
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
File: _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json)
Hash identifier: jiLhT6wbirS1B6l41Cu9IgP1dvReVX66Eq32WXBSbbk=
Subject key identifier: 97:4D:D0:AA:D6:5E:DA:32:FD:32:D5:8C:29:33:B3:D4:E7:78:97:F9
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 019E1ED9D8B45449B11CF516706AA994E7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
Manifest number: 191C
Signing time: Wed 13 May 2026 01:00:53 +0000
Manifest this update: Wed 13 May 2026 01:00:53 +0000
Manifest next update: Thu 14 May 2026 01:00:53 +0000
Files and hashes: 1: 06pvda0HGfo4YEYPGpGmXC6pc6Y.roa (hash: EHWs8d7V2Xw60HILi+lG9QLvqYdWqwG17JXDByqVTf4=)
2: 0qb9sAGkBvYUU1loJseXlz25OJ8.roa (hash: m0/HWEMnf/XDbGuQAyqai3DBn5WtxpMTkpZaFwmohUU=)
3: 1CTEFp3Jvu1F6k0C2ZBodYWIJDs.roa (hash: QqXzCs08vUdvWpceemZhSOwsQeTszW8Ksi9FXrp8nQE=)
4: 8PB8h-ISSr84nGZyoSJpxK03xZI.roa (hash: Cew3GhEYpI4Z/2ax+94ohovUkb4oKZoSCX7ODBgVNmM=)
5: IvkQusFVMgz0ZI6M1X5qqmaNPyw.roa (hash: ZoLWMz91Ei85Q0Gy+4SDhp1FLqI4f9bOpK4hh8GaK/8=)
6: NNRjD7YhPe6-EjPeFBa4lVzPKw8.roa (hash: xUYG1EGs/Kb2jGbZ4wzN7JCg3UzLO4J02OnlyyP+rbI=)
7: QiTXesEnDUMy1VzzXBZ1a1EV7ao.roa (hash: AmaLGYuWMfv3G3fabRyFwE+8Jn7gj+JYPPZU6wIdzfM=)
8: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: 03rASX56n15lKyjl8SysZyb4BqmhbhSu9wwo83d1+ng=)
9: cIdkjRc0JvHWTaaO3mTRRgEBkoU.roa (hash: ptn5S1Yuf3bTojyRJRd81I1o+BdvHo6hZHXrG2ciiWg=)
10: eRFPbbhCM3fQeuHtAy-_UUJuBNg.roa (hash: 3nMJ/JSGaAPLFOCeRvG2BF5qk6+epYjQPD3rGjOwh4Q=)
11: iRG6zhI_HArOTibBs1JV2QE0L_s.roa (hash: 8mVwvZAIQVh0/wtwoWgJ8lPinuzQ8kyjmM21PvKhN0s=)
12: jJ7bTrKqTB9Ie-vB0SBJ5-Gx8Sg.roa (hash: o7j7tuDcWPE6XNy+iCXCizaUbQy3SeVO+VUusUMlj2g=)
13: o4kcznAm2T0ASiz1k23GlpFApQo.roa (hash: 0h+QZjz610NJvNnLCynCQNNnIrDvurMXfFwfYmM8IOM=)
14: wgPfSToKC9FTCAvt-lOgja8J3iY.roa (hash: PycEQ97+AB+dOAuBHC6DWVd/AycBCpoV++Dya2/jh+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:d8:b4:54:49:b1:1c:f5:16:70:6a:a9:94:e7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: May 13 01:00:53 2026 GMT
Not After : May 14 01:00:53 2026 GMT
Subject: CN=974dd0aad65eda32fd32d58c2933b3d4e77897f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:75:3a:4d:2b:70:34:90:fd:ea:b9:44:43:
4d:8b:31:89:6e:8e:57:33:d7:c2:b1:21:9e:e0:1c:
47:15:4d:2a:8c:59:ea:cd:b1:e0:dc:d1:e2:34:8f:
96:74:de:3b:26:08:58:a9:fe:98:b0:86:a8:5f:d0:
6f:5b:3c:be:f0:27:bc:50:08:d7:1c:05:be:d7:23:
8a:9d:11:2f:b8:24:4b:a2:89:a7:24:8b:e9:c6:aa:
f8:fa:46:cc:ac:a9:1f:c0:24:12:6a:4d:6a:35:14:
b4:e3:20:5b:55:9e:2f:8d:08:39:5d:fa:7f:ee:c9:
43:06:c5:56:2d:4f:d1:18:02:80:a7:d8:82:bf:63:
3f:69:08:b2:97:bb:60:42:fb:e8:3a:96:df:a4:73:
3b:35:3f:17:3c:3c:7f:5d:dd:4b:00:47:f6:71:3f:
74:9e:47:7d:54:8a:52:c9:c5:5b:1f:fc:33:11:8f:
4f:f8:90:f1:52:23:1b:63:18:b9:0e:51:27:6e:08:
a8:e5:22:b9:0f:cf:e8:4f:a2:c1:ee:dd:d8:f1:99:
fd:32:b4:92:2b:3c:bf:50:d5:ce:05:5e:61:f1:e6:
d9:0e:5a:8b:9b:ea:bb:91:b0:02:93:ce:4a:1d:20:
0c:3f:06:f4:1d:f0:fa:01:07:7f:f8:70:6f:14:0b:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4D:D0:AA:D6:5E:DA:32:FD:32:D5:8C:29:33:B3:D4:E7:78:97:F9
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:30:69:cf:30:89:87:f6:d1:dd:12:8f:54:18:4e:37:b8:21:
c1:71:13:c5:0c:d1:fc:7b:a3:6d:f6:e2:09:c4:5c:bb:bc:d8:
62:73:ee:19:98:a3:86:ed:af:a7:dc:f2:c3:86:c0:c4:4d:3b:
4f:f0:7c:e8:ba:b8:8f:87:3c:8e:3b:68:3f:b2:db:04:7d:9f:
06:e6:4b:79:a9:0a:53:3e:c2:5a:95:49:f7:c6:36:8c:95:2e:
28:a5:7a:bf:1f:40:ad:f7:64:86:1b:2d:14:61:97:9e:0f:0f:
13:97:02:a2:54:00:f6:46:42:60:37:21:29:18:d2:87:3c:f7:
6b:3c:50:24:c4:ea:d1:fe:f4:e9:cb:61:16:35:0c:01:06:0d:
3a:47:07:40:e2:3f:02:8f:80:d2:e5:f7:d6:5c:7d:01:ed:f1:
ba:0e:d2:50:d4:84:df:16:a5:d4:d0:b8:3a:bb:17:35:08:ca:
c8:fc:19:3d:02:6e:af:16:24:1a:b1:80:a9:19:ed:5c:86:4d:
b6:33:34:92:7d:40:88:db:89:7b:84:44:d6:db:e6:03:e0:5e:
82:d6:71:92:d8:6c:e4:fb:5c:37:4e:75:90:e0:c9:5c:b4:e8:
7a:69:ad:a9:67:d5:79:36:83:6a:46:3a:8a:21:13:26:55:1e:
d1:6b:52:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:02 2026 by rpki-client