
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft
File: VUwk1Deg1Wub0L5IimDP1czI-b8.mft (raw, json)
Hash identifier: +HqtEvYli3Fw6ERPgOs6AECvu9WCPfrxAfWoL1iMgQM=
Subject key identifier: 51:17:AF:D5:98:91:9B:75:22:44:7B:31:32:07:00:2F:8B:5A:36:BD
Authority key identifier: 55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
Certificate issuer: /CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Certificate serial: 01A0D2373447D6FF63D902F5E1D61FF2E304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft
Manifest number: 025A
Signing time: Thu 24 Sep 2026 07:00:28 +0000
Manifest this update: Thu 24 Sep 2026 07:00:28 +0000
Manifest next update: Fri 25 Sep 2026 07:00:28 +0000
Files and hashes: 1: AOkKST9KwSJH3sXE5USL9gzAqUU.roa (hash: aXhO9sIv6q5kHGbb9/fb2Aw1F2NhhrGlB5l1s7C1sMo=)
2: DCZgz3VaJZPCqv-Xdr9kw9h7brE.roa (hash: DyiZMiJQd8x2jp86BuGzWff7b7OfU0LvcqAW62QVCmg=)
3: Jpc9akMn776zSYTD6mXsyRzavLU.roa (hash: ZfuvokmeEiQYfhhAu6Yv9wBQKPiuHqzkSEN6L6pFYXs=)
4: VRMDqGgJNAkkzV2QU5k7y3ameDM.roa (hash: +dcQEak+RgFEIETOwcJ9qNLzNVuw4mUqjHHzKz8y2Vg=)
5: VUwk1Deg1Wub0L5IimDP1czI-b8.crl (hash: GIP1vCPWlcG39EQ2y5AZ81KkWMihWWImbKdK6GV31aE=)
6: YUvNuDDndHcf-AWuGGf2zqBhFIE.roa (hash: 7DuazkLVNE3f7cMkbQDSXftJtVier8QCOPrebbq+iTo=)
7: kMXVbz2TuORvoHZ7UfuE6YxZLcc.roa (hash: tU3JunGy9A12HYURdznAlTij6asn5+6G+/mvxmK09Xw=)
8: lHlRsL-Mq2IXLN_FCgk3n5SW5Ow.roa (hash: AUB+QIsy3NSsT4UqxQv/l15uvrlHGM0Y5Yne/M+wgrs=)
9: q5A4k1LuI-8fQrtHp3b5trdFPzQ.roa (hash: KFUng+vVrjLAjS4gi17nWldghXXi/irFXTH6lAnJMPU=)
10: stcR-lSqkJU2Cb-qmerN4K0gerA.roa (hash: VXZV1NgbHgfdGJFJNdfWgsLM9jnWqEunQBxug2Zcoyg=)
11: z-M8hA9YhJMehJj6l7J_V1Cf40s.roa (hash: 8tsU5K53aTtChU1kltfQFAvWJiRSonY1j+RJ+vsZrJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:34:47:d6:ff:63:d9:02:f5:e1:d6:1f:f2:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Validity
Not Before: Sep 24 07:00:28 2026 GMT
Not After : Sep 25 07:00:28 2026 GMT
Subject: CN=5117afd598919b7522447b313207002f8b5a36bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:19:dd:67:03:86:29:37:bf:71:a3:05:a3:
04:39:7a:71:4e:45:52:d4:00:b3:96:a6:7e:2b:cc:
a4:4d:67:b4:66:96:18:0a:88:94:cb:31:0d:22:25:
64:c7:ed:ed:1a:b2:a2:9e:3a:8c:38:84:a2:9e:4b:
30:08:5b:1f:88:ee:0b:d3:cb:9c:22:18:2a:dc:66:
4b:97:2c:0f:cc:d0:e6:46:59:d6:26:37:2f:73:6f:
6b:80:95:25:83:72:7f:7c:f1:b4:29:b9:e3:2d:20:
33:f6:1e:a4:eb:1d:ec:ad:7c:bb:62:2a:b6:0a:f0:
72:d8:d3:cd:3d:e5:8e:82:7f:e8:0e:0c:53:4c:db:
15:dc:d9:d1:96:eb:ed:83:00:99:6c:3b:36:a6:d1:
4d:74:3f:98:8e:8f:43:8a:5b:0c:6e:59:a3:d9:ed:
45:61:af:05:81:d8:e0:08:83:7b:75:b3:48:b1:c6:
ac:63:e8:09:f9:77:69:a0:7f:61:f1:bf:1d:62:6e:
0f:86:5f:f0:6f:32:d9:3f:30:b2:59:67:68:8b:ed:
85:39:65:e6:2e:70:f8:50:1d:3f:35:72:04:8c:2b:
99:9c:c5:3b:ad:b0:50:0e:21:e8:50:89:8e:60:4e:
30:9b:90:75:b1:4d:e3:75:59:7b:ee:44:92:cc:e1:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:17:AF:D5:98:91:9B:75:22:44:7B:31:32:07:00:2F:8B:5A:36:BD
X509v3 Authority Key Identifier:
keyid:55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:70:87:6c:f4:ae:a4:63:00:14:0e:db:c9:6b:cf:44:6b:eb:
70:1d:f5:f3:6d:10:fd:11:a2:64:45:a7:9f:cd:0f:92:45:f7:
f5:26:1a:0f:fa:0d:4a:11:09:06:d7:7a:6b:bf:31:65:91:a8:
55:b2:60:55:de:a5:84:2b:06:f6:fa:a9:72:0c:46:44:89:a0:
a3:06:98:73:b1:26:9e:97:73:6d:cf:1f:c0:06:37:ab:e5:ec:
81:80:93:87:92:a0:c0:44:52:8e:4a:92:21:b0:e3:cf:b7:34:
54:e2:49:fd:9a:8d:43:15:e1:76:ad:93:9c:fd:16:0a:75:05:
9c:e4:c1:d6:e4:08:56:78:4a:0b:54:7c:99:b3:bf:27:97:73:
58:66:8d:32:f3:8e:61:0f:89:29:b0:57:0e:97:5a:0b:a0:f1:
35:74:ae:43:5c:fe:66:41:59:c9:4b:63:ac:0e:c6:8a:b3:12:
b6:33:57:92:4f:8d:f7:00:0f:ed:58:f4:52:fb:32:d1:51:6f:
7a:b0:8a:d0:60:38:33:57:53:d0:21:37:71:dc:af:62:09:ec:
6a:b3:19:a1:2d:85:cf:0c:61:d1:e5:93:eb:72:a0:5d:bf:dd:
26:13:8d:49:db:50:7d:16:fd:57:21:ff:4f:21:fb:3a:38:da:
5e:46:0a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:53:41 2026 by rpki-client