
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json)
Hash identifier: iO4Xi4GfhzUB00mwxjz+MV4ReP/aTyCfkMXaRttqc8Q=
Subject key identifier: 73:ED:27:C5:DE:1D:D5:50:04:11:6B:7C:0A:A4:04:9C:B4:98:CD:F8
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial: 019F92111ED3E92E96B1C54882ECD8990358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
Manifest number: 1613
Signing time: Fri 24 Jul 2026 03:00:23 +0000
Manifest this update: Fri 24 Jul 2026 03:00:23 +0000
Manifest next update: Sat 25 Jul 2026 03:00:23 +0000
Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=)
2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=)
3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=)
4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=)
5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=)
6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: QzCD2ehHIYrwxjSkAmP7Uf+1nBmP6b/cCBO48oRBYUg=)
7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=)
8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=)
9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=)
10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=)
11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=)
12: u08NEvufIyYOw5wjByrYL3KDftg.roa (hash: +kuBshu076KXzQxN7e8+v+U/mTU0N1n8TG4+SUR96MM=)
13: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:1e:d3:e9:2e:96:b1:c5:48:82:ec:d8:99:03:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
Validity
Not Before: Jul 24 03:00:23 2026 GMT
Not After : Jul 25 03:00:23 2026 GMT
Subject: CN=73ed27c5de1dd55004116b7c0aa4049cb498cdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:2d:8d:40:23:d4:66:22:8e:8c:62:a1:9b:
5a:08:78:36:cd:76:33:83:55:38:9d:88:c0:e6:1e:
ae:84:3a:0f:47:db:0f:6b:61:a1:67:73:89:a0:ee:
d0:39:7d:30:4d:e2:bf:75:8e:49:06:4b:5f:29:1e:
85:7e:7d:7b:98:df:1c:db:69:56:1f:7b:f3:c9:09:
93:3b:a5:b7:17:2f:87:d3:21:74:ba:74:7d:9e:c0:
0b:38:e0:7e:88:db:6f:54:06:61:9c:bd:2f:72:75:
e3:ab:3c:0f:51:25:33:43:2e:11:0a:8c:d9:a5:15:
52:e0:4b:f6:a7:5c:45:bb:f0:aa:82:00:fa:29:46:
5a:87:df:31:9a:4c:71:46:ee:f0:97:08:4e:b4:67:
a2:fa:ec:3d:57:c3:21:ea:32:a2:0f:40:28:d2:19:
52:3c:fe:78:84:f7:f9:aa:32:33:db:80:e4:63:61:
4f:5f:c2:d4:1e:45:74:80:0d:45:93:c6:ac:38:db:
4a:57:3f:e3:b7:d4:2c:36:40:cc:75:9e:64:9a:7d:
ec:06:10:dc:c4:e8:bb:d3:8a:9c:1c:01:f7:25:13:
b2:6a:0c:b5:87:1c:02:ac:ba:95:ea:21:61:9f:5e:
54:38:13:47:d4:46:60:5c:9b:fc:ec:21:cf:36:7d:
cc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:ED:27:C5:DE:1D:D5:50:04:11:6B:7C:0A:A4:04:9C:B4:98:CD:F8
X509v3 Authority Key Identifier:
keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:72:f5:26:b4:03:72:d7:c9:d8:72:3e:cf:22:0a:35:41:62:
69:fb:1a:56:ce:f0:67:82:ff:d6:9b:d1:8b:02:76:4d:28:21:
a3:af:e5:58:04:90:93:9b:04:17:0e:fa:8d:58:f5:05:17:7e:
68:5d:78:7c:72:74:46:cd:90:d8:08:79:27:f6:99:81:fd:57:
58:1f:b3:86:70:17:04:3b:1d:fa:f2:79:e6:c6:93:72:e1:5d:
85:1e:f9:f7:ff:f8:d1:4d:7e:0e:75:0c:89:87:22:9b:6e:b6:
09:d7:c9:40:d1:3b:d4:be:5b:9d:f7:f8:af:ca:1e:36:bd:74:
e0:06:ed:bb:8d:e8:41:c1:57:b0:4f:ad:0e:81:87:0f:ea:ba:
2e:bf:db:ce:96:cf:4e:b8:92:f8:13:62:19:4f:bc:65:b3:a0:
f0:31:5f:c4:91:a2:59:ce:db:fe:02:3e:00:5d:1a:fa:d6:42:
97:45:b8:6f:7e:ad:91:6a:27:98:19:76:7c:71:d3:30:db:6d:
ca:01:00:99:e6:37:54:90:fd:09:f3:6e:90:92:3b:b6:cc:31:
31:40:2e:93:f7:c1:34:f1:b7:61:a2:92:31:69:f5:f3:8b:1c:
82:6d:53:33:43:26:ec:69:00:65:2c:27:4f:45:23:09:f9:ba:
ab:b6:ab:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SER7T6S6WscVIguzYmQNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2
MTFkODkwHhcNMjYwNzI0MDMwMDIzWhcNMjYwNzI1MDMwMDIzWjAzMTEwLwYDVQQD
Eyg3M2VkMjdjNWRlMWRkNTUwMDQxMTZiN2MwYWE0MDQ5Y2I0OThjZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXQtjUAj1GYijoxioZtaCHg2zXYz
g1U4nYjA5h6uhDoPR9sPa2GhZ3OJoO7QOX0wTeK/dY5JBktfKR6Ffn17mN8c22lW
H3vzyQmTO6W3Fy+H0yF0unR9nsALOOB+iNtvVAZhnL0vcnXjqzwPUSUzQy4RCozZ
pRVS4Ev2p1xFu/CqggD6KUZah98xmkxxRu7wlwhOtGei+uw9V8Mh6jKiD0Ao0hlS
PP54hPf5qjIz24DkY2FPX8LUHkV0gA1Fk8asONtKVz/jt9QsNkDMdZ5kmn3sBhDc
xOi704qcHAH3JROyagy1hxwCrLqV6iFhn15UOBNH1EZgXJv87CHPNn3MWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPtJ8XeHdVQBBFrfAqkBJy0mM34MB8GA1UdIwQY
MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt
OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh
LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3L1JrQD
ctfJ2HI+zyIKNUFiafsaVs7wZ4L/1pvRiwJ2TSgho6/lWASQk5sEFw76jVj1BRd+
aF14fHJ0Rs2Q2Ah5J/aZgf1XWB+zhnAXBDsd+vJ55saTcuFdhR759//40U1+DnUM
iYcim262CdfJQNE71L5bnff4r8oeNr104Abtu43oQcFXsE+tDoGHD+q6Lr/bzpbP
TriS+BNiGU+8ZbOg8DFfxJGiWc7b/gI+AF0a+tZCl0W4b36tkWonmBl2fHHTMNtt
ygEAmeY3VJD9CfNukJI7tswxMUAuk/fBNPG3YaKSMWn184scgm1TM0Mm7GkAZSwn
T0UjCfm6q7arhw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:56 2026 by rpki-client