
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json)
Hash identifier: 0l8Idtpnm0TcE2av7IfGfLcrVO/yk/OIYh4/Q1oGZBk=
Subject key identifier: 06:21:FD:64:2D:B1:B6:B2:BC:71:16:BA:35:FF:91:F2:38:A8:18:0E
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 019FA82C3586914D182DF5D0FF6C8280DB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
Manifest number: 1759
Signing time: Tue 28 Jul 2026 10:01:37 +0000
Manifest this update: Tue 28 Jul 2026 10:01:37 +0000
Manifest next update: Wed 29 Jul 2026 10:01:37 +0000
Files and hashes: 1: 1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa (hash: Ddu3dw5E5cMsctwBaCnCHBJl5vVM/XMeaSx8/U1wJfs=)
2: 1B2E5LozjiOiEEIVllZwGOlUoUc.roa (hash: DtZRGHhFLQ8RyYzUJ9AqMoeV1gGyFtUW3kQz1Kw7pNc=)
3: 1h3O8l_TW_Pt04UkNDvHQykjzBo.roa (hash: YPYjSO8A3RKdjeZ4kpCNyf7+uhxWq8m+nhKrC4aIRXo=)
4: 40ahziHyLtQx_pyEk0bHk67E8fw.roa (hash: rWZqu675dNYqvBqcBL0jVKw3VJWQVGQYGPhVN2Iiit0=)
5: 4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa (hash: X8RR+0PaypDLpsEOWttv6W/dtoMpGTgNbkp3JkclUF8=)
6: BBHTjw15NAF2rxWNcQdysv45Lss.roa (hash: Lous+sIenMIAO4lBR3nlDw+F0FCln0Ka+oVIfjt59kM=)
7: IQvdujgainvo4C34zkOLdjKY5vg.roa (hash: w17Fv3nrN5mdxpMpocz8vqnCEddTCZeK1yywJC7rkAQ=)
8: KPzLPauPpQiWYae418r6m1gMbQ8.roa (hash: bMOA8c/Peua3MiHOsLdKNKZDG/6LBfAeWjPvZ8O4vDE=)
9: PhXZiIOr7piIHYlDtgFb-SE3XFc.roa (hash: kQ6KIuUu9lWGspD3sgkP3G1eQcAyvbDdP58M3rp8Fes=)
10: REtMs1U8A3vNupGfA8YHkLMBg20.roa (hash: 8cbxOjQg2znipTCYsgxq7I7rjGz0FDOmTb0bqODGJZQ=)
11: RgpyMW5WLsoOZ7X6sjR7zZpkUiw.roa (hash: 9bAWFuzWHv7cpnjzkHad1zJjL6nxP74Kh6dQAZysh0A=)
12: XIVBNcTJBnkT90tLXiCswsUi9O0.roa (hash: PPElf6bVEODRo+3cgHN5ArR3uE+ZQHhLBOE/ConPN30=)
13: Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa (hash: 13k76cemt6Sf92ZNBW6R6RxtUCROzQCLop1b+iGGSUQ=)
14: bLty7x4_bp6bJO68Cul62fRMxlU.roa (hash: kYiMfI9JDPevUGPZ1zVTj//0LProZnsEPqeHJe8gbiQ=)
15: c1of_GGOGBpj8gjfCUC0AsJuKNg.roa (hash: f3erzVhNqOm3b2k4MQozf9a0YdwKNFSjx0Hb4KbZctc=)
16: d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa (hash: ybFlHwrk0/bn9A8GTyAQQ72jsrneQsxgrXLeXX2L7mc=)
17: dCqQVizHmCbsgLcX6csX7Rciuic.roa (hash: sDGzeBpaeg3YAhNrnUWPuM/ODk832tRUJ5O2TTkUfds=)
18: jFvJZaHKv8QwoukYCAhIunEqd4s.roa (hash: V1rH1de0PVsmx11Wg5/gIdXxuPL9QGcnJzJNtJ/w8PU=)
19: rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa (hash: iB8AOxEYfvNU1/L6TivJBk9QHQFdeq4cJO6UXX1sPUM=)
20: s4XhO3zd68odlYNKfOcr66qKpYo.roa (hash: lGF4r2lhB2RKS4kFkLqdXXo14Ag7CA/0NH/w4b5IOWU=)
21: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: c6NsvnA3uxyayFriRh28P8WFC3YFTAfnIbRDkYntEhA=)
22: yBju9251opQb0e4SsoLoTlY7kVM.roa (hash: eQSRE9eUeTSXYWB/iKLZnX5m98d5OnEnkEhe2IV+YaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2c:35:86:91:4d:18:2d:f5:d0:ff:6c:82:80:db:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jul 28 10:01:37 2026 GMT
Not After : Jul 29 10:01:37 2026 GMT
Subject: CN=0621fd642db1b6b2bc7116ba35ff91f238a8180e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:0a:79:76:fa:7c:d3:6b:15:13:e5:97:96:
