
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
File: VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json)
Hash identifier: EIg+vv2gCjz0GD8/5zp8zZ9z4+AE+2ZN+qrhbntF6ec=
Subject key identifier: 78:84:C5:5D:45:31:E7:B5:6D:DF:7B:81:90:45:ED:08:CF:26:AF:12
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019CAED9B46AE1C42A2B997E69CC7B585DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
Manifest number: 1856
Signing time: Mon 02 Mar 2026 14:00:28 +0000
Manifest this update: Mon 02 Mar 2026 14:00:28 +0000
Manifest next update: Tue 03 Mar 2026 14:00:28 +0000
Files and hashes: 1: 8ixOCAhwWNDnq3ns0gAUwlgzmyk.roa (hash: wl/9bJRX8lYlM4jLjwEI20VfsWde6X8LQeHsRbukNDc=)
2: ODrvOm-dJuUN_AAYKVaZFOpeRWo.roa (hash: BwrM7AQ3z89UNZnD9zdl+nzTro1rSz8r7mTAINtQABE=)
3: OpgFBnj58YZNhjqrjMPFmcXkMoM.roa (hash: x3izVxL+JnWf1wZ+LfTZxTJhtpQOQ2pahlLAm7S6090=)
4: ULfP7S3K6Ksk8C6TR4RZSqXerPo.roa (hash: jDQhgjn7JFfsrl3H/uni3GxDG1EWoZv53nMWeBGAfcA=)
5: UXO72pN93K891EJ5EOS-KSuDTh4.roa (hash: J4YBwoF1qT8QowRHgcLZczx88TgjbKfIhyS5Yc1Q/h4=)
6: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: Mim29/EEK2C29RpbaOyt4QZ8Ch5AGwIMXLT4ug64wxE=)
7: fyQVOXy16Gt7_ifnytbj200NH-Y.roa (hash: UyCkvhjGfT8atrl4wqMna6uOndaEBkveUoY6zrFvO4c=)
8: g2fN7tCyrysxEndgN_riAmLTYSU.roa (hash: XiGl00VYZp7eVqANIUc9SN7YbU0zcI0nIY4sSK0DTc4=)
9: kYXzTp4ydXYEubY6Zs2tRMwj1lA.asa (hash: lFVvdazmR0artN3g09nvxHrr2wgy8qv5IQaGXJwF9OU=)
10: l3M-xr60hrpxSkxGT1zOTrb_xW8.roa (hash: 2U8pj/J8QbJGMZnyHPhC1LIrWuoDRqXzuWrV+ncciiE=)
11: qDPjAzV1MESCMl_59kmxdlu5OwU.asa (hash: WPDQk2nWLa5ctCuNbhzwZYV7qaWfg4mN27IKtW1ZNiY=)
12: uPKrVXBdVJ52jFwUr1Sws2imUiQ.roa (hash: +P9LOhkgcvGB9Y0oqUbZdTK9wmnZzjn9rC57/GCZX0Q=)
13: yoxe9lLbCa2h6gtQRAHAduOM9X0.roa (hash: s8LyW32eS7lJnnnTP0eK55NVtnvGmgvQdGOQCvIfya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:b4:6a:e1:c4:2a:2b:99:7e:69:cc:7b:58:5d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Mar 2 14:00:28 2026 GMT
Not After : Mar 3 14:00:28 2026 GMT
Subject: CN=7884c55d4531e7b56ddf7b819045ed08cf26af12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:72:59:58:f5:76:a9:ea:21:cc:d0:b8:61:
6f:e3:ec:c9:8a:52:10:85:dd:09:b5:cb:dc:05:3b:
6e:36:8e:2c:4a:10:aa:14:25:4c:a4:e3:8d:3d:b9:
85:23:91:cf:05:95:37:6f:c3:7e:53:ff:ab:d6:43:
85:db:ea:25:34:47:ed:6e:63:40:a8:67:76:f9:59:
42:61:12:b9:e9:9f:d6:80:58:c3:f1:bd:c7:26:08:
bf:ee:ee:19:a3:68:97:05:37:3a:40:21:c2:96:8a:
e5:80:ea:ee:e3:5a:0f:57:f0:26:c5:c0:76:bf:1a:
9a:6f:a2:6e:81:e5:f3:17:46:6b:f7:55:e7:62:92:
38:7f:bb:41:f2:0a:d6:ed:b3:1d:2f:c1:85:cb:23:
4a:03:84:95:f9:4b:a4:5b:06:da:dd:2b:aa:4b:3a:
04:b3:87:03:5d:1a:de:4a:b4:7d:b5:2e:d2:57:b6:
78:05:26:ae:0e:66:8c:58:3c:27:d7:09:f4:12:2b:
a3:79:cd:2b:73:f6:89:cd:b7:d7:39:f4:aa:e8:bd:
47:74:6e:3f:7f:02:dd:ed:f9:13:1a:1d:a8:cf:e1:
aa:98:64:8c:8a:7b:7e:c1:d6:0e:9d:be:37:2f:60:
88:bc:56:89:6f:3a:65:95:fb:71:50:8f:3c:b8:a1:
d3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:84:C5:5D:45:31:E7:B5:6D:DF:7B:81:90:45:ED:08:CF:26:AF:12
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5f:04:f4:e0:3b:16:12:c0:b4:bf:19:8f:d7:34:35:63:c5:
20:2b:29:86:cb:f6:08:ee:a7:7f:2b:da:5d:64:69:b3:59:b5:
08:1d:26:e5:74:be:7e:63:43:9e:83:33:d3:7d:49:d0:d8:68:
d4:8b:a2:4b:a7:37:6f:00:d1:2b:5d:b5:7d:1f:d1:d8:d5:41:
ac:7a:a4:7c:25:9d:02:e3:47:53:90:6f:3c:4a:9d:cb:8d:22:
56:57:6a:4b:cf:4d:c3:c1:04:0d:61:92:f3:c8:c8:8b:df:1a:
16:26:82:dc:e9:09:63:22:3c:6f:02:5f:39:6d:83:f8:c8:28:
8d:4c:76:47:96:55:2b:71:cb:25:a5:f4:2c:58:a5:84:99:67:
1b:0a:49:4d:bf:0b:5c:7a:0a:40:64:67:4a:9d:30:56:eb:4a:
1f:af:37:42:11:09:be:9d:9d:0e:f2:3f:09:1c:22:d2:9f:48:
32:c2:f0:fd:dc:3c:c0:0b:7b:26:3d:c5:32:b7:01:ea:8a:a0:
50:82:e2:9e:70:a1:1a:78:ea:e1:43:97:15:e2:09:cd:9d:0d:
7d:1e:d1:a8:26:16:82:a3:50:8f:c1:03:b5:7b:d2:df:d8:df:
ee:11:b5:54:6e:c1:88:23:a1:0c:ac:d9:99:9c:25:fa:26:04:
4b:3a:1e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:49:12 2026 by rpki-client