
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
File: e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json)
Hash identifier: ZhccpQCudiYDx8hk5C2CXaA4zj3evOrR6DMW6TaAnro=
Subject key identifier: B8:99:70:1A:8B:57:5E:5E:A4:5D:3F:87:88:FD:3D:6E:77:66:A6:AE
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 01A1DBDD0581552F9741AC3D16FFC0C7E2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
Manifest number: 0641
Signing time: Sat 14 Nov 2026 21:00:57 +0000
Manifest this update: Sat 14 Nov 2026 21:00:57 +0000
Manifest next update: Sun 15 Nov 2026 21:00:57 +0000
Files and hashes: 1: 3WwCnnTd8cSzdKjbYhNI8g53NPE.roa (hash: aIhbguXWgQO1tJI+20Jt3xw4Dn8zy1ZDD/ntTtEtp2c=)
2: 4kwKLdh3RM_T2CHdwfr7djNqFPw.roa (hash: fMhCuCyOrPdsWFDfGoHBSeCFarYrpqQUzcCOvftK41o=)
3: 5aspwc_EZRXz1DI0gfzYlq249Jw.roa (hash: z9a5ybEJbOBjedVWskB8FQIQDP7WVIXqlcDq4xwBtUE=)
4: FwV9_soW4dQWq_CwmZwM9y_Yg24.roa (hash: xPzL9Tf4VzlH+kYxMAxG9MOUeYhbFQVm/oBhO2qB2hw=)
5: KFPTzEg4Y0L6aJGjreTB0eGWtcY.roa (hash: 8tieHB2/IwsPF3XmJYABOmkTWjKNGkzX0/aPiwcDseA=)
6: KvNF-GNwZ3nupnOa4r1l2jy1zCI.roa (hash: atOFPKEzfFHxFdsBH5bVAxThEg5GX7FYolGtUJKktyc=)
7: M5z_FJkpC3bqs6y8rNLlO6L7mt4.roa (hash: pnzeAaisjISO2SuVi7e+PqwovvETfQV3LOc/UO86oM4=)
8: RFitIfzbelUgTTUVvMm_6P7Qua4.roa (hash: k1QiINtX4yKyCSBsMvwbViWzQ/ACbhcMG/vPDPVXV8c=)
9: S1JnSXKRylQf_Uh5rIFy-LkjUjc.roa (hash: vNnVXt5NopYDCqipg2PS3dWJG6ySbA9t5QTX1gIkUow=)
10: VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa (hash: kAYhfT6Miw9r4z05yf2O6XBU1ToH3EWuwwXPo6D2N2A=)
11: X6gkbQD7XKjlpDCPmtrSBjhNhNY.roa (hash: J9AA0VeAPAZJB/+l+EvDES1QGP6dLWqo5ps91vAe5bc=)
12: bY71skCcBRy3_7E1b-YloIxj3EI.roa (hash: wz4302B/D0gTMZmb2I2/ICofgsbTDyh3vJJUmvhGTb4=)
13: dIdr6CdHDFmEHdvXrAfl7icIYxY.roa (hash: WfzmExFAW5iLs+d61FaP+J5J9DI0CoXqdTMcrCDFzqo=)
14: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: ooRg6Tw3EYset4C2TFX9k5y0TJr9HMo+Y//En/O33gI=)
15: gMfllGfAifdTE0fIQMGmwfrxIhI.roa (hash: CUiivcTqZynChbYOyYCQN7RtnaDF5jwzn7xnYPnVi64=)
16: hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa (hash: DEovq/0Otm5xzo+ikKL6F1zlfXWLyId8aTGFI9Mt6iE=)
17: lwr4ujjVRZ9lTT6n38RaTmGl6zA.roa (hash: 0muOjArSKM5mL3HgrEoutlOx4J3NtUU/jA3sEiadzN8=)
18: oaPiDgiUp4N6eHimpviCBvIRiXs.roa (hash: gi5GPHcvQqzHHbSUnrSphPBhz1cqoAOg4ko/yRoF0WM=)
19: w0LVoZ_uYiC7toDXnKtxvHDd4Jo.roa (hash: 6prvU2oZ/9BgwQzBcdZM3Omry4kQSL9zaJJkXMdKxqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:05:81:55:2f:97:41:ac:3d:16:ff:c0:c7:e2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Nov 14 21:00:57 2026 GMT
Not After : Nov 15 21:00:57 2026 GMT
Subject: CN=b899701a8b575e5ea45d3f8788fd3d6e7766a6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:ec:4c:6a:cb:dc:b4:04:db:3e:6f:cb:47:
ee:8f:b1:fb:2a:cf:d7:85:d1:d3:1b:0e:ca:30:55:
97:ef:e8:21:7b:30:42:cb:86:d8:83:12:02:36:db:
79:c1:44:a0:16:8e:90:47:4f:bc:b9:a3:b9:1b:a6:
34:4b:69:62:3e:de:44:43:01:23:53:8e:bb:a0:32:
