$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: ENR7T2pTgoK+/OfBUcM2hK4IoWdcIu/SbB1g3krkHHE= Subject key identifier: 51:0E:F8:45:FF:F2:22:1C:3A:E9:21:EE:2E:BD:4A:86:63:AF:1F:28 Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019D277202A22D1FD0BC6B71180F7B658550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 0CDF Signing time: Thu 26 Mar 2026 00:01:16 +0000 Manifest this update: Thu 26 Mar 2026 00:01:16 +0000 Manifest next update: Fri 27 Mar 2026 00:01:16 +0000 Files and hashes: 1: 0bOZqErT7cPqtg8A6up5AuWvx0k.roa (hash: TLkmyalxkw5UtbYf/UBevHhaws4BaWA7DIMpjH0huR4=) 2: 0nKy3DcrJQbiUx0L11st8vPu4iU.roa (hash: p61zFKqkHY6u5BC22bvQD8WFNXvs2Yw1bGFGniYo/EE=) 3: BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa (hash: FSP05ciRv7cgg2ori440lYssEdhe7MklJbnbswJVXz8=) 4: C-Kmr5FT1ri-wqW_PoFuVOWIXaY.roa (hash: ERXgmbLSjJDQYHfslHu3SRPoPi7u4SxKIXUEFniHGbE=) 5: N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa (hash: sJ/b4s+wOONAASz+jNAdnE8FTPixklTn6DITWj2Oz+o=) 6: NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa (hash: tjAGBxyE9MUK6tIC8hGVGZt0+cyyEXn5+tt8NlkIgvY=) 7: ROFAtVDItt_EMagnNMRUK_8AFAo.roa (hash: 0/7Uq0DIP8W8M/AoQNG3rBHtAMug83v1CzVSyAShVQQ=) 8: SDv_Hv3j1zQYKdMKKJahi--bpbA.roa (hash: wiXpFtlqxh3vGK37wBoqcCvYsCDy5XPVC/ufdC7sY8c=) 9: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: qtxb6qpXa+Ud2c4ItMcvM4tBYJtrm82VDjFVkI63464=) 10: bbeNuCdJXqCYIUtyU2bTHnhe0pM.roa (hash: /lbmYbffftG0vT1jDvQWmIRNnGgrK51SKBZCKYo4Ly0=) 11: fCShZlzeyORIZqRpva0LWa9CXcY.roa (hash: Zw1W+vklKFKa/7FceWUPbOmP+yw3OCVtUAYFmYvIIHY=) 12: hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa (hash: P18VNSJRod1881sL7FyXf+LS0GoW/VI4U88shR2WTxY=) 13: iryj8oj2-V8BM-nhifn9xaWFT6k.roa (hash: J2c6WbxcvYg3n0i5rwopADF8nqS8/EkzKqjIvyGqKVg=) 14: kD9r2BSjKFazEYZ-CJU10Fned7o.roa (hash: uFgbV/8h9jMNryiWR5QfYdbYD5HwXj0XKBD49uDOBMI=) 15: nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa (hash: mBMzJHf7kRboGL+NsWlN+QzAIvKztq5wCERZ3i/DuXc=) 16: ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa (hash: O7M0cdecg0k5jJU4EYSgvz6r2GhJVnkR6Wsg7m7uOsk=) 17: yNGeTwwu6nvLd6pVRj1m7SWFsRI.roa (hash: DIGoHvjBhbh21gUmE9LE4Pi0LqvQbAY6Y2ak9deQj74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:02:a2:2d:1f:d0:bc:6b:71:18:0f:7b:65:85:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Mar 26 00:01:16 2026 GMT Not After : Mar 27 00:01:16 2026 GMT Subject: CN=510ef845fff2221c3ae921ee2ebd4a8663af1f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:2a:86:a9:1c:0f:6e:a9:55:91:74:86:9b: 27:87:c7:e7:f0:8e:e1:cf:3f:da:21:ee:45:bb:19: f1:86:9b:82:b1:fc:2c:d0:95:d5:38:77:b6:50:2b: b0:78:0f:c7:d7:51:3c:fe:9c:b4:17:ea:da:1e:34: 07:be:55:a5:7b:16:ca:3a:55:c4:1f:0e:60:69:5c: