
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier: U5oaccCFL95sUvHZ+frv2DFrh2A8RPgKl+WmowTNtuA=
Subject key identifier: 61:87:6A:F5:F9:0F:47:06:CE:6D:06:B0:CE:AC:6B:5D:7B:55:70:96
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 019E60F11B4A8BE859FF1B7093B6B6518525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number: 0F0C
Signing time: Mon 25 May 2026 21:01:14 +0000
Manifest this update: Mon 25 May 2026 21:01:14 +0000
Manifest next update: Tue 26 May 2026 21:01:14 +0000
Files and hashes: 1: 0ZgQJqVgdfnRZDVgpPvaD-Dzv6E.roa (hash: r5fe+/Due4NZC1alMzrb0UAbeRWncZoeXVNrq7sfX6I=)
2: 0szAMahK1oQnINJK81wlTT6Btig.roa (hash: SZ/iPl1/uEv70XbCNZiszMUzRfgvtHmx/hWYhWGapmo=)
3: 1BYbQVIuZci3v2SJ1lPBRcKopC0.roa (hash: 4k0iveKSc7qYV/Hrii5KFzItmAd9JCdByjYJZZltOTg=)
4: 6V0B2XbUiwZg1uwyso1jKVGrbd0.roa (hash: EhVsz4uU5vPtA18PjB+zS+ctkDe0JVsTRno6/EDARaw=)
5: GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa (hash: B73L31CSXnj3RW8bntsMgtTsreruLzDFUsANn6DFMPQ=)
6: IioJCPvNdNGLMAa_qgwnTe7OHHA.roa (hash: 6db291fyuLEJb9GA//u7Cn1OZhghcTilKR1drZ7PPM8=)
7: USAO41jbUP97p--JRu_ZqtNe5EI.roa (hash: LfdCpC2uNJXwWHbUHSlZAnK3PC0CH3cNb7AHvc9pYvs=)
8: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: miESkeAyuQgkTugML0UispS639hS5aLLe1shlxRxKzM=)
9: XR8VM1EvNL7sWYYKJOlMIsJdia0.roa (hash: fBss7mgIT+jvqqxAE/g6H97kqC0eCcZI1+zi2IjDIjw=)
10: kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa (hash: Lh3WoxdQyHUINKZzWX43jjRHwq3dN4GxIBUo7levdrc=)
11: zFeGQFAvAw6aATxlal8JSV3VnqA.roa (hash: 097ilzQL9LW0Bc1l2A3VV39iVVLt++EbcMo7JQEiFFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:60:f1:1b:4a:8b:e8:59:ff:1b:70:93:b6:b6:51:85:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: May 25 21:01:14 2026 GMT
Not After : May 26 21:01:14 2026 GMT
Subject: CN=61876af5f90f4706ce6d06b0ceac6b5d7b557096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:76:88:80:82:d2:81:f7:2d:65:a0:8f:2c:
4c:31:63:72:a3:f6:73:37:5b:9e:31:29:10:d3:56:
a7:d8:78:cc:22:09:74:cb:1e:b6:da:76:17:b8:91:
c5:47:71:84:24:d5:15:9b:36:4c:51:37:4a:9c:1c:
5d:cf:e9:45:f0:15:75:bf:25:81:74:62:0a:59:85:
3d:4b:b2:70:3c:55:cc:19:78:21:d0:56:1f:33:a2:
90:ee:1a:b9:79:f8:1d:4c:12:fd:38:fd:90:05:16:
9c:80:2d:fa:64:f8:4a:f3:46:cb:07:8b:65:26:04:
ea:57:f4:bc:32:4b:74:28:32:4e:ca:a2:98:cf:45:
80:71:ce:2d:28:dd:d4:91:a2:3a:ff:af:59:31:45:
32:ca:63:c0:31:d4:5d:d7:9c:6d:ff:d1:be:95:86:
99:ea:41:a1:34:c4:62:ba:b8:29:2f:67:59:18:0b:
37:49:b3:29:93:fe:b5:5f:c4:98:ed:a8:05:4d:a2:
39:e0:2b:97:46:c9:3c:cf:4d:b4:b6:f3:53:86:a5:
b7:99:fe:28:db:71:19:4c:fa:86:4e:bb:65:22:0b:
45:c5:d3:d0:37:86:a0:68:87:f6:38:44:07:8c:76:
66:24:33:36:4b:20:d9:e2:79:c8:56:90:f8:1b:2e:
05:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:87:6A:F5:F9:0F:47:06:CE:6D:06:B0:CE:AC:6B:5D:7B:55:70:96
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:41:89:9c:ca:06:d2:22:66:13:d0:d3:52:86:38:29:8d:e5:
cc:8b:0e:30:7c:c8:2d:6e:33:54:4b:2e:5c:da:9f:ff:db:00:
cf:43:0b:3e:ee:38:0e:07:19:97:e3:99:4c:4c:97:b8:b4:2e:
e9:d1:f1:f4:48:7a:a8:b7:f7:82:8e:f6:4c:47:f4:6b:cc:cc:
99:70:fc:38:6e:aa:d6:ef:8b:39:04:71:65:f6:f9:94:fa:b9:
e3:a6:88:b4:6b:2a:96:3e:37:e5:23:75:83:c4:52:bf:73:c1:
47:8b:bb:c9:08:b8:7b:4d:40:7d:f1:bd:72:e6:66:be:95:e7:
4b:1d:bd:6d:24:14:50:4a:c8:bc:be:8a:06:77:93:2b:5f:a5:
53:60:2f:fb:80:79:39:b6:31:5d:a0:20:db:d4:65:a5:8d:6c:
a8:c1:f7:0f:e0:25:94:f0:7a:33:39:d3:42:f5:50:76:6d:94:
71:c2:b8:be:df:02:b8:b3:b0:b8:f9:f6:a3:14:e5:04:64:30:
bc:5d:cb:3d:9b:e4:27:85:fb:95:d2:35:2a:92:3f:e1:6f:86:
1a:5e:c4:76:94:46:90:fc:47:4c:65:07:fc:fd:af:40:86:d3:
5e:99:7e:df:69:d2:7b:64:ba:aa:7e:89:b5:a6:72:27:9a:dc:
b7:ca:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 04:51:46 2026 by rpki-client