
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier: E8J3RgXLhVEYTeUfno2Q1vwcfGqb/xJSBWBA93VoyyA=
Subject key identifier: CE:D7:9C:51:4F:3A:71:20:C1:C7:98:97:42:B3:A8:88:40:9E:53:E3
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 01A0D011E6A49E99A49817B459765F4A7BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number: 1A81
Signing time: Wed 23 Sep 2026 21:00:29 +0000
Manifest this update: Wed 23 Sep 2026 21:00:29 +0000
Manifest next update: Thu 24 Sep 2026 21:00:29 +0000
Files and hashes: 1: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (hash: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4=)
2: 1-LUBueVBqdwiFLK1gsB1AnGbiPQ.asa (hash: L6rsU1pcQ3cdDgJa7jGbs1XAAZhtjuh8eTrAlkKyq8Y=)
3: 3fCUHErbv2WtYx--n4nf1Q6-Ubw.roa (hash: VmDuAyLIouZrOeMJRlVFLUwqzbhKM9CHSnO4kIRdwDo=)
4: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: EIKF4B2HOqOWBZEHuSqZThVIQyksB3PhOccWkT5iCfE=)
5: BbRIR3kI21VUGCXjSDWllMbS-8k.roa (hash: EEgGaz+LiLIszuH7ULNxtMHJjtmHM3CUdnjiO3tprKI=)
6: O73kgAQ-kXlFxK4kvQOyEoxMTXA.roa (hash: ETBQDnDgpIBgdAIaW/tfoxKMAV0hJkP0bltM4DA6Q48=)
7: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (hash: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4=)
8: c7YCMDtvilpnAcHhUKUpazLH8YQ.roa (hash: p8eFTJPY5mhYNqyxOeRrt26FdTu0eyXi+YCF788HwNI=)
9: i22LYTAh0PcLuwu7sEyCzT-6xXM.asa (hash: DPM18lmzzP7eVh2MT51XAxQN2uj0C+J8vlqNWZv6bek=)
10: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (hash: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo=)
11: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (hash: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:e6:a4:9e:99:a4:98:17:b4:59:76:5f:4a:7b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Sep 23 21:00:29 2026 GMT
Not After : Sep 24 21:00:29 2026 GMT
Subject: CN=ced79c514f3a7120c1c7989742b3a888409e53e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:b4:72:7c:96:ef:4b:ac:52:b3:c7:02:32:
22:ba:8a:fb:9a:73:8c:06:32:29:77:0d:22:01:f0:
1c:71:4d:ce:74:2b:ae:40:34:3c:7d:0f:ed:02:14:
dc:1a:17:9d:91:09:60:86:51:d7:76:af:78:9a:89:
7b:1b:3a:0e:0c:b1:65:d1:cc:f6:eb:44:b6:81:7d:
7b:73:10:db:59:f2:f1:20:1a:a6:e6:55:e1:3b:1c:
d6:7f:6c:f9:2a:de:13:44:1b:0d:cf:1c:ef:93:67:
34:f2:d7:ff:6b:6d:ad:e8:07:5d:0f:37:43:20:07:
c1:2e:d6:60:03:72:22:bc:79:48:2c:68:ab:98:46:
6b:28:85:18:38:db:a5:95:55:da:1f:7d:7a:0d:2e:
5b:f9:d8:a7:4b:fa:0f:5d:ec:f5:98:2d:ff:57:2c:
a2:cf:57:ec:24:ba:ff:45:95:0b:7c:03:77:da:a1:
bb:19:f1:59:cf:65:19:d2:bb:37:b7:4a:b6:66:e6:
6d:ed:51:e5:68:3b:62:60:72:51:0a:e7:c5:0c:29:
4f:4a:e9:81:31:53:86:d0:18:bd:e9:63:d8:74:bd:
62:eb:e2:50:be:74:1f:11:f6:50:f6:02:b2:c9:dd:
e4:6e:3d:a6:70:75:c4:1f:50:34:ed:0d:89:31:55:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D7:9C:51:4F:3A:71:20:C1:C7:98:97:42:B3:A8:88:40:9E:53:E3
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:bd:27:48:d4:ee:47:2e:e3:b3:25:d7:af:f8:c4:ee:64:21:
eb:23:e5:92:c3:f5:a3:69:7c:ea:42:63:96:3c:48:2d:8e:41:
f5:28:c4:b7:be:1a:4c:6d:4d:86:24:2b:66:a6:e5:e5:6e:58:
73:af:ca:37:8f:6a:b3:ac:11:8b:af:ba:51:33:6d:61:99:70:
d4:46:1b:08:7c:9f:18:39:de:bb:37:d0:1d:49:e1:52:9d:fc:
fd:d3:52:2b:ac:ab:96:42:4e:70:78:e8:c1:77:f5:72:0c:77:
d1:a3:3d:21:82:04:f0:4d:3f:6c:c8:50:54:de:00:90:20:74:
93:fe:3f:71:0f:dc:0f:25:98:73:e5:5f:91:5f:7e:aa:d2:c7:
a9:ff:44:b6:49:ab:d8:54:f0:d8:29:a7:29:a4:8d:f7:dd:e9:
13:3f:44:0f:01:5d:70:f8:f1:99:7f:f9:bd:04:ba:37:df:a4:
08:e7:be:53:16:cb:af:54:d3:cf:78:e3:53:6d:40:26:ca:03:
f4:e7:da:40:e5:53:25:87:d7:3c:64:fe:a6:5f:6a:b5:c0:fd:
70:c4:50:36:5d:9f:8b:37:cd:76:56:84:bc:d6:02:80:54:f5:
35:3d:5b:74:6e:84:60:ba:ef:3a:58:23:56:28:64:53:38:ba:
83:41:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:52:41 2026 by rpki-client