
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json)
Hash identifier: DJcz9y9bOE7/5v70GpxGoIyoGHvudA8DDLsfi3mESzg=
Subject key identifier: BB:D2:A9:6A:00:E9:3C:93:78:7F:7A:0F:FB:E3:A4:3C:8B:B4:CA:AA
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial: 019F8F479920E875FE03896BAC5536BA4126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
Manifest number: 16D5
Signing time: Thu 23 Jul 2026 14:01:01 +0000
Manifest this update: Thu 23 Jul 2026 14:01:01 +0000
Manifest next update: Fri 24 Jul 2026 14:01:01 +0000
Files and hashes: 1: 0kY6OhYo0S_p-TBiI-10NgXfoNY.roa (hash: iP04yPh9hD6VA4QlzUY//5ykcFDzpWeK08TGnMp/HjE=)
2: 1-Be0qYmJvYKBUxk0IWyWJ9tviM0.roa (hash: tc+kUBwm2r2jABu8hBV/usYgfuja/aedEg4A7BKntHA=)
3: 1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa (hash: XKv+d2a7iEMY8sWanXfCdCcSCUwEPvHDN059QvO18Cw=)
4: 2C-X2uadj7WRXm8t5tJaxHqVG08.roa (hash: gQBfeyRFTlWRJ0NIJIiAdSoSCyYg2yZW/gURVO4/TQE=)
5: ILMdvMW_ucbbRxIWVM1lnkFSdus.roa (hash: u/PCttKjeIAvbeBnImGYH+I587LQsMk+S6mJXKbyOpQ=)
6: OCaG69L4oGw_KiLZLKBePPSp7CE.roa (hash: vtJ6sg+cCvGmbdxUocxZh93rGJH1rOZrPXnfYKxcVyQ=)
7: R5tQPzZZIZkEHxABLHLrU7SFsrM.roa (hash: lKQiJli3qPxi+zmIfwUnOVyI/PWON56dIb4pJxeLxAM=)
8: SSB8nChvF9M5SEjUm0HbeOBN31I.roa (hash: WGAc9tKQkiqsemqW1u4qV4GbNPs9MVItouZPC6JW3X8=)
9: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: 9+qOrwkWMXdiFhPc/8mfujGXIO9lvyNYX+o5j56BevM=)
10: w2-qYaghmoafRduGM784BXKEDOc.roa (hash: hsq/kaLWVFBw1VLdikb24btA8t/Mb4PbJLUevEVWF+U=)
11: yOnpLpdVWl0jXoYFDk87GuN8z4k.roa (hash: cwz0V2O5OmYd3M4lJ6axTmY7I9UVlCXySVV3pV4gm0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:99:20:e8:75:fe:03:89:6b:ac:55:36:ba:41:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Validity
Not Before: Jul 23 14:01:01 2026 GMT
Not After : Jul 24 14:01:01 2026 GMT
Subject: CN=bbd2a96a00e93c93787f7a0ffbe3a43c8bb4caaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:ad:ca:c7:8e:96:20:e7:2b:76:dd:fe:e1:
36:d7:b7:e1:ce:5c:e4:64:17:18:70:29:23:92:9a:
20:a8:93:03:56:44:7e:c1:46:69:30:43:bf:7d:50:
ec:03:aa:39:7c:10:95:f8:1e:91:be:a2:7b:f9:7c:
c0:67:58:fd:24:4d:ca:96:31:c8:1f:7e:27:88:67:
61:c8:80:28:1c:0c:e1:9e:63:1f:10:54:25:60:e9:
4d:d5:f5:66:72:ee:49:ac:90:e8:1f:de:f2:21:70:
39:39:03:87:37:55:70:1e:a9:bd:4d:b5:b6:8f:ea:
b0:41:20:7a:66:b2:50:9f:67:f3:2c:97:78:79:37:
47:0d:ee:11:c0:2c:37:02:77:40:ac:e9:9d:a4:4c:
aa:4c:df:89:ae:3f:e9:dc:7e:94:7e:96:71:81:6b:
ce:d7:a9:dd:f6:e1:f6:bc:d3:95:46:e1:2c:59:c1:
70:b7:d5:c9:b6:fe:4b:9d:e6:3b:8e:76:85:c2:0b:
