
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json)
Hash identifier: lFWZBB/E+OmAeQ3uw4kmBhAPxXQ+LVEybmZZj6HTquk=
Subject key identifier: 67:65:11:BB:3A:F3:0B:AC:91:80:53:FF:08:EA:EB:A5:1A:26:9E:46
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 01A0CB22B1854EE34850C8D91E23163CB284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
Manifest number: 1A93
Signing time: Tue 22 Sep 2026 22:00:43 +0000
Manifest this update: Tue 22 Sep 2026 22:00:43 +0000
Manifest next update: Wed 23 Sep 2026 22:00:43 +0000
Files and hashes: 1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=)
2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=)
3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=)
4: F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa (hash: ZxjcHW/x0pQR0hwLPPsZsPvzwQS05l4bLGzkALrvzrE=)
5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=)
6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=)
7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=)
8: W2OrB0j0-nYPTzXGx8wglEsSrTg.roa (hash: VYxarI+ue3iiKP2yq3ncIk9PFzz9Y9KND/jO/nEButo=)
9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=)
10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=)
11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=)
12: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=)
13: uHcHm-Q2inkIqyesgnfD4jPip48.roa (hash: 4PMfdYi17AF2Wi/23XG4oqCHUKA2wU+FYFq+eyTKfzA=)
14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: jjH1bjhqrza8jBGqBFMGiCUzij3cuS9/Th8uq29q2YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:b1:85:4e:e3:48:50:c8:d9:1e:23:16:3c:b2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Sep 22 22:00:43 2026 GMT
Not After : Sep 23 22:00:43 2026 GMT
Subject: CN=676511bb3af30bac918053ff08eaeba51a269e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:a5:54:c7:8e:bf:c0:b2:57:98:2a:6a:a8:
1d:0d:63:d9:ac:7a:d6:f4:83:5c:eb:05:42:b2:e3:
3e:4b:2a:43:cb:1a:34:f0:51:29:f4:d1:f6:e8:85:
b4:82:99:36:3f:ec:e6:46:5f:cb:99:0d:68:8a:b4:
6c:e4:3e:a8:a9:b3:ce:ea:62:ab:a9:59:65:89:04:
f2:28:0c:64:51:cc:54:e1:55:b6:01:a0:0a:a3:fc:
1d:a4:41:fc:ce:3a:03:02:d2:70:87:fa:da:ff:91:
07:ee:68:30:05:93:51:28:75:e0:6d:28:05:93:e7:
89:d9:9e:f0:c7:46:a7:2d:33:eb:b0:b5:4d:9c:f0:
58:3b:2f:2a:3f:00:46:d3:0f:b2:fe:17:60:5c:07:
09:50:40:f1:3d:d7:76:66:be:e2:1e:45:08:5d:15:
26:3e:19:ff:ab:6f:2b:0f:1c:45:ea:f4:7f:b1:1c:
43:0d:ee:a6:ba:10:96:71:68:2e:2a:7b:0f:83:47:
15:c7:05:00:85:89:3e:f8:14:1c:c5:c4:56:05:4b:
27:19:8f:e7:34:b8:9c:ad:40:79:f1:ba:0f:6a:1a:
ce:f9:01:5d:f7:67:34:2b:21:f1:fe:b2:8f:dc:74:
06:46:a1:a4:4d:d2:1f:05:08:fb:ba:b2:d0:31:4e:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:65:11:BB:3A:F3:0B:AC:91:80:53:FF:08:EA:EB:A5:1A:26:9E:46
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7a:87:4a:69:62:d1:57:6c:f6:9d:61:2d:ac:c9:b2:6a:52:
39:90:a1:09:bb:5d:f0:b5:84:cb:95:27:3b:d6:fb:63:0d:5d:
5c:5a:a0:8b:38:7d:f4:7a:9d:35:fb:19:6f:ae:58:14:89:97:
47:24:6c:4f:30:14:8e:a0:b3:c7:79:3d:82:ce:58:6e:b4:4f:
0e:9b:6c:8e:7c:3a:31:d6:3b:e6:e4:d9:02:c6:64:51:eb:b8:
38:4a:fc:60:88:b5:2a:1b:d8:bd:30:54:f5:cf:7e:e0:0f:93:
a3:41:88:c7:67:26:a9:e1:77:70:48:af:22:06:c7:3b:75:c5:
ef:d3:26:9e:28:17:17:b5:81:d0:0e:06:2c:c3:a6:8c:93:70:
24:95:4d:a9:e1:89:12:98:30:9e:1c:6d:39:3f:cb:4b:24:60:
55:6d:d4:45:bf:af:d1:8e:af:85:4c:24:d9:80:6d:d6:e3:ec:
10:c8:b4:eb:bc:91:c8:43:9d:4b:94:a5:d1:65:9c:16:9c:5c:
33:22:91:d1:47:95:60:b0:fc:73:68:10:45:a2:e0:55:e0:fd:
70:66:73:dd:43:f7:31:3b:e6:f7:38:28:a3:a9:9b:5a:0e:10:
92:d0:ef:39:0a:0d:1e:87:35:44:57:94:6d:4c:95:9b:ed:e2:
b3:56:d8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:24:32 2026 by rpki-client