
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
File: _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json)
Hash identifier: 6MCMFLcN0yRsABo6t+gWwqYAoCRY6psDgwkYGwMh374=
Subject key identifier: 13:E7:59:E9:DD:FB:91:77:D1:6C:46:F5:B0:C5:F3:BD:A5:5B:DF:75
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 019F9391A2135924F71537A4169590BC1283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
Manifest number: 19DD
Signing time: Fri 24 Jul 2026 10:00:22 +0000
Manifest this update: Fri 24 Jul 2026 10:00:22 +0000
Manifest next update: Sat 25 Jul 2026 10:00:22 +0000
Files and hashes: 1: 06pvda0HGfo4YEYPGpGmXC6pc6Y.roa (hash: EHWs8d7V2Xw60HILi+lG9QLvqYdWqwG17JXDByqVTf4=)
2: 0qb9sAGkBvYUU1loJseXlz25OJ8.roa (hash: m0/HWEMnf/XDbGuQAyqai3DBn5WtxpMTkpZaFwmohUU=)
3: 1CTEFp3Jvu1F6k0C2ZBodYWIJDs.roa (hash: QqXzCs08vUdvWpceemZhSOwsQeTszW8Ksi9FXrp8nQE=)
4: 8PB8h-ISSr84nGZyoSJpxK03xZI.roa (hash: Cew3GhEYpI4Z/2ax+94ohovUkb4oKZoSCX7ODBgVNmM=)
5: IvkQusFVMgz0ZI6M1X5qqmaNPyw.roa (hash: ZoLWMz91Ei85Q0Gy+4SDhp1FLqI4f9bOpK4hh8GaK/8=)
6: NNRjD7YhPe6-EjPeFBa4lVzPKw8.roa (hash: xUYG1EGs/Kb2jGbZ4wzN7JCg3UzLO4J02OnlyyP+rbI=)
7: QiTXesEnDUMy1VzzXBZ1a1EV7ao.roa (hash: AmaLGYuWMfv3G3fabRyFwE+8Jn7gj+JYPPZU6wIdzfM=)
8: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: /tuJQ3tH6NCZZj/iSeffdJujzXz103IOHb3Sa/IIpqQ=)
9: cIdkjRc0JvHWTaaO3mTRRgEBkoU.roa (hash: ptn5S1Yuf3bTojyRJRd81I1o+BdvHo6hZHXrG2ciiWg=)
10: eRFPbbhCM3fQeuHtAy-_UUJuBNg.roa (hash: 3nMJ/JSGaAPLFOCeRvG2BF5qk6+epYjQPD3rGjOwh4Q=)
11: iRG6zhI_HArOTibBs1JV2QE0L_s.roa (hash: 8mVwvZAIQVh0/wtwoWgJ8lPinuzQ8kyjmM21PvKhN0s=)
12: jJ7bTrKqTB9Ie-vB0SBJ5-Gx8Sg.roa (hash: o7j7tuDcWPE6XNy+iCXCizaUbQy3SeVO+VUusUMlj2g=)
13: o4kcznAm2T0ASiz1k23GlpFApQo.roa (hash: 0h+QZjz610NJvNnLCynCQNNnIrDvurMXfFwfYmM8IOM=)
14: wgPfSToKC9FTCAvt-lOgja8J3iY.roa (hash: PycEQ97+AB+dOAuBHC6DWVd/AycBCpoV++Dya2/jh+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:a2:13:59:24:f7:15:37:a4:16:95:90:bc:12:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jul 24 10:00:22 2026 GMT
Not After : Jul 25 10:00:22 2026 GMT
Subject: CN=13e759e9ddfb9177d16c46f5b0c5f3bda55bdf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:f6:a7:46:21:f5:f1:01:da:15:cb:7d:39:
aa:68:ba:e5:5c:01:d9:5e:82:52:48:35:53:cd:07:
49:39:9f:34:0f:7e:f9:90:1b:5e:67:b0:eb:c5:68:
68:fc:78:c7:a4:2d:01:4d:0d:9e:a8:bb:95:7f:5f:
95:6e:b4:a7:ff:ed:03:1a:a6:a1:6a:0b:ee:42:1a:
72:14:55:9a:b9:bf:66:df:68:93:27:84:a7:57:a8:
f9:9d:29:90:14:7f:21:ee:bb:de:ce:a9:ae:4c:ca:
7b:75:f3:26:9a:bf:13:3c:89:5f:32:8a:91:08:34:
7e:00:34:18:4d:49:a9:2b:48:65:e9:dc:51:6c:a3:
2b:66:dd:92:c7:ff:f3:f6:34:0f:60:0d:2d:7d:0c:
cb:db:63:1b:60:ea:4b:cf:8c:db:7d:47:c8:92:17:
e0:35:c7:36:ca:08:ef:b4:ba:d7:6d:bc:1c:45:da:
61:dc:eb:da:51:a7:d2:85:0d:59:4a:dc:d5:8d:2f:
30:9c:0b:bb:81:3a:02:ce:3b:d4:66:02:25:b7:36:
55:0f:18:94:39:c8:de:b2:a0:16:d4:30:f6:9c:a7:
e2:9d:f0:b0:0f:81:5d:f0:92:1a:ae:6f:41:5d:87:
21:14:74:b8:cb:4f:f5:b3:5d:79:5e:ca:82:5c:69:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E7:59:E9:DD:FB:91:77:D1:6C:46:F5:B0:C5:F3:BD:A5:5B:DF:75
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:77:b2:79:9d:5c:71:95:36:0b:ff:ef:13:b1:9c:3b:25:a1:
d0:60:ae:2b:b2:b3:c8:16:41:b9:8a:c4:ae:02:20:f8:d8:b2:
87:0c:9f:69:dd:4b:e3:a5:e4:7f:51:bc:bb:83:41:25:31:a7:
50:18:92:45:8f:8c:43:28:58:e4:2d:6c:a8:52:ab:d0:c6:2c:
c7:9a:3e:4c:f0:2e:69:8d:f2:84:56:20:25:e8:a9:79:fd:f9:
52:4c:08:2b:e7:ec:33:71:bd:a6:0a:c6:66:c8:a4:dc:ff:79:
69:d0:13:b2:e0:71:06:73:bb:37:3a:05:ad:42:7c:1f:25:46:
69:d6:33:8f:32:2c:84:af:2d:d0:5a:da:01:c1:37:2d:08:c9:
16:64:6c:34:c7:6b:e5:f3:f2:17:0b:d7:ba:29:ea:08:ca:94:
47:ed:14:fc:c1:22:da:fd:96:53:95:03:a6:3e:fb:33:6e:9b:
e8:8b:1b:09:20:17:23:72:96:6b:ac:6d:c5:0a:2a:2c:75:04:
86:9f:7b:fa:06:38:d9:38:97:f7:f6:3e:2f:11:9a:46:b5:73:
18:6c:5b:b6:16:a2:0d:da:83:68:5d:8a:a5:d1:56:1c:54:7e:
c1:5f:34:8c:37:be:ac:a2:00:c8:d3:be:53:39:17:83:02:90:
48:84:78:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:10:38 2026 by rpki-client