
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft
File: VUwk1Deg1Wub0L5IimDP1czI-b8.mft (raw, json)
Hash identifier: nwTI6hVa4SqDmY7HRGMQSQhD/7D/Dettd7jL/xyyEOI=
Subject key identifier: F1:D7:B8:FC:01:BA:12:FF:CB:BA:05:8F:E1:3F:52:B8:FE:78:67:38
Authority key identifier: 55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
Certificate issuer: /CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Certificate serial: 01A12B0D98C7ED5CFA2F19CA4791FACACB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft
Manifest number: 0288
Signing time: Sun 11 Oct 2026 13:01:13 +0000
Manifest this update: Sun 11 Oct 2026 13:01:13 +0000
Manifest next update: Mon 12 Oct 2026 13:01:13 +0000
Files and hashes: 1: AOkKST9KwSJH3sXE5USL9gzAqUU.roa (hash: aXhO9sIv6q5kHGbb9/fb2Aw1F2NhhrGlB5l1s7C1sMo=)
2: DCZgz3VaJZPCqv-Xdr9kw9h7brE.roa (hash: DyiZMiJQd8x2jp86BuGzWff7b7OfU0LvcqAW62QVCmg=)
3: Jpc9akMn776zSYTD6mXsyRzavLU.roa (hash: ZfuvokmeEiQYfhhAu6Yv9wBQKPiuHqzkSEN6L6pFYXs=)
4: VRMDqGgJNAkkzV2QU5k7y3ameDM.roa (hash: +dcQEak+RgFEIETOwcJ9qNLzNVuw4mUqjHHzKz8y2Vg=)
5: VUwk1Deg1Wub0L5IimDP1czI-b8.crl (hash: WzaAanIHQ+4+lJLrWNf2Y1MPYSsthLcyxRTflI0TorY=)
6: YUvNuDDndHcf-AWuGGf2zqBhFIE.roa (hash: 7DuazkLVNE3f7cMkbQDSXftJtVier8QCOPrebbq+iTo=)
7: kMXVbz2TuORvoHZ7UfuE6YxZLcc.roa (hash: tU3JunGy9A12HYURdznAlTij6asn5+6G+/mvxmK09Xw=)
8: lHlRsL-Mq2IXLN_FCgk3n5SW5Ow.roa (hash: AUB+QIsy3NSsT4UqxQv/l15uvrlHGM0Y5Yne/M+wgrs=)
9: q5A4k1LuI-8fQrtHp3b5trdFPzQ.roa (hash: KFUng+vVrjLAjS4gi17nWldghXXi/irFXTH6lAnJMPU=)
10: stcR-lSqkJU2Cb-qmerN4K0gerA.roa (hash: VXZV1NgbHgfdGJFJNdfWgsLM9jnWqEunQBxug2Zcoyg=)
11: z-M8hA9YhJMehJj6l7J_V1Cf40s.roa (hash: 8tsU5K53aTtChU1kltfQFAvWJiRSonY1j+RJ+vsZrJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:98:c7:ed:5c:fa:2f:19:ca:47:91:fa:ca:cb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Validity
Not Before: Oct 11 13:01:13 2026 GMT
Not After : Oct 12 13:01:13 2026 GMT
Subject: CN=f1d7b8fc01ba12ffcbba058fe13f52b8fe786738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:4c:99:f9:7e:e8:d2:f3:0d:3f:46:12:90:
38:4a:37:40:00:90:4e:a9:cc:06:aa:0a:01:49:6d:
06:03:44:d4:cd:b7:89:34:fc:a3:47:93:b0:96:4b:
04:d5:07:ab:7c:13:f3:01:48:95:68:4c:0f:11:0e:
b6:64:6b:1e:f7:a4:ce:77:ad:a7:c1:fe:f1:11:ae:
b3:3c:11:18:94:82:53:1e:70:1a:02:73:44:36:55:
0a:39:76:24:72:14:01:18:6b:27:43:5e:e7:0a:86:
5e:30:cf:70:6a:af:27:b2:b1:e2:65:46:e3:11:f0:
51:b5:18:8b:cb:2a:0a:9d:f7:5c:fd:7a:19:41:fa:
58:bf:5a:5c:f0:98:e5:dd:ef:f8:3e:b4:f2:2a:c0:
a6:0b:41:d8:0d:cb:d7:ca:c8:1c:2b:9d:24:3f:aa:
72:ed:42:4b:76:36:af:ae:7e:d8:bf:ad:0f:c1:8f:
20:21:70:ed:8e:fd:34:28:f1:1c:6a:71:62:68:64:
b7:5f:81:fb:7c:86:f0:84:6f:aa:71:8a:71:9c:fa:
ae:fb:da:da:ff:ff:d4:9e:b8:93:47:46:cf:43:d2:
9a:e3:5b:42:cb:39:d7:18:0c:e2:16:ac:16:1e:e7:
73:27:de:15:08:96:d3:21:65:b7:f6:f5:d6:1e:bd:
7e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D7:B8:FC:01:BA:12:FF:CB:BA:05:8F:E1:3F:52:B8:FE:78:67:38
X509v3 Authority Key Identifier:
keyid:55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:12:2d:d5:d6:8b:11:ac:8d:8b:1a:39:18:de:37:4f:e1:4d:
df:8f:d5:5f:f9:48:3c:bb:95:8b:74:4e:53:fa:65:0b:cc:26:
b7:6a:a8:4f:2d:af:25:75:9b:29:13:97:fd:9a:ad:b8:a7:9f:
71:3d:07:c8:2b:48:ed:2f:2f:65:7d:e8:b0:4f:a4:aa:b3:c3:
4f:1c:4d:f1:7b:7c:b1:8b:8e:33:f1:ec:51:a6:9e:40:ee:2e:
e6:73:ff:8a:0e:e3:69:13:a1:f9:14:01:e0:b3:18:89:3c:0f:
7b:f8:5c:f6:ab:fa:d9:23:07:a2:4f:4a:1c:0a:ab:40:c7:f2:
f5:8c:12:31:db:85:ec:68:44:d0:fa:bf:c4:7d:5c:f8:3b:21:
1d:f5:e3:2e:79:8b:90:1d:fc:05:3b:02:a1:fe:54:05:fc:ff:
b7:38:99:e4:5c:b4:b4:99:a6:3b:01:0e:70:0d:c8:52:e4:38:
62:af:ee:6d:97:33:ec:aa:cf:96:40:8d:7d:73:8d:b2:ea:63:
2f:e2:97:c2:e9:8e:7c:72:33:6f:48:e9:a1:43:85:5a:49:4e:
cd:ab:b3:eb:65:df:8d:e0:43:16:4f:d2:62:96:3f:03:68:99:
b7:ff:8b:97:52:31:e7:e2:e7:17:4a:41:4e:0f:73:42:51:ab:
a9:af:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:52:25 2026 by rpki-client