVY/2YlaJMN33MBRnapyWoXbfp5rb59mU=)
24: pA1ysw7euEwsawBt3WsvgzNCTVc.roa (hash: IHFmvwJcfsynVr/cn/JAzWiobBCXWx/OYDSpOIF4AC0=)
25: shFmXFepoVkoPuQaH7iwNirZ3XU.roa (hash: jDkMxVrrv2BYtLq4CSplaeMuVqAXK6DpU5S2779dHHY=)
26: tuh9bTDNsuijEEF_1hjMDBzb60Y.roa (hash: NaMz9HaNco8VZFC2aGISUfFdhyLdNpp7L/OREqXeFJg=)
27: uX4xjA4a9NlDQbfRFcZwVkyWUus.roa (hash: f6MBYwHAEYsVkFoRtsJQxmJ3Dq5gG+hbXJYYbrTiM9Y=)
28: umvzC6P0ferGBzEmmLjSCxw9ed0.roa (hash: hBuufO3N/9hH/e9W21jtE4R0A3FrtlN4rpXIbIVZZ80=)
29: v1HTLFJCs5Ua6altnuNbzMS6M68.roa (hash: hP6DlGZ7oCEXWze3wji21g4MSy29EOBBfOBBgyLS7UE=)
30: vcKGcg7yfm5OJBRmK9UMG7YPxlE.roa (hash: lC2nvLTapMxLzuBLLcR7m2BlyD8SVIXqzMfLdXwZD5U=)
31: vuRjeq6Hw4CRVKhaZ9mJU5QQ-8w.roa (hash: IY4BrewFqRlekR75+D0bMoN40ONA0lrT3ykyZO92GIg=)
32: wDFzlPwsNs0v_IQaT4j_896eKWU.roa (hash: h8DXXObKKEymdsZZeHWI8jT1TyiZNQftSi9uTSDfXyU=)
33: wJhBirIGDG5CpWVFPtacVacZOVI.roa (hash: 3n/bwQkmOj6Btxw1bOnJ8wdv1zKEZOjjavJjnLqf2ys=)
34: yV7jKZqczgrPDGRpe_5ykccZCz0.roa (hash: CXmYu488BCna3Chnev81BlIc+TedhSwGv5Tq+LkVCsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:99:ce:f3:57:16:45:7c:48:7a:19:9c:62:fb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Mar 26 02:00:58 2026 GMT
Not After : Mar 27 02:00:58 2026 GMT
Subject: CN=45e061547fdf80559e12c144e2e41a89c1093d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:08:4c:5a:75:c6:76:14:f0:44:3b:15:c8:
c1:da:ed:db:63:88:06:98:80:be:e9:24:5c:da:4a:
ed:f9:b8:03:e1:1c:61:33:56:15:ac:53:20:6d:49:
ff:fc:6e:3d:40:6f:f9:7a:69:bb:85:b9:7f:62:25:
ce:8b:e7:40:90:69:db:47:ad:15:e0:2d:64:6d:ec:
58:49:47:ee:29:2b:0f:fe:f8:2e:bf:7e:f8:ef:c6:
ca:c5:28:dc:2a:b5:8c:bb:5c:aa:14:60:df:d5:7d:
2c:14:7f:9a:f6:c8:76:c5:cb:cc:9e:f1:2c:f9:56:
06:04:f8:a4:55:d7:47:b8:85:f6:7c:5f:e4:6a:ac:
e4:30:fc:e1:f4:00:61:c2:95:31:45:38:ff:a1:04:
8c:fb:7e:d1:c8:83:aa:b5:14:05:b3:9e:f6:77:87:
53:c1:93:98:8d:00:45:15:ba:9f:b0:d6:02:14:ca:
ce:80:f2:2d:bc:93:97:26:3b:88:8d:95:1f:fa:55:
7b:83:e9:6b:2b:e1:01:c5:55:46:49:05:61:33:44:
e5:c8:81:97:61:66:71:11:44:05:1f:f7:b0:99:1f:
a9:9b:e9:b4:89:e9:67:da:75:bb:d2:c5:68:8b:94:
