
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
File: VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json)
Hash identifier: wjUxLhLaSCZOpoDGpBqc/iRcsSiYvXAsVem8TU7Qbt4=
Subject key identifier: 57:82:2C:7B:BD:3C:9D:75:95:7C:E7:F6:1B:25:04:19:D3:60:3C:D5
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019D27A8A60DC0B89AF1483DD8486C70ABE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
Manifest number: 048E
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: 03LMksp47oDVGmMApNkpC-Qj5oE.roa (hash: f/U7iiBnLhVZvsPDN3o9USa5Z6pVWUtWsL9gLOdZA8I=)
2: 11f9_EaW8zxcu9dcHLvxzqf38Lo.roa (hash: xnewyzlXOwnExIP64JF1ik9DrSmsUZyhmiA3DXOiK4o=)
3: 4RgBaK8YPgKkMdveuvow-2RHMMI.roa (hash: 9a6LE0xEyW//ahAMtQkB4FLm+3fX6uAlfJoQovqPyzg=)
4: 5dUccTjOeXcH3PFxvpgXM81-0uk.roa (hash: 7RrrJVqzPlIAsA/Vb+L/2hzt7ubyCiLJfQ+Wwlb716w=)
5: B0NZx8wGc2BfFV7HL837EN9xDmk.roa (hash: PhnHNgGL/ecjQNAEqTX4yvFXZgk/h6y3wBnt7UEfO/w=)
6: BWSDCyaaYztqf8x04OxukY8CPY4.roa (hash: U38FUPvoykxIjgiJPRxBdZlYvPSwyO1mNNGTzXNpiZU=)
7: Bson5QpUOFI1QdCm6xHzbdmNIvE.roa (hash: DZHq8ozgpPl0uQCPljJHruwM7dHQ/jyriOu62FT2zks=)
8: CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa (hash: JqW6uDJ3RG9f6mu4pHvOKIPsSL2yj5yYpAboStI8ffM=)
9: F5t3iNFuoDTJdVcFFvhLuvZHnmk.roa (hash: onvtW2FhvquKskWb8kYzMP0qs7tpSTfSO5Ae7USIC5U=)
10: FMYHLE6DdmEpeVMePkQCK7G0jsA.roa (hash: U9W0uSh64vdUp2XVkXkHbBV/og/HtsBpfruoNhoMZbU=)
11: G6PfcTBBnGMmYTxAX2kEhfoKgDo.roa (hash: yy5VfaRyRkaXKFtJ7nRL6lqT6Vibse1ushGJE3d+Pjw=)
12: GfOWGiLPv2wccjOXnStMVeJn2AM.roa (hash: 4kXzqP7Ueen81fNYyTvCfhk/Yz0qWdHHeusnErlkgAI=)
13: GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa (hash: hAGmhAwZhhoWhp04cLiGpWwuwXg8Kk2Qjb8VbTs9ZtE=)
14: KqWucH5sI4MugF5p4PjTBd1XImI.roa (hash: qMFzUBwuT4BEanu+eOpO2co0/ErViX4f8esF8yniEM0=)
15: PJmcxay0WtSRJnIDudY6DzRck9Q.roa (hash: g6fJ4GyCp1px6ym38QN41UvtwhfWNwAeKWC1qAkBcM0=)
16: Pfn4rcRbKDJuVSkrcgYb9cu78A4.roa (hash: idjJ3BOFW0sv/bdtwbSz3j+KpA5MQW5Fct3dXY7lh4s=)
17: QoSldck7JuNQZZNum-VAZuQLAsE.roa (hash: BhLiuJKGAUIK/3IE4lS7ceagXck8UETCu/pPkUpva/Q=)
18: VFq7oOwuoK-4Ezbw8Byjy6HKneY.roa (hash: /kEtmYfU+u/9qUgUdtsAwlr6x9IMzXSTi0t0BiXXPhA=)
19: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: 80rgn0+KPp2H21L2wSCR0FG44XVlXeN7rB3SqD9H9as=)
20: Zbh0v3jIkeNHK_huafJIUWzUhjE.roa (hash: u5gxSyEmcqN6U6zIZdAUeM1zmLtdQN7lxXducAeyTVA=)
21: ekRgt1kJi2v662mflC7yokLhh34.roa (hash: 3lpPZiQnRkbCD6keXb41MVLx99s2aoWKQrtAqDsCux0=)
22: j4nUYOaKHoPffJAz1cqPosqerIk.roa (hash: qzx6KYLIX2I4Q509IMnF1YKlqNXT2ELmgiXx8moWdwc=)
23: oMXuSjHyTi2ISV5ZXkeB_GmQ2qQ.roa (hash: 1OWtYAgWFUz9U3ZRyQBV7HsQLa1e5YTunuUhvpeW3zA=)
24: q6YKUxlVHXPLjqallGnzCEm5RoQ.roa (hash: RZs0dJ+0lk6Oax9jGpNGT7gy4fY/ZgONFVX3dfP/0cM=)
25: u_2w56w9VDiTEhKc_ZitgndOhPo.roa (hash: hQUv7XEtV7+B7R0n+5Br9ftO2lm1ptUCoJiMKucjmPE=)
26: wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa (hash: hs9hA8TNugivRwbaXq2Cd+gZQT+LQBaaFDtqCrqGbck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a6:0d:c0:b8:9a:f1:48:3d:d8:48:6c:70:ab:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=57822c7bbd3c9d75957ce7f61b250419d3603cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:7c:ee:9e:27:5a:4f:5f:da:23:4a:26:11:
f4:d3:80:e8:31:a8:a8:3a:b5:b6:01:35:58:3d:e6:
66:a3:56:f3:42:0a:f3:25:84:66:e1:c6:4c:f2:ad:
44:b0:be:4c:5f:2a:70:e2:4f:cb:9c:88:8b:ac:29:
66:74:92:98:7e:7b:ef:5c:c9:4a:4b:f9:50:29:7d:
d6:0a:19:46:3a:c3:65:2d:85:4e:82:5d:a7:e0:b8:
c1:85:8b:79:88:f7:c3:72:19:87:04:af:6a:44:57:
c3:28:6f:51:95:b1:94:65:15:8b:f8:0c:45:9e:da:
e1:cc:66:40:3e:0e:6b:0c:88:41:2e:e5:b2:93:2b:
fc:30:a5:c2:dd:11:c4:ae:36:37:d6:1d:7b:c6:1e:
3c:a8:1e:6e:94:39:46:d8:4b:dd:4a:42:8e:02:19:
85:de:d4:d7:98:c4:45:66:b2:59:01:17:26:2a:2a:
65:5d:d4:ff:c2:d0:6d:c1:15:df:e6:2a:a2:66:74:
c5:3c:12:6d:95:1b:28:93:5f:8c:4f:f3:52:ec:3b:
06:1c:3c:d3:77:14:68:c9:8a:b0:1c:fb:72:31:da:
a9:7f:e3:1b:1c:05:82:eb:5d:4c:c1:67:c3:26:0d:
51:3d:41:56:8d:02:e6:53:da:fe:2c:bc:e5:46:eb:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:82:2C:7B:BD:3C:9D:75:95:7C:E7:F6:1B:25:04:19:D3:60:3C:D5
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:33:d4:8e:03:58:0c:cb:ee:fa:24:0c:bc:0e:21:b0:9d:79:
0e:2e:28:d0:a8:ab:c3:68:90:20:cd:9f:35:02:5b:b4:fb:fa:
a8:86:24:dc:bb:62:12:98:28:1b:fc:8a:a2:82:47:42:7a:cd:
ec:9c:5f:a0:a1:35:2f:72:ba:20:b5:d8:be:d3:65:ee:f3:8a:
d4:ed:2c:8e:95:8a:c8:06:8d:1c:e1:fd:35:f0:bd:4c:c4:bf:
ed:f0:e3:73:9f:ea:b3:70:e5:9d:1a:b6:11:3d:8f:40:6d:26:
9f:30:12:18:d2:47:76:65:80:c7:af:af:89:d1:61:f7:a2:35:
e3:77:b2:97:bd:59:9c:8c:da:40:00:93:38:6a:28:2a:3d:85:
24:d0:33:26:2e:da:6c:f2:df:10:2c:1a:ea:26:a8:79:0a:51:
a8:06:bb:79:15:28:75:97:26:57:2e:10:3a:66:af:fa:cd:6e:
56:91:71:02:ad:cf:e1:54:14:6c:7e:09:63:e4:a2:cc:d0:7a:
47:b6:c2:75:d4:67:45:bb:8e:df:13:5f:b8:eb:d4:7b:af:e0:
dc:fc:69:ba:9b:b7:92:81:09:3b:c7:d9:e5:47:88:3f:35:da:
7a:61:f8:dd:a4:f7:e2:d1:51:1f:32:76:55:84:90:2a:ab:8e:
71:17:80:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqKYNwLia8Ug92EhscKvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjYwMzI2MDEwMDU3WhcNMjYwMzI3MDEwMDU3WjAzMTEwLwYDVQQD
Eyg1NzgyMmM3YmJkM2M5ZDc1OTU3Y2U3ZjYxYjI1MDQxOWQzNjAzY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQh87p4nWk9f2iNKJhH004DoMaio
OrW2ATVYPeZmo1bzQgrzJYRm4cZM8q1EsL5MXypw4k/LnIiLrClmdJKYfnvvXMlK
S/lQKX3WChlGOsNlLYVOgl2n4LjBhYt5iPfDchmHBK9qRFfDKG9RlbGUZRWL+AxF
ntrhzGZAPg5rDIhBLuWykyv8MKXC3RHErjY31h17xh48qB5ulDlG2EvdSkKOAhmF
3tTXmMRFZrJZARcmKiplXdT/wtBtwRXf5iqiZnTFPBJtlRsok1+MT/NS7DsGHDzT
dxRoyYqwHPtyMdqpf+MbHAWC611MwWfDJg1RPUFWjQLmU9r+LLzlRuvjQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeCLHu9PJ11lXzn9hslBBnTYDzVMB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjPUjgNY
DMvu+iQMvA4hsJ15Di4o0Kirw2iQIM2fNQJbtPv6qIYk3LtiEpgoG/yKooJHQnrN
7JxfoKE1L3K6ILXYvtNl7vOK1O0sjpWKyAaNHOH9NfC9TMS/7fDjc5/qs3DlnRq2
ET2PQG0mnzASGNJHdmWAx6+vidFh96I143eyl71ZnIzaQACTOGooKj2FJNAzJi7a
bPLfECwa6iaoeQpRqAa7eRUodZcmVy4QOmav+s1uVpFxAq3P4VQUbH4JY+SizNB6
R7bCddRnRbuO3xNfuOvUe6/g3Pxpupu3koEJO8fZ5UeIPzXaemH43aT34tFRHzJ2
VYSQKquOcReAMg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:07 2026 by rpki-client