$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: c7O2pyWtcwX1sP69vlmBsxEHVvBci29xxLiPAJlbNzg= Subject key identifier: 65:F2:02:BB:94:1C:53:6F:E0:4F:61:30:B6:E9:7F:4E:5C:D6:6B:BD Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019D29296EE67B5233E13CAD5D327AF39675 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 1597 Signing time: Thu 26 Mar 2026 08:01:14 +0000 Manifest this update: Thu 26 Mar 2026 08:01:14 +0000 Manifest next update: Fri 27 Mar 2026 08:01:14 +0000 Files and hashes: 1: 0kY6OhYo0S_p-TBiI-10NgXfoNY.roa (hash: iP04yPh9hD6VA4QlzUY//5ykcFDzpWeK08TGnMp/HjE=) 2: 1-Be0qYmJvYKBUxk0IWyWJ9tviM0.roa (hash: tc+kUBwm2r2jABu8hBV/usYgfuja/aedEg4A7BKntHA=) 3: 1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa (hash: XKv+d2a7iEMY8sWanXfCdCcSCUwEPvHDN059QvO18Cw=) 4: 2C-X2uadj7WRXm8t5tJaxHqVG08.roa (hash: gQBfeyRFTlWRJ0NIJIiAdSoSCyYg2yZW/gURVO4/TQE=) 5: ILMdvMW_ucbbRxIWVM1lnkFSdus.roa (hash: u/PCttKjeIAvbeBnImGYH+I587LQsMk+S6mJXKbyOpQ=) 6: OCaG69L4oGw_KiLZLKBePPSp7CE.roa (hash: vtJ6sg+cCvGmbdxUocxZh93rGJH1rOZrPXnfYKxcVyQ=) 7: R5tQPzZZIZkEHxABLHLrU7SFsrM.roa (hash: lKQiJli3qPxi+zmIfwUnOVyI/PWON56dIb4pJxeLxAM=) 8: SSB8nChvF9M5SEjUm0HbeOBN31I.roa (hash: WGAc9tKQkiqsemqW1u4qV4GbNPs9MVItouZPC6JW3X8=) 9: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: tHHtYVwDfNBszFxm4KuJ9VosTUvumioCsklEs1MRSO0=) 10: w2-qYaghmoafRduGM784BXKEDOc.roa (hash: hsq/kaLWVFBw1VLdikb24btA8t/Mb4PbJLUevEVWF+U=) 11: yOnpLpdVWl0jXoYFDk87GuN8z4k.roa (hash: cwz0V2O5OmYd3M4lJ6axTmY7I9UVlCXySVV3pV4gm0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:29:6e:e6:7b:52:33:e1:3c:ad:5d:32:7a:f3:96:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Mar 26 08:01:14 2026 GMT Not After : Mar 27 08:01:14 2026 GMT Subject: CN=65f202bb941c536fe04f6130b6e97f4e5cd66bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:00:0c:35:54:8c:8b:e5:6e:1f:6a:f6:50:fc: 60:44:07:69:af:8a:61:2f:2b:5a:f9:32:6d:bd:42: 0b:18:a4:ea:9c:46:c2:6e:d6:35:49:b4:c7:62:80: f7:a2:c9:3b:f5:7e:84:01:48:5d:3d:22:b5:f0:a3: 4b:dc:4a:80:79:cd:4d:4e:3b:c6:12:19:68:50:a8: 33:78:bd:c3:3f:d8:f1:fd:f5:41:6d:33:8d:08:09: ee:0f:34:7e:c8:85:2d:af:45:af:79:50:ab:3a:3b: 0f:02:65:e1:ae:44:93:49:55:cf:ba:2d:2e:9d:5e: 8a:56:8d:ad:ac:dd:81:bb:9e:6b:97:a6:3d:a5:e1: 8e:91:07:4a:6f:f4:cb:b5:52:6f:7c:ea:66:84:1d: 75:88:79:5d:73:fa:5a:3f:34:de:18:6b:4f:8b:d4: 5d:42:97:7b:36:bf:b8:75:57:38:dc:77:55:d4:89: