
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json)
Hash identifier: VidpI7Ah/1TBZHzpC7CCq7b32fwcBgtl5wfAvh9Q/gY=
Subject key identifier: 6C:3F:73:02:7C:31:C7:F6:D1:36:75:2B:C2:11:92:05:C5:AE:54:B1
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 019D27E07693A69513ABA94F6982CDB1E7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
Manifest number: 160B
Signing time: Thu 26 Mar 2026 02:01:54 +0000
Manifest this update: Thu 26 Mar 2026 02:01:54 +0000
Manifest next update: Fri 27 Mar 2026 02:01:54 +0000
Files and hashes: 1: 1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa (hash: Ddu3dw5E5cMsctwBaCnCHBJl5vVM/XMeaSx8/U1wJfs=)
2: 10rcPrImsu8PZEdla8aGpqVO6qU.roa (hash: L3JiXE1iCTndxNrL5q/bo9206BV+caOYpXrLh1CtuNU=)
3: 1B2E5LozjiOiEEIVllZwGOlUoUc.roa (hash: DtZRGHhFLQ8RyYzUJ9AqMoeV1gGyFtUW3kQz1Kw7pNc=)
4: 1h3O8l_TW_Pt04UkNDvHQykjzBo.roa (hash: YPYjSO8A3RKdjeZ4kpCNyf7+uhxWq8m+nhKrC4aIRXo=)
5: 40ahziHyLtQx_pyEk0bHk67E8fw.roa (hash: rWZqu675dNYqvBqcBL0jVKw3VJWQVGQYGPhVN2Iiit0=)
6: 4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa (hash: X8RR+0PaypDLpsEOWttv6W/dtoMpGTgNbkp3JkclUF8=)
7: IQvdujgainvo4C34zkOLdjKY5vg.roa (hash: w17Fv3nrN5mdxpMpocz8vqnCEddTCZeK1yywJC7rkAQ=)
8: PhXZiIOr7piIHYlDtgFb-SE3XFc.roa (hash: kQ6KIuUu9lWGspD3sgkP3G1eQcAyvbDdP58M3rp8Fes=)
9: REtMs1U8A3vNupGfA8YHkLMBg20.roa (hash: 8cbxOjQg2znipTCYsgxq7I7rjGz0FDOmTb0bqODGJZQ=)
10: XIVBNcTJBnkT90tLXiCswsUi9O0.roa (hash: PPElf6bVEODRo+3cgHN5ArR3uE+ZQHhLBOE/ConPN30=)
11: Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa (hash: 13k76cemt6Sf92ZNBW6R6RxtUCROzQCLop1b+iGGSUQ=)
12: Ys5uNWXcabyigl96ree5Jzjc4xQ.roa (hash: f+JccggJ2odV8dttKzqJrNMhrUYzKd+wSv2brX2GdxA=)
13: bLty7x4_bp6bJO68Cul62fRMxlU.roa (hash: kYiMfI9JDPevUGPZ1zVTj//0LProZnsEPqeHJe8gbiQ=)
14: c1of_GGOGBpj8gjfCUC0AsJuKNg.roa (hash: f3erzVhNqOm3b2k4MQozf9a0YdwKNFSjx0Hb4KbZctc=)
15: d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa (hash: ybFlHwrk0/bn9A8GTyAQQ72jsrneQsxgrXLeXX2L7mc=)
16: dCqQVizHmCbsgLcX6csX7Rciuic.roa (hash: sDGzeBpaeg3YAhNrnUWPuM/ODk832tRUJ5O2TTkUfds=)
17: hzNDyInh_bUBg7Uejg55aTvL-3Q.roa (hash: FJw1sBNqJdJQhACILp+itphyL4fweg2OQEEsFKom/I8=)
18: p8xrYoE8jgCdAonYCfT-ApjsEIQ.roa (hash: f7jnATXq/oP3S34j8++EJHwq/uX1I51J0Ibdj4DXw3g=)
19: rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa (hash: iB8AOxEYfvNU1/L6TivJBk9QHQFdeq4cJO6UXX1sPUM=)
