
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json)
Hash identifier: FBpm2Yxtm9Uiw5+0+t2+v6kMTUZSxBd31dNhUlTcspg=
Subject key identifier: E5:A9:82:2A:5E:10:70:40:B4:5F:53:F9:09:B5:82:AB:84:C4:C9:48
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 01A0DE73687D4694E2D9956DDE9414B6100D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
Manifest number: 0ECF
Signing time: Sat 26 Sep 2026 16:01:40 +0000
Manifest this update: Sat 26 Sep 2026 16:01:40 +0000
Manifest next update: Sun 27 Sep 2026 16:01:40 +0000
Files and hashes: 1: 0bOZqErT7cPqtg8A6up5AuWvx0k.roa (hash: TLkmyalxkw5UtbYf/UBevHhaws4BaWA7DIMpjH0huR4=)
2: 0nKy3DcrJQbiUx0L11st8vPu4iU.roa (hash: p61zFKqkHY6u5BC22bvQD8WFNXvs2Yw1bGFGniYo/EE=)
3: 50r6jSn0CMuiVpA2P-b_FOjvPPg.roa (hash: D5jC6zCHGCgbBXPC5sbkuztpv5UfBKKCMfOPc3Dg0Lw=)
4: BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa (hash: FSP05ciRv7cgg2ori440lYssEdhe7MklJbnbswJVXz8=)
5: C-Kmr5FT1ri-wqW_PoFuVOWIXaY.roa (hash: ERXgmbLSjJDQYHfslHu3SRPoPi7u4SxKIXUEFniHGbE=)
6: N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa (hash: sJ/b4s+wOONAASz+jNAdnE8FTPixklTn6DITWj2Oz+o=)
7: NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa (hash: tjAGBxyE9MUK6tIC8hGVGZt0+cyyEXn5+tt8NlkIgvY=)
8: Pd2rMwFiHNfo8LsVySgeVLzTGq0.roa (hash: sdAzHA/hidfaS5zNstJ0MbK05F4160hrzBGMOr4TmYo=)
9: QXZE3Zq08zJCNAuWkUlhOf72CEo.roa (hash: 4w3elPVXjJm0mGB/LmhaWlS8kL5Tk75Pr/n+xOgx6fw=)
10: ROFAtVDItt_EMagnNMRUK_8AFAo.roa (hash: 0/7Uq0DIP8W8M/AoQNG3rBHtAMug83v1CzVSyAShVQQ=)
11: SDv_Hv3j1zQYKdMKKJahi--bpbA.roa (hash: wiXpFtlqxh3vGK37wBoqcCvYsCDy5XPVC/ufdC7sY8c=)
12: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: ysBv+jXNcbPpeeUx5CKPC1y9m6/kgQhXJcH0YiEjJrI=)
13: _8UAnkY-Tgc4NZnERUShSjoD4xE.roa (hash: vjUpfIBIALtCY5M3wtuciypbGi/vBvMv2oVQ1jTAtsM=)
14: fCShZlzeyORIZqRpva0LWa9CXcY.roa (hash: Zw1W+vklKFKa/7FceWUPbOmP+yw3OCVtUAYFmYvIIHY=)
15: hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa (hash: P18VNSJRod1881sL7FyXf+LS0GoW/VI4U88shR2WTxY=)
16: nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa (hash: mBMzJHf7kRboGL+NsWlN+QzAIvKztq5wCERZ3i/DuXc=)
17: ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa (hash: O7M0cdecg0k5jJU4EYSgvz6r2GhJVnkR6Wsg7m7uOsk=)
18: x35bCF8o2frE0yVudoR1l5CD4FU.roa (hash: P9cerXMElreTy2+e7EkdqIb26AnuXW2v3h+k00K0LsA=)
19: yNGeTwwu6nvLd6pVRj1m7SWFsRI.roa (hash: DIGoHvjBhbh21gUmE9LE4Pi0LqvQbAY6Y2ak9deQj74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:73:68:7d:46:94:e2:d9:95:6d:de:94:14:b6:10:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Sep 26 16:01:40 2026 GMT
Not After : Sep 27 16:01:40 2026 GMT
Subject: CN=e5a9822a5e107040b45f53f909b582ab84c4c948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:b0:cc:7e:9e:4f:3e:24:f2:6a:00:ad:33:
96:e5:ce:fc:5d:d1:b9:11:13:a9:b0:aa:fb:0b:8b:
a3:b4:f1:c4:18:3e:ab:75:f8:06:c3:72:77:7c:c0:
2a:b2:dd:55:19:6c:80:b9:fa:1c:18:0c:71:52:7f:
