
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
File: VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft (raw, json)
Hash identifier: GKvJomZn/Lb1T1T5Py2Y+fVYN7CMj1qjjDuNvEA21fE=
Subject key identifier: 57:E7:4C:96:1C:D0:FB:B0:E5:87:17:11:69:D7:C6:B7:60:40:54:0A
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019E1D9079D8923828E123A8BC0406EDAC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
Manifest number: 0A4A
Signing time: Tue 12 May 2026 19:01:08 +0000
Manifest this update: Tue 12 May 2026 19:01:08 +0000
Manifest next update: Wed 13 May 2026 19:01:08 +0000
Files and hashes: 1: 02aNuL727YimobKqbRL2RjkCGsc.roa (hash: oYsmI39E8S+vq9s+1QolNYuR35O5QRqsFtuYCX7LY/8=)
2: 2eL7GAOQBnjU2vE4NUK1PCgwfWg.roa (hash: Dwa67ru8l8X28sKKtvbdAV+bA3pDTfopqKgDja+YPG8=)
3: 5ehTC2JCfs2MQwmPtVa9QU8zu3I.roa (hash: OOIm1NGAg78CrgVbVQY8rZpUYCo0Z8If87gxxhJsBns=)
4: 67mS5fsZltU_-kwbfaIPPxKzh7s.roa (hash: wdr2hYEvrPtVW+B9M61tFl1nk10pFCbEkbxLj6jpw1E=)
5: 9RS1bKDYnq9z3G_R-qYUvctWzoI.roa (hash: s7GcVAOs/PYU6IZMz5kKjwJ/V/5aeZe5gRNUUTw/o4E=)
6: ENfi398-VJ1QvTZ9YL6nNM6z3x4.roa (hash: RXmEKC2aKEuTWb8kU/cCLrBg7g83D0O3fDo3Q5mhY4U=)
7: GLIVDZwdHIhf2YmTYBHvAbNDrx4.roa (hash: maJ9v9a1HfvNH9UIPPe02lvLG4iy2FiMboD9G9nuCb0=)
8: IWnIeaiesxLJUOrbvIs82ViVndc.roa (hash: fKg3HWPCoL1skKqebVG/YrN01QJ1CR0hNn4VrGiEosI=)
9: Jd31qx-yiqUqWWo7jPzPNCOki0I.roa (hash: rFu9Hzpz6Ul+Q0D/N0VeQ9NOX2DGu7TJn85l90Uus3Y=)
10: K9X7YvhT0dRGJQlJCyJci9GYnf4.roa (hash: 5cJq68tTzImKyszSV4nZ/PS3tI8ZSP0+QNO2XzbQrOM=)
11: OJtF0pPBQbFSyVDdFWy9pmhhoqs.roa (hash: DSt/qq/J3XwZPhyRiVNSutgXRx//0+8JQmzXUU3O2qo=)
12: Rua5aXmaZ0cTAyL2wzLDFD3z2Y0.roa (hash: /VyBRk5OqWGk6rKvLvZBGoKiQq0lLDGIs2kjfMI6eQQ=)
13: SDFl-dcGqJ4rviFvDKNjX5FqVRQ.roa (hash: D7VcT2WmquQVyow8pUPB/uhRTsYZ9Gv0ho2KzxuRPWg=)
14: UzKw5JsVVm-z36AxgV1sIfyPCVg.roa (hash: 8QY/FsQE18kg5ww8X7hAt6D0NGCuOUcWF14pdaz88ts=)
15: VK4nOfqgpmXOVhn34C5sbxe-Wj8.roa (hash: gIkDa5LqgOok0v/RH+gp9FiPITDslBneM2wjtpnpxmc=)
16: VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl (hash: L/r6LQI8GZ457CYfCwUvAjiR1SP6Axd0n8YeNPkwiyI=)
17: WnbZZnjRXFHiwkJ7AQuNJnrAiRo.roa (hash: GkbhcKsqL/QECgrT0ae5dyM8eF/71EYoKhLw60/jZkw=)
18: ZZY4QUjno5yUu-aUZBfA-J-Y1Zw.roa (hash: SoXL/gw+CMUE69BuTsPHvdy46MtYr2qhRpWn0RsS1YM=)
19: _uCvTvS4TLRKOY-Zp7Kzlz_6B-0.roa (hash: yW2eAbC65z+mIRn5yCj4vtbXusOyzMkXOf4o7Pox6bc=)
20: aWcPUj1DCDuQO6qmjauPK8xInfo.roa (hash: k8tfsJzdjTq2aomYV3WxH/lnSIh4yY+NAufWvoQ6Pds=)
21: bRMOUlNOCfzR4ErU0rYz0V_P-ek.roa (hash: BQ0CfpSYs9L+JYIJuNZHmCZyYfkjnyafafs9iDbVjxM=)
22: e7-9LCeb-3BLXkp_zjmQWHgwSC4.roa (hash: loc3ZJs/gO81j4lMtHMphZSezIZdKFT+rGD1FmHI/PI=)
23: ef3ELX7iaik6XnkIuzN-OXTNzqk.roa (hash: J1z15FpdqDCZCa3eLk16tp1TWfZ3MvqSUt2gCJ4El8Y=)
24: hmyypgZeZjs1rI8ypzPihdUNMjE.roa (hash: qWNykdL6epLd/pHRnj2yljaFdAOhHq0rhbaXB9zAVI8=)
25: hzKtJYmQx2VKDR4are4X8Q6MlNE.roa (hash: Juf71zJJbJe4QMMrbX8fLK426s9dmhQKiIlkp/1nubQ=)
26: jQbews-PB3moyhJrqDiH9CkH6Ko.roa (hash: pgs7MGu7rOMWQQ3bkH9IRfbeLQBYLbhv0iGyBcHqZis=)