d4:95:5b:52:b8:6e:f8:96:73:37:29:16:e9:a3:0c: 82:1c:e7:1c:45:4b:6a:8a:98:67:f5:17:87:bb:f1: 96:11:64:20:9a:86:22:42:84:9e:58:c0:36:84:7c: 9b:40:b5:92:55:09:20:b0:13:b1:a7:ad:38:b4:9d: cf:97:ed:c8:73:91:c7:9b:dc:1c:5f:60:d9:55:aa: d7:32:cf:a3:20:92:8b:3d:56:88:88:c2:69:a8:3a: b6:8a:66:0a:49:da:24:4c:3a:fd:de:be:06:a2:8a: 71:65:9e:be:19:f4:f5:57:1e:57:09:73:91:df:9e: af:96:51:4e:37:33:d4:f0:d4:20:5c:9f:a3:6e:f6: d2:50:e0:cf:84:09:c3:3c:97:5c:75:74:1b:a4:92: ac:05:65:a5:77:3b:40:42:fc:11:d5:d6:51:33:70: ba:bd:f1:00:43:d5:6f:f1:aa:0c:00:0f:a7:9c:bf: 75:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0E:F8:45:FF:F2:22:1C:3A:E9:21:EE:2E:BD:4A:86:63:AF:1F:28 X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:94:ed:86:8e:a5:ee:c8:ce:57:66:59:1d:18:4b:cd:50:91: a9:19:b6:74:94:84:a6:1e:95:90:1c:99:f5:3d:60:60:19:26: 44:5a:c2:b2:a7:8b:fb:d9:ca:43:a7:e4:e8:5b:b5:b4:fd:a5: 25:6d:39:9f:64:f9:55:27:38:99:58:96:93:12:60:2d:aa:ba: 6f:1b:f6:8e:23:47:db:39:eb:4c:64:8f:ee:f3:e4:d4:c5:a5: e6:2a:a7:25:9f:7e:6a:3e:01:3b:a3:e9:5a:af:1a:5d:69:6a: f5:bb:08:60:03:f8:df:63:9f:35:21:9f:41:55:15:7f:ae:89: b4:b5:d1:55:b3:d9:2d:8f:ee:2c:38:18:fb:b3:93:3f:4a:59: b3:3b:22:13:af:06:67:83:41:0b:cd:5e:e9:c6:60:5a:32:32: 9b:09:0c:95:ee:ba:3b:61:12:98:b7:2d:cd:67:10:81:13:13: c9:36:06:d6:9b:58:52:7c:40:8c:4a:68:66:04:43:71:21:bb: aa:89:73:d6:46:3e:d4:43:09:3a:99:49:c1:9f:e9:88:2f:7c: 54:47:86:22:94:62:a4:cc:07:10:d1:af:b2:5f:c9:05:19:5f: ee:8a:ae:a7:0c:54:42:a8:86:1c:5c:cc:9f:92:5d:95:c2:f7: 63:e8:93:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncgKiLR/QvGtxGA97ZYVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjYwMzI2MDAwMTE2WhcNMjYwMzI3MDAwMTE2WjAzMTEwLwYDVQQD Eyg1MTBlZjg0NWZmZjIyMjFjM2FlOTIxZWUyZWJkNGE4NjYzYWYxZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD0qhqkcD26pVZF0hpsnh8fn8I7h zz/aIe5FuxnxhpuCsfws0JXVOHe2UCuweA/H11E8/py0F+raHjQHvlWlexbKOlXE Hw5gaVzUlVtSuG74lnM3KRbpowyCHOccRUtqiphn9ReHu/GWEWQgmoYiQoSeWMA2 hHybQLWSVQkgsBOxp604tJ3Pl+3Ic5HHm9wcX2DZVarXMs+jIJKLPVaIiMJpqDq2 imYKSdokTDr93r4GoopxZZ6+GfT1Vx5XCXOR356vllFONzPU8NQgXJ+jbvbSUODP hAnDPJdcdXQbpJKsBWWldztAQvwR1dZRM3C6vfEAQ9Vv8aoMAA+nnL91xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEO+EX/8iIcOukh7i69SoZjrx8oMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJTtho6l 7sjOV2ZZHRhLzVCRqRm2dJSEph6VkByZ9T1gYBkmRFrCsqeL+9nKQ6fk6Fu1tP2l JW05n2T5VSc4mViWkxJgLaq6bxv2jiNH2znrTGSP7vPk1MWl5iqnJZ9+aj4BO6Pp Wq8aXWlq9bsIYAP432OfNSGfQVUVf66JtLXRVbPZLY/uLDgY+7OTP0pZszsiE68G Z4NBC81e6cZgWjIymwkMle66O2ESmLctzWcQgRMTyTYG1ptYUnxAjEpoZgRDcSG7 qolz1kY+1EMJOplJwZ/piC98VEeGIpRipMwHENGvsl/JBRlf7oqupwxUQqiGHFzM n5JdlcL3Y+iTYw== -----END CERTIFICATE-----Generated at Thu Mar 26 03:41:59 2026 by rpki-client