
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json)
Hash identifier: gXfOOwgi489aWvzlLjZfcsS2s0hiCzXmA55kDamU91I=
Subject key identifier: FF:AB:43:F0:9D:90:D4:DB:63:D2:00:E4:A5:19:1B:3B:FC:D1:17:B0
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 019F837AC3E1A6B25B3530C2F688DAC4A5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
Manifest number: 1746
Signing time: Tue 21 Jul 2026 07:01:28 +0000
Manifest this update: Tue 21 Jul 2026 07:01:28 +0000
Manifest next update: Wed 22 Jul 2026 07:01:28 +0000
Files and hashes: 1: 1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa (hash: Ddu3dw5E5cMsctwBaCnCHBJl5vVM/XMeaSx8/U1wJfs=)
2: 1B2E5LozjiOiEEIVllZwGOlUoUc.roa (hash: DtZRGHhFLQ8RyYzUJ9AqMoeV1gGyFtUW3kQz1Kw7pNc=)
3: 1h3O8l_TW_Pt04UkNDvHQykjzBo.roa (hash: YPYjSO8A3RKdjeZ4kpCNyf7+uhxWq8m+nhKrC4aIRXo=)
4: 40ahziHyLtQx_pyEk0bHk67E8fw.roa (hash: rWZqu675dNYqvBqcBL0jVKw3VJWQVGQYGPhVN2Iiit0=)
5: 4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa (hash: X8RR+0PaypDLpsEOWttv6W/dtoMpGTgNbkp3JkclUF8=)
6: BBHTjw15NAF2rxWNcQdysv45Lss.roa (hash: Lous+sIenMIAO4lBR3nlDw+F0FCln0Ka+oVIfjt59kM=)
7: IQvdujgainvo4C34zkOLdjKY5vg.roa (hash: w17Fv3nrN5mdxpMpocz8vqnCEddTCZeK1yywJC7rkAQ=)
8: KPzLPauPpQiWYae418r6m1gMbQ8.roa (hash: bMOA8c/Peua3MiHOsLdKNKZDG/6LBfAeWjPvZ8O4vDE=)
9: PhXZiIOr7piIHYlDtgFb-SE3XFc.roa (hash: kQ6KIuUu9lWGspD3sgkP3G1eQcAyvbDdP58M3rp8Fes=)
10: REtMs1U8A3vNupGfA8YHkLMBg20.roa (hash: 8cbxOjQg2znipTCYsgxq7I7rjGz0FDOmTb0bqODGJZQ=)
11: RgpyMW5WLsoOZ7X6sjR7zZpkUiw.roa (hash: 9bAWFuzWHv7cpnjzkHad1zJjL6nxP74Kh6dQAZysh0A=)
12: XIVBNcTJBnkT90tLXiCswsUi9O0.roa (hash: PPElf6bVEODRo+3cgHN5ArR3uE+ZQHhLBOE/ConPN30=)
13: Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa (hash: 13k76cemt6Sf92ZNBW6R6RxtUCROzQCLop1b+iGGSUQ=)
14: bLty7x4_bp6bJO68Cul62fRMxlU.roa (hash: kYiMfI9JDPevUGPZ1zVTj//0LProZnsEPqeHJe8gbiQ=)
15: c1of_GGOGBpj8gjfCUC0AsJuKNg.roa (hash: f3erzVhNqOm3b2k4MQozf9a0YdwKNFSjx0Hb4KbZctc=)
16: d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa (hash: ybFlHwrk0/bn9A8GTyAQQ72jsrneQsxgrXLeXX2L7mc=)
17: dCqQVizHmCbsgLcX6csX7Rciuic.roa (hash: sDGzeBpaeg3YAhNrnUWPuM/ODk832tRUJ5O2TTkUfds=)
18: jFvJZaHKv8QwoukYCAhIunEqd4s.roa (hash: V1rH1de0PVsmx11Wg5/gIdXxuPL9QGcnJzJNtJ/w8PU=)
19: rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa (hash: iB8AOxEYfvNU1/L6TivJBk9QHQFdeq4cJO6UXX1sPUM=)
