
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json)
Hash identifier: W7NVh02YceWOHvaFzv6EsxzEejRd3ialQ+sWXF2F+o0=
Subject key identifier: 6E:62:23:7E:00:C6:31:43:28:29:EE:74:24:AB:D6:31:B1:97:BE:E1
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 019CE7EDFF9883FC173FABA1D39336D59793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
Manifest number: 1885
Signing time: Fri 13 Mar 2026 16:01:00 +0000
Manifest this update: Fri 13 Mar 2026 16:01:00 +0000
Manifest next update: Sat 14 Mar 2026 16:01:00 +0000
Files and hashes: 1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=)
2: 5HiWtdiMDRvE8rxME8_xEHMCzGw.roa (hash: HisInbhChhY7fllPKG+tBbS3r60RVlsIX8CdzEhJYUE=)
3: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=)
4: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=)
5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=)
6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=)
7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=)
8: S7aKv_q0tDa7opJxCQ6myrERZA8.roa (hash: Uo1iMGWEBLYQiw+xllR1axWHCCwJA31+dccJblnLXsY=)
9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=)
10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=)
11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=)
12: qDeqVRkxmdQmoY2NbjKeuMvHwtQ.roa (hash: JI4522GeiiIyvm7uoDp7NTOtjzf8W/IuXd/allrDXz4=)
13: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=)
14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: tL7EVlI7WHxciFH0eenviWFyrcenHnitW0dTx39LL4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:ed:ff:98:83:fc:17:3f:ab:a1:d3:93:36:d5:97:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Mar 13 16:01:00 2026 GMT
Not After : Mar 14 16:01:00 2026 GMT
Subject: CN=6e62237e00c631432829ee7424abd631b197bee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:4e:1e:dd:ca:76:79:7a:83:57:11:7e:da:
9c:ea:a6:7f:ec:e5:5e:0e:8f:b4:1d:04:19:86:56:
64:c5:ed:0e:e6:ba:49:ec:cc:b0:b3:14:1f:1f:b8:
9c:6a:a4:81:de:8a:4f:88:bb:89:ed:e9:cb:68:a2:
cd:1f:26:8b:be:8e:00:f8:e2:b4:cd:cd:6a:ce:44:
3d:a3:b3:95:ad:7a:0e:48:01:58:05:01:2f:f4:55:
4e:94:c6:c3:03:21:fd:bb:30:42:97:e3:b7:31:29:
f3:00:70:d8:51:96:4d:dd:b2:d7:06:68:21:6f:72:
f5:bf:74:ca:be:96:91:7a:43:f8:fe:04:95:ee:b1:
a3:58:44:12:23:2e:8f:e9:ea:97:94:5a:24:e0:e6:
92:dd:8e:97:24:76:b1:4f:48:5e:8b:69:48:5b:9e:
2d:de:6f:d7:a8:2b:f7:23:82:76:1a:51:9f:68:6e:
b4:a9:b2:14:69:1e:e5:56:02:60:77:c7:74:98:d8:
f2:24:99:33:d8:5c:14:08:b5:07:70:7d:4e:e3:39:
0a:7b:ce:af:da:43:78:c6:68:07:53:6b:c3:bb:c7:
a7:18:7e:51:59:65:1d:57:69:4d:8f:45:1c:b7:ff:
af:8e:bb:22:bf:85:ee:f6:41:e8:a2:b6:10:0a:3f:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:62:23:7E:00:C6:31:43:28:29:EE:74:24:AB:D6:31:B1:97:BE:E1
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8c:f2:79:a0:b9:a5:cf:7e:9c:d2:29:b2:8f:8a:3c:3f:13:
04:5b:c7:2b:64:c7:1f:20:3b:f7:8f:56:41:18:1b:5b:ba:7e:
13:4d:bd:b1:62:12:57:69:80:6b:07:aa:10:d6:bc:c6:f4:15:
d3:23:a5:7e:79:11:b3:29:f2:01:cb:be:a2:56:30:5e:55:7d:
03:bc:1e:80:bb:cf:61:8b:92:51:e5:16:47:30:24:1d:07:cd:
9c:78:11:3c:15:c4:a9:64:b6:65:67:c2:46:29:ed:c0:38:6c:
3a:02:87:f4:99:a5:95:d5:3c:80:a0:ce:81:e9:fa:f9:22:91:
2f:8f:ee:d6:d4:32:1b:87:3a:9b:e9:1a:af:c6:97:53:fa:48:
96:be:a2:00:b1:94:73:8d:25:68:92:96:30:10:29:29:4a:9c:
0f:51:a7:bb:c3:b7:7d:d9:ea:8e:6c:7d:8f:39:65:1c:38:58:
18:22:f7:7a:13:b6:0d:7d:93:76:30:34:f7:31:3a:88:e0:9c:
b3:cf:10:c0:3f:cd:af:1f:e2:a1:80:13:5b:08:a5:2a:fe:db:
be:64:aa:f8:e5:0a:74:25:0b:47:a2:9c:01:07:94:aa:e4:a1:
07:b1:e6:ce:0e:82:62:50:36:85:fe:d5:08:8d:ee:3e:ca:22:
05:5a:ec:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:13:29 2026 by rpki-client