
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json)
Hash identifier: LmWAECiaQj/Vecv6tdzIvY3WeBG3AoWQlW1PaXRNCMs=
Subject key identifier: 17:71:C7:CB:EE:EB:AA:3C:AC:91:DA:A4:82:E7:31:BB:9E:C0:32:89
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 019F921159B01B8F30452DB64DD1E7B71B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
Manifest number: 19F0
Signing time: Fri 24 Jul 2026 03:00:38 +0000
Manifest this update: Fri 24 Jul 2026 03:00:38 +0000
Manifest next update: Sat 25 Jul 2026 03:00:38 +0000
Files and hashes: 1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=)
2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=)
3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=)
4: F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa (hash: ZxjcHW/x0pQR0hwLPPsZsPvzwQS05l4bLGzkALrvzrE=)
5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=)
6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=)
7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=)
8: W2OrB0j0-nYPTzXGx8wglEsSrTg.roa (hash: VYxarI+ue3iiKP2yq3ncIk9PFzz9Y9KND/jO/nEButo=)
9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=)
10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=)
11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=)
12: opsbT1mZiajN6yKjwmpQed2xKN0.roa (hash: hfDxL07Rn37mmDA9+6FxaXHlpTPNLOMYJcCFIz8V60Q=)
13: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=)
14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: XiQNmHkrOvnV8i3BIL/bDzGBA/pRxXnqX3r3QS4NIYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:59:b0:1b:8f:30:45:2d:b6:4d:d1:e7:b7:1b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jul 24 03:00:38 2026 GMT
Not After : Jul 25 03:00:38 2026 GMT
Subject: CN=1771c7cbeeebaa3cac91daa482e731bb9ec03289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:de:36:e9:49:df:39:2d:8e:6a:e4:fe:93:
28:e2:4e:3c:76:a5:cd:79:c4:1d:93:41:66:25:78:
de:13:4a:d6:e6:78:e7:51:04:91:5d:f5:08:22:da:
fd:92:2e:d6:48:e4:91:ed:a5:ec:c2:a5:c4:58:2e:
1e:7d:a8:b5:49:54:d5:95:44:25:d3:96:24:0f:c6:
a6:73:ee:ae:2d:08:28:31:73:fb:9d:ac:f5:96:06:
60:9d:1c:02:eb:26:f9:44:f6:d1:3b:63:b9:3a:92:
53:c4:54:e5:29:6c:73:d7:8b:3e:33:ca:07:2b:2f:
9c:f1:7d:3f:d6:46:b7:bc:e1:f8:57:80:12:2e:22:
72:d5:19:9d:06:1a:db:fc:7e:65:b9:7c:d7:9d:25:
a5:9b:44:ff:82:a6:36:2c:5a:c6:7a:e9:3e:06:c9:
b1:9b:fe:02:35:82:83:c9:c6:f6:ac:48:a5:31:2f:
b6:ea:99:99:f2:e0:2a:4d:2d:a8:08:40:8e:09:cd:
11:5e:b7:39:1a:fc:ff:2a:0f:ed:da:87:98:d6:4d:
cf:df:b5:48:4b:df:47:ce:c2:c8:b3:f3:fa:fd:66:
38:24:a2:f3:82:9c:6c:35:20:ea:49:fa:12:1d:c9:
8e:fe:1d:1a:bc:08:aa:82:fa:5a:d2:b2:21:c7:b5:
dc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:71:C7:CB:EE:EB:AA:3C:AC:91:DA:A4:82:E7:31:BB:9E:C0:32:89
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:04:d6:6e:4c:4d:e1:db:9f:5e:a3:c4:c8:57:e9:13:61:a5:
44:31:b5:8d:36:9d:4a:61:21:a8:19:6b:92:38:2e:a4:8e:3f:
27:27:8f:a3:ce:30:d1:c0:d6:c0:12:13:a8:dd:b3:1f:c5:f9:
fc:4e:59:29:33:c9:bc:07:e5:2c:0a:cb:49:35:51:d1:eb:3d:
6d:be:13:0e:f5:0b:cc:15:a5:cb:d6:8b:6d:11:04:c8:ce:bf:
2e:94:5d:6c:2f:c6:9a:34:f0:f8:d0:c1:6e:dc:46:0a:e4:9d:
9e:ec:fc:14:99:d2:c6:32:64:18:f2:42:b9:d6:4c:22:59:73:
bc:f1:e1:cb:7d:4d:ad:90:2a:40:6d:6c:b0:50:f2:ab:f8:2b:
ad:dc:9c:ae:81:ed:47:14:05:71:80:d5:21:b6:86:47:cb:08:
4c:76:a4:07:a9:18:e7:9c:60:45:2a:8c:97:dc:3f:af:69:58:
b5:bc:81:71:fe:19:ce:07:87:ac:47:78:6b:9a:bd:bc:80:ad:
ca:70:0d:88:f2:5b:b2:54:6f:79:b7:cd:be:a3:27:36:40:83:
3f:6c:39:ee:9d:2d:ec:31:64:2d:55:4e:d0:58:8d:f4:59:77:
c3:22:9c:a4:05:22:c9:a6:8b:14:9c:f2:bc:49:af:73:2d:b1:
63:ef:d2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:09 2026 by rpki-client