20: s4XhO3zd68odlYNKfOcr66qKpYo.roa (hash: lGF4r2lhB2RKS4kFkLqdXXo14Ag7CA/0NH/w4b5IOWU=)
21: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: ESeaJ3uHXz4vtl9JbUDJ4/cq9EQWiD+gTBHSAfZT+k0=)
22: yBju9251opQb0e4SsoLoTlY7kVM.roa (hash: eQSRE9eUeTSXYWB/iKLZnX5m98d5OnEnkEhe2IV+YaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:7a:c3:e1:a6:b2:5b:35:30:c2:f6:88:da:c4:a5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jul 21 07:01:28 2026 GMT
Not After : Jul 22 07:01:28 2026 GMT
Subject: CN=ffab43f09d90d4db63d200e4a5191b3bfcd117b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:5d:ab:5a:92:4b:67:ce:b5:c0:f3:fd:25:
aa:2b:f3:29:1f:2e:ac:8c:55:34:f1:a8:99:5f:fb:
59:69:df:7b:a1:9c:37:58:9c:0a:7f:31:05:d5:36:
ba:51:0c:b3:93:d2:35:f9:44:a6:9d:5a:65:94:6f:
47:51:c4:d9:57:28:dc:e1:7d:a8:ed:55:46:27:61:
88:68:bc:7d:c3:67:e5:68:22:2d:b3:42:b7:15:96:
a6:6e:4f:13:10:39:cc:11:27:10:dd:bd:6a:f6:61:
e4:5b:79:6c:1a:b3:24:5f:85:db:05:50:14:a0:48:
68:46:22:0e:0b:50:aa:82:90:19:3b:f2:bf:ab:25:
a2:49:d5:ce:be:46:94:4e:9e:6a:a6:00:8c:05:78:
b2:d5:7a:ad:fa:a7:dc:6d:f9:68:69:1f:43:9b:e8:
fc:81:d4:1c:32:fc:59:27:c3:11:5f:4f:59:3e:a7:
d7:61:32:75:3b:f4:c7:9a:da:31:75:d7:6c:81:ac:
40:91:fc:f6:1f:e3:a2:8b:28:53:73:08:ab:d2:c0:
1e:91:b6:c5:91:ec:eb:ea:11:31:ee:e5:a8:f0:bd:
98:e1:ed:e0:61:dd:11:8a:bf:7e:59:17:2b:06:4f:
40:97:21:99:58:a8:42:d8:ea:1e:28:fc:47:34:4c:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AB:43:F0:9D:90:D4:DB:63:D2:00:E4:A5:19:1B:3B:FC:D1:17:B0
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f5:77:88:ad:11:03:9a:af:bb:56:12:49:ae:55:e4:72:4a:
79:80:a8:08:68:18:46:31:7f:76:01:41:f9:56:72:ae:f1:f3:
a5:68:f7:dc:67:32:7c:1d:a3:22:f4:59:29:4a:d0:fc:c7:95:
03:a5:08:90:2d:8d:e9:df:c1:1f:58:51:bf:38:e9:9c:2a:09:
44:f9:72:bc:f5:f5:54:c0:94:1d:f4:b1:fa:89:f2:67:80:93:
27:ec:25:03:58:f9:36:83:1f:59:f9:ac:cd:a9:9a:d5:b7:a6:
52:6e:e5:5b:3a:a9:b5:7d:e3:fd:bb:30:6a:20:2b:b0:55:03:
1a:33:55:ed:c6:86:2a:0b:f0:c4:61:af:e8:55:ff:bf:7a:84:
74:f7:0c:8b:c3:82:b7:12:e6:50:c3:b0:04:80:6c:56:44:07:
d9:08:00:8b:52:12:48:bc:db:23:b4:17:42:13:7a:31:b1:37:
ab:5f:59:c5:93:38:f8:78:f8:b0:85:b7:19:26:4d:91:cc:98:
61:0a:23:c8:25:38:7b:81:38:50:c2:11:0e:05:36:f5:4c:6d:
04:03:0d:ed:22:36:e9:71:f3:f6:b7:d2:9d:ea:aa:01:32:13:
73:3c:ba:9e:be:75:7a:71:fe:6d:f2:18:00:c7:5d:37:ec:be:
34:d5:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:55:11 2026 by rpki-client