
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
File: VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json)
Hash identifier: EZ1WUAWfMyDrpE/b4Y0V+FpeblTMZqp3fDvIIOczFy0=
Subject key identifier: 2B:47:1F:53:BE:A2:43:5C:7E:39:03:EA:BE:81:20:7E:C3:5C:76:02
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01A0E1AB33F38EC6709E7651EB5892F40E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
Manifest number: 069C
Signing time: Sun 27 Sep 2026 07:01:28 +0000
Manifest this update: Sun 27 Sep 2026 07:01:28 +0000
Manifest next update: Mon 28 Sep 2026 07:01:28 +0000
Files and hashes: 1: 0HuCI8W9raaw6VF5ob5AeUYCqvY.roa (hash: MWQfJ9QmkOMknSrFnqP6sweW3o4qTpecRX9iW0v5lMI=)
2: 0SWMflMJJlOILq6C9nu-h1OKJN8.roa (hash: kcK4B39yPXgK0nHshs5JakDk15PknxxnhcLimNeC6n8=)
3: 1-kUcSo0TEpKw_YLYby0R4DVb4yg.roa (hash: FnVQZ/f6EWlkoWkdWzbkkjdOeMD2B5h8cDHMDm/NyV4=)
4: 11f9_EaW8zxcu9dcHLvxzqf38Lo.roa (hash: xnewyzlXOwnExIP64JF1ik9DrSmsUZyhmiA3DXOiK4o=)
5: 7l1lpGV4ptT8nml-DHhj2477v7w.roa (hash: WRbHwiD/xFwzAYS55X0p7yc8DSBKcmaVY7wgLqrnwZM=)
6: 8syWpbRZFmsvwdyqtWxsX0pKmeY.roa (hash: Kum9fHu7WniF5m9wYLUYIqpdhJGb4LoqC5LKXjXu8bI=)
7: BWSDCyaaYztqf8x04OxukY8CPY4.roa (hash: U38FUPvoykxIjgiJPRxBdZlYvPSwyO1mNNGTzXNpiZU=)
8: Bson5QpUOFI1QdCm6xHzbdmNIvE.roa (hash: DZHq8ozgpPl0uQCPljJHruwM7dHQ/jyriOu62FT2zks=)
9: CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa (hash: JqW6uDJ3RG9f6mu4pHvOKIPsSL2yj5yYpAboStI8ffM=)
10: F5t3iNFuoDTJdVcFFvhLuvZHnmk.roa (hash: onvtW2FhvquKskWb8kYzMP0qs7tpSTfSO5Ae7USIC5U=)
11: FMYHLE6DdmEpeVMePkQCK7G0jsA.roa (hash: U9W0uSh64vdUp2XVkXkHbBV/og/HtsBpfruoNhoMZbU=)
12: G6PfcTBBnGMmYTxAX2kEhfoKgDo.roa (hash: yy5VfaRyRkaXKFtJ7nRL6lqT6Vibse1ushGJE3d+Pjw=)
13: GfOWGiLPv2wccjOXnStMVeJn2AM.roa (hash: 4kXzqP7Ueen81fNYyTvCfhk/Yz0qWdHHeusnErlkgAI=)
14: GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa (hash: hAGmhAwZhhoWhp04cLiGpWwuwXg8Kk2Qjb8VbTs9ZtE=)
15: JCOqWbRnRywHSsZh-fLz50m-PqY.roa (hash: aOTb2qew8LvghZhiTeoIMCTgriMUYXeo63zQWwudYXw=)
16: JkK4a04qS_Ajc6pDAo-VYjvdA8Y.roa (hash: XFQRjgmnGbFOUTfMnQoCwRx0veQhtTR1PpEKLvJMV+g=)
17: K_5UWL5IkQbpsAsxidIs-a910tQ.roa (hash: jfQdjzJB+uzffMoi8GywFxVevTRWSqD6hEzeDuvNmb4=)
18: KqWucH5sI4MugF5p4PjTBd1XImI.roa (hash: qMFzUBwuT4BEanu+eOpO2co0/ErViX4f8esF8yniEM0=)
19: PJmcxay0WtSRJnIDudY6DzRck9Q.roa (hash: g6fJ4GyCp1px6ym38QN41UvtwhfWNwAeKWC1qAkBcM0=)
20: SvjTGdBq4AdZoEpPZy6xjNbEZes.roa (hash: XpBtNWxbTh/AKxbwJMevW4MmHvNMk9M4Q25IscBORxQ=)
21: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: vhZ7LESoFZ2dzfzvZI2taqQwDJ66HJ6CVOpXmjo0If0=)
22: ViFP5rp9_kh71j905ntxU5SBk68.roa (hash: 58dlvwMJZtV0cctgTlo4T66Sg5qkkMyrdz4IEFt0NhQ=)
23: Z9annEhNXJRKB9imLkUdPhT85Nc.roa (hash: oy85S0enUEY7wVVeRJQ4+FT2oH5OrnRX3IvS0Tb+dKo=)
24: _sRckXeyoZxj9rukZRq18fDp3ik.roa (hash: 1WwE3fcT2kiL+v9mDl8uXlOyD5SD5f4wDk26AdtmLBQ=)
25: ahOBtrYhmRunqecYEU1ZWXuVovs.roa (hash: 6mLblxHv8sz/ui7lbUzb+nfqv0WmrUDxl+RoD+Q+z/I=)
26: bXd27v7vseLcs1p86WVPiFf581g.roa (hash: ph4o+crLTIHbzjOiEQPAhmzNlIZlfryhefh40UAzDLM=)
