$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: sL6nhi1Q6Itd0kblojKsFg4IseOP3Jl6/az3Sc6dryA= Subject key identifier: 6A:4C:D4:7E:1A:1F:D8:9A:2B:76:95:74:15:3F:42:31:71:78:73:73 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 01A0D983AFCC62AE15A738D5F34CFDB6DF26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 1780 Signing time: Fri 25 Sep 2026 17:01:21 +0000 Manifest this update: Fri 25 Sep 2026 17:01:21 +0000 Manifest next update: Sat 26 Sep 2026 17:01:21 +0000 Files and hashes: 1: 0kY6OhYo0S_p-TBiI-10NgXfoNY.roa (hash: iP04yPh9hD6VA4QlzUY//5ykcFDzpWeK08TGnMp/HjE=) 2: 1-Be0qYmJvYKBUxk0IWyWJ9tviM0.roa (hash: tc+kUBwm2r2jABu8hBV/usYgfuja/aedEg4A7BKntHA=) 3: 1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa (hash: XKv+d2a7iEMY8sWanXfCdCcSCUwEPvHDN059QvO18Cw=) 4: 2C-X2uadj7WRXm8t5tJaxHqVG08.roa (hash: gQBfeyRFTlWRJ0NIJIiAdSoSCyYg2yZW/gURVO4/TQE=) 5: ILMdvMW_ucbbRxIWVM1lnkFSdus.roa (hash: u/PCttKjeIAvbeBnImGYH+I587LQsMk+S6mJXKbyOpQ=) 6: OCaG69L4oGw_KiLZLKBePPSp7CE.roa (hash: vtJ6sg+cCvGmbdxUocxZh93rGJH1rOZrPXnfYKxcVyQ=) 7: R5tQPzZZIZkEHxABLHLrU7SFsrM.roa (hash: lKQiJli3qPxi+zmIfwUnOVyI/PWON56dIb4pJxeLxAM=) 8: SSB8nChvF9M5SEjUm0HbeOBN31I.roa (hash: WGAc9tKQkiqsemqW1u4qV4GbNPs9MVItouZPC6JW3X8=) 9: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: PF40G1UC4LMZdbYAwj/Jy2YeznpAIp0ozMcGkF7X2Gc=) 10: w2-qYaghmoafRduGM784BXKEDOc.roa (hash: hsq/kaLWVFBw1VLdikb24btA8t/Mb4PbJLUevEVWF+U=) 11: yOnpLpdVWl0jXoYFDk87GuN8z4k.roa (hash: cwz0V2O5OmYd3M4lJ6axTmY7I9UVlCXySVV3pV4gm0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d9:83:af:cc:62:ae:15:a7:38:d5:f3:4c:fd:b6:df:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Sep 25 17:01:21 2026 GMT Not After : Sep 26 17:01:21 2026 GMT Subject: CN=6a4cd47e1a1fd89a2b769574153f423171787373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:55:03:44:63:38:42:b8:f7:79:a9:1d:de: b5:1b:82:69:30:24:6d:59:23:4d:a2:a3:6c:60:ca: de:11:ae:53:fa:e1:e2:16:ac:7a:1b:40:ba:70:8e: 11:32:2f:65:ec:ab:23:38:73:5b:7b:ac:e2:40:5e: ba:70:a0:24:be:c7:80:36:4a:10:03:2a:4b:d7:ec: 9c:c9:1c:94:b9:73:c0:8a:db:5e:8a:05:42:40:4c: 32:5a:39:e1:73:4f:75:3f:45:51:17:99:16:4a:47: 34:9b:ce:4e:45:7c:d4:4f:c2:6a:77:06:96:b1:83: 4f:db:e8:69:00:54:67:29:23:4e:9b:07:93:4c:d1: 4f:07:99:3c:e2:38:39:c1:b5:13:13:a1:10:7b:69: c5:72:56:85:24:1c:8f:f1:d1:a5:2a:f4:37:8c:6a: 44:8f:d3:7d:9b:12:ff:d6:d2:e6:6c:38:f8:91:e2: e9:4a:1a:22:d9:d8:2f:67:3c:c2:9a:aa:07:96:33: 4e:8f:50:2d:af:7a:c3:89:9c:13:c3:2f:00:48:36: b1:81:a5:f8:dd:15:55:8b:8f:fb:c9:5b:87:10:15: 66:b5:b2:a8:5e:f7:81:54:84:19:be:70:f0:8b:05: e9:dd:fe:ce:09:61:d5:ca:f8:05:68:d9:65:72:ea: ba:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4C:D4:7E:1A:1F:D8:9A:2B:76:95:74:15:3F:42:31:71:78:73:73 X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:de:ec:e0:d6:90:73:56:c4:e0:ce:9e:11:b1:2a:6d:ef:c3: c8:ef:c6:21:73:69:4d:b4:a6:20:9c:85:dc:8f:5d:83:79:97: 1c:59:c1:4c:13:a5:c6:7b:cb:be:72:38:c2:17:b3:fc:19:03: be:61:b3:66:06:25:15:2d:98:40:87:19:82:2e:c8:2d:c0:86: 36:de:f3:fa:25:4f:fa:b4:3c:30:09:1e:46:c7:42:bd:7b:af: 38:46:69:b3:fb:21:ee:66:db:73:42:20:3b:b7:ee:d9:b5:74: 78:6c:46:ef:89:8d:47:1f:ba:9a:4c:2d:dc:87:f2:5a:ca:2c: 7b:6a:87:69:99:04:27:60:ce:6d:13:23:1c:e8:77:8e:08:b2: 51:fa:3f:0e:38:f1:72:c7:9b:94:d5:81:91:97:fd:59:44:3e: 46:b9:31:a3:34:a9:06:20:44:d7:17:cf:c2:55:26:25:25:ab: ec:56:3b:3e:ee:a3:1a:d7:99:fd:7a:7d:98:32:09:e7:35:92: 4d:14:22:d1:d5:4e:a8:6f:d1:25:7c:2f:d6:fb:3a:04:1e:13: a8:df:7d:22:8a:b2:ce:4a:5e:90:f9:b9:38:24:1a:22:76:66: 84:b3:f1:9b:4f:5b:3c:d2:ee:89:46:e3:70:8d:97:e1:cf:2f: 17:9b:b7:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDZg6/MYq4VpzjV80z9tt8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYwOTI1MTcwMTIxWhcNMjYwOTI2MTcwMTIxWjAzMTEwLwYDVQQD Eyg2YTRjZDQ3ZTFhMWZkODlhMmI3Njk1NzQxNTNmNDIzMTcxNzg3MzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/JVA0RjOEK493mpHd61G4JpMCRt WSNNoqNsYMreEa5T+uHiFqx6G0C6cI4RMi9l7KsjOHNbe6ziQF66cKAkvseANkoQ AypL1+ycyRyUuXPAitteigVCQEwyWjnhc091P0VRF5kWSkc0m85ORXzUT8JqdwaW sYNP2+hpAFRnKSNOmweTTNFPB5k84jg5wbUTE6EQe2nFclaFJByP8dGlKvQ3jGpE j9N9mxL/1tLmbDj4keLpShoi2dgvZzzCmqoHljNOj1Atr3rDiZwTwy8ASDaxgaX4 3RVVi4/7yVuHEBVmtbKoXveBVIQZvnDwiwXp3f7OCWHVyvgFaNllcuq6HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpM1H4aH9iaK3aVdBU/QjFxeHNzMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed7s4NaQ c1bE4M6eEbEqbe/DyO/GIXNpTbSmIJyF3I9dg3mXHFnBTBOlxnvLvnI4whez/BkD vmGzZgYlFS2YQIcZgi7ILcCGNt7z+iVP+rQ8MAkeRsdCvXuvOEZps/sh7mbbc0Ig O7fu2bV0eGxG74mNRx+6mkwt3IfyWsose2qHaZkEJ2DObRMjHOh3jgiyUfo/Djjx cseblNWBkZf9WUQ+RrkxozSpBiBE1xfPwlUmJSWr7FY7Pu6jGteZ/Xp9mDIJ5zWS TRQi0dVOqG/RJXwv1vs6BB4TqN99IoqyzkpekPm5OCQaInZmhLPxm09bPNLuiUbj cI2X4c8vF5u3HQ== -----END CERTIFICATE-----Generated at Sat Sep 26 04:04:57 2026 by rpki-client