
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json)
Hash identifier: anvYrjhLhdlFEg995nLpIIzQaCS1dx3XN4GII92eMLs=
Subject key identifier: 1A:FE:6B:F8:67:10:76:76:13:02:D6:63:FE:95:4D:09:F4:23:46:ED
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 019FAD1AE5FB85500B4846AC5411B0354921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
Manifest number: 19FE
Signing time: Wed 29 Jul 2026 09:00:48 +0000
Manifest this update: Wed 29 Jul 2026 09:00:48 +0000
Manifest next update: Thu 30 Jul 2026 09:00:48 +0000
Files and hashes: 1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=)
2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=)
3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=)
4: F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa (hash: ZxjcHW/x0pQR0hwLPPsZsPvzwQS05l4bLGzkALrvzrE=)
5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=)
6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=)
7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=)
8: W2OrB0j0-nYPTzXGx8wglEsSrTg.roa (hash: VYxarI+ue3iiKP2yq3ncIk9PFzz9Y9KND/jO/nEButo=)
9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=)
10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=)
11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=)
12: opsbT1mZiajN6yKjwmpQed2xKN0.roa (hash: hfDxL07Rn37mmDA9+6FxaXHlpTPNLOMYJcCFIz8V60Q=)
13: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=)
14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: GxLOG9ZDzmVZ/ebYEVla5MKV3sooYdWYQQSlSiiCPzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:e5:fb:85:50:0b:48:46:ac:54:11:b0:35:49:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jul 29 09:00:48 2026 GMT
Not After : Jul 30 09:00:48 2026 GMT
Subject: CN=1afe6bf8671076761302d663fe954d09f42346ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0e:3e:34:5e:f7:40:5f:1d:e5:22:be:09:21:
71:16:37:e1:4e:49:33:8b:2f:2e:c8:53:88:ff:dc:
4f:b7:d5:f5:7c:02:21:c0:63:dc:b3:fe:16:71:45:
9d:ed:7c:ad:f8:60:e2:4c:a0:8b:b5:63:29:3a:fc:
5a:a1:df:eb:e3:1d:fe:ce:3c:9b:2e:6e:4c:10:68:
ab:db:f9:e3:c4:e3:af:e7:6c:6f:32:00:d1:85:65:
95:b4:e8:70:7a:d5:4c:dc:a9:fa:6e:4f:fb:79:56:
fe:6f:28:b0:b4:24:c3:9b:59:e9:54:2a:7b:ff:9a:
c4:c3:5f:ce:62:ab:59:07:c5:66:d2:3b:4c:ef:9d:
bf:3c:5c:e9:1a:5d:3f:67:f1:97:4d:52:48:c6:fb:
55:d6:21:42:e6:86:83:e0:41:8b:43:8a:c4:c4:f8:
f7:47:24:76:ff:a0:1d:dc:88:b4:6e:44:ae:42:3d:
e9:83:ac:f5:5a:ad:e7:98:72:3c:13:1e:2d:71:c4:
2c:a6:38:a3:eb:ce:a9:f6:78:ce:f0:ee:f6:47:fc:
dc:3b:70:f1:c2:6a:65:36:39:22:7d:5a:22:96:59:
6d:89:90:74:d3:97:08:be:18:a6:67:8a:1e:c8:27:
05:bb:3a:e7:87:c9:10:a1:ed:ba:c4:a4:b2:6b:47:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FE:6B:F8:67:10:76:76:13:02:D6:63:FE:95:4D:09:F4:23:46:ED
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:06:05:8a:79:d6:aa:0d:a6:1b:13:ff:88:10:d2:39:d0:33:
59:d1:96:32:5c:15:73:45:f8:28:e6:5d:86:65:ac:f8:a8:49:
71:41:9d:30:a8:be:ec:32:d6:f2:99:c7:f7:d0:66:1e:64:99:
12:3e:bd:cb:e1:77:90:16:d3:c9:1a:aa:ef:91:84:ab:4c:f7:
3c:1b:df:0a:00:41:c7:5c:6c:c2:c0:b0:c2:d4:9d:71:b7:78:
22:e2:c0:93:a1:1c:2c:43:f6:e0:68:46:9c:3b:93:e3:42:53:
75:8b:14:84:c3:50:65:02:fa:4a:7d:33:2b:e3:81:d6:81:95:
b5:b9:4d:b8:32:87:4f:43:95:58:8e:22:e4:bd:63:8f:d1:ca:
b7:ab:42:65:54:5d:15:49:d1:49:68:ce:8b:9c:e9:c9:0b:7d:
e2:89:b7:11:2e:82:52:64:e4:dd:da:b5:b7:88:aa:6d:53:bc:
c4:f8:21:cb:e6:24:6a:6e:ea:3f:fa:0c:2c:44:62:22:d0:e2:
74:6b:4f:67:7f:9e:1b:88:96:55:f6:49:6e:f1:7d:02:d8:bb:
15:14:ff:9c:a1:c9:fc:73:04:85:a3:e1:95:38:af:30:42:95:
ae:4e:c2:e3:fc:be:4b:51:10:30:f3:9e:60:4d:cd:a0:88:e1:
46:b2:d9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:04 2026 by rpki-client