b6:d8:c2:eb:7e:a1:00:c8:34:cc:31:09:f4:ca:82:
89:56:4d:14:21:bf:54:23:69:f2:60:b4:9f:77:f9:
07:25:a8:ea:c0:d3:db:61:66:79:b7:79:b2:12:6a:
26:6d:51:4d:fa:bb:51:0f:cf:e6:dd:79:56:82:01:
d7:32:ca:df:07:35:ec:b0:c4:99:ea:58:66:2b:44:
5d:cb:82:2a:29:4b:37:49:a1:b9:a8:20:99:e5:a7:
a5:25:7f:82:5e:80:25:e4:c9:72:a3:76:95:e1:d6:
6f:5a:a5:db:ed:0f:af:05:a0:19:16:23:cf:a5:7a:
fd:3b:e7:97:0f:6b:7b:c5:83:95:c3:fe:ce:1b:36:
c1:6f:07:04:2e:4c:84:c2:67:83:36:ed:da:db:92:
7b:c0:2b:a5:44:7b:69:d3:de:d4:33:cc:26:f4:26:
84:b1:54:7d:ac:8e:f2:72:fa:d6:25:6e:48:86:a5:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:99:70:1A:8B:57:5E:5E:A4:5D:3F:87:88:FD:3D:6E:77:66:A6:AE
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8a:c2:92:52:bc:f0:44:b1:f7:16:d7:97:7d:6a:4f:6e:f5:
a1:8c:d6:bb:e8:9c:e2:c2:9c:7d:5b:93:e7:1a:2d:33:75:b1:
39:4e:56:5e:ba:29:88:2d:63:57:97:6c:16:03:83:b7:fd:db:
86:b1:3a:2f:9a:b3:ef:48:29:6c:f6:6b:1d:8e:31:de:e8:c8:
26:4d:8d:f6:04:6f:a1:ea:05:3f:b4:4d:e9:af:bf:a2:1c:05:
33:b2:c0:6b:1d:22:52:e9:df:60:c7:8b:61:97:b2:ac:6d:55:
81:1a:14:ef:58:c9:b9:e5:a7:4e:55:75:d3:f4:5c:bf:37:24:
98:13:79:6f:ed:11:27:67:5c:91:59:c0:70:c8:e0:1c:a4:8c:
81:d2:30:c2:4b:cc:38:eb:c4:be:6a:6b:54:27:d3:2a:e8:f3:
e6:e9:53:34:9a:08:6d:0d:df:ed:8e:0b:29:3c:db:2a:a0:0d:
4d:ba:b0:29:b8:47:f7:4f:bc:ae:b4:32:86:2d:85:14:61:2c:
29:31:44:5b:a4:4f:59:8a:65:53:2d:a8:e2:bf:c0:76:aa:ee:
32:e7:c2:f7:8a:78:d9:3f:56:79:30:53:5c:97:5d:9d:01:c2:
89:cb:c1:14:33:ad:cc:6c:32:2b:22:e5:96:2e:14:60:ea:7a:
aa:0b:95:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHb3QWBVS+XQaw9Fv/Ax+LeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk
NTBjM2YwHhcNMjYxMTE0MjEwMDU3WhcNMjYxMTE1MjEwMDU3WjAzMTEwLwYDVQQD
EyhiODk5NzAxYThiNTc1ZTVlYTQ1ZDNmODc4OGZkM2Q2ZTc3NjZhNmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd3sTGrL3LQE2z5vy0fuj7H7Ks/X
hdHTGw7KMFWX7+ghezBCy4bYgxICNtt5wUSgFo6QR0+8uaO5G6Y0S2liPt5EQwEj
U467oDK22MLrfqEAyDTMMQn0yoKJVk0UIb9UI2nyYLSfd/kHJajqwNPbYWZ5t3my
EmombVFN+rtRD8/m3XlWggHXMsrfBzXssMSZ6lhmK0Rdy4IqKUs3SaG5qCCZ5ael
JX+CXoAl5Mlyo3aV4dZvWqXb7Q+vBaAZFiPPpXr9O+eXD2t7xYOVw/7OGzbBbwcE
LkyEwmeDNu3a25J7wCulRHtp097UM8wm9CaEsVR9rI7ycvrWJW5IhqVe8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiZcBqLV15epF0/h4j9PW53ZqauMB8GA1UdIwQY
MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt
OWZjZWI0NWQ2ZmRiLzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi
LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYrCklK8
8ESx9xbXl31qT271oYzWu+ic4sKcfVuT5xotM3WxOU5WXropiC1jV5dsFgODt/3b
hrE6L5qz70gpbPZrHY4x3ujIJk2N9gRvoeoFP7RN6a+/ohwFM7LAax0iUunfYMeL
YZeyrG1VgRoU71jJueWnTlV10/RcvzckmBN5b+0RJ2dckVnAcMjgHKSMgdIwwkvM
OOvEvmprVCfTKujz5ulTNJoIbQ3f7Y4LKTzbKqANTbqwKbhH90+8rrQyhi2FFGEs
KTFEW6RPWYplUy2o4r/AdqruMufC94p42T9WeTBTXJddnQHCicvBFDOtzGwyKyLl
li4UYOp6qguVDg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:41:15 2026 by rpki-client