$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json) Hash identifier: 7u14cw58KEhAjT68zjWcAZRgfz1w9T2VyfPvo6NBBCw= Subject key identifier: 40:33:55:CA:91:E7:28:36:70:5E:8C:9D:C5:EA:CC:C8:AF:86:6A:F1 Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 019D25BA6E03048A086FFBFE7FB8DC793608 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft Manifest number: 0204 Signing time: Wed 25 Mar 2026 16:01:07 +0000 Manifest this update: Wed 25 Mar 2026 16:01:07 +0000 Manifest next update: Thu 26 Mar 2026 16:01:07 +0000 Files and hashes: 1: 043Lbp27EDcUm-b86hgRfQTIMxA.roa (hash: kfaT7xOA8Vvohn0rBNh/7C5Pf0XuWkbtD5lrheMBCvE=) 2: 3WBao4FkX8D-JaaDlye4M6OWSBY.roa (hash: 40SUb7nBHYC91lmOMmMea5ZkyB55LwXVNxfjfa4w1fQ=) 3: 5P-WAPyoM2pTC2hv8LQETP2oWJA.roa (hash: lGDaoNO2e4pY4T1TCUo7lQoxNs1+eOCSqWSzAv+esrc=) 4: 9pxQryKB7-OGwAXFhJkPHxMTQ7U.roa (hash: LaU9wAoPLEVyPbiNPfNuiL4UkPIf6M+Y7nzkcS2LF6A=) 5: AHXE5zE6Dibj4vBuyqtjH9izM0A.roa (hash: FuRo5Hu4yhUEnyMQZkyeyKvJXWvWU2jVjkpwh+ACVy4=) 6: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=) 7: OGdZxTPmloNqGIAa-UfynkuV3EM.roa (hash: m/cAPkjPkOHWq6QUdY18VpClF9YEIKI7RmQsvt84toU=) 8: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: zZRfXEx9ypbNQO7X++r/jdVFTR33Pxu7ginHWwgxXNw=) 9: hTjSrcovPq648FqPM_7hdgfN-EI.roa (hash: lYgMjkKMuEdbys29eJuErKr4659N+NA6qhwRfkiwEHE=) 10: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=) 11: yFq332nWFdiqD5k33xmPlYMI9Po.roa (hash: EtwbF3PSgqJjlOdjql8GO41noLHKBbeJXtlCFsZpbMg=) 12: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:6e:03:04:8a:08:6f:fb:fe:7f:b8:dc:79:36:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Mar 25 16:01:07 2026 GMT Not After : Mar 26 16:01:07 2026 GMT Subject: CN=403355ca91e72836705e8c9dc5eaccc8af866af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:17:b6:6f:82:ca:3b:db:1b:98:83:9b:12: f8:46:a7:c2:f6:9d:9b:bf:3d:07:33:65:30:5a:7b: 3d:f4:e2:d3:2d:7b:d5:36:e1:65:dd:94:03:00:20: 73:4c:ea:bd:b6:7c:42:c2:e0:f6:94:b6:50:4d:f6: ca:d2:73:49:e8:14:6a:38:60:c7:8a:48:1c:d6:36: f4:11:c1:14:a8:3d:f2:6b:a7:6f:af:5c:47:32:4c: 57:23:1d:ab:14:f9:da:3e:3b:56:06:b8:87:49:4f: 77:65:25:31:95:df:d6:ab:1d:9c:7e:9f:20:23:79: ea:3f:4d:1c:16:cb:eb:e8:88:be:ee:ae:e4:1b:49: eb:0f:f3:b3:ba:a4:49:f3:7d:59:d2:15:23:bd:64: 83:7b:a9:f1:af:ba:7f:94:ec:e9:14:2b:6e:8f:dc: 88:90:dd:eb:5f:a5:38:53:cd:35:c0:13:4e:c8:12: eb:55:b9:87:88:7f:bd:70:f1:b2:dc:71:09:0a:8a: fd:74:da:30:55:d1:b7:c4:27:e7:a4:84:b3:8b:80: a5:9f:bf:7c:c8:18:69:45:a9:df:bc:a4:3f:a1:58: a5:94:51:f4:84:5c:08:f6:bd:f2:a8:a2:3d:60:5d: 92:89:8c:81:74:74:8c:b1:45:78:da:8e:a0:c0:b3: ad:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:33:55:CA:91:E7:28:36:70:5E:8C:9D:C5:EA:CC:C8:AF:86:6A:F1 X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c2:8f:6b:c8:f0:b8:7a:d0:30:97:b7:01:59:61:12:9c:9a: 27:65:3a:8c:17:90:81:62:1f:a0:a8:67:94:d1:03:98:ca:67: 79:3b:31:18:19:80:22:04:9b:9d:13:b7:44:b2:b8:3b:fd:6c: 02:0e:5d:38:68:72:14:a3:f2:88:4a:c7:3e:ba:9e:48:5d:d1: a4:03:a3:e9:09:28:b8:dc:a9:d2:47:e2:5d:6e:e1:4f:3c:e4: 79:e1:61:8f:13:69:1d:7b:15:92:77:bb:6b:e8:f8:2f:4f:5e: 5c:f6:c8:db:84:33:c0:bf:b6:ff:a1:5f:06:44:c6:e3:08:53: 2e:bf:c8:6a:91:93:b3:ec:73:6e:c7:87:a5:ca:8f:ab:17:a1: 0e:30:75:49:4b:d6:b1:ca:6d:4b:38:99:9c:92:f7:79:39:86: 26:1e:c2:6e:af:ac:48:8e:ec:a7:a0:d7:ed:54:26:8d:5c:e1: 0a:5d:5f:50:12:66:1a:ac:6b:a7:db:b5:ee:27:c6:7e:8d:51: f7:37:d7:77:47:b3:c2:c0:be:5e:6e:0a:e1:80:de:62:67:f3: a1:46:7e:d5:a9:d8:c2:08:17:5e:9d:90:97:f9:d2:20:68:83: e2:78:08:37:10:30:f7:1a:73:b8:c5:c2:18:eb:9b:50:79:42: d2:08:5d:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lum4DBIoIb/v+f7jceTYIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjYwMzI1MTYwMTA3WhcNMjYwMzI2MTYwMTA3WjAzMTEwLwYDVQQD Eyg0MDMzNTVjYTkxZTcyODM2NzA1ZThjOWRjNWVhY2NjOGFmODY2YWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy4Xtm+CyjvbG5iDmxL4RqfC9p2b vz0HM2UwWns99OLTLXvVNuFl3ZQDACBzTOq9tnxCwuD2lLZQTfbK0nNJ6BRqOGDH ikgc1jb0EcEUqD3ya6dvr1xHMkxXIx2rFPnaPjtWBriHSU93ZSUxld/Wqx2cfp8g I3