
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
File: VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json)
Hash identifier: ZYNa2605PDjCvwWGYIPjr0Ku5dcu+q5X+zrzLqbyaUo=
Subject key identifier: 18:D6:3E:84:83:60:16:90:DD:6F:E4:01:2F:D8:74:A8:C0:E4:78:39
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019CBF28C4101380A9E535DC105898622BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
Manifest number: 0455
Signing time: Thu 05 Mar 2026 18:00:45 +0000
Manifest this update: Thu 05 Mar 2026 18:00:45 +0000
Manifest next update: Fri 06 Mar 2026 18:00:45 +0000
Files and hashes: 1: 11f9_EaW8zxcu9dcHLvxzqf38Lo.roa (hash: xnewyzlXOwnExIP64JF1ik9DrSmsUZyhmiA3DXOiK4o=)
2: 5dUccTjOeXcH3PFxvpgXM81-0uk.roa (hash: 7RrrJVqzPlIAsA/Vb+L/2hzt7ubyCiLJfQ+Wwlb716w=)
3: B0NZx8wGc2BfFV7HL837EN9xDmk.roa (hash: PhnHNgGL/ecjQNAEqTX4yvFXZgk/h6y3wBnt7UEfO/w=)
4: BWSDCyaaYztqf8x04OxukY8CPY4.roa (hash: U38FUPvoykxIjgiJPRxBdZlYvPSwyO1mNNGTzXNpiZU=)
5: Bson5QpUOFI1QdCm6xHzbdmNIvE.roa (hash: DZHq8ozgpPl0uQCPljJHruwM7dHQ/jyriOu62FT2zks=)
6: CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa (hash: JqW6uDJ3RG9f6mu4pHvOKIPsSL2yj5yYpAboStI8ffM=)
7: F5t3iNFuoDTJdVcFFvhLuvZHnmk.roa (hash: onvtW2FhvquKskWb8kYzMP0qs7tpSTfSO5Ae7USIC5U=)
8: FMYHLE6DdmEpeVMePkQCK7G0jsA.roa (hash: U9W0uSh64vdUp2XVkXkHbBV/og/HtsBpfruoNhoMZbU=)
9: G6PfcTBBnGMmYTxAX2kEhfoKgDo.roa (hash: yy5VfaRyRkaXKFtJ7nRL6lqT6Vibse1ushGJE3d+Pjw=)
10: GfOWGiLPv2wccjOXnStMVeJn2AM.roa (hash: 4kXzqP7Ueen81fNYyTvCfhk/Yz0qWdHHeusnErlkgAI=)
11: GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa (hash: hAGmhAwZhhoWhp04cLiGpWwuwXg8Kk2Qjb8VbTs9ZtE=)
12: KqWucH5sI4MugF5p4PjTBd1XImI.roa (hash: qMFzUBwuT4BEanu+eOpO2co0/ErViX4f8esF8yniEM0=)
13: LPQ-W0swhnuqJDRK5OyZUQ5_co0.roa (hash: KipecPu2PdIqjOLDLPj5vSkqEcsQ5HSI7mi05C0Snjo=)
14: PJmcxay0WtSRJnIDudY6DzRck9Q.roa (hash: g6fJ4GyCp1px6ym38QN41UvtwhfWNwAeKWC1qAkBcM0=)
15: Pfn4rcRbKDJuVSkrcgYb9cu78A4.roa (hash: idjJ3BOFW0sv/bdtwbSz3j+KpA5MQW5Fct3dXY7lh4s=)
16: QoSldck7JuNQZZNum-VAZuQLAsE.roa (hash: BhLiuJKGAUIK/3IE4lS7ceagXck8UETCu/pPkUpva/Q=)
17: TR0sCiIgKOI5AVSRYcSDjPZXFDI.roa (hash: ENYN4gxoYSX3l9HrvRf6C27kNk+FcKSMtrIH5nChxC0=)
18: VFq7oOwuoK-4Ezbw8Byjy6HKneY.roa (hash: /kEtmYfU+u/9qUgUdtsAwlr6x9IMzXSTi0t0BiXXPhA=)
19: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: bIr2K4mJdEGVxTJjWboqahiNwD5yl/n01w16gPcThHI=)
20: Zbh0v3jIkeNHK_huafJIUWzUhjE.roa (hash: u5gxSyEmcqN6U6zIZdAUeM1zmLtdQN7lxXducAeyTVA=)
21: ekRgt1kJi2v662mflC7yokLhh34.roa (hash: 3lpPZiQnRkbCD6keXb41MVLx99s2aoWKQrtAqDsCux0=)
