
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json)
Hash identifier: usTrVrcseQUQVDIDh+HSDHiqfwu4Qo9ZOBB6iw6VCXw=
Subject key identifier: C7:6A:E5:C7:C5:0F:56:4B:1E:D8:E1:3D:90:AC:F4:98:57:2D:70:1C
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01A0D4CB9941299398C5B5D871035195E3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
Manifest number: 17F7
Signing time: Thu 24 Sep 2026 19:01:47 +0000
Manifest this update: Thu 24 Sep 2026 19:01:47 +0000
Manifest next update: Fri 25 Sep 2026 19:01:47 +0000
Files and hashes: 1: 1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa (hash: Ddu3dw5E5cMsctwBaCnCHBJl5vVM/XMeaSx8/U1wJfs=)
2: 1h3O8l_TW_Pt04UkNDvHQykjzBo.roa (hash: YPYjSO8A3RKdjeZ4kpCNyf7+uhxWq8m+nhKrC4aIRXo=)
3: 40ahziHyLtQx_pyEk0bHk67E8fw.roa (hash: rWZqu675dNYqvBqcBL0jVKw3VJWQVGQYGPhVN2Iiit0=)
4: 4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa (hash: X8RR+0PaypDLpsEOWttv6W/dtoMpGTgNbkp3JkclUF8=)
5: FaS74ymKW3KkSe3KPbooPnzQXrc.roa (hash: 0+tkFOlLgDDdDFc25Ta1fnHiQ2Nz9IYV/OQFd9bjg6s=)
6: IEKQdQSPHj3Cnkr1D4OpgmDW5ws.roa (hash: b9P/Bsdn0gx8DrmDgi2+/lOlYncQzapyrce4brihN78=)
7: IQvdujgainvo4C34zkOLdjKY5vg.roa (hash: w17Fv3nrN5mdxpMpocz8vqnCEddTCZeK1yywJC7rkAQ=)
8: KPzLPauPpQiWYae418r6m1gMbQ8.roa (hash: bMOA8c/Peua3MiHOsLdKNKZDG/6LBfAeWjPvZ8O4vDE=)
9: PhXZiIOr7piIHYlDtgFb-SE3XFc.roa (hash: kQ6KIuUu9lWGspD3sgkP3G1eQcAyvbDdP58M3rp8Fes=)
10: REtMs1U8A3vNupGfA8YHkLMBg20.roa (hash: 8cbxOjQg2znipTCYsgxq7I7rjGz0FDOmTb0bqODGJZQ=)
11: RgpyMW5WLsoOZ7X6sjR7zZpkUiw.roa (hash: 9bAWFuzWHv7cpnjzkHad1zJjL6nxP74Kh6dQAZysh0A=)
12: XIVBNcTJBnkT90tLXiCswsUi9O0.roa (hash: PPElf6bVEODRo+3cgHN5ArR3uE+ZQHhLBOE/ConPN30=)
13: bLty7x4_bp6bJO68Cul62fRMxlU.roa (hash: kYiMfI9JDPevUGPZ1zVTj//0LProZnsEPqeHJe8gbiQ=)
14: c1of_GGOGBpj8gjfCUC0AsJuKNg.roa (hash: f3erzVhNqOm3b2k4MQozf9a0YdwKNFSjx0Hb4KbZctc=)
15: d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa (hash: ybFlHwrk0/bn9A8GTyAQQ72jsrneQsxgrXLeXX2L7mc=)
16: dCqQVizHmCbsgLcX6csX7Rciuic.roa (hash: sDGzeBpaeg3YAhNrnUWPuM/ODk832tRUJ5O2TTkUfds=)
17: gbXInfzdH2IY80mhqSI30Jnlars.roa (hash: 9Eit04hHQZCBOCzgtLSUWiMJAQOGXpRjgZEMJ23x56M=)
18: jFvJZaHKv8QwoukYCAhIunEqd4s.roa (hash: V1rH1de0PVsmx11Wg5/gIdXxuPL9QGcnJzJNtJ/w8PU=)
19: jMjm9D-4xflyL6CqFx24UnxHNto.roa (hash: zk6K2DcoWMQmkWhweos+tpn8p5/7IlXATCKSD4PHiN0=)
20: rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa (hash: iB8AOxEYfvNU1/L6TivJBk9QHQFdeq4cJO6UXX1sPUM=)