bb:6c:cd:b8:ab:43:36:a6:53:d0:90:d0:52:70:66:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E0:61:54:7F:DF:80:55:9E:12:C1:44:E2:E4:1A:89:C1:09:3D:3A
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:15:f3:0a:6a:bc:f1:87:97:df:65:88:67:bf:6e:de:fa:28:
40:d8:21:b6:e4:82:fb:b8:f5:20:15:ca:35:78:a4:34:b7:d1:
df:7a:fa:aa:49:b1:13:e6:83:2e:a4:dd:19:7f:6b:7e:a0:e2:
16:e1:55:50:87:a7:a4:3d:c6:80:48:5f:14:96:2f:e6:a3:8b:
00:cd:c7:b6:8c:2b:4b:7a:e5:a7:2c:de:9b:fb:d4:76:bf:ee:
9a:b2:df:e6:86:b6:dd:7b:a1:ae:a6:1f:27:76:74:26:50:1e:
7d:f2:73:ff:83:e8:72:b8:de:20:34:a7:2f:47:2a:4e:14:cf:
5a:fe:0e:92:bf:3d:98:3a:47:0a:cb:a4:e2:ff:2e:5e:9e:91:
df:6a:4c:df:84:25:57:82:56:2e:97:c5:9a:b2:a9:65:05:e9:
af:82:88:d3:21:f3:bb:c9:31:fb:75:e3:02:b5:60:8c:22:8b:
cc:d9:c6:8e:5b:5b:11:ae:9b:eb:01:a1:c7:74:ad:93:63:d7:
d3:33:9a:42:2e:38:14:d0:66:19:c2:c1:c2:9a:4b:38:14:98:
6f:dc:4c:a1:a4:e9:a7:26:0e:c5:e9:00:51:06:ee:e6:e1:c3:
84:78:b7:fa:fb:b3:fc:f5:46:ec:e5:3d:66:43:cd:c0:f3:be:
88:b0:6b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n35nO81cWRXxIehmcYvvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjYwMzI2MDIwMDU4WhcNMjYwMzI3MDIwMDU4WjAzMTEwLwYDVQQD
Eyg0NWUwNjE1NDdmZGY4MDU1OWUxMmMxNDRlMmU0MWE4OWMxMDkzZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs30ITFp1xnYU8EQ7FcjB2u3bY4gG
mIC+6SRc2krt+bgD4RxhM1YVrFMgbUn//G49QG/5emm7hbl/YiXOi+dAkGnbR60V
4C1kbexYSUfuKSsP/vguv37478bKxSjcKrWMu1yqFGDf1X0sFH+a9sh2xcvMnvEs
+VYGBPikVddHuIX2fF/kaqzkMPzh9ABhwpUxRTj/oQSM+37RyIOqtRQFs572d4dT
wZOYjQBFFbqfsNYCFMrOgPItvJOXJjuIjZUf+lV7g+lrK+EBxVVGSQVhM0TlyIGX
YWZxEUQFH/ewmR+pm+m0ieln2nW70sVoi5S7bM24q0M2plPQkNBScGajFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXgYVR/34BVnhLBROLkGonBCT06MB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhXzCmq8
8YeX32WIZ79u3vooQNghtuSC+7j1IBXKNXikNLfR33r6qkmxE+aDLqTdGX9rfqDi
FuFVUIenpD3GgEhfFJYv5qOLAM3HtowrS3rlpyzem/vUdr/umrLf5oa23XuhrqYf
J3Z0JlAeffJz/4PocrjeIDSnL0cqThTPWv4Okr89mDpHCsuk4v8uXp6R32pM34Ql
V4JWLpfFmrKpZQXpr4KI0yHzu8kx+3XjArVgjCKLzNnGjltbEa6b6wGhx3Stk2PX
0zOaQi44FNBmGcLBwppLOBSYb9xMoaTppyYOxekAUQbu5uHDhHi3+vuz/PVG7OU9
ZkPNwPO+iLBrNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:36 2026 by rpki-client