f8:2b:f8:e4:cd:82:77:d6:ca:d6:5f:53:85:b0:9c: 4d:a5:36:40:5f:63:73:7b:f8:2a:77:13:5e:61:ef: 7f:20:62:56:94:94:89:f9:e5:45:d0:7f:cf:5c:43: d2:6f:d6:b9:73:a6:bd:e1:47:5d:bf:b2:53:8b:d6: 09:40:db:ce:d4:26:24:d8:7a:cc:0c:1c:27:db:d9: 49:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F2:02:BB:94:1C:53:6F:E0:4F:61:30:B6:E9:7F:4E:5C:D6:6B:BD X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ff:c3:61:d8:01:60:7c:37:bb:e4:58:52:83:46:f1:68:c4: 8d:22:a2:07:60:fc:1d:57:7e:04:9b:0d:7b:6a:08:50:36:08: ac:37:82:0c:12:62:37:42:e9:a7:e4:dc:d3:d9:56:cb:0f:eb: 82:2b:04:bd:2e:00:08:a5:d9:7f:83:ae:38:37:12:8f:d8:7e: 41:6c:d8:48:d3:28:d2:93:ff:bb:50:13:e1:f9:4b:5a:cc:31: ee:f1:6d:3c:8c:cb:73:8d:d3:ee:4a:50:c3:85:49:22:ee:50: 1c:0c:9e:79:1d:55:c3:83:31:20:cd:5c:64:0b:49:4f:63:ff: 30:90:10:b8:fe:d2:69:3e:11:c5:e3:ce:0f:5c:5d:fb:90:08: 5c:2b:05:8c:05:0d:2f:87:82:2d:ad:ee:dd:6d:69:f0:34:30: ba:6f:c0:55:c5:11:70:50:91:ae:f6:53:84:6b:d0:0d:3a:84: 42:55:44:47:21:2c:f8:89:a6:e9:8e:44:d5:57:10:5e:98:b2: 61:39:7f:fc:66:c2:5b:c2:2a:23:06:e9:7d:57:77:cb:1f:5a: 9e:0a:e0:0d:31:81:22:09:f8:f9:77:fd:74:60:48:51:ee:91: a8:3d:5b:aa:87:7c:00:1a:13:ef:16:0a:03:4f:51:32:65:e6: a0:e1:bc:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pKW7me1Iz4TytXTJ685Z1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYwMzI2MDgwMTE0WhcNMjYwMzI3MDgwMTE0WjAzMTEwLwYDVQQD Eyg2NWYyMDJiYjk0MWM1MzZmZTA0ZjYxMzBiNmU5N2Y0ZTVjZDY2YmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wAMNVSMi+VuH2r2UPxgRAdpr4ph Lyta+TJtvUILGKTqnEbCbtY1SbTHYoD3osk79X6EAUhdPSK18KNL3EqAec1NTjvG EhloUKgzeL3DP9jx/fVBbTONCAnuDzR+yIUtr0WveVCrOjsPAmXhrkSTSVXPui0u nV6KVo2trN2Bu55rl6Y9peGOkQdKb/TLtVJvfOpmhB11iHldc/paPzTeGGtPi9Rd Qpd7Nr+4dVc43HdV1In4K/jkzYJ31srWX1OFsJxNpTZAX2Nze/gqdxNeYe9/IGJW lJSJ+eVF0H/PXEPSb9a5c6a94Uddv7JTi9YJQNvO1CYk2HrMDBwn29lJiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXyAruUHFNv4E9hMLbpf05c1mu9MB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEP/DYdgB YHw3u+RYUoNG8WjEjSKiB2D8HVd+BJsNe2oIUDYIrDeCDBJiN0Lpp+Tc09lWyw/r gisEvS4ACKXZf4OuODcSj9h+QWzYSNMo0pP/u1AT4flLWswx7vFtPIzLc43T7kpQ w4VJIu5QHAyeeR1Vw4MxIM1cZAtJT2P/MJAQuP7SaT4RxePOD1xd+5AIXCsFjAUN L4eCLa3u3W1p8DQwum/AVcURcFCRrvZThGvQDTqEQlVERyEs+Imm6Y5E1VcQXpiy YTl//GbCW8IqIwbpfVd3yx9angrgDTGBIgn4+Xf9dGBIUe6RqD1bqod8ABoT7xYK A09RMmXmoOG8gw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:22:17 2026 by rpki-client