27: ekRgt1kJi2v662mflC7yokLhh34.roa (hash: 3lpPZiQnRkbCD6keXb41MVLx99s2aoWKQrtAqDsCux0=)
28: hs3h7Dj-b8z6Uxhv8HYqs7iBXD0.roa (hash: 5W1nhov/uvHu69XlxjaNWq1KRUFRi0VVoqIxSY+t7js=)
29: jNpTRZNm_bD5BiFoeh5OJnCcQAY.roa (hash: 1TgeIUZpeprmcZh4MLiiWQfSwXT8XyxkpN223zXb1O8=)
30: n-wdGNxhA3O26KGrsNj3L9h7eAw.roa (hash: 6R0f4WMAOxx3u7Zt38anUmVPSo1nBDSR8e8VksF4tmU=)
31: u-ddoqXehtb5m6JTXCSF4HyFY8E.roa (hash: UyjZhoeMOYj569cGU0irTIkbnK1IY9Bk6c1YVd6j+D8=)
32: u7SrUaeTfqqFlK6M8OkfEL87nc0.roa (hash: GsWYYAbN0tIazsbVktNVPeSXTKT3C0hkv53fF6GKkZI=)
33: u_2w56w9VDiTEhKc_ZitgndOhPo.roa (hash: hQUv7XEtV7+B7R0n+5Br9ftO2lm1ptUCoJiMKucjmPE=)
34: wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa (hash: hs9hA8TNugivRwbaXq2Cd+gZQT+LQBaaFDtqCrqGbck=)
35: ypSiLSto3RjwAtlvFMK5kNDrdzk.roa (hash: 0ZlVmf2An7RemdJ7LPaj0U4nO3qgfQ0MKBoflfLZxpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:33:f3:8e:c6:70:9e:76:51:eb:58:92:f4:0e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Sep 27 07:01:28 2026 GMT
Not After : Sep 28 07:01:28 2026 GMT
Subject: CN=2b471f53bea2435c7e3903eabe81207ec35c7602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:b9:50:18:d5:ac:82:45:e8:73:64:04:4f:
11:99:4a:ef:70:eb:68:63:ba:da:60:ad:4d:d5:c7:
c0:82:a8:da:38:2a:61:3d:5a:4d:7c:b1:8d:1b:d1:
25:93:4b:78:33:a6:09:73:d4:f0:92:09:b4:63:4c:
02:bb:1a:b5:79:a3:c8:16:67:df:52:e4:23:ae:b2:
60:86:5c:01:d1:bd:fe:63:64:27:a0:bd:b7:45:6c:
29:f9:fd:cf:3a:ad:29:db:71:47:df:a6:c0:5b:0b:
c6:41:7c:63:01:92:b1:5e:ac:9b:bb:e1:bd:6b:33:
d6:e5:8f:10:9c:c3:42:77:6b:4a:34:c1:93:ab:7a:
21:52:58:4b:df:6d:42:11:b6:84:81:58:f0:e4:65:
bf:74:6e:42:70:f7:62:cc:83:70:a8:5c:f3:8b:a5:
ef:84:84:e7:85:fd:28:cf:5b:e0:5f:04:ff:4a:21:
fe:c4:34:ed:41:06:d0:e4:4a:14:58:d8:4c:0c:c2:
37:fc:4a:bb:01:63:32:27:b5:3f:eb:92:90:8d:5e:
3e:3d:0a:05:07:d3:22:2d:5c:8b:15:73:b6:e0:d2:
97:53:76:af:ce:c8:00:ed:25:b1:c0:9f:68:91:fe:
d2:42:5a:fe:c6:5c:00:39:f6:e3:f7:1b:11:f3:79:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:47:1F:53:BE:A2:43:5C:7E:39:03:EA:BE:81:20:7E:C3:5C:76:02
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2e:b2:76:14:76:0f:7a:9c:88:fb:43:66:83:7c:ce:d2:f1:
cf:3e:a8:c6:2b:9f:6e:e8:c0:1b:b6:d7:c1:a5:7a:18:46:fd:
a5:d6:f3:fa:e5:15:29:bf:9b:59:c8:51:37:f3:af:e0:53:ae:
0d:c2:a4:bd:18:f3:5f:0f:d8:d6:b4:07:3b:08:28:2f:7b:72:
b4:ee:20:35:3a:fd:c6:6d:ad:4c:7f:f6:d4:69:b1:31:93:6e:
53:59:95:89:fd:ff:6f:70:75:b3:ea:89:19:5a:8f:0d:a4:69:
36:c2:b2:6a:0a:fc:eb:55:4f:a1:b7:91:d7:ef:3c:69:25:0d:
3a:9b:b2:43:45:19:4a:e7:07:bd:53:78:f4:e3:af:cc:02:29:
be:bd:64:87:75:6c:3c:0f:7e:f3:e3:d1:62:f2:10:49:56:74:
1d:41:a8:46:53:0c:04:a1:75:00:3a:c8:61:b6:16:a6:5b:96:
64:ae:21:69:b6:c3:80:95:28:55:58:da:0b:66:bf:be:c6:40:
26:1f:de:c9:38:38:6e:ad:2f:10:f9:ab:c8:06:f0:7c:15:40:
e2:37:a6:08:37:0a:76:50:58:85:54:43:61:f1:cb:42:72:da:
ef:de:ac:32:d3:9c:f3:4e:dc:44:59:a7:27:e0:59:1a:be:8f:
0e:2d:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:11:44 2026 by rpki-client