22: j4nUYOaKHoPffJAz1cqPosqerIk.roa (hash: qzx6KYLIX2I4Q509IMnF1YKlqNXT2ELmgiXx8moWdwc=)
23: nCxmMvqeJn__lxGCNUJCZkLMOTc.roa (hash: Ai3iY7UqLgg+IqHPxW+NvQb5rxDBknt3AUCWv9ikXpU=)
24: oMXuSjHyTi2ISV5ZXkeB_GmQ2qQ.roa (hash: 1OWtYAgWFUz9U3ZRyQBV7HsQLa1e5YTunuUhvpeW3zA=)
25: u_2w56w9VDiTEhKc_ZitgndOhPo.roa (hash: hQUv7XEtV7+B7R0n+5Br9ftO2lm1ptUCoJiMKucjmPE=)
26: wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa (hash: hs9hA8TNugivRwbaXq2Cd+gZQT+LQBaaFDtqCrqGbck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:28:c4:10:13:80:a9:e5:35:dc:10:58:98:62:2b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Mar 5 18:00:45 2026 GMT
Not After : Mar 6 18:00:45 2026 GMT
Subject: CN=18d63e8483601690dd6fe4012fd874a8c0e47839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:43:6b:aa:e0:0b:e3:50:38:1e:5f:ce:b5:
91:33:30:cd:21:12:aa:41:c6:c0:25:cf:76:b6:77:
5b:fb:bb:01:97:e4:bd:2d:5b:2b:21:f8:0b:22:45:
29:c5:87:4c:fc:15:5e:df:4f:e1:0b:e9:4f:4b:7c:
e9:8f:e5:62:d4:88:b8:4b:02:17:b7:27:c8:4e:5c:
48:97:ea:95:d7:2d:83:36:5c:f4:34:b7:6e:fc:af:
cb:d8:df:f5:f9:95:e7:1a:bd:ed:16:ab:21:5f:6d:
1f:58:9a:1a:81:59:c6:99:fd:3a:03:e7:9e:a7:67:
e3:1d:e5:9c:1a:b7:d9:f4:1d:5d:34:ee:a7:7b:0e:
a9:50:8b:2b:17:27:a3:88:e0:75:76:e5:40:ae:18:
24:27:79:f5:dd:2c:99:82:52:18:35:08:74:e6:f4:
ca:c6:9b:68:02:ea:5d:8e:8b:ae:f2:9e:25:08:b7:
80:38:6a:69:25:f6:cb:6f:1e:24:25:ed:64:e7:6b:
45:95:8b:df:d6:b5:c5:b8:5d:2b:4b:d5:01:03:28:
85:e4:7b:f5:88:29:44:70:3a:a3:0f:01:de:35:5d:
ee:36:27:ce:2a:aa:2e:7b:6f:fe:cb:85:82:ca:71:
fb:62:77:b0:d0:c3:a1:2d:1c:2d:36:4f:80:f7:dd:
8a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D6:3E:84:83:60:16:90:DD:6F:E4:01:2F:D8:74:A8:C0:E4:78:39
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:60:d3:63:25:84:e6:81:c8:cc:fc:51:78:de:f7:07:06:d5:
87:20:db:9a:f1:35:93:01:62:2d:cd:25:b3:58:dc:cf:12:1b:
6c:dd:94:0d:4c:73:e1:56:00:0d:5f:40:06:07:12:a9:f0:31:
31:8d:4a:f7:c5:2f:2f:05:39:34:8c:1e:a1:d3:75:bd:54:16:
4b:75:f4:81:6c:7c:a3:13:17:a0:46:2c:59:e9:8e:34:6e:b3:
3f:54:e9:e5:92:b6:5a:6a:9e:60:d8:f1:41:a4:75:fe:7a:a5:
fb:e9:16:fb:2b:a4:cc:c1:e1:f1:65:b8:38:1b:c3:1f:ab:66:
69:d8:54:9f:c0:db:70:62:ad:34:34:69:08:ae:5d:8d:41:5d:
dc:5e:81:c4:6e:74:dd:2e:eb:6c:0f:c4:13:cd:dd:f4:68:a2:
14:2e:5e:71:97:5c:49:2d:75:fb:aa:c7:19:e9:5a:96:d8:1b:
a3:f6:a8:42:38:ff:3e:70:8b:30:5a:4f:e5:1a:4e:0d:18:b7:
28:16:c0:80:ea:23:92:97:c0:05:93:a3:06:45:f8:49:dc:54:
e1:00:a7:7b:d4:ff:58:5a:2b:cf:f1:6c:dd:95:c1:12:7e:e7:
27:b0:6b:bc:1a:8b:95:41:1a:47:ec:c7:22:1f:c9:d5:0f:3c:
12:27:58:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:59:18 2026 by rpki-client