
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json)
Hash identifier: hyJ2Sq4rL1w+p7kqBKo3J+dtDbhED4ipGo1RYd9KxPE=
Subject key identifier: 6A:4B:30:8D:2A:AE:A9:D6:0A:91:42:62:73:B0:80:C2:30:2A:76:50
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019CA97D0F381D7B166AAF7BC8BB12164E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
Manifest number: 131F
Signing time: Sun 01 Mar 2026 13:01:11 +0000
Manifest this update: Sun 01 Mar 2026 13:01:11 +0000
Manifest next update: Mon 02 Mar 2026 13:01:11 +0000
Files and hashes: 1: 1so34E8eiJbU3SBH98Un9cOyxZA.roa (hash: 1ldGTGYNQmiwKAKpaJZD0c4cvg8xFAkpG1EIpaEahUw=)
2: 5GxvHZCMMVes7bAUdIaYsXEtdX4.roa (hash: x5pIX8HDxeQPjQseodSp8HJv0Ul8z850CXMOjeGpMb0=)
3: 5elWeBxLAe6yYejdEv5iOxl2wpY.roa (hash: cXPMx2p9BOBuSf+gbtxIhaiMUrpE5QpYWOZwherOPxc=)
4: NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa (hash: hBgheJjYW2NTuQX0GMNpUdScgOBs91Gnhme3LbGhhOA=)
5: ODMDEGyVLTmd47TMfFo6JexY6HQ.roa (hash: zruo3XY1xsZ3gUUyKc7wrw3okSMA8oCjUH3Rw6OmsMw=)
6: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: 2maf+5+yNNo+sYaaqw93+212+orkwaI/qpl7nQbw+RU=)
7: Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa (hash: HxZPcDMVde46E0YraYcux12OmT61HV19peqYpruy8ck=)
8: bp6p58RrsHDAJt-0FKHpeTioAb0.roa (hash: +dNPIc1eY6aILjseFmv9KTW6y1s+ashe2HZMhXx8P9k=)
9: ff1Fa-kOqddev469q_q9QwdHNOQ.roa (hash: w2PaSCsne5WpEMiMwnCdvo+2V64rmEO1ylIDUMBUfOM=)
10: kZfuHKDAiQJXBvJliXqrjaU0XIg.roa (hash: DHMZVeLexmvq1Vc8FbkkKH/pRR44r4WIYoKUwGuSUU0=)
11: lnT80rw_Ryd-z_u4DO17nxl0A5w.roa (hash: wdCITiVG5nvublaggiVZXX2U+oaT1yDZ4/O9JgAyQzQ=)
12: m0_gbn3feXvXHw_cYO_Nfm2Xxfc.roa (hash: KJNXj9uAflfe61jQCgnfBrsgkg1fFmoywQfWErB1+KU=)
13: n0qUh9R2qSn_FGDUGu4NzWw85oA.roa (hash: VouJP45N/Qz78cWxNlxzcacwk9tugDuBJxf1M6WkcOE=)
14: na40Ok_i5qXlAc5-oaWGzhjqYgo.roa (hash: fwFOgCfZSKadLjWHLtjDEi/Ibt41w2vO2VBSuz+dD5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:0f:38:1d:7b:16:6a:af:7b:c8:bb:12:16:4e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Mar 1 13:01:11 2026 GMT
Not After : Mar 2 13:01:11 2026 GMT
Subject: CN=6a4b308d2aaea9d60a91426273b080c2302a7650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:03:32:44:6e:8c:09:45:f8:ac:ec:2a:1d:1b:
f6:26:ba:32:25:88:85:ea:2e:38:32:fd:24:bb:e6:
6f:d2:cd:41:4d:78:ad:42:b2:9d:eb:36:38:3d:46:
c2:25:3c:9d:72:ae:95:30:86:37:6d:0d:46:9a:d1:
7a:ef:0e:3f:e6:42:4a:2f:eb:5d:42:48:35:8f:ef:
c1:77:e6:7f:dd:c8:99:84:1e:cc:13:60:6c:5a:7a:
87:0a:92:88:38:71:99:7d:27:ba:45:40:1f:bf:38:
97:f0:13:04:d4:f0:7b:01:74:09:6b:72:90:a2:e2:
a5:62:95:17:c7:27:3f:3d:6a:82:61:dc:c4:8b:c0:
c4:f3:8a:00:43:e5:e7:e0:9e:57:c7:23:6f:63:e3:
a2:d3:b7:2a:d0:cf:3a:bc:b0:bc:69:fc:27:9a:c8:
c0:cc:e3:47:67:dc:cb:dc:f8:52:c4:c2:a2:2f:a8:
df:d9:0f:f1:41:4e:a4:62:89:79:1f:64:52:8c:06:
04:d1:9d:80:fa:ea:9d:05:b9:53:32:47:04:a8:9a:
4b:3d:fe:8f:e0:49:30:02:4d:76:73:79:71:92:7f:
fc:d2:f8:50:1e:cc:83:ce:1a:ab:56:e1:3a:a5:a8:
f7:63:ee:36:58:b7:43:55:7e:49:e8:04:43:15:23:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4B:30:8D:2A:AE:A9:D6:0A:91:42:62:73:B0:80:C2:30:2A:76:50
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:29:64:a7:40:11:0a:7f:eb:b2:1a:a2:69:81:56:da:55:8a:
29:1c:1a:94:15:66:7a:16:0f:91:33:a3:3d:a9:6e:82:29:35:
85:85:f4:de:2b:93:e9:80:ae:bc:ff:a3:41:42:23:18:c0:14:
cd:4b:14:0b:3d:80:11:98:2a:4d:2b:59:a7:ba:d9:0a:df:f0:
38:e6:ca:24:0a:a5:dd:7e:d2:2b:ed:64:8e:1b:0b:1f:cd:6f:
7c:61:84:8a:06:39:ed:2a:07:69:68:31:83:5b:53:c2:c7:d2:
18:a4:e3:34:99:9a:49:86:2d:70:3a:f7:0c:97:11:cc:46:31:
b3:9f:1d:9a:e3:45:30:dc:2a:39:29:97:8f:e8:c2:46:de:49:
6e:21:4f:1d:e9:92:fd:1b:ab:81:21:c5:77:ee:d5:dc:b5:e4:
66:01:12:c2:d7:8d:01:89:88:8e:f5:16:87:7b:5a:33:2a:63:
22:4c:e6:ec:fc:8a:2b:91:28:27:94:0d:6e:79:20:fb:c6:78:
79:b8:fb:9d:c6:d3:a4:26:c7:34:55:ee:03:45:d5:5d:0b:bd:
86:2c:d2:35:07:d9:47:7b:59:c6:ee:0a:47:c0:27:7f:5d:10:
02:9d:ee:6f:24:26:d5:e9:42:a0:13:9e:4a:1d:25:3f:82:47:
c8:ec:2b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:11 2026 by rpki-client