
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json)
Hash identifier: bUlRHSYbOJssFGBxeLqYwgaw/CCJXJQH97KvuTfGdMs=
Subject key identifier: 9E:39:AC:83:EB:73:74:2B:85:05:AF:BF:74:B0:E9:20:20:3D:E4:FA
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 019CAE08EFF91D45F73744DABAB4A09B5D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
Manifest number: 01C6
Signing time: Mon 02 Mar 2026 10:12:27 +0000
Manifest this update: Mon 02 Mar 2026 10:12:27 +0000
Manifest next update: Tue 03 Mar 2026 10:12:27 +0000
Files and hashes: 1: 043Lbp27EDcUm-b86hgRfQTIMxA.roa (hash: kfaT7xOA8Vvohn0rBNh/7C5Pf0XuWkbtD5lrheMBCvE=)
2: 3WBao4FkX8D-JaaDlye4M6OWSBY.roa (hash: 40SUb7nBHYC91lmOMmMea5ZkyB55LwXVNxfjfa4w1fQ=)
3: 5P-WAPyoM2pTC2hv8LQETP2oWJA.roa (hash: lGDaoNO2e4pY4T1TCUo7lQoxNs1+eOCSqWSzAv+esrc=)
4: 9pxQryKB7-OGwAXFhJkPHxMTQ7U.roa (hash: LaU9wAoPLEVyPbiNPfNuiL4UkPIf6M+Y7nzkcS2LF6A=)
5: AHXE5zE6Dibj4vBuyqtjH9izM0A.roa (hash: FuRo5Hu4yhUEnyMQZkyeyKvJXWvWU2jVjkpwh+ACVy4=)
6: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=)
7: OGdZxTPmloNqGIAa-UfynkuV3EM.roa (hash: m/cAPkjPkOHWq6QUdY18VpClF9YEIKI7RmQsvt84toU=)
8: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: y8OqfSRUUAtx9dxSTzyCBzXZA6daFzoRyCmPtS6P/fY=)
9: hTjSrcovPq648FqPM_7hdgfN-EI.roa (hash: lYgMjkKMuEdbys29eJuErKr4659N+NA6qhwRfkiwEHE=)
10: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=)
11: yFq332nWFdiqD5k33xmPlYMI9Po.roa (hash: EtwbF3PSgqJjlOdjql8GO41noLHKBbeJXtlCFsZpbMg=)
12: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:08:ef:f9:1d:45:f7:37:44:da:ba:b4:a0:9b:5d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Mar 2 10:12:27 2026 GMT
Not After : Mar 3 10:12:27 2026 GMT
Subject: CN=9e39ac83eb73742b8505afbf74b0e920203de4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:82:41:a6:4a:64:6d:89:22:07:bc:47:54:
ad:1c:29:28:4a:72:50:cf:54:9a:a2:a9:cf:10:07:
3a:45:43:de:2f:4c:70:f8:c1:49:02:42:12:32:ee:
5b:88:73:8c:d4:00:f6:e5:ca:e8:2c:3b:bf:b0:69:
45:af:f4:22:f9:af:e6:a0:a3:ae:f0:c8:48:4f:ca:
f7:fa:31:8c:a9:af:3b:4f:8c:cd:1d:a6:5c:5a:5b:
15:fc:d7:9f:ea:97:69:0f:7c:b8:52:2c:ba:bc:5f:
55:85:d4:ca:12:a2:05:92:9e:47:3b:66:0d:29:67:
bc:2d:86:16:e4:a8:cc:79:f9:64:c3:80:f4:d9:68:
11:aa:87:50:1b:00:3a:b6:95:85:d8:57:1d:97:f8:
ec:c6:d2:ac:2e:35:21:1a:fc:f4:db:de:d0:ab:79:
61:a7:71:fd:66:57:a1:35:07:92:89:28:6d:07:16:
2a:39:18:c7:1a:29:b9:a4:77:3f:f7:20:90:b9:ee:
93:6e:57:27:2c:5b:e2:5e:50:f2:ae:e7:a7:27:9b:
