
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier: 1ycF3EtpIxTkJZB3z/C4EDdwAfnwWYB67FA1t+PiXYE=
Subject key identifier: 51:32:BE:3E:07:18:20:8F:C9:22:DC:54:E9:BD:1C:AD:24:72:C2:AD
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01A15553690F36E572E8F345094BC0F5341E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number: 1631
Signing time: Mon 19 Oct 2026 18:01:32 +0000
Manifest this update: Mon 19 Oct 2026 18:01:32 +0000
Manifest next update: Tue 20 Oct 2026 18:01:32 +0000
Files and hashes: 1: 8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (hash: +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=)
2: 9IR5KaD-b8BYGhx4OuxnD_0zfnk.roa (hash: nBNjrBaYUqrOCrF+/FR62x6XTWdXCs1MeSMbxH9/U3o=)
3: AEunzLWh3gsHOrYJNXhTSiOnqEU.roa (hash: a+6FwmOlMr9S4qz3PdaxvAJ+0nFrNrSk/lgCkrtBWLw=)
4: H1emVUICE2XmoUB3lCjzmQnd6Ak.roa (hash: OQbtHQhbOceKidpOYtukQNjTxgTngWpdYul9lp5ld+E=)
5: HoTv0sdQLHBWRiUvVVDaAHr5gZE.roa (hash: DIU7NFLXWQYLWOK2aoJC+a/KoOz45jlF8l8WQecGPFM=)
6: IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa (hash: y5tfLHXKWazA7AwML4TwjE9ej8TsMaQiHDfSzy/WlnI=)
7: MSktJCjRKQDGOhyyr4mKUY-X9I0.roa (hash: YB2yhni5jmhv5LOS3OBNxLtMUZLfwVnpogHoPFW8JJc=)
8: OJCWpsxNbupszt0IJQ7GmjOPuU4.roa (hash: emoVCpaFA4Kcns27J7+DwGk3hNm6T2TOcgu0xzbdja8=)
9: Q7sGk7ECwFV3meUPYImkro5mZn8.roa (hash: yPT2eaBvSLQfJfLB4jWSat0V9vFdL71JwO3EoW7qPCQ=)
10: QkokzrYDGI69z71ocapb49HcmMw.roa (hash: BPEQLv+L5DDtagemk+MXVy03tCKM+xoA01OlIV162OU=)
11: Qpqd5hHnjqSsp3sn5RVpGOfpq2g.roa (hash: usudWUM+M6fpK5Kxq+vyQ1DEZbBsRF3RxCtpG9oZ+NM=)
12: TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa (hash: gwN06t/I7Jawt3LQMpSh1ruXZaJYB/QUXUCidscAwp0=)
13: ThdY1NGqdEAlbacIpCzIWWjl8-M.roa (hash: VhQ5Tvljs/taZI++HCXLozJ3N8a0YMuM7YHVXeQMk0Y=)
14: ZDSoVMaxuelayYkHDT1Cece0cLM.roa (hash: YJ9/iqfEmNXXNYGq5w6yN8VfwFD7csp8PUDUTe1uRmA=)
15: _w6riE4OlRprr7MI-yGnTko28Sg.roa (hash: Gwzb8KH6//hbsd3+z42M1mtGTl+aF6C5ToJY0z33ZFs=)
16: eeAdU61dAEl487F3Ap6OJwVb3nY.roa (hash: Oh4fcwbJQjn9UMX01F08qYKp+6j3kQnbTRmMOn57gYE=)
17: jlOSteO5B4HlUDCHpcrOn1tZyw8.roa (hash: PNBhGbv1owj//wNV6ueV101gABFDOCaZFzVqrXAhf8s=)
18: oBNWk0ANrXJFnqpqi8qJWun9bTg.roa (hash: ersLK1F7q7UrsdCXpRyyrcybt+NPvXoXFfuofv9kyjc=)
19: pW8tLTuchAg2ENsSB_m1O9IFRMk.roa (hash: DPFg9BfL6u//Ewp7gKsR79UQBua9iboqwpz2s8NPVM8=)
20: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: xo25JZsd3bSdzKn/iIniz0Q/KNY1ROXIcZVEcd5ndwU=)
21: w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa (hash: LAkyIylHnXBQNUrOi88pTzQDfdyi1/aUJB7HDCmUEbo=)
22: wfh-UOAZf8zXcfnGgtljGrgtW4Y.roa (hash: v/XrCw+3zSPx3FlcLzuKPWemLUh1+me4/h0qQHJfqdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:53:69:0f:36:e5:72:e8:f3:45:09:4b:c0:f5:34:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Oct 19 18:01:32 2026 GMT
Not After : Oct 20 18:01:32 2026 GMT
Subject: CN=5132be3e0718208fc922dc54e9bd1cad2472c2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:fa:b3:28:1a:9c:ba:00:0b:d9:a7:5f:c6:
