
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier: 4LbEQC/zA9/63C+m7khiPCHyzxfQpa5wCJ+IW76oH/U=
Subject key identifier: C2:23:15:32:00:3B:D1:9A:03:AC:FD:8F:F7:54:2B:40:43:05:9C:38
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 019FA9E308F1959315A68A74BD98372FB49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number: 0FB8
Signing time: Tue 28 Jul 2026 18:00:56 +0000
Manifest this update: Tue 28 Jul 2026 18:00:56 +0000
Manifest next update: Wed 29 Jul 2026 18:00:56 +0000
Files and hashes: 1: 0ZgQJqVgdfnRZDVgpPvaD-Dzv6E.roa (hash: r5fe+/Due4NZC1alMzrb0UAbeRWncZoeXVNrq7sfX6I=)
2: 0szAMahK1oQnINJK81wlTT6Btig.roa (hash: SZ/iPl1/uEv70XbCNZiszMUzRfgvtHmx/hWYhWGapmo=)
3: 1BYbQVIuZci3v2SJ1lPBRcKopC0.roa (hash: 4k0iveKSc7qYV/Hrii5KFzItmAd9JCdByjYJZZltOTg=)
4: 6V0B2XbUiwZg1uwyso1jKVGrbd0.roa (hash: EhVsz4uU5vPtA18PjB+zS+ctkDe0JVsTRno6/EDARaw=)
5: GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa (hash: B73L31CSXnj3RW8bntsMgtTsreruLzDFUsANn6DFMPQ=)
6: IioJCPvNdNGLMAa_qgwnTe7OHHA.roa (hash: 6db291fyuLEJb9GA//u7Cn1OZhghcTilKR1drZ7PPM8=)
7: USAO41jbUP97p--JRu_ZqtNe5EI.roa (hash: LfdCpC2uNJXwWHbUHSlZAnK3PC0CH3cNb7AHvc9pYvs=)
8: UW-4UFZx7To3RNwelVOgzAwhD_o.roa (hash: eiBKYL64skKUAlgyf8e0asSrepS7YuL7BO8UWyOpmg8=)
9: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: EXVf+J72SPdfzgjClYdlCBhxJh9g8KtG3MKQsYwoUWg=)
10: XR8VM1EvNL7sWYYKJOlMIsJdia0.roa (hash: fBss7mgIT+jvqqxAE/g6H97kqC0eCcZI1+zi2IjDIjw=)
11: kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa (hash: Lh3WoxdQyHUINKZzWX43jjRHwq3dN4GxIBUo7levdrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:08:f1:95:93:15:a6:8a:74:bd:98:37:2f:b4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Jul 28 18:00:56 2026 GMT
Not After : Jul 29 18:00:56 2026 GMT
Subject: CN=c2231532003bd19a03acfd8ff7542b4043059c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:24:f4:1a:57:ac:c9:27:98:40:e5:a1:fa:
96:99:a9:d5:6d:ae:35:bd:5e:4a:a7:7c:fb:e4:79:
91:78:41:83:56:09:28:93:0e:e6:81:2c:2c:08:85:
a8:6c:01:29:de:c3:3b:a0:7f:61:0e:45:23:99:57:
de:43:75:b1:be:48:9e:47:4d:d6:2e:e5:25:83:0b:
b0:22:99:37:ae:41:72:ed:8c:35:97:09:f4:47:62:
81:d1:7f:e7:ec:81:e2:56:66:88:01:35:e5:16:7c:
3f:69:02:b1:aa:32:c7:b1:51:22:64:e5:67:2b:3e:
3c:8c:c5:de:35:3e:b6:e5:88:03:c8:b4:06:a5:39:
ad:5f:6d:96:96:10:5d:6f:60:93:99:22:32:b5:ea:
f0:e0:45:b9:f4:08:08:4d:e7:e5:14:5f:f4:83:10:
d9:ca:f6:bd:20:55:a1:41:c4:00:d3:6e:4d:20:74:
34:5d:07:a7:be:e4:ee:83:b4:7c:02:39:20:96:d1:
1a:3e:1a:75:75:dc:ba:ea:ba:1f:2f:1b:ba:20:b9:
57:50:90:24:32:3f:aa:11:23:49:93:7c:83:a9:b9:
b6:96:b7:f4:53:a0:12:8b:d1:e6:97:01:cc:92:5d:
65:9c:e2:d4:50:6c:ac:d4:3f:c6:ea:cb:ec:1f:d0:
b9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:23:15:32:00:3B:D1:9A:03:AC:FD:8F:F7:54:2B:40:43:05:9C:38
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:06:4f:7b:a2:8f:d2:d7:54:a0:0d:a1:d5:60:23:cb:03:8e:
bb:48:1e:3d:15:4b:0e:d6:17:e7:eb:e7:79:3c:6a:ad:13:99:
95:a8:fd:e5:c2:bf:4b:d3:67:a6:26:2e:0c:7e:12:69:02:8d:
09:ea:1c:ed:b9:4c:ed:b6:5c:ab:53:62:9b:06:9d:a8:3e:39:
14:18:bd:b8:3e:98:88:f1:a8:d1:7d:bb:fa:09:9c:84:3d:d9:
9b:69:da:19:44:c4:20:4d:a7:65:ab:ac:60:af:8a:5f:eb:ed:
89:77:41:16:d8:32:0c:58:fe:af:73:77:0f:54:9f:73:f8:54:
b1:f7:96:ca:db:86:c6:e7:03:56:b5:26:ee:dc:8e:61:5f:2b:
13:0b:57:35:33:4c:96:46:dd:0a:da:71:44:86:70:aa:fb:cd:
eb:a6:7f:9a:3d:3c:55:2d:74:44:7c:e7:9d:e4:66:7f:67:61:
a0:b1:9f:ec:52:27:10:16:f2:a9:da:ce:d2:73:2b:43:d6:25:
56:12:f7:88:2e:cd:83:69:20:5d:5c:49:d5:7b:5c:00:45:74:
6c:7d:43:19:85:96:bb:bd:a6:5c:a1:c7:1a:96:41:b4:85:6a:
48:cf:2e:a1:a1:eb:ba:98:6e:75:c3:dd:eb:e1:99:48:28:97:
99:ac:c8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:43:24 2026 by rpki-client