4f:98:cf:63:c3:d1:c7:f2:74:37:dc:00:53:ff:c3:
92:5c:e3:7a:bd:29:ec:88:63:5d:74:f9:f9:3a:37:
ab:77:3a:d0:e1:41:6b:7a:15:df:5e:e9:74:f2:84:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:39:AC:83:EB:73:74:2B:85:05:AF:BF:74:B0:E9:20:20:3D:E4:FA
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:78:68:ae:c3:42:c6:c5:88:6f:f9:fe:35:28:6d:42:af:14:
c8:df:d1:c6:a4:05:24:dd:d2:bd:d6:e7:5a:fd:b1:dc:7e:75:
1c:53:2e:44:09:24:d6:14:92:ef:ec:5f:c8:c5:ef:3a:65:b0:
e0:74:50:83:ac:ca:57:09:ff:9f:53:56:46:e8:dd:6e:3c:2f:
fe:a3:25:3a:9a:1f:92:10:f5:15:57:3a:e4:59:71:06:d3:dd:
5a:e8:8a:a5:41:3d:5a:8b:f3:98:c0:d2:28:d4:29:4d:f6:3d:
2b:10:1d:32:3f:80:3a:34:22:d1:76:5c:61:3c:ab:52:50:ba:
1a:90:33:80:86:30:e4:63:cb:0c:1f:62:41:c0:07:af:66:8c:
8d:05:a0:cd:02:75:78:22:40:48:32:96:98:e2:5f:f7:34:41:
b0:b4:0c:1e:57:23:21:64:ba:93:de:e7:53:36:d1:bb:8e:44:
0f:f2:34:bc:d4:52:3c:70:e6:c8:1f:5b:bc:4d:41:c0:25:48:
19:2a:ba:29:6b:48:da:e9:b0:1c:ac:d1:5a:d3:dc:f5:70:5b:
97:09:1c:1d:fb:ac:aa:ca:33:d2:22:b5:26:8b:f1:02:f7:2e:
3b:c5:b8:e4:e8:07:2e:4e:74:66:f3:ef:f6:3e:f0:bf:21:82:
0a:49:61:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuCO/5HUX3N0TaurSgm11RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1
NjgwY2QwHhcNMjYwMzAyMTAxMjI3WhcNMjYwMzAzMTAxMjI3WjAzMTEwLwYDVQQD
Eyg5ZTM5YWM4M2ViNzM3NDJiODUwNWFmYmY3NGIwZTkyMDIwM2RlNGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUCCQaZKZG2JIge8R1StHCkoSnJQ
z1SaoqnPEAc6RUPeL0xw+MFJAkISMu5biHOM1AD25croLDu/sGlFr/Qi+a/moKOu
8MhIT8r3+jGMqa87T4zNHaZcWlsV/Nef6pdpD3y4Uiy6vF9VhdTKEqIFkp5HO2YN
KWe8LYYW5KjMeflkw4D02WgRqodQGwA6tpWF2Fcdl/jsxtKsLjUhGvz0297Qq3lh
p3H9ZlehNQeSiShtBxYqORjHGim5pHc/9yCQue6TblcnLFviXlDyruenJ5tPmM9j
w9HH8nQ33ABT/8OSXON6vSnsiGNddPn5OjerdzrQ4UFrehXfXul08oTB2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ45rIPrc3QrhQWvv3Sw6SAgPeT6MB8GA1UdIwQY
MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt
NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk
LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXhorsNC
xsWIb/n+NShtQq8UyN/RxqQFJN3SvdbnWv2x3H51HFMuRAkk1hSS7+xfyMXvOmWw
4HRQg6zKVwn/n1NWRujdbjwv/qMlOpofkhD1FVc65FlxBtPdWuiKpUE9WovzmMDS
KNQpTfY9KxAdMj+AOjQi0XZcYTyrUlC6GpAzgIYw5GPLDB9iQcAHr2aMjQWgzQJ1
eCJASDKWmOJf9zRBsLQMHlcjIWS6k97nUzbRu45ED/I0vNRSPHDmyB9bvE1BwCVI
GSq6KWtI2umwHKzRWtPc9XBblwkcHfusqsoz0iK1JovxAvcuO8W45OgHLk50ZvPv
9j7wvyGCCklhRQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:27:39 2026 by rpki-client