
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json)
Hash identifier: qQQDrwCKH0w72eHhSlh3HrZyvAgLi+3TuZMayXyLwyQ=
Subject key identifier: 64:22:76:55:01:CC:03:BB:01:75:3B:1D:13:2D:B1:17:73:D6:1C:FE
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019F197A97EDA85068110E3E904F87256CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
Manifest number: 0DE3
Signing time: Tue 30 Jun 2026 17:01:32 +0000
Manifest this update: Tue 30 Jun 2026 17:01:32 +0000
Manifest next update: Wed 01 Jul 2026 17:01:32 +0000
Files and hashes: 1: 0bOZqErT7cPqtg8A6up5AuWvx0k.roa (hash: TLkmyalxkw5UtbYf/UBevHhaws4BaWA7DIMpjH0huR4=)
2: 0nKy3DcrJQbiUx0L11st8vPu4iU.roa (hash: p61zFKqkHY6u5BC22bvQD8WFNXvs2Yw1bGFGniYo/EE=)
3: BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa (hash: FSP05ciRv7cgg2ori440lYssEdhe7MklJbnbswJVXz8=)
4: C-Kmr5FT1ri-wqW_PoFuVOWIXaY.roa (hash: ERXgmbLSjJDQYHfslHu3SRPoPi7u4SxKIXUEFniHGbE=)
5: N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa (hash: sJ/b4s+wOONAASz+jNAdnE8FTPixklTn6DITWj2Oz+o=)
6: NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa (hash: tjAGBxyE9MUK6tIC8hGVGZt0+cyyEXn5+tt8NlkIgvY=)
7: ROFAtVDItt_EMagnNMRUK_8AFAo.roa (hash: 0/7Uq0DIP8W8M/AoQNG3rBHtAMug83v1CzVSyAShVQQ=)
8: SDv_Hv3j1zQYKdMKKJahi--bpbA.roa (hash: wiXpFtlqxh3vGK37wBoqcCvYsCDy5XPVC/ufdC7sY8c=)
9: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: FU91sswmtn9kkygx5xhYoW5SC+9bf0hDERJ8vvefEtk=)
10: _8UAnkY-Tgc4NZnERUShSjoD4xE.roa (hash: vjUpfIBIALtCY5M3wtuciypbGi/vBvMv2oVQ1jTAtsM=)
11: bbeNuCdJXqCYIUtyU2bTHnhe0pM.roa (hash: /lbmYbffftG0vT1jDvQWmIRNnGgrK51SKBZCKYo4Ly0=)
12: fCShZlzeyORIZqRpva0LWa9CXcY.roa (hash: Zw1W+vklKFKa/7FceWUPbOmP+yw3OCVtUAYFmYvIIHY=)
13: hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa (hash: P18VNSJRod1881sL7FyXf+LS0GoW/VI4U88shR2WTxY=)
14: iryj8oj2-V8BM-nhifn9xaWFT6k.roa (hash: J2c6WbxcvYg3n0i5rwopADF8nqS8/EkzKqjIvyGqKVg=)
15: nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa (hash: mBMzJHf7kRboGL+NsWlN+QzAIvKztq5wCERZ3i/DuXc=)
16: ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa (hash: O7M0cdecg0k5jJU4EYSgvz6r2GhJVnkR6Wsg7m7uOsk=)
17: x35bCF8o2frE0yVudoR1l5CD4FU.roa (hash: P9cerXMElreTy2+e7EkdqIb26AnuXW2v3h+k00K0LsA=)
18: yNGeTwwu6nvLd6pVRj1m7SWFsRI.roa (hash: DIGoHvjBhbh21gUmE9LE4Pi0LqvQbAY6Y2ak9deQj74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:97:ed:a8:50:68:11:0e:3e:90:4f:87:25:6c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jun 30 17:01:32 2026 GMT
Not After : Jul 1 17:01:32 2026 GMT
Subject: CN=6422765501cc03bb01753b1d132db11773d61cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:34:d3:e0:3f:81:e1:9f:93:c0:f3:55:f9:
7a:28:a0:1c:b5:4e:67:b8:df:98:8e:5f:b0:29:48:
55:df:05:8c:6b:8f:26:23:a5:38:fc:a8:90:e9:05:
50:9c:b9:9d:8e:cc:f9:55:7c:39:75:77:30:9d:4b:
9f:2d:74:05:4d:50:85:ad:0a:ee:74:56:74:f3:a8:
05:bb:ce:35:c1:68:9c:3f:e2:f2:c2:f4:f8:d5:89:
a3:0f:05:dd:a0:e6:6d:3a:db:ae:23:56:7d:1f:1d:
9f:f5:82:15:e4:aa:e9:02:b9:34:4b:a9:43:53:21:
c7:35:bf:53:10:75:5b:6f:bd:b1:88:07:80:8d:03:
4d:dd:32:94:1f:6b:86:a7:45:b7:6b:7b:9a:62:19:
f3:61:fc:db:d8:e0:62:85:ed:74:6c:32:a4:c3:84:
02:d2:50:6d:f9:91:69:da:4c:6f:fc:e6:47:1c:5d:
56:41:37:ce:22:cd:3e:5d:72:81:b1:40:d4:b2:de:
fb:5b:b7:af:c9:bf:cc:c9:03:1a:81:ca:b5:da:20:
3f:38:ad:b8:d7:07:ef:88:0b:d5:2e:c2:78:93:8b:
9f:9c:fa:55:d4:4b:e4:b2:d6:98:9d:e2:1c:2f:14:
bf:d4:0d:ba:1a:74:a9:ae:41:93:af:5d:78:22:3c:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:22:76:55:01:CC:03:BB:01:75:3B:1D:13:2D:B1:17:73:D6:1C:FE
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ba:c8:80:45:3a:50:17:85:96:a3:c9:d3:36:a1:54:89:94:
a2:74:3a:f9:e5:49:41:66:d0:76:4e:9c:7b:8d:4a:1b:25:fa:
d4:2b:c5:15:7f:f4:bc:22:8f:01:77:23:40:62:eb:bd:aa:f1:
62:42:3f:77:9b:db:d5:27:1a:1d:3e:62:5b:d9:bc:d0:11:26:
6b:74:c9:e3:7d:09:a7:9f:1d:09:dd:11:63:4a:44:50:1a:42:
53:0e:92:64:62:a4:73:9d:e1:ce:99:6a:a0:07:da:82:0d:a5:
8b:01:2a:e1:0c:14:d1:6c:1b:43:fd:8b:88:da:c1:05:7b:62:
40:e8:59:e8:d8:8a:d2:3a:3a:2a:e3:b1:57:c8:39:63:30:d1:
ab:b3:7f:1f:fc:b4:b7:8d:55:1a:4d:d9:95:a5:e5:72:a0:c4:
be:75:21:a0:3b:80:7f:e4:99:8a:dd:60:d5:cf:44:6c:eb:d5:
db:78:6b:b9:7e:14:ed:e1:a2:d9:05:e6:b0:7b:c5:ca:0e:74:
95:e1:72:d6:ea:0a:d9:09:30:1d:0d:ed:82:87:8c:e9:fb:5f:
60:71:8a:7b:91:67:00:1d:5e:07:fe:51:e0:ff:a5:3b:69:5c:
d8:c6:1a:cf:8f:09:33:d2:f0:dd:53:a4:d9:50:dd:39:78:f6:
e3:f8:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:17:52 2026 by rpki-client