
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
File: Eipka-1MQXprSAX5PXenpGXjS5M.mft (raw, json)
Hash identifier: q0lB/bubxAx/zMoHlt2KuNgGnJurocgKyqRFA627XfI=
Subject key identifier: BB:F5:1F:9B:AB:97:3F:84:69:95:67:89:38:80:65:D5:01:C8:08:E1
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 019D2960D28E0CAA5DB18E79146E8662CE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:01:44 +0000
Manifest this update: Thu 26 Mar 2026 09:01:44 +0000
Manifest next update: Fri 27 Mar 2026 09:01:44 +0000
Files and hashes: 1: 2idL5V6crsG-My5eHFYCoqPZBJc.roa (hash: vaSZEhw4St7LiPuZBY3Vs8p+WLXNvJluMQ/DQ6b31Cg=)
2: 7zjuMpSlT2aP7S1emNMPu08nhaM.roa (hash: pmrlJgUnhMLcWKoghbqDtSCeAr5KHP5AIQALOgBZFjc=)
3: 89rYGxAtaqZ3ZK9x0O0jymSIagw.roa (hash: MlQykDP+P8c+/zOWXDU+3hN/+cvxs5AGjXDmDkTBzIo=)
4: Eipka-1MQXprSAX5PXenpGXjS5M.crl (hash: ejrmzFgr8DNAWGitd2HGH4azX3rpb4Nea2Z2aZ2A+hQ=)
5: FqvwPoqSAZTmGkD0DmAevpEaOtI.roa (hash: TxwByVGEYT5oq1MGs1scIsZMyyRaYUhVq+yICGh30Vk=)
6: LKNQgP5_Nz1DtpvyFtaUdIzEHSg.roa (hash: cWgBIwSO4fLo+zH/tK/lyRfB4/Jh6B8LZfkT2nzd7ts=)
7: bO7-qpV-WtzE91YggDzffNTHt-0.roa (hash: RgUy8YjJAntZaAh8jfrj8Pu9JkkSYLqS11DyKtEr8H8=)
8: jZdEfTmuJriG5AyLUa3HiefzbcA.roa (hash: S7xLT6xDphnbTUXgFvGzB5Dv+d/rhkukYS1/zmgto9w=)
9: tq5QKqbMMTaUnj8tOh43h-aM2MA.roa (hash: Kr/dZ1o0wiqZMbEqoVrPXCiIdUPvP+Mdp3n01wZE5Kc=)
10: we3xcWz3LSd5AgDRHj0SC-9kOl4.roa (hash: hLnYWm/JIur3cJVhWeECJl7YhBgW2E3tRZoZ7DkpneQ=)
11: x852Qr21e9Y3cRbTT8Dri2xYpzo.roa (hash: Wj7bL93u97KVkBnN00S5teBWbQNJ9k/I9gGz8uHqwY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d2:8e:0c:aa:5d:b1:8e:79:14:6e:86:62:ce:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Mar 26 09:01:44 2026 GMT
Not After : Mar 27 09:01:44 2026 GMT
Subject: CN=bbf51f9bab973f8469956789388065d501c808e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:17:f9:49:2e:83:7d:05:cc:f1:cd:38:7e:af:
07:9a:98:d0:93:08:4d:d7:4c:d9:19:48:9c:c4:5f:
96:ad:0c:27:4f:f9:79:33:f7:4e:13:b0:5c:04:22:
ae:3d:7a:82:2c:a7:e1:34:95:eb:76:f8:42:50:bb:
64:6d:1b:a4:77:2e:da:26:cf:68:f6:e3:d9:24:a1:
d5:5d:d7:9f:dc:02:4d:ea:48:a0:b4:27:31:1e:24:
4b:87:21:c6:3c:eb:e5:15:70:05:40:92:e4:6a:7e:
de:45:8c:d0:04:81:1b:18:2a:92:24:96:15:14:58:
67:d8:56:05:87:9e:d1:f9:aa:8e:0f:ec:7b:36:43:
3f:a0:87:a8:9e:35:06:56:88:2c:38:5d:6e:d2:8c:
21:ae:1a:c8:01:72:ca:70:fa:d2:b3:85:f3:f9:04:
e4:c7:6b:76:16:a8:73:20:4a:65:2d:b4:34:35:44:
35:a1:cc:04:f7:a9:49:50:37:4b:30:d7:88:52:72:
c7:03:b0:fc:48:a3:ec:58:b8:c6:9e:f2:2e:95:24:
f6:10:a9:3b:cf:b9:5e:e8:01:55:24:29:73:86:7e:
3f:eb:ef:68:32:77:50:6d:58:0b:f6:cc:e5:f8:18:
45:fe:f4:0f:a1:01:b7:94:40:0b:b0:7c:20:42:ad:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:1F:9B:AB:97:3F:84:69:95:67:89:38:80:65:D5:01:C8:08:E1
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0c:76:4c:75:57:a0:e9:0b:f8:e0:9f:bd:e5:dd:88:41:d1:
5c:b5:f6:9c:dd:6c:1d:5a:40:58:1f:f2:83:04:c8:2d:23:6a:
5c:65:6c:57:52:b8:58:25:71:d3:78:76:de:27:51:4c:b2:f1:
3a:2e:e8:13:c8:a5:da:83:c8:34:27:8a:2e:2a:9e:15:6d:f4:
eb:57:5c:ed:13:04:dd:78:81:80:c7:dc:f5:69:89:31:08:6a:
50:0c:9c:22:d4:70:84:03:39:a0:4f:72:14:eb:bc:47:5e:0a:
d3:c5:81:0e:11:32:a2:eb:1a:2e:b2:7e:0a:39:d0:51:76:c8:
9c:5a:80:ac:fb:27:c8:4e:f5:85:5a:1b:85:ea:c8:2d:12:ab:
c7:26:aa:ce:6f:86:a0:cb:87:b8:b0:7a:97:4f:f6:5f:dc:e9:
43:c8:80:7d:e2:59:7b:2e:de:80:02:8c:75:58:a0:4e:6f:25:
71:34:c0:64:b4:ab:0b:f9:af:22:08:5e:73:41:9b:bd:56:90:
31:60:4f:c3:cf:21:16:30:6c:18:a3:71:73:ac:47:81:7a:e9:
39:17:41:1a:91:1d:84:c3:18:86:ed:53:7f:33:2a:a9:6c:d9:
d8:b8:14:8a:6d:18:af:e3:96:0c:f5:37:2b:7d:85:11:c2:f1:
e2:b9:22:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:29 2026 by rpki-client