90:81:b6:89:8e:10:ea:24:1b:ec:83:24:08:58:15:
69:61:49:be:18:fc:3e:a6:9a:fa:d7:92:c9:ec:f8:
86:a9:be:da:55:c3:52:23:71:77:42:1c:cd:29:93:
e5:5b:3e:fd:37:d7:22:ff:10:c5:9d:31:e2:c7:ee:
38:b7:46:ae:82:03:00:68:73:49:fc:eb:e3:4c:79:
60:31:a8:10:c9:9d:1e:22:73:e4:d2:19:14:7a:a1:
5d:b9:28:19:0c:90:28:6e:ea:ee:95:7e:67:17:1b:
76:1a:af:84:43:5d:22:4b:86:ee:6b:9f:6e:56:c4:
ad:21:4d:c0:b0:e5:35:2b:72:ae:71:e0:f2:ad:61:
8b:8d:56:36:ed:0c:67:b3:40:a3:bb:4a:cd:e2:1f:
c3:b9:21:35:1d:48:29:f7:2f:7f:d7:72:7e:65:0b:
e6:61:c2:f9:c0:aa:64:bb:0e:43:a0:29:d6:cb:79:
2a:f7:26:c0:c0:48:83:47:64:0b:33:b3:56:fb:5e:
38:fb:4c:a9:16:db:3c:e6:47:11:d5:6d:01:e7:41:
00:06:57:b1:8e:79:5b:85:02:81:1f:d4:86:0a:cd:
67:0d:eb:cb:bc:76:6e:87:55:b3:99:6d:62:f7:fa:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:21:FD:64:2D:B1:B6:B2:BC:71:16:BA:35:FF:91:F2:38:A8:18:0E
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8a:df:10:9a:60:a7:52:ae:01:02:7e:fe:8f:54:24:84:ec:
20:f2:24:01:d9:3a:24:93:0d:14:26:3f:17:0d:a9:e7:cc:25:
78:2b:c4:31:4e:df:b5:12:9b:7b:40:cd:6c:9b:ae:22:72:3f:
16:0e:4a:d0:90:fe:7b:64:25:f2:2a:63:2c:5f:37:56:9c:67:
99:87:4b:2f:cb:f4:6b:9b:f1:2c:ee:fc:93:f0:ba:ca:b7:40:
37:d7:5e:b2:98:c2:13:87:cb:a7:f5:d9:0e:fd:8b:1c:02:eb:
f9:88:79:3b:5b:2d:df:d5:4b:e0:0f:e7:05:1e:cc:51:62:50:
a1:86:e3:27:70:db:b7:d3:f4:61:0a:2c:a7:a2:7e:3c:c8:a7:
9f:7f:32:0a:c5:9f:a5:b4:28:9a:1d:bc:53:c2:20:8f:c0:f8:
dc:fc:eb:75:98:52:a7:54:03:c3:ee:b6:62:79:0e:48:c3:b6:
5a:76:3c:74:e2:79:49:19:86:01:36:3f:fa:48:00:eb:14:c0:
91:05:f8:57:b5:99:b2:46:7a:25:be:0c:9e:6b:93:cb:4b:d0:
72:0f:71:4f:2c:d3:a2:79:7b:ed:f6:1e:74:2d:0a:06:b5:c3:
c8:25:33:6c:71:51:43:3f:3d:bb:9b:7d:28:cb:99:1c:35:e9:
5b:bd:17:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oLDWGkU0YLfXQ/2yCgNs9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjYwNzI4MTAwMTM3WhcNMjYwNzI5MTAwMTM3WjAzMTEwLwYDVQQD
EygwNjIxZmQ2NDJkYjFiNmIyYmM3MTE2YmEzNWZmOTFmMjM4YTgxODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQIKeXb6fNNrFRPll5aQgbaJjhDq
JBvsgyQIWBVpYUm+GPw+ppr615LJ7PiGqb7aVcNSI3F3QhzNKZPlWz79N9ci/xDF
nTHix+44t0auggMAaHNJ/OvjTHlgMagQyZ0eInPk0hkUeqFduSgZDJAoburulX5n
Fxt2Gq+EQ10iS4bua59uVsStIU3AsOU1K3KuceDyrWGLjVY27Qxns0Cju0rN4h/D
uSE1HUgp9y9/13J+ZQvmYcL5wKpkuw5DoCnWy3kq9ybAwEiDR2QLM7NW+144+0yp
Fts85kcR1W0B50EABlexjnlbhQKBH9SGCs1nDevLvHZuh1WzmW1i9/qfLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYh/WQtsbayvHEWujX/kfI4qBgOMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4rfEJpg
p1KuAQJ+/o9UJITsIPIkAdk6JJMNFCY/Fw2p58wleCvEMU7ftRKbe0DNbJuuInI/
Fg5K0JD+e2Ql8ipjLF83VpxnmYdLL8v0a5vxLO78k/C6yrdAN9despjCE4fLp/XZ
Dv2LHALr+Yh5O1st39VL4A/nBR7MUWJQoYbjJ3Dbt9P0YQosp6J+PMinn38yCsWf
pbQomh28U8Igj8D43PzrdZhSp1QDw+62YnkOSMO2WnY8dOJ5SRmGATY/+kgA6xTA
kQX4V7WZskZ6Jb4MnmuTy0vQcg9xTyzTonl77fYedC0KBrXDyCUzbHFRQz89u5t9
KMuZHDXpW70XFw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:46:57 2026 by rpki-client