
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json)
Hash identifier: VP8cjMXZeKblRbhg6GQKKYgOiWf2bEN00EQNZFM+ctE=
Subject key identifier: 16:0C:9C:BF:DD:C5:51:07:94:02:EF:69:14:20:E9:82:41:6B:4B:A2
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial: 019D9D08200CDE37626C750D0912944C9F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
Manifest number: 15D3
Signing time: Fri 17 Apr 2026 20:00:48 +0000
Manifest this update: Fri 17 Apr 2026 20:00:48 +0000
Manifest next update: Sat 18 Apr 2026 20:00:48 +0000
Files and hashes: 1: 0kY6OhYo0S_p-TBiI-10NgXfoNY.roa (hash: iP04yPh9hD6VA4QlzUY//5ykcFDzpWeK08TGnMp/HjE=)
2: 1-Be0qYmJvYKBUxk0IWyWJ9tviM0.roa (hash: tc+kUBwm2r2jABu8hBV/usYgfuja/aedEg4A7BKntHA=)
3: 1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa (hash: XKv+d2a7iEMY8sWanXfCdCcSCUwEPvHDN059QvO18Cw=)
4: 2C-X2uadj7WRXm8t5tJaxHqVG08.roa (hash: gQBfeyRFTlWRJ0NIJIiAdSoSCyYg2yZW/gURVO4/TQE=)
5: ILMdvMW_ucbbRxIWVM1lnkFSdus.roa (hash: u/PCttKjeIAvbeBnImGYH+I587LQsMk+S6mJXKbyOpQ=)
6: OCaG69L4oGw_KiLZLKBePPSp7CE.roa (hash: vtJ6sg+cCvGmbdxUocxZh93rGJH1rOZrPXnfYKxcVyQ=)
7: R5tQPzZZIZkEHxABLHLrU7SFsrM.roa (hash: lKQiJli3qPxi+zmIfwUnOVyI/PWON56dIb4pJxeLxAM=)
8: SSB8nChvF9M5SEjUm0HbeOBN31I.roa (hash: WGAc9tKQkiqsemqW1u4qV4GbNPs9MVItouZPC6JW3X8=)
9: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: q4TnuS8czat4TSZfIJpIJerz24iwwJxmXzxieQ1qt2I=)
10: w2-qYaghmoafRduGM784BXKEDOc.roa (hash: hsq/kaLWVFBw1VLdikb24btA8t/Mb4PbJLUevEVWF+U=)
11: yOnpLpdVWl0jXoYFDk87GuN8z4k.roa (hash: cwz0V2O5OmYd3M4lJ6axTmY7I9UVlCXySVV3pV4gm0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:20:0c:de:37:62:6c:75:0d:09:12:94:4c:9f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Validity
Not Before: Apr 17 20:00:48 2026 GMT
Not After : Apr 18 20:00:48 2026 GMT
Subject: CN=160c9cbfddc551079402ef691420e982416b4ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:f0:20:b4:7b:47:85:bf:b6:d8:1e:00:e9:
92:07:20:78:19:a4:46:2f:19:5f:e1:86:a5:4f:98:
0a:e3:16:65:3e:a9:b4:50:02:eb:be:91:ed:cd:f1:
aa:7f:66:db:c9:60:9d:31:b5:9f:d4:59:00:bc:ec:
0c:fc:84:12:48:31:45:b5:f2:84:ba:ff:77:82:97:
f0:18:5c:c8:5b:40:34:c4:ea:ae:81:ac:19:40:75:
9f:cd:3a:cc:94:ad:7a:4c:48:5f:55:b2:8c:36:79:
a2:cd:67:c1:37:8e:b7:3c:d0:46:07:be:7c:23:e1:
f8:ce:cc:e9:4a:08:5e:7d:77:4a:55:ef:20:d0:f2:
fa:84:64:52:d7:09:6b:70:c1:34:20:7b:0e:15:8f:
b3:a1:3e:ff:72:94:f2:54:f1:37:72:b2:29:27:be:
1f:eb:b9:aa:76:ad:83:4b:df:8c:30:4e:15:4b:e0:
09:15:4f:54:f2:74:ec:b0:20:92:04:a4:14:7a:a6:
