
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
File: VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft (raw, json)
Hash identifier: FX430qvs40GmlLOGYWP8O/VuA3lZZywvaJUTk+sgth8=
Subject key identifier: D9:AC:20:B4:95:9C:F1:79:32:C8:07:39:EF:8F:A6:1C:53:63:A5:E1
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 019D26CD84EA329AFAF2DA9F64FA14D8E6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
Manifest number: 0716
Signing time: Wed 25 Mar 2026 21:01:36 +0000
Manifest this update: Wed 25 Mar 2026 21:01:36 +0000
Manifest next update: Thu 26 Mar 2026 21:01:36 +0000
Files and hashes: 1: 2ISQYiF7smCTr8-VCoXc_EMuKQQ.roa (hash: AltQxVYqLSdxf5qwM/HvX4Wqiiyzki6fJVK29DSOpmw=)
2: 6C1C61LNxMu5xTKGpsdJ02LK17A.roa (hash: tMXEI6mJRzni+V2fLhr49Pw6WxL497oS2H3g1dbHqws=)
3: CWwWa_vyGj82X1p5y-DJ0i4N8DE.roa (hash: 7hbb3g71VwbXfNDGI9fECeYzclmiM8kG/wyWGXifwrA=)
4: Ejb3tjE4LEg5ecS_49GbcsFwR50.roa (hash: EyotTnEwgT79+j4yAfyY9Id69/0PTNxo5lXejO2U6VM=)
5: G9GlP4CesyO67R7ojK6cw0be-B4.roa (hash: AzwxJYVKnL/Zimj9iKOu0ix5tpzs89aGE6VfNYbrU8M=)
6: NnZ8ek-GU_RB9E9iPUKzuWfkUig.roa (hash: y9Oj0T4upgAlO6II3KGdhRSOHdKTzATHCfQXkHfJiSo=)
7: SuAeAzCUrsJ-HIRjFuJd36D9tUI.roa (hash: UITiTYpcMC+smMCD8xlNQgnLRHlKvSaoNbhmItj5J1c=)
8: VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl (hash: PZA9MIBfdBjH3UqF0RKDEVHhYBfEqZW3pZ5vtlFutv4=)
9: _LZZtfYM397iq54CuSn-XrB98SU.roa (hash: yzB8nwTuwvRch3W8Na06UhBPzH7DCWSzjy148fbSwQA=)
10: afY42rg0dmaIKoGaY7MpaAxIO70.roa (hash: TkVUlz1LgAGnS8xuYApkYlLbMunWfqMDpHxol3l/ngQ=)
11: b5FVTUBR1eIwBHxsRkHfvBjhwD4.roa (hash: CKWr2KIqjFW2K2onbrz3K5qz2e5vP9+FDkt4n0WWS/w=)
12: tK20It-Gxi8d5G3lIHR237kGrRs.roa (hash: 7t/M3+9H0KNiC9VIhfV8J5boGB1F8dIJpPRmQzRdpho=)
13: vseOMyGx-RUHHzgHLny15h9iurc.roa (hash: +M5NuQUX2aVuh0JYV597fLv4VoFbpvu4EB+9TRl/kwo=)
14: zz-BSpcb3-Xu501LEqm9wOtR6k8.roa (hash: EgMkKLDyyNbVBAATUGcsAMhPzggOppilXHhb/tpqUi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:84:ea:32:9a:fa:f2:da:9f:64:fa:14:d8:e6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Mar 25 21:01:36 2026 GMT
Not After : Mar 26 21:01:36 2026 GMT
Subject: CN=d9ac20b4959cf17932c80739ef8fa61c5363a5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:f2:74:77:eb:b4:6f:5b:6b:9c:e0:28:b3:
52:60:cf:78:10:bf:0c:3f:93:d2:5d:ca:e5:7d:a2:
7a:ad:fd:63:16:e2:b8:81:b8:68:1c:41:87:f1:74:
a1:89:56:84:18:20:94:a0:00:cc:1f:41:ea:09:5f:
02:25:18:d1:f8:dc:92:89:e7:d6:75:cf:94:c0:f0:
0c:b0:f4:a5:9a:ef:dc:2d:3d:e7:7a:c4:62:bc:e7:
77:c8:d8:fc:25:48:e8:ff:bb:d0:d2:59:bf:78:97:
d8:e9:a1:6a:71:f4:2f:51:23:9e:18:d0:3f:0e:0e:
6a:f3:d4:5b:b1:60:80:31:9e:0f:f8:5c:25:f4:37:
da:b8:78:f3:92:9e:e7:73:dc:af:e8:17:3b:6f:b6:
93:b9:21:e0:96:c1:4f:dc:cb:d6:df:06:38:63:9c:
b7:61:e8:45:57:ec:fa:21:5a:f2:8a:99:27:90:e8:
c5:a3:7d:45:9c:13:e0:55:c6:a0:50:b8:25:b7:bf:
cf:6f:3b:5d:80:da:1b:b9:88:62:ad:b6:b6:51:6f:
ad:83:71:d1:14:dd:e3:af:bc:c4:fe:21:2b:57:9d:
93:a6:2f:98:2c:16:65:75:e9:fa:2e:04:8a:f5:56:
94:33:71:79:bb:2c:e2:67:10:a9:4e:9e:73:81:11:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AC:20:B4:95:9C:F1:79:32:C8:07:39:EF:8F:A6:1C:53:63:A5:E1
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:46:87:e7:06:c9:91:b1:4c:75:cd:33:81:f5:9d:8e:a2:1b:
01:00:e1:a1:b6:1d:e4:17:da:ae:a3:d6:5e:aa:8f:16:d0:ec:
02:5b:d5:63:80:22:bf:13:69:82:de:6c:7c:f1:e1:d7:74:3d:
f2:57:3f:ac:38:f9:fa:13:27:30:d3:9e:6c:5b:a1:63:43:45:
99:84:70:0e:dd:01:67:91:3a:7c:83:b5:5b:65:0d:d7:bd:39:
39:c3:43:a5:8a:56:b4:ee:94:fd:cd:36:37:02:7e:69:b4:70:
c5:e2:76:f4:35:20:74:65:09:ea:cf:a8:d9:a3:6b:3e:c1:f2:
a8:d5:cb:28:43:f7:20:32:92:c0:5b:be:8f:ba:2e:59:ad:46:
4e:1b:c3:df:14:aa:e5:a2:ea:0b:9a:5c:f4:f1:86:06:61:58:
05:55:cc:ad:3c:d8:48:8f:85:88:64:14:0e:19:f0:f0:fb:ff:
03:f7:f5:b5:77:95:28:25:6b:fc:9a:89:49:2c:ce:dc:2a:78:
18:15:32:67:6e:8a:77:89:17:0c:0b:fb:c8:ac:ae:c3:28:c7:
a0:1d:9a:72:b8:93:7a:6a:e0:d8:8f:3e:ad:e2:95:35:e2:a8:
56:ad:4d:73:5f:fa:1c:50:e2:46:91:ec:6d:a9:0d:f8:45:1b:
d2:b0:f8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:25 2026 by rpki-client