e9:bc:cd:b5:3f:d4:8d:7c:23:f8:8f:cc:6b:b3:05:
da:bb:fc:6a:3f:46:3a:d0:ab:0a:5c:da:64:80:f7:
14:ae:f5:0f:63:e1:8f:26:64:e7:84:dc:74:88:ac:
68:b0:4e:f0:15:14:85:42:81:61:c8:5a:e3:f4:a8:
bc:b3:a4:c7:38:db:fe:24:2f:7f:b3:a4:c0:d3:b7:
5c:d4:8c:14:0f:13:44:de:92:11:3b:a1:1f:a3:d0:
9e:ef:55:55:8c:e5:93:c9:24:17:6a:92:97:0e:6f:
7d:51:43:c2:e5:61:80:2e:98:b5:8c:e2:3c:47:73:
40:13:9c:56:4f:80:fb:ac:a3:f9:03:34:ff:a8:6d:
c0:59:db:fa:a5:7f:37:f2:c5:69:6e:3b:57:17:36:
27:1a:91:9e:df:21:8c:6e:84:e7:95:d0:86:dc:5e:
22:48:32:94:3f:15:e1:29:f7:29:e6:df:c1:9a:05:
7c:d5:fc:4e:ac:61:80:ac:47:d5:5f:b3:5e:4a:57:
88:a9:89:cc:45:9c:64:bd:2f:30:1d:f3:d2:57:97:
70:08:45:79:eb:dc:92:53:df:1a:9a:57:48:85:59:
51:1b:1d:95:03:e0:8d:8e:3d:61:6b:9f:b4:9b:4f:
d5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:32:BE:3E:07:18:20:8F:C9:22:DC:54:E9:BD:1C:AD:24:72:C2:AD
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0f:58:25:37:f9:5d:e2:db:2d:88:5e:cd:de:ee:fd:48:33:
89:ae:6c:df:f7:c0:09:ad:87:cb:52:d4:37:d8:85:e3:d4:45:
2e:13:53:5f:5f:07:05:f2:55:77:84:e2:87:60:8d:bf:e8:aa:
c9:ff:96:c3:b1:7d:03:e6:79:92:f3:32:94:c9:c8:99:b1:e9:
39:56:4a:ae:d2:11:d0:22:86:4a:dc:6d:6f:55:35:24:2e:e8:
0f:6d:a2:03:f8:28:7f:39:99:4a:1b:9b:a2:7b:f3:a1:fc:f3:
26:cd:7a:f8:a7:86:70:3b:b0:20:40:2a:f6:1d:88:2c:ac:20:
eb:df:b9:2b:1b:1b:0b:c0:c3:d5:d8:cc:a0:75:09:0e:1d:ad:
7e:cb:8c:2b:4f:07:06:82:6d:2d:aa:8d:4d:fe:28:55:81:b3:
39:bd:0a:81:18:76:47:00:b0:0b:44:47:e0:75:db:5b:7a:25:
c4:64:0f:bc:d9:bf:4a:30:74:b2:ce:10:05:82:65:51:f4:cb:
14:30:3b:70:97:eb:5f:f9:d9:03:d2:5f:e8:0a:ba:5e:62:ac:
0a:d3:09:6f:1a:04:6d:aa:29:61:3c:78:33:0e:e6:c8:8d:29:
fe:14:a4:97:f8:d2:82:8a:1f:16:fd:77:fe:5c:63:3b:1d:64:
47:c3:52:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFVU2kPNuVy6PNFCUvA9TQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjYxMDE5MTgwMTMyWhcNMjYxMDIwMTgwMTMyWjAzMTEwLwYDVQQD
Eyg1MTMyYmUzZTA3MTgyMDhmYzkyMmRjNTRlOWJkMWNhZDI0NzJjMmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuz6syganLoAC9mnX8bpvM21P9SN
fCP4j8xrswXau/xqP0Y60KsKXNpkgPcUrvUPY+GPJmTnhNx0iKxosE7wFRSFQoFh
yFrj9Ki8s6THONv+JC9/s6TA07dc1IwUDxNE3pIRO6Efo9Ce71VVjOWTySQXapKX
Dm99UUPC5WGALpi1jOI8R3NAE5xWT4D7rKP5AzT/qG3AWdv6pX838sVpbjtXFzYn
GpGe3yGMboTnldCG3F4iSDKUPxXhKfcp5t/BmgV81fxOrGGArEfVX7NeSleIqYnM
RZxkvS8wHfPSV5dwCEV569ySU98amldIhVlRGx2VA+CNjj1ha5+0m0/VQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEyvj4HGCCPySLcVOm9HK0kcsKtMB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx
LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjw9YJTf5
XeLbLYhezd7u/Ugzia5s3/fACa2Hy1LUN9iF49RFLhNTX18HBfJVd4Tih2CNv+iq
yf+Ww7F9A+Z5kvMylMnImbHpOVZKrtIR0CKGStxtb1U1JC7oD22iA/gofzmZShub
onvzofzzJs16+KeGcDuwIEAq9h2ILKwg69+5KxsbC8DD1djMoHUJDh2tfsuMK08H
BoJtLaqNTf4oVYGzOb0KgRh2RwCwC0RH4HXbW3olxGQPvNm/SjB0ss4QBYJlUfTL
FDA7cJfrX/nZA9Jf6Aq6XmKsCtMJbxoEbaopYTx4Mw7myI0p/hSkl/jSgoofFv13
/lxjOx1kR8NStQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:29:53 2026 by rpki-client