48:73:f2:d9:ed:98:f8:9a:0d:20:e7:7e:53:24:4a:
b0:0c:d9:74:21:86:5f:f2:4a:fe:eb:b6:2a:9f:4d:
1d:33:3d:c4:e7:32:2d:08:6b:3e:06:4f:4d:7c:59:
4d:24:ab:9f:19:a7:46:29:88:19:64:99:b0:fd:23:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0C:9C:BF:DD:C5:51:07:94:02:EF:69:14:20:E9:82:41:6B:4B:A2
X509v3 Authority Key Identifier:
keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:19:5a:7c:e6:13:62:91:8e:e3:2c:f4:66:23:b4:4a:9c:78:
3b:4f:6c:b2:21:70:7d:0c:ce:15:3f:30:5a:b0:fd:65:d8:31:
d4:41:a7:95:94:cf:a1:53:55:09:13:35:90:f6:6f:8c:8e:8e:
46:c7:8c:4d:01:ea:a1:37:e9:46:f2:c8:77:95:2e:cb:af:d9:
63:66:d4:d1:47:7d:70:54:50:b4:50:7a:10:46:25:dc:10:89:
bd:f6:5d:a4:37:98:44:96:85:69:c1:7c:80:f5:a5:04:9a:2b:
2b:5d:f3:f4:22:64:7f:14:3f:c6:0f:aa:df:a7:17:fa:07:8a:
78:27:c3:89:23:de:f2:3f:8e:2f:94:bd:27:1d:24:f4:bb:8b:
3e:69:43:74:13:62:52:a7:81:4c:f9:af:5e:95:13:1c:37:9f:
a9:32:5c:9a:1b:0a:60:1a:5b:6a:d9:c8:4e:44:21:8b:bf:b1:
47:ed:8b:8c:c5:54:d5:5e:0e:c8:f8:ba:42:22:e4:0d:c0:73:
e6:e9:a7:59:77:8e:d4:25:a3:23:3b:03:3b:3e:68:ce:1f:72:
f2:45:b9:c7:f1:44:9b:61:1c:58:a2:71:d0:a8:6b:43:9b:89:
ca:05:b8:a5:7c:23:cb:87:83:17:45:ba:6f:9e:ea:ed:cd:1d:
5f:ce:c0:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dCCAM3jdibHUNCRKUTJ8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj
ZGM2NWMwHhcNMjYwNDE3MjAwMDQ4WhcNMjYwNDE4MjAwMDQ4WjAzMTEwLwYDVQQD
EygxNjBjOWNiZmRkYzU1MTA3OTQwMmVmNjkxNDIwZTk4MjQxNmI0YmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEnwILR7R4W/ttgeAOmSByB4GaRG
Lxlf4YalT5gK4xZlPqm0UALrvpHtzfGqf2bbyWCdMbWf1FkAvOwM/IQSSDFFtfKE
uv93gpfwGFzIW0A0xOqugawZQHWfzTrMlK16TEhfVbKMNnmizWfBN463PNBGB758
I+H4zszpSghefXdKVe8g0PL6hGRS1wlrcME0IHsOFY+zoT7/cpTyVPE3crIpJ74f
67mqdq2DS9+MME4VS+AJFU9U8nTssCCSBKQUeqZIc/LZ7Zj4mg0g535TJEqwDNl0
IYZf8kr+67Yqn00dMz3E5zItCGs+Bk9NfFlNJKufGadGKYgZZJmw/SPTNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYMnL/dxVEHlALvaRQg6YJBa0uiMB8GA1UdIwQY
MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct
NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3
LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhlafOYT
YpGO4yz0ZiO0Spx4O09ssiFwfQzOFT8wWrD9Zdgx1EGnlZTPoVNVCRM1kPZvjI6O
RseMTQHqoTfpRvLId5Uuy6/ZY2bU0Ud9cFRQtFB6EEYl3BCJvfZdpDeYRJaFacF8
gPWlBJorK13z9CJkfxQ/xg+q36cX+geKeCfDiSPe8j+OL5S9Jx0k9LuLPmlDdBNi
UqeBTPmvXpUTHDefqTJcmhsKYBpbatnITkQhi7+xR+2LjMVU1V4OyPi6QiLkDcBz
5umnWXeO1CWjIzsDOz5ozh9y8kW5x/FEm2EcWKJx0KhrQ5uJygW4pXwjy4eDF0W6
b57q7c0dX87AYw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:52 2026 by rpki-client