
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft
File: Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft (raw, json)
Hash identifier: KA+nBGTkBYX3cfK05C9E08A/j8YGgrVmzVrsGzlXuG8=
Subject key identifier: CB:42:AA:5B:B9:FC:5A:FD:22:92:B6:7F:27:BB:4D:06:84:1A:91:8B
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 01A1DB702BCAF4EEC45F340813BC1C584E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft
Manifest number: 0FDA
Signing time: Sat 14 Nov 2026 19:02:03 +0000
Manifest this update: Sat 14 Nov 2026 19:02:03 +0000
Manifest next update: Sun 15 Nov 2026 19:02:03 +0000
Files and hashes: 1: 03jlII3QdUhqMom-QyYODCrOaLg.roa (hash: eOC5qdIGMityASuS/ixV04bgmoNB3p0BasICn2Hkce4=)
2: 79z9Rd1-vTVQr4Hvq3kNUe7KSvw.roa (hash: 9bD+DoGdGirCnn1RLNpR2NtYexeEnqJM0s2E8jcV1eo=)
3: 8jBgewF9bG4rx4OZwkPHx2m4kTs.roa (hash: Od2z5tTIpMkpZLtkO7W1HFI/TkyfSSLYP3bY+zri2x4=)
4: Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl (hash: sNA1+ShSrvAiyMJPHk96LkgbJp6tPHKFi0iZHnAPwzU=)
5: UmkRAft8ZFjVt1YbFPJ5-y0KWQM.roa (hash: uTu+zO14EyTexS5Ue5g4wgMw72lritw2nGNuY8HgqWQ=)
6: dLGbVw4XjZNxPwPFJNBdYIMXYCo.roa (hash: tcA5TqMgWOL6GjCqrP8Wr/DwbL09yVVazURLi3SWBlw=)
7: et0vONg2oCsHj6zy5uBZeaTDgyA.roa (hash: jzz7fqg5Wyyqq0v/V+b9qQwJ0UV0OYMgP6tapXwy3P8=)
8: fVFj14fsxVQLnq5jeDqpACchzvY.roa (hash: tFyXhmu61YvaBWZTRbVxI+39pR0/jDnz2sf2raHLD4k=)
9: gtpYoJbtNUbM5h2hVTX2u4RVxHA.roa (hash: uwFs+ntpEpr7/UBaudkPVGUVUFUf6CMRlVjfLGBN6kI=)
10: vjopgg6Mzp0TKVQf4nuT3drIOg8.roa (hash: UeisqqQdTHKvYF+wt35MTJmqHXsMaDYqpyCR2F86cwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:70:2b:ca:f4:ee:c4:5f:34:08:13:bc:1c:58:4e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Nov 14 19:02:03 2026 GMT
Not After : Nov 15 19:02:03 2026 GMT
Subject: CN=cb42aa5bb9fc5afd2292b67f27bb4d06841a918b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:2d:3b:5c:88:4c:d9:b1:31:26:63:4e:92:
2e:e7:36:6a:34:61:1e:e5:48:32:12:99:23:6a:f5:
bc:27:be:55:61:c3:cd:7c:be:64:8c:de:06:59:0d:
f0:79:af:e2:34:ca:30:0c:7a:5a:4e:73:b6:43:a5:
d1:d1:5f:d2:be:22:35:cc:a5:60:61:36:02:56:26:
56:bd:93:e3:89:74:23:c8:10:82:77:d8:c0:af:6b:
4e:59:a7:34:46:42:bd:9c:d5:f9:76:10:b0:5e:50:
1d:ec:0c:80:b7:af:a7:ed:6a:25:bf:f9:d0:bd:43:
5e:1b:7b:2e:f1:18:de:58:5e:82:14:0a:74:da:1e:
a3:e6:29:3a:b6:cc:fe:1e:0c:98:83:f2:d9:ad:64:
8a:6c:76:bb:dd:7f:63:f7:6c:a0:ca:fe:24:fd:ad:
d0:1b:07:a6:37:16:cf:f4:94:43:89:df:09:8b:13:
f1:d9:9d:b7:76:3b:74:2b:88:ec:7c:15:62:99:dd:
41:d8:72:88:d3:dd:41:fc:3f:17:86:6d:db:a1:ac:
86:af:68:e8:b6:0e:14:f0:57:86:7b:aa:63:2a:c8:
04:0d:89:e7:98:8d:30:47:38:da:8d:2b:93:dd:6f:
7b:eb:f9:06:d5:de:94:a4:5f:71:1c:de:56:55:2f:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:42:AA:5B:B9:FC:5A:FD:22:92:B6:7F:27:BB:4D:06:84:1A:91:8B
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c3:65:5d:6b:db:4e:0d:13:4a:ad:9b:73:74:b1:7e:0c:9b:
a9:7a:40:32:4a:68:9e:0e:58:3d:75:a7:ef:ea:ec:49:f2:cb:
e5:1a:fc:3a:ef:cd:b5:cd:4c:05:67:84:93:51:dd:f2:39:c9:
e3:38:be:d8:be:08:58:c5:15:df:2f:e4:2a:d4:c7:b8:c9:2c:
4c:49:0a:14:71:d1:b1:15:a9:a7:05:fc:0e:a9:b3:8b:3c:b5:
78:f1:12:ad:6d:7f:54:d7:63:8b:f1:a9:67:1b:bd:b7:b9:bd:
29:4d:db:2e:63:71:a5:b2:bf:28:4b:7e:4d:b3:7c:5c:9e:05:
a0:dc:d1:24:c9:c1:10:a2:28:3d:b7:04:76:35:e3:9e:97:a9:
2c:48:31:4b:96:fe:37:93:d7:b7:07:b3:14:cb:18:6c:cf:44:
85:87:13:34:82:44:3b:19:d2:a9:93:17:0c:8b:d8:c4:8c:b4:
0b:b5:e5:c0:21:cf:49:6c:7b:86:fc:d1:09:14:b5:69:90:ed:
9d:6b:da:7f:d5:aa:fe:7d:72:4c:81:ac:b6:72:93:a8:c7:95:
63:26:57:d8:d5:9d:21:63:ca:c1:d0:34:ae:84:4f:a9:2a:20:
88:f0:9d:0c:ca:16:91:34:c9:87:80:15:3d:99:fb:1a:3c:8d:
c5:f9:8d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:03:23 2026 by rpki-client