27: mgruyOr_bhqrj5DuwHE1ll_puAo.roa (hash: YRLf4HOJtTcb2BtLsq3In58Yh9rOqegL3BjCqnES5Mc=)
28: oNhBE7cWesJejfu6VNBpQvuJ7Pc.roa (hash: eksGpiRZY4AMJcm0oeZ2OjL6HKGtTKXD/3FT0xK8N48=)
29: rPipkXEDpKlmHXVu6A2VEAhiTo0.roa (hash: zEdpM4O0K+t4gO5fwCfTb7pIPqmbQjGPynFqeCZgI90=)
30: s7jTmvZ9Uu0lTUaXjscRfprTxvQ.roa (hash: c/c+gPrnfsRNn18SCCqI0mKo4h5PNPD7zev+q5M20v4=)
31: slA82WP_VU7ODQ8vUg0JDfoLGXE.roa (hash: uRkzTB028wlP9aSgZraF4khx6ZKPBzunp3sVcsD/9As=)
32: tETOyxkLoMNu42R_r2YtHtjW5R4.roa (hash: cHO6EZe5v4WJrUZm/pjUSj2daC/uz6A1814sqH7j/cU=)
33: tJFkOAe-uPVKySdLZlUOA_COLBw.roa (hash: 8vfkTUAP9rveynPhVWa2m94RZyQ0iWmpoHifiomeTy8=)
34: wa8P_s-riz1na9eGferqmctY1qI.roa (hash: QKP4EaklAbfZpQZYefD8a9Ic7nq8AvtyjHE0G8KcIs0=)
35: zykWo9Ct0L3lBW7ewPhEqmB_T60.roa (hash: zpltO7/7ljaNziIpUrjqsethtbmoWLWerHaLe5S+B/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:79:d8:92:38:28:e1:23:a8:bc:04:06:ed:ac:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: May 12 19:01:08 2026 GMT
Not After : May 13 19:01:08 2026 GMT
Subject: CN=57e74c961cd0fbb0e587171169d7c6b76040540a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:2f:08:a9:56:41:49:24:16:6c:1d:60:15:
f8:4b:96:3d:24:9d:00:9c:64:b7:09:e7:c8:97:53:
ce:77:d9:d7:69:22:34:71:b7:10:10:75:78:59:49:
20:61:67:d8:14:3a:0e:6d:39:c1:a1:4a:a5:6c:22:
38:82:bd:b3:5f:cc:db:02:f2:79:ef:ab:9c:fb:7e:
f3:bb:70:da:8d:28:e6:77:7d:cc:f5:43:80:3d:0a:
bf:0c:7d:df:e8:ed:59:97:f6:a5:90:5f:41:00:76:
e8:7f:49:eb:54:a6:5b:1a:a9:47:64:4c:3e:c5:94:
dc:53:f2:65:5c:98:ca:8b:6c:f6:34:34:11:65:8c:
71:2c:5d:51:1d:97:6a:98:fa:c2:e4:72:e6:39:de:
bf:dd:72:a5:fa:bd:a2:7e:3d:c1:d6:4e:bc:d8:ed:
43:e8:fb:f8:6c:2f:e9:34:59:aa:10:a4:54:5a:48:
b2:be:0e:2c:a7:53:28:63:12:66:fb:2d:d2:c5:9b:
bb:09:b4:e8:6e:2b:5e:65:a8:bb:35:19:26:e8:f6:
ef:a9:b6:0a:93:d3:5c:09:8d:e2:d0:fd:c4:8b:59:
2b:6e:f4:e4:74:c2:d5:92:cb:70:55:da:80:ca:26:
55:97:6f:cd:4f:95:6f:29:58:95:8d:53:4d:bd:e0:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E7:4C:96:1C:D0:FB:B0:E5:87:17:11:69:D7:C6:B7:60:40:54:0A
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0b:6d:80:b4:62:7c:2a:62:ac:a8:44:05:78:03:46:18:97:
3b:22:ad:c5:4b:e3:8d:f6:79:b2:0e:35:d6:c5:ad:0e:ca:cd:
56:64:d0:1b:9b:93:07:2e:30:83:1a:f2:83:4e:6d:df:22:c6:
58:5a:b6:00:14:f3:69:83:93:c5:90:de:5e:c1:65:22:51:8e:
f3:4c:9f:d9:f7:4e:81:6f:86:91:72:30:80:dc:95:0b:b0:d9:
90:8e:e3:8e:7e:0c:79:71:0f:dd:98:87:87:a9:4f:99:57:07:
5c:9f:63:c1:5c:fc:f5:00:90:9b:33:55:12:6b:ee:b2:8d:f5:
32:95:75:8b:d3:03:fa:12:f9:19:ea:30:a6:cf:33:87:ee:b6:
00:20:72:e3:8d:3d:68:9c:cf:b0:07:b5:9b:24:85:f2:a5:2f:
94:fa:f3:04:3e:d4:3a:7a:d0:e0:90:5f:5a:60:39:cc:ec:0c:
5e:8c:01:46:de:fd:89:c7:25:eb:6e:08:7a:82:eb:65:16:9b:
c6:b6:23:94:f7:21:a6:3b:66:a4:7e:10:24:88:2c:0e:eb:2f:
5a:46:5a:ab:45:a9:5a:6a:68:80:7c:44:24:95:92:73:55:79:
37:c2:c1:fb:57:16:2a:55:40:cc:42:57:c4:70:70:7a:fa:fe:
13:22:0e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:17 2026 by rpki-client