21: s4XhO3zd68odlYNKfOcr66qKpYo.roa (hash: lGF4r2lhB2RKS4kFkLqdXXo14Ag7CA/0NH/w4b5IOWU=)
22: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: atrW1W5wx2OqRBl0HuLLpCQ/S/67BLZEBi2do3nwdc0=)
23: yBju9251opQb0e4SsoLoTlY7kVM.roa (hash: eQSRE9eUeTSXYWB/iKLZnX5m98d5OnEnkEhe2IV+YaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:99:41:29:93:98:c5:b5:d8:71:03:51:95:e3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Sep 24 19:01:47 2026 GMT
Not After : Sep 25 19:01:47 2026 GMT
Subject: CN=c76ae5c7c50f564b1ed8e13d90acf498572d701c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:23:69:56:96:73:a9:d5:63:f6:97:89:5a:67:
91:80:14:02:4d:05:ee:38:48:f7:06:d1:f0:89:0e:
dc:f7:06:de:7a:d1:48:fa:5a:7a:dc:59:9e:48:be:
67:bc:bc:9b:50:d0:ce:47:3a:70:f8:b6:ad:37:48:
70:73:5e:3d:fe:5d:3e:02:2d:22:27:1b:73:09:cd:
12:2a:45:08:69:37:80:a6:81:bb:0e:b5:f1:e6:4f:
d6:7d:66:30:38:ff:eb:3d:ac:49:ef:52:1d:f4:12:
bd:42:32:e7:8a:78:97:df:db:72:f8:40:09:f1:63:
c2:25:ba:74:cd:1d:09:8b:fd:9f:78:06:22:fa:c6:
af:8f:f6:9d:ee:a3:b2:d7:ad:3e:3b:88:98:79:d2:
c6:fb:37:6f:3f:27:47:fb:73:b4:8a:a1:d9:2e:05:
ef:e0:8c:35:90:fe:40:de:04:4c:a7:b2:48:46:31:
8b:32:8e:2f:c3:3a:1f:77:5e:38:13:bb:01:5d:59:
00:1f:29:0c:2f:0d:bf:cd:bd:61:7f:26:46:3b:e3:
c3:0f:07:5d:44:04:72:8d:83:60:e0:8a:97:46:17:
b8:90:cf:7f:01:60:32:04:90:fe:d0:4e:ec:30:38:
0e:09:bf:38:58:ea:de:b4:f5:a2:5e:93:0a:18:31:
98:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6A:E5:C7:C5:0F:56:4B:1E:D8:E1:3D:90:AC:F4:98:57:2D:70:1C
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:35:7d:db:cd:de:8e:ea:76:c7:d8:1a:8f:83:ae:8d:82:af:
57:d9:5f:27:b5:c8:45:02:0f:34:26:3d:d5:df:ec:0c:53:b3:
27:27:5f:ab:42:1c:e4:c9:5a:ca:54:d1:e3:11:99:0f:b0:de:
7e:70:77:bb:95:a4:91:8a:e1:fe:b7:ac:55:58:a4:9a:86:f1:
79:90:59:6f:19:10:e1:e3:e0:9e:52:48:e4:f0:f6:81:69:59:
a9:d7:3d:33:a0:af:6f:ce:98:b6:2d:9d:35:39:8f:9c:a9:43:
5d:b5:a1:99:eb:f5:12:1e:f4:15:ce:93:80:ad:1b:cf:67:72:
04:cb:ae:16:78:a8:b2:99:c0:50:7c:fc:59:22:e8:1a:60:fb:
e7:de:e0:eb:fa:13:2a:88:b3:77:46:c3:f8:fb:01:20:27:ae:
52:90:c1:65:20:bc:c1:6c:29:21:8a:a9:be:7f:dc:e7:aa:d8:
db:72:8d:14:a7:ce:65:b9:fd:06:e0:09:f0:8a:b9:1f:0a:84:
c1:0e:94:70:e7:44:05:e0:e4:e6:a3:a1:e4:cf:a0:e3:1c:1c:
b2:68:5c:1f:9c:5b:db:67:28:27:e7:37:5d:5c:ae:41:42:49:
1e:a1:25:9b:f3:f6:3d:2c:ac:c5:d4:fe:20:cf:fc:6a:bb:7c:
7b:8a:21:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:18:15 2026 by rpki-client