
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json)
Hash identifier: Usvhz8RULnusiic8QjMra9VHb4hYIYocjxobbnE03hI=
Subject key identifier: E8:C4:F2:F1:B0:60:7B:DF:6E:D7:89:42:F7:2A:CC:40:2E:3E:82:D8
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019EC0A463CEFB999279BA55058FE4A73CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
Manifest number: 0DB5
Signing time: Sat 13 Jun 2026 11:00:59 +0000
Manifest this update: Sat 13 Jun 2026 11:00:59 +0000
Manifest next update: Sun 14 Jun 2026 11:00:59 +0000
Files and hashes: 1: 0bOZqErT7cPqtg8A6up5AuWvx0k.roa (hash: TLkmyalxkw5UtbYf/UBevHhaws4BaWA7DIMpjH0huR4=)
2: 0nKy3DcrJQbiUx0L11st8vPu4iU.roa (hash: p61zFKqkHY6u5BC22bvQD8WFNXvs2Yw1bGFGniYo/EE=)
3: BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa (hash: FSP05ciRv7cgg2ori440lYssEdhe7MklJbnbswJVXz8=)
4: C-Kmr5FT1ri-wqW_PoFuVOWIXaY.roa (hash: ERXgmbLSjJDQYHfslHu3SRPoPi7u4SxKIXUEFniHGbE=)
5: N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa (hash: sJ/b4s+wOONAASz+jNAdnE8FTPixklTn6DITWj2Oz+o=)
6: NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa (hash: tjAGBxyE9MUK6tIC8hGVGZt0+cyyEXn5+tt8NlkIgvY=)
7: ROFAtVDItt_EMagnNMRUK_8AFAo.roa (hash: 0/7Uq0DIP8W8M/AoQNG3rBHtAMug83v1CzVSyAShVQQ=)
8: SDv_Hv3j1zQYKdMKKJahi--bpbA.roa (hash: wiXpFtlqxh3vGK37wBoqcCvYsCDy5XPVC/ufdC7sY8c=)
9: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: kS6YdLd3YPa/EcYubHm+4vICYDZdEaSLKqfXbXKm3vM=)
10: _8UAnkY-Tgc4NZnERUShSjoD4xE.roa (hash: vjUpfIBIALtCY5M3wtuciypbGi/vBvMv2oVQ1jTAtsM=)
11: bbeNuCdJXqCYIUtyU2bTHnhe0pM.roa (hash: /lbmYbffftG0vT1jDvQWmIRNnGgrK51SKBZCKYo4Ly0=)
12: fCShZlzeyORIZqRpva0LWa9CXcY.roa (hash: Zw1W+vklKFKa/7FceWUPbOmP+yw3OCVtUAYFmYvIIHY=)
13: hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa (hash: P18VNSJRod1881sL7FyXf+LS0GoW/VI4U88shR2WTxY=)
14: iryj8oj2-V8BM-nhifn9xaWFT6k.roa (hash: J2c6WbxcvYg3n0i5rwopADF8nqS8/EkzKqjIvyGqKVg=)
15: nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa (hash: mBMzJHf7kRboGL+NsWlN+QzAIvKztq5wCERZ3i/DuXc=)
16: ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa (hash: O7M0cdecg0k5jJU4EYSgvz6r2GhJVnkR6Wsg7m7uOsk=)
17: x35bCF8o2frE0yVudoR1l5CD4FU.roa (hash: P9cerXMElreTy2+e7EkdqIb26AnuXW2v3h+k00K0LsA=)
18: yNGeTwwu6nvLd6pVRj1m7SWFsRI.roa (hash: DIGoHvjBhbh21gUmE9LE4Pi0LqvQbAY6Y2ak9deQj74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:63:ce:fb:99:92:79:ba:55:05:8f:e4:a7:3c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jun 13 11:00:59 2026 GMT
Not After : Jun 14 11:00:59 2026 GMT
Subject: CN=e8c4f2f1b0607bdf6ed78942f72acc402e3e82d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:22:e5:eb:50:7c:75:a8:6f:84:1c:f3:3c:e9:
bc:e4:38:7f:81:ea:2b:50:5e:bf:af:71:bd:26:43:
97:2e:0d:6c:64:b4:76:bd:11:b9:d3:1d:17:5f:80:
1b:69:73:f0:23:1a:64:1f:10:e9:40:73:89:92:35:
53:b3:af:bf:29:33:5c:8d:ea:e0:2d:a3:13:58:cb:
06:6c:3f:d6:43:86:e3:1c:34:f6:29:93:84:cc:dd:
5e:c8:97:68:73:ec:aa:e2:2b:00:37:fa:9c:8e:46:
67:ee:0b:41:5d:f7:78:9b:40:c7:b3:0e:c2:30:2b:
04:62:45:67:74:4b:21:3a:00:83:be:d9:da:77:fe:
f5:b2:2a:25:9c:0d:cd:f5:4d:fb:b6:22:e6:f3:4f:
b3:0d:db:b7:4b:ce:56:fb:c4:31:43:3d:aa:ea:45:
2b:42:6b:29:34:16:93:e8:ad:c0:81:fd:b9:82:33:
cd:ca:2e:7e:58:24:77:be:13:2b:b4:97:e8:80:ef:
d0:b6:45:c6:d7:33:f3:54:b4:23:f2:84:4b:cf:a4:
42:b6:2a:72:6e:91:62:10:b4:62:74:71:95:bf:5a:
43:8f:e9:6a:a6:d1:2c:b2:06:57:9c:24:6a:58:3c:
90:94:a0:79:9a:4a:34:2f:74:f1:80:6b:bc:ca:b3:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C4:F2:F1:B0:60:7B:DF:6E:D7:89:42:F7:2A:CC:40:2E:3E:82:D8
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:92:ef:74:0d:f4:a0:c0:d5:62:15:51:ec:bd:cd:a3:12:6f:
b2:a6:f3:8e:37:d2:0c:94:85:df:c7:ef:13:30:b6:6a:d1:23:
90:31:db:51:b4:18:b9:01:22:16:92:6d:7a:43:da:c3:54:05:
48:e7:89:72:bc:44:af:63:ab:70:cb:c8:43:e3:63:27:17:bb:
f7:70:d9:c3:af:a9:0a:16:77:a5:e1:aa:70:d4:1a:97:58:9d:
23:74:53:85:bb:f9:ef:ae:45:6e:e3:01:50:d7:71:f9:4c:c9:
03:6a:d3:df:66:db:ff:27:45:12:61:c7:6c:f9:45:47:46:c2:
d0:7e:a2:4b:56:2f:8e:a6:0a:5b:c7:c6:c7:d7:c7:f4:a8:5a:
42:44:58:04:3f:c8:fe:65:6e:80:c8:32:b7:0d:6b:12:e2:d8:
6c:1a:a8:6d:38:01:77:09:af:68:87:67:5f:bc:fe:b2:de:83:
b4:75:d0:e0:e3:ef:6b:52:cd:58:dd:eb:f1:f8:2f:3e:cd:9a:
e5:55:e1:b2:c1:e4:20:13:43:03:e0:02:4a:0b:a4:17:e5:ce:
3c:8c:24:02:18:90:1d:90:5d:29:41:87:a5:11:9f:6a:bd:ce:
4f:25:ca:10:6d:da:a1:8e:ec:5c:a1:74:a3:d7:51:3b:1d:df:
24:ac:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:08:23 2026 by rpki-client