
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json)
Hash identifier: 7u14cw58KEhAjT68zjWcAZRgfz1w9T2VyfPvo6NBBCw=
Subject key identifier: 40:33:55:CA:91:E7:28:36:70:5E:8C:9D:C5:EA:CC:C8:AF:86:6A:F1
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 019D25BA6E03048A086FFBFE7FB8DC793608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
Manifest number: 0204
Signing time: Wed 25 Mar 2026 16:01:07 +0000
Manifest this update: Wed 25 Mar 2026 16:01:07 +0000
Manifest next update: Thu 26 Mar 2026 16:01:07 +0000
Files and hashes: 1: 043Lbp27EDcUm-b86hgRfQTIMxA.roa (hash: kfaT7xOA8Vvohn0rBNh/7C5Pf0XuWkbtD5lrheMBCvE=)
2: 3WBao4FkX8D-JaaDlye4M6OWSBY.roa (hash: 40SUb7nBHYC91lmOMmMea5ZkyB55LwXVNxfjfa4w1fQ=)
3: 5P-WAPyoM2pTC2hv8LQETP2oWJA.roa (hash: lGDaoNO2e4pY4T1TCUo7lQoxNs1+eOCSqWSzAv+esrc=)
4: 9pxQryKB7-OGwAXFhJkPHxMTQ7U.roa (hash: LaU9wAoPLEVyPbiNPfNuiL4UkPIf6M+Y7nzkcS2LF6A=)
5: AHXE5zE6Dibj4vBuyqtjH9izM0A.roa (hash: FuRo5Hu4yhUEnyMQZkyeyKvJXWvWU2jVjkpwh+ACVy4=)
6: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=)
7: OGdZxTPmloNqGIAa-UfynkuV3EM.roa (hash: m/cAPkjPkOHWq6QUdY18VpClF9YEIKI7RmQsvt84toU=)
8: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: zZRfXEx9ypbNQO7X++r/jdVFTR33Pxu7ginHWwgxXNw=)
9: hTjSrcovPq648FqPM_7hdgfN-EI.roa (hash: lYgMjkKMuEdbys29eJuErKr4659N+NA6qhwRfkiwEHE=)
10: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=)
11: yFq332nWFdiqD5k33xmPlYMI9Po.roa (hash: EtwbF3PSgqJjlOdjql8GO41noLHKBbeJXtlCFsZpbMg=)
12: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:6e:03:04:8a:08:6f:fb:fe:7f:b8:dc:79:36:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Mar 25 16:01:07 2026 GMT
Not After : Mar 26 16:01:07 2026 GMT
Subject: CN=403355ca91e72836705e8c9dc5eaccc8af866af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:17:b6:6f:82:ca:3b:db:1b:98:83:9b:12:
f8:46:a7:c2:f6:9d:9b:bf:3d:07:33:65:30:5a:7b:
3d:f4:e2:d3:2d:7b:d5:36:e1:65:dd:94:03:00:20:
73:4c:ea:bd:b6:7c:42:c2:e0:f6:94:b6:50:4d:f6:
ca:d2:73:49:e8:14:6a:38:60:c7:8a:48:1c:d6:36:
f4:11:c1:14:a8:3d:f2:6b:a7:6f:af:5c:47:32:4c:
57:23:1d:ab:14:f9:da:3e:3b:56:06:b8:87:49:4f:
77:65:25:31:95:df:d6:ab:1d:9c:7e:9f:20:23:79:
ea:3f:4d:1c:16:cb:eb:e8:88:be:ee:ae:e4:1b:49:
eb:0f:f3:b3:ba:a4:49:f3:7d:59:d2:15:23:bd:64:
83:7b:a9:f1:af:ba:7f:94:ec:e9:14:2b:6e:8f:dc:
88:90:dd:eb:5f:a5:38:53:cd:35:c0:13:4e:c8:12:
eb:55:b9:87:88:7f:bd:70:f1:b2:dc:71:09:0a:8a:
fd:74:da:30:55:d1:b7:c4:27:e7:a4:84:b3:8b:80:
a5:9f:bf:7c:c8:18:69:45:a9:df:bc:a4:3f:a1:58:
a5:94:51:f4:84:5c:08:f6:bd:f2:a8:a2:3d:60:5d:
92:89:8c:81:74:74:8c:b1:45:78:da:8e:a0:c0:b3:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:33:55:CA:91:E7:28:36:70:5E:8C:9D:C5:EA:CC:C8:AF:86:6A:F1
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c2:8f:6b:c8:f0:b8:7a:d0:30:97:b7:01:59:61:12:9c:9a:
27:65:3a:8c:17:90:81:62:1f:a0:a8:67:94:d1:03:98:ca:67:
79:3b:31:18:19:80:22:04:9b:9d:13:b7:44:b2:b8:3b:fd:6c:
02:0e:5d:38:68:72:14:a3:f2:88:4a:c7:3e:ba:9e:48:5d:d1:
a4:03:a3:e9:09:28:b8:dc:a9:d2:47:e2:5d:6e:e1:4f:3c:e4:
79:e1:61:8f:13:69:1d:7b:15:92:77:bb:6b:e8:f8:2f:4f:5e:
5c:f6:c8:db:84:33:c0:bf:b6:ff:a1:5f:06:44:c6:e3:08:53:
2e:bf:c8:6a:91:93:b3:ec:73:6e:c7:87:a5:ca:8f:ab:17:a1:
0e:30:75:49:4b:d6:b1:ca:6d:4b:38:99:9c:92:f7:79:39:86:
26:1e:c2:6e:af:ac:48:8e:ec:a7:a0:d7:ed:54:26:8d:5c:e1:
0a:5d:5f:50:12:66:1a:ac:6b:a7:db:b5:ee:27:c6:7e:8d:51:
f7:37:d7:77:47:b3:c2:c0:be:5e:6e:0a:e1:80:de:62:67:f3:
a1:46:7e:d5:a9:d8:c2:08:17:5e:9d:90:97:f9:d2:20:68:83:
e2:78:08:37:10:30:f7:1a:73:b8:c5:c2:18:eb:9b:50:79:42:
d2:08:5d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:13 2026 by rpki-client