1b:eb:b8:87:cf:42:82:e0:a6:e7:96:a5:52:b9:47:
94:0c:fb:a3:66:31:39:0f:71:25:b3:06:a8:8c:09:
4f:d5:56:b3:c0:13:e8:15:37:2d:99:ac:4c:39:13:
3d:61:96:f2:db:2f:4c:6d:a0:21:1b:6f:d7:55:10:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D2:A9:6A:00:E9:3C:93:78:7F:7A:0F:FB:E3:A4:3C:8B:B4:CA:AA
X509v3 Authority Key Identifier:
keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:66:56:75:32:1a:66:b6:ab:90:66:a3:72:32:71:14:19:4f:
0b:4f:33:d0:f5:1b:5e:eb:46:99:c5:c4:0a:fc:9b:35:5f:3a:
49:84:c0:03:3c:bc:b3:e4:da:e1:fb:0f:ce:bd:c0:c7:cd:a4:
f6:8b:64:f4:d1:e7:4f:b2:64:7c:12:37:38:09:72:2b:11:4e:
08:c3:23:1a:15:5f:9a:99:7e:c5:11:67:bd:62:4d:27:3f:b1:
0e:2d:bf:9f:57:e2:95:e3:f9:d2:87:5a:06:23:16:f5:ed:a4:
b0:da:68:ad:71:8f:8f:c3:a8:c3:14:e5:2f:35:43:30:fc:2c:
5e:ca:f0:69:15:a3:f5:f5:2c:9f:4b:5d:3f:eb:65:11:5a:a9:
df:9d:59:c6:de:41:f9:17:5c:f4:17:25:1f:82:41:af:1d:ec:
20:96:2f:e9:00:92:95:06:cc:2c:b2:bc:b9:ba:2e:48:05:8f:
31:b4:72:aa:31:42:7d:e3:f7:d6:cf:cc:11:5a:f9:94:fe:5e:
b7:05:32:c8:8e:5c:9c:04:ff:3c:99:0e:b9:bd:26:d9:a5:6e:
e9:ec:86:af:50:11:6c:6e:40:6e:59:41:89:6d:b1:1d:4e:4f:
c4:5c:71:2f:69:63:a0:4b:3b:c1:63:cc:32:fb:19:99:63:a0:
21:73:ae:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PR5kg6HX+A4lrrFU2ukEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj
ZGM2NWMwHhcNMjYwNzIzMTQwMTAxWhcNMjYwNzI0MTQwMTAxWjAzMTEwLwYDVQQD
EyhiYmQyYTk2YTAwZTkzYzkzNzg3ZjdhMGZmYmUzYTQzYzhiYjRjYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2mtyseOliDnK3bd/uE217fhzlzk
ZBcYcCkjkpogqJMDVkR+wUZpMEO/fVDsA6o5fBCV+B6RvqJ7+XzAZ1j9JE3KljHI
H34niGdhyIAoHAzhnmMfEFQlYOlN1fVmcu5JrJDoH97yIXA5OQOHN1VwHqm9TbW2
j+qwQSB6ZrJQn2fzLJd4eTdHDe4RwCw3AndArOmdpEyqTN+Jrj/p3H6UfpZxgWvO
16nd9uH2vNOVRuEsWcFwt9XJtv5LneY7jnaFwgsb67iHz0KC4KbnlqVSuUeUDPuj
ZjE5D3ElswaojAlP1VazwBPoFTctmaxMORM9YZby2y9MbaAhG2/XVRBCLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvSqWoA6TyTeH96D/vjpDyLtMqqMB8GA1UdIwQY
MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct
NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3
LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmZWdTIa
ZrarkGajcjJxFBlPC08z0PUbXutGmcXECvybNV86SYTAAzy8s+Ta4fsPzr3Ax82k
9otk9NHnT7JkfBI3OAlyKxFOCMMjGhVfmpl+xRFnvWJNJz+xDi2/n1fileP50oda
BiMW9e2ksNporXGPj8OowxTlLzVDMPwsXsrwaRWj9fUsn0tdP+tlEVqp351Zxt5B
+Rdc9BclH4JBrx3sIJYv6QCSlQbMLLK8ubouSAWPMbRyqjFCfeP31s/MEVr5lP5e
twUyyI5cnAT/PJkOub0m2aVu6eyGr1ARbG5AbllBiW2xHU5PxFxxL2ljoEs7wWPM
MvsZmWOgIXOuXg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:55 2026 by rpki-client