
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier: WG99FYPH8At/P1Mr8YP/6GccOBqERcRP4VnYnbojocY=
Subject key identifier: F8:4B:AD:65:AB:0A:30:91:0A:F3:FA:22:76:A9:BD:A9:9C:B1:21:21
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019CAAFD0FB508CE73BDCC9181740B7B59E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number: 13BC
Signing time: Sun 01 Mar 2026 20:00:37 +0000
Manifest this update: Sun 01 Mar 2026 20:00:37 +0000
Manifest next update: Mon 02 Mar 2026 20:00:37 +0000
Files and hashes: 1: 4K_95KFZWMhbPpIfz5E1jHBv5aw.roa (hash: S+/oi+d3olEq6tAFWe3He8qCofTZg2SAbS0y1lTVFbQ=)
2: 8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (hash: +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=)
3: 9Yph-pozsAa1u8D3EORz5KZEkck.roa (hash: eBaChJ/lL8SbnPpF1SLCUTRSIb4xLZthmgzcZwPUd1M=)
4: AEunzLWh3gsHOrYJNXhTSiOnqEU.roa (hash: a+6FwmOlMr9S4qz3PdaxvAJ+0nFrNrSk/lgCkrtBWLw=)
5: BmzDco6FUeR2pV7CetfxwgyZzwU.roa (hash: 3e8ATRNUbcI+nS1vmGLQB8ObHNnkxsHOjtgJ15KBPNU=)
6: EGTr11Cn33WgsBkSO-DW_brv2pQ.roa (hash: WbBfhfc/J57F6babpd8iRrGBrz8Jx8j1fD8g8nHbBpM=)
7: HoTv0sdQLHBWRiUvVVDaAHr5gZE.roa (hash: DIU7NFLXWQYLWOK2aoJC+a/KoOz45jlF8l8WQecGPFM=)
8: IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa (hash: y5tfLHXKWazA7AwML4TwjE9ej8TsMaQiHDfSzy/WlnI=)
9: MSktJCjRKQDGOhyyr4mKUY-X9I0.roa (hash: YB2yhni5jmhv5LOS3OBNxLtMUZLfwVnpogHoPFW8JJc=)
10: QkokzrYDGI69z71ocapb49HcmMw.roa (hash: BPEQLv+L5DDtagemk+MXVy03tCKM+xoA01OlIV162OU=)
11: TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa (hash: gwN06t/I7Jawt3LQMpSh1ruXZaJYB/QUXUCidscAwp0=)
12: ThdY1NGqdEAlbacIpCzIWWjl8-M.roa (hash: VhQ5Tvljs/taZI++HCXLozJ3N8a0YMuM7YHVXeQMk0Y=)
13: YrfvxNJdeHYuSdfjBibJ7k6pvEE.roa (hash: oBcJN0/vUgerckttMrITgGrAWVOsR/md3WZHA4+tgo0=)
14: ZDSoVMaxuelayYkHDT1Cece0cLM.roa (hash: YJ9/iqfEmNXXNYGq5w6yN8VfwFD7csp8PUDUTe1uRmA=)
15: _w6riE4OlRprr7MI-yGnTko28Sg.roa (hash: Gwzb8KH6//hbsd3+z42M1mtGTl+aF6C5ToJY0z33ZFs=)
16: jlOSteO5B4HlUDCHpcrOn1tZyw8.roa (hash: PNBhGbv1owj//wNV6ueV101gABFDOCaZFzVqrXAhf8s=)
17: oBNWk0ANrXJFnqpqi8qJWun9bTg.roa (hash: ersLK1F7q7UrsdCXpRyyrcybt+NPvXoXFfuofv9kyjc=)
18: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: 9GXIS+rnKp0bhQfHq/kRr8HMR/oKoUMB92SWmYW2GPA=)
19: w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa (hash: LAkyIylHnXBQNUrOi88pTzQDfdyi1/aUJB7HDCmUEbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0f:b5:08:ce:73:bd:cc:91:81:74:0b:7b:59:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Mar 1 20:00:37 2026 GMT
Not After : Mar 2 20:00:37 2026 GMT
Subject: CN=f84bad65ab0a30910af3fa2276a9bda99cb12121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:e3:69:24:86:f7:4c:10:d5:71:7b:76:0d:
81:c4:15:bc:aa:6e:48:16:b2:29:95:44:83:23:dc:
be:38:38:c2:fc:b2:7c:78:87:16:cb:78:05:59:f6:
ec:b3:71:ce:0a:5a:21:0a:e2:32:b6:29:14:6f:35:
4b:99:7c:35:61:da:31:1e:f9:b1:ab:d7:cc:39:b8:
e0:25:e2:3a:96:41:f8:a1:ab:73:ef:5e:23:5c:20:
49:96:0c:1d:b7:88:bd:de:5e:5c:84:65:44:25:9f:
f6:39:20:ea:df:3e:10:87:72:f5:83:b1:12:36:d5:
ec:f7:eb:14:cd:0b:6c:fb:dd:b8:54:da:b8:f0:f0:
37:7b:a9:e8:26:cd:36:a9:73:4f:6e:a4:4b:eb:d2:
ef:29:80:68:85:c2:30:d4:0d:94:18:11:72:b2:4a:
c3:af:69:7c:f9:43:d9:97:b4:22:34:1a:d3:f5:0d:
71:58:b9:a9:06:69:2f:db:7c:5c:a9:d2:96:ba:e5:
3b:03:9d:7d:7f:47:46:8e:06:61:c6:e3:33:f7:9d:
75:57:f2:06:8f:74:eb:9a:56:d0:db:5e:01:8e:f5:
31:17:03:0e:1a:26:09:51:9e:ab:39:19:33:e5:b1:
aa:c0:cb:79:f3:19:24:04:54:ed:ba:7d:76:71:d6:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4B:AD:65:AB:0A:30:91:0A:F3:FA:22:76:A9:BD:A9:9C:B1:21:21
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b6:e1:6b:57:81:d8:e0:54:12:32:3b:1f:c0:37:5a:47:ed:
0f:3b:c0:a6:64:62:dd:34:a4:85:ea:f5:e8:57:78:13:66:dd:
41:bd:d3:e9:e1:66:f1:df:8e:0a:7d:5b:c7:ca:99:9a:26:6a:
d5:e8:ac:86:05:f9:cc:4d:fe:23:52:a6:2e:7e:17:68:4b:79:
8d:7d:5f:76:df:c4:3a:ba:c9:ee:36:0d:8d:0e:fa:1a:ee:ce:
83:87:e6:4e:03:36:10:c4:58:ea:0f:f3:79:af:bd:0f:5a:ad:
7f:bb:13:bf:70:02:d8:16:af:5b:02:09:63:a6:37:f5:2b:b3:
a2:3e:ef:d6:5f:ef:98:b5:75:f7:59:f9:c8:64:b9:df:7a:37:
2d:23:d8:8e:bd:fa:35:2f:9d:16:2f:b3:97:ec:72:3f:fc:2c:
35:05:f2:ed:19:a9:ee:14:a0:df:d1:1e:07:31:b6:53:5b:71:
82:6a:f2:37:32:51:11:84:d0:c5:ab:5f:81:12:66:c2:a9:ff:
79:74:95:f8:83:bb:bf:43:89:cc:15:d2:e0:bb:06:1b:96:69:
2d:b3:7e:1f:95:07:d6:56:26:7c:3d:21:1c:ef:4e:4b:7c:3c:
a1:7e:ea:20:b1:3d:55:45:c3:2c:a8:b3:23:f8:11:f7:f7:e1:
77:18:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:14 2026 by rpki-client