48:c9:be:69:92:ec:bc:69:da:b4:09:60:cf:49:61:
75:15:95:02:17:c9:47:aa:36:cf:8a:f9:69:c2:25:
9e:93:ea:b4:94:ad:40:91:53:b5:7d:4f:54:95:5e:
89:1c:46:50:67:40:d6:50:f7:db:8f:1c:7d:b6:06:
bf:9f:22:ce:17:16:2e:bc:ef:d3:76:f7:bb:ce:25:
e0:85:c4:d7:64:81:9c:60:16:8b:f7:f9:44:5f:63:
4f:d7:1a:ef:80:bf:a9:9a:2d:7c:e6:33:b2:46:7e:
31:57:9a:d0:24:31:57:0c:aa:70:58:3d:3f:c2:2d:
18:ef:c1:5e:7a:9b:1e:5d:7a:17:ed:79:cf:f3:7b:
5e:97:1e:c0:2b:c9:70:5a:7c:32:03:9f:00:33:12:
51:69:cf:9e:f3:81:a3:bc:fd:d5:11:c7:b3:03:96:
84:b1:41:fa:8f:6c:f8:93:81:55:89:cc:f5:3f:ec:
18:e8:b3:5d:20:b9:a4:ae:7a:b2:7a:0a:88:09:6b:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A9:82:2A:5E:10:70:40:B4:5F:53:F9:09:B5:82:AB:84:C4:C9:48
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e1:64:1d:6e:f0:4f:58:82:a1:a8:ca:f9:80:2f:56:0d:ca:
1f:46:6c:b3:5f:6a:32:ce:da:3b:0e:2c:99:89:28:aa:c7:5d:
e2:8e:12:4e:f2:bc:92:e4:5e:97:97:67:3c:30:cf:54:50:21:
11:de:78:12:e7:26:02:06:20:cf:ac:fb:2c:b3:5b:41:7b:5b:
5d:e8:1c:fa:4c:f2:36:49:54:14:21:69:5d:b1:22:36:85:c0:
0c:b0:39:92:e1:6a:be:48:e0:5b:10:d5:e8:eb:4b:89:5d:0c:
34:e7:ce:52:b9:cf:81:7d:40:c0:84:36:d0:c6:89:79:46:d4:
87:cf:8b:9c:64:aa:9e:f4:b9:4c:18:a2:62:26:28:c6:dd:ca:
49:5f:b5:42:5c:79:2a:43:f2:87:d0:dc:9b:3f:08:9b:03:d1:
6a:08:2e:34:f1:6d:59:30:00:d5:5c:0b:da:40:4b:f6:10:b1:
60:e0:4c:e3:59:a3:ee:11:79:9a:7f:57:20:c9:16:42:a1:b8:
5c:4e:d4:8c:36:7f:ef:93:3b:d9:7e:cd:2d:22:0c:7a:f2:06:
94:cc:ce:21:3a:a4:1a:2b:15:66:9f:d7:cd:ed:6b:be:90:f1:
c7:56:91:4c:08:d5:5d:8a:0c:2c:0b:97:d0:42:42:ea:91:af:
d1:e9:f3:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDec2h9RpTi2ZVt3pQUthANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl
NjdiOTcwHhcNMjYwOTI2MTYwMTQwWhcNMjYwOTI3MTYwMTQwWjAzMTEwLwYDVQQD
EyhlNWE5ODIyYTVlMTA3MDQwYjQ1ZjUzZjkwOWI1ODJhYjg0YzRjOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseuwzH6eTz4k8moArTOW5c78XdG5
EROpsKr7C4ujtPHEGD6rdfgGw3J3fMAqst1VGWyAufocGAxxUn9Iyb5pkuy8adq0
CWDPSWF1FZUCF8lHqjbPivlpwiWek+q0lK1AkVO1fU9UlV6JHEZQZ0DWUPfbjxx9
tga/nyLOFxYuvO/Tdve7ziXghcTXZIGcYBaL9/lEX2NP1xrvgL+pmi185jOyRn4x
V5rQJDFXDKpwWD0/wi0Y78FeepseXXoX7XnP83telx7AK8lwWnwyA58AMxJRac+e
84GjvP3VEcezA5aEsUH6j2z4k4FVicz1P+wY6LNdILmkrnqyegqICWvDHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWpgipeEHBAtF9T+Qm1gquExMlIMB8GA1UdIwQY
MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt
ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4
LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+FkHW7w
T1iCoajK+YAvVg3KH0Zss19qMs7aOw4smYkoqsdd4o4STvK8kuRel5dnPDDPVFAh
Ed54EucmAgYgz6z7LLNbQXtbXegc+kzyNklUFCFpXbEiNoXADLA5kuFqvkjgWxDV
6OtLiV0MNOfOUrnPgX1AwIQ20MaJeUbUh8+LnGSqnvS5TBiiYiYoxt3KSV+1Qlx5
KkPyh9Dcmz8ImwPRagguNPFtWTAA1VwL2kBL9hCxYOBM41mj7hF5mn9XIMkWQqG4
XE7UjDZ/75M72X7NLSIMevIGlMzOITqkGisVZp/Xze1rvpDxx1aRTAjVXYoMLAuX
0EJC6pGv0enzEQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:32:25 2026 by rpki-client