
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json)
Hash identifier: WLgB4mnG8DA0T2VGROjhapZlAiRIF/zTEyWgbRxzlf0=
Subject key identifier: A4:C5:44:97:7E:B4:1D:7D:E1:AB:6B:16:7B:68:64:A5:7D:85:2D:F5
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 019F8F471BD6733011CE2D3460E70851ACD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
Manifest number: 0349
Signing time: Thu 23 Jul 2026 14:00:29 +0000
Manifest this update: Thu 23 Jul 2026 14:00:29 +0000
Manifest next update: Fri 24 Jul 2026 14:00:29 +0000
Files and hashes: 1: 3WBao4FkX8D-JaaDlye4M6OWSBY.roa (hash: 40SUb7nBHYC91lmOMmMea5ZkyB55LwXVNxfjfa4w1fQ=)
2: 9pxQryKB7-OGwAXFhJkPHxMTQ7U.roa (hash: LaU9wAoPLEVyPbiNPfNuiL4UkPIf6M+Y7nzkcS2LF6A=)
3: AHXE5zE6Dibj4vBuyqtjH9izM0A.roa (hash: FuRo5Hu4yhUEnyMQZkyeyKvJXWvWU2jVjkpwh+ACVy4=)
4: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=)
5: ODMmdO7VHrUNJnL-krn6dPKUZfE.roa (hash: J27GVy15VCkrkQF7yJl60/0RKVCaoGRbqz5vXXNOcBI=)
6: UmIpX_CW_WbjKOu7gSBIxfUav1k.roa (hash: xh/FWCV9oxmR8lumYAFioa1l3O3b6ExwSOvllJh6Tdc=)
7: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: M6U0d3waRpKap/ygLbantt+yP/XNIdvxWzRMwoPt8d4=)
8: Wd8q0moFLVsMx4osEJ4ykMbq8Ts.roa (hash: LFxueImaYOM8Jlt+03DqVGTNqeLO5BW1td2F3tglDys=)
9: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=)
10: rxUnx1ra5EHEfcrIj6uPq_Tbrrs.roa (hash: xMlkEOl/cVJYjxYinyPnGY0MzSt5ZGRrCF7oAtp8yYg=)
11: yFq332nWFdiqD5k33xmPlYMI9Po.roa (hash: EtwbF3PSgqJjlOdjql8GO41noLHKBbeJXtlCFsZpbMg=)
12: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:1b:d6:73:30:11:ce:2d:34:60:e7:08:51:ac:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Jul 23 14:00:29 2026 GMT
Not After : Jul 24 14:00:29 2026 GMT
Subject: CN=a4c544977eb41d7de1ab6b167b6864a57d852df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:9e:fc:b4:67:a2:88:d3:75:37:61:78:94:
5b:54:8b:f1:05:bb:7a:67:d1:1d:77:1b:b6:5e:c4:
09:cd:4d:1d:08:0b:ca:aa:42:51:8f:8d:e2:10:ef:
fe:f9:68:ec:6e:0e:6b:f2:43:14:9e:30:07:c7:81:
99:2e:13:c8:d8:d1:14:ef:15:45:49:88:24:fd:8f:
00:c5:4e:54:2a:56:41:57:60:1f:4c:81:6e:51:82:
90:3b:76:de:6c:25:23:0f:31:47:8e:fc:8f:8d:7a:
10:b6:00:1b:ba:13:50:82:e2:f5:db:93:79:d6:94:
e7:1a:d9:4c:64:16:62:11:1d:1a:89:a7:b9:f3:9c:
34:16:7c:45:22:78:cb:59:67:0f:74:55:61:36:59:
be:c9:92:1c:7a:e9:9e:8d:4a:ce:bd:39:99:40:ad:
5a:36:16:30:9d:ee:57:13:90:cb:57:f9:cc:5e:d8:
d2:60:55:68:56:12:f1:78:6b:17:8f:4d:d0:1b:39:
ee:16:c5:7c:65:3b:e4:f4:49:b5:7c:04:7f:d4:c9:
98:5d:89:b5:71:b9:31:20:0f:6a:85:15:12:ee:1a:
0b:ff:57:92:03:0f:d6:31:cf:ba:b1:e0:f5:17:29:
44:70:b8:bb:06:a9:54:c3:f8:ae:46:fd:7a:d2:e2:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C5:44:97:7E:B4:1D:7D:E1:AB:6B:16:7B:68:64:A5:7D:85:2D:F5
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9e:29:93:0f:f7:a8:3e:cf:72:78:37:ab:94:de:e7:f6:7d:
46:02:7b:97:20:5a:81:de:e6:ca:4d:6a:30:70:22:ee:38:a8:
48:46:23:2e:76:99:3b:54:18:74:47:f2:43:d1:92:50:61:85:
0f:20:48:2a:cd:3a:04:c0:81:ec:e3:0a:ea:97:f5:f9:0c:1a:
47:07:e6:32:92:5f:54:6b:50:07:46:b4:bc:65:4c:be:a5:09:
b3:0c:71:b9:88:61:71:f2:5a:78:02:e7:8c:e3:e3:2a:ae:49:
0a:4e:c2:8d:80:0d:a7:df:6b:a1:2d:cb:bd:3b:62:b1:05:e7:
6c:81:3d:b4:88:e3:2b:9b:61:73:e5:4f:ce:20:b1:9e:22:25:
29:09:ea:bb:a3:83:06:1c:ab:00:c8:d2:a4:f2:e1:2b:21:34:
a1:91:43:bf:d1:aa:fd:97:f8:f8:ce:de:85:07:08:8f:07:75:
0c:41:6a:0c:f6:71:7b:7c:b4:22:41:f7:b9:12:f6:11:49:91:
ae:91:59:2e:c2:7d:b1:57:84:fa:c6:ff:9d:cd:a2:0a:e1:bb:
d0:76:bb:09:40:3e:6c:14:89:14:06:b5:c2:da:78:b2:9a:44:
fe:ab:37:22:1e:ba:47:cc:d0:7c:3a:95:30:6f:2f:ad:3e:00:
dd:8a:99:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRxvWczARzi00YOcIUazVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1
NjgwY2QwHhcNMjYwNzIzMTQwMDI5WhcNMjYwNzI0MTQwMDI5WjAzMTEwLwYDVQQD
EyhhNGM1NDQ5NzdlYjQxZDdkZTFhYjZiMTY3YjY4NjRhNTdkODUyZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQKe/LRnoojTdTdheJRbVIvxBbt6
Z9Eddxu2XsQJzU0dCAvKqkJRj43iEO/++Wjsbg5r8kMUnjAHx4GZLhPI2NEU7xVF
SYgk/Y8AxU5UKlZBV2AfTIFuUYKQO3bebCUjDzFHjvyPjXoQtgAbuhNQguL125N5
1pTnGtlMZBZiER0aiae585w0FnxFInjLWWcPdFVhNlm+yZIceumejUrOvTmZQK1a
NhYwne5XE5DLV/nMXtjSYFVoVhLxeGsXj03QGznuFsV8ZTvk9Em1fAR/1MmYXYm1
cbkxIA9qhRUS7hoL/1eSAw/WMc+6seD1FylEcLi7BqlUw/iuRv160uLYDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTFRJd+tB194atrFntoZKV9hS31MB8GA1UdIwQY
MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt
NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk
LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX54pkw/3
qD7Pcng3q5Te5/Z9RgJ7lyBagd7myk1qMHAi7jioSEYjLnaZO1QYdEfyQ9GSUGGF
DyBIKs06BMCB7OMK6pf1+QwaRwfmMpJfVGtQB0a0vGVMvqUJswxxuYhhcfJaeALn
jOPjKq5JCk7CjYANp99roS3LvTtisQXnbIE9tIjjK5thc+VPziCxniIlKQnqu6OD
BhyrAMjSpPLhKyE0oZFDv9Gq/Zf4+M7ehQcIjwd1DEFqDPZxe3y0IkH3uRL2EUmR
rpFZLsJ9sVeE+sb/nc2iCuG70Ha7CUA+bBSJFAa1wtp4sppE/qs3Ih66R8zQfDqV
MG8vrT4A3YqZgA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:26:18 2026 by rpki-client