
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
File: VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json)
Hash identifier: 8puU1lr2g5bNdC+BWCbju8haVAe4iQWwhSgN9IN2Bcs=
Subject key identifier: E3:BB:CA:D2:44:33:ED:15:18:AA:BC:00:98:D1:F4:C0:E0:7B:65:EC
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019E2091161167CF4628DC26F4B8A7FAFA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
Manifest number: 1932
Signing time: Wed 13 May 2026 09:00:39 +0000
Manifest this update: Wed 13 May 2026 09:00:39 +0000
Manifest next update: Thu 14 May 2026 09:00:39 +0000
Files and hashes: 1: 0yaCS409HGtE8PUF12kU6mwQ1Co.roa (hash: iSSfbXnMKJORvDmkAsKI/vF4doPB03HIevpGdq9obls=)
2: 2QfcZr1pSsuW1CwA-vTKFhuyw48.roa (hash: BPNYiNMYMk2ufgPdFVS86dmWT3V9GZCkDDolNvp9iYI=)
3: N9x7xWffEFub_DrKRecQL_Xz4Yw.roa (hash: Ne+cvzMxCGMNNRQLtosrt7wHRjAbylqgnH7X3wnwcrA=)
4: ODrvOm-dJuUN_AAYKVaZFOpeRWo.roa (hash: BwrM7AQ3z89UNZnD9zdl+nzTro1rSz8r7mTAINtQABE=)
5: OpgFBnj58YZNhjqrjMPFmcXkMoM.roa (hash: x3izVxL+JnWf1wZ+LfTZxTJhtpQOQ2pahlLAm7S6090=)
6: ULfP7S3K6Ksk8C6TR4RZSqXerPo.roa (hash: jDQhgjn7JFfsrl3H/uni3GxDG1EWoZv53nMWeBGAfcA=)
7: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: k3wYCtpTf9eZ1IX0ehv/NXyQK6ejBbhQD9r1fb46ADM=)
8: ax0rIEwmCkaWsbQzuKsVtZ1akYA.roa (hash: JZiYsaGyAlILplr43owk1tRlRSwGab7TOJU5FDuhKa0=)
9: fyQVOXy16Gt7_ifnytbj200NH-Y.roa (hash: UyCkvhjGfT8atrl4wqMna6uOndaEBkveUoY6zrFvO4c=)
10: g2fN7tCyrysxEndgN_riAmLTYSU.roa (hash: XiGl00VYZp7eVqANIUc9SN7YbU0zcI0nIY4sSK0DTc4=)
11: kYXzTp4ydXYEubY6Zs2tRMwj1lA.asa (hash: lFVvdazmR0artN3g09nvxHrr2wgy8qv5IQaGXJwF9OU=)
12: l3M-xr60hrpxSkxGT1zOTrb_xW8.roa (hash: 2U8pj/J8QbJGMZnyHPhC1LIrWuoDRqXzuWrV+ncciiE=)
13: qDPjAzV1MESCMl_59kmxdlu5OwU.asa (hash: WPDQk2nWLa5ctCuNbhzwZYV7qaWfg4mN27IKtW1ZNiY=)
14: uPKrVXBdVJ52jFwUr1Sws2imUiQ.roa (hash: +P9LOhkgcvGB9Y0oqUbZdTK9wmnZzjn9rC57/GCZX0Q=)
15: yYd4WUIyi7vr2I67nTkoVt0Ejv0.roa (hash: 5xaRG17r+u4QRTcWLhrlmGzeZOgMH/U+21YclapRGdE=)
16: yoxe9lLbCa2h6gtQRAHAduOM9X0.roa (hash: s8LyW32eS7lJnnnTP0eK55NVtnvGmgvQdGOQCvIfya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:16:11:67:cf:46:28:dc:26:f4:b8:a7:fa:fa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: May 13 09:00:39 2026 GMT
Not After : May 14 09:00:39 2026 GMT
Subject: CN=e3bbcad24433ed1518aabc0098d1f4c0e07b65ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:02:4b:2d:f9:61:83:bf:4a:b6:9d:ae:52:
fc:86:4a:f4:38:87:bd:60:e4:a7:1c:9a:71:b1:41:
cf:98:1d:d0:33:18:1a:1d:7a:a1:27:11:50:04:95:
b8:f7:0d:bb:0a:27:fc:49:b9:5a:a6:ed:f2:74:8e:
df:d0:ad:c0:2d:42:bb:01:00:db:97:3a:25:0e:2e:
89:b6:c6:b1:1b:de:bf:e5:c2:6e:36:70:8a:a9:5d:
69:2d:bd:ff:6b:25:71:e2:61:69:0a:76:86:bc:e1:
b4:0f:ea:68:52:bf:55:61:7a:2f:70:0a:f8:6f:f4:
ee:55:56:57:9b:0b:c1:d1:b6:59:22:4a:3e:de:c6:
56:d2:b0:5a:b3:f9:2b:10:c9:78:aa:64:19:74:d1:
16:93:0d:78:83:ef:cc:83:e5:e2:29:ab:26:19:db:
e3:27:23:88:8a:72:a6:88:fc:48:b1:39:d8:3d:dc:
9f:5f:70:09:a5:8c:a7:6d:8d:cc:d8:b4:4c:d0:84:
94:d5:a4:c1:8f:82:02:bd:03:c4:88:01:cb:54:ba:
ba:71:17:76:7d:d6:55:7a:d9:ca:03:77:51:6b:19:
2f:c8:38:52:9c:41:1c:33:e1:8f:9a:92:0f:2a:a3:
e1:9a:68:6b:c1:60:5a:1e:8f:09:ef:91:18:d8:63:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BB:CA:D2:44:33:ED:15:18:AA:BC:00:98:D1:F4:C0:E0:7B:65:EC
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c8:0f:2f:57:c4:98:de:ef:2f:59:51:d0:53:65:c2:a1:23:
f9:98:b2:64:b5:e9:4a:d6:b4:96:59:bf:22:51:b6:91:3c:36:
aa:6d:e7:b3:be:7f:a6:98:b4:bd:3b:2b:c5:9c:bf:76:c6:4d:
8b:eb:11:7e:c9:0c:8d:b2:9f:f6:d9:0e:6c:d4:f8:0e:56:23:
9d:1f:85:64:79:14:04:7e:ec:d4:41:0a:20:1d:1b:92:56:7d:
08:a6:85:8d:9c:43:3a:7b:a2:85:5e:2f:01:fe:dd:b0:26:df:
84:0d:50:d4:53:5a:e3:f4:98:8f:8f:a1:77:70:19:6b:8d:72:
1c:17:e2:65:7d:48:8e:a3:3e:9a:74:07:86:08:72:c2:76:f9:
7c:0b:67:b7:51:03:84:2c:6e:47:66:4f:a2:62:fc:7e:f4:1f:
de:15:62:81:9e:ab:86:0b:09:62:11:bd:35:b0:22:3b:7f:51:
02:34:f2:70:dd:7a:99:ff:d3:7f:1b:b1:dc:e6:e8:0b:e3:77:
e7:f9:e2:de:8b:ac:c1:6d:7d:ce:6a:b8:42:0e:60:95:60:20:
94:70:ff:64:89:00:77:12:39:2a:d2:27:6c:af:48:89:17:2c:
1e:49:41:82:c4:32:ff:f6:90:02:a8:6c:26:cc:8d:f5:37:a4:
4d:5f:66:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:48:42 2026 by rpki-client