20: s4XhO3zd68odlYNKfOcr66qKpYo.roa (hash: lGF4r2lhB2RKS4kFkLqdXXo14Ag7CA/0NH/w4b5IOWU=)
21: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: 8cFNp6lN78A4i2xdkpusk1b3VeQbTpA3fmTkx1kLT5k=)
22: yBju9251opQb0e4SsoLoTlY7kVM.roa (hash: eQSRE9eUeTSXYWB/iKLZnX5m98d5OnEnkEhe2IV+YaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:76:93:a6:95:13:ab:a9:4f:69:82:cd:b1:e7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Mar 26 02:01:54 2026 GMT
Not After : Mar 27 02:01:54 2026 GMT
Subject: CN=6c3f73027c31c7f6d136752bc2119205c5ae54b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:da:cf:52:00:85:8b:f0:2e:bf:67:10:6d:
c3:a5:12:dc:03:98:15:b7:fd:5a:5f:8b:3d:9b:a5:
34:89:b8:d8:4c:dc:28:20:9b:46:b0:d9:ea:af:39:
81:bf:6e:4b:61:d7:61:0b:13:92:26:a4:d7:6c:29:
9c:80:44:2a:dc:40:35:33:99:ff:8f:d3:6e:bc:6f:
66:70:7c:bb:49:fd:eb:0b:e1:d6:50:d8:24:27:c4:
04:b8:f0:71:0f:4c:79:08:bf:03:a3:bf:85:d7:79:
21:6d:e3:ab:6f:85:5c:60:b9:b2:b9:79:0f:9b:ff:
ad:b2:16:43:f1:76:77:35:73:62:a7:64:37:a8:2f:
0b:a1:b8:03:3e:a4:6b:3c:57:b6:21:6f:e8:cc:86:
a1:03:47:66:44:73:02:02:8c:6e:01:cf:33:78:fe:
f8:1d:99:1f:2b:5e:25:dc:eb:3f:47:f7:d6:d0:5f:
a3:ab:db:2a:74:a3:d5:31:a5:07:69:53:ca:55:2a:
56:c1:7e:28:f3:e5:ce:95:b2:d9:43:69:ac:b1:46:
27:f0:36:8f:05:23:e8:13:2d:ef:e3:c3:1f:1a:5e:
b5:d3:ef:cd:b1:27:07:cb:3b:27:2c:ec:7d:4e:da:
64:6d:7d:19:56:e4:f8:a8:44:e0:32:90:36:a8:bc:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3F:73:02:7C:31:C7:F6:D1:36:75:2B:C2:11:92:05:C5:AE:54:B1
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:66:97:e4:cf:f1:98:bb:1d:52:a4:10:e4:86:1b:04:e6:0e:
56:b9:d8:98:e3:db:1a:7d:37:45:b5:6e:72:f1:b3:66:f5:77:
4d:33:6c:82:6b:ff:e7:a1:37:d8:ae:56:96:11:d6:ae:d0:fa:
5c:af:f2:7f:e6:a4:8e:91:12:25:0a:4a:ad:ba:f4:de:5f:85:
c5:5a:be:ba:0f:2a:9b:ec:7c:5b:d6:54:d8:5d:7a:c5:dd:18:
8a:f3:8b:7d:24:a7:b3:94:c1:5c:bf:2d:3e:97:42:78:bd:5c:
d6:6b:9a:54:d2:d7:96:e3:7f:e2:bd:d2:e1:e7:d1:4a:2f:8a:
80:54:a7:fd:53:f1:57:59:e0:a2:86:6c:a2:b5:49:59:79:bf:
67:4a:91:df:a4:ba:e7:fb:18:9f:31:54:60:34:33:fb:de:20:
b9:dd:5d:04:0b:8a:83:c4:af:36:26:47:84:d2:96:90:88:0d:
d3:73:58:42:4b:47:df:15:96:3b:df:e5:96:55:d6:ac:5b:71:
cd:46:3a:0e:e8:0a:3a:a9:a7:45:c6:78:9f:86:96:c4:e6:6a:
11:df:f0:54:72:99:ad:ba:73:ba:2a:75:40:82:87:85:1c:f3:
b8:3d:e1:df:d8:2b:6d:99:fc:23:d2:5b:2c:c5:c4:52:03:62:
4d:cc:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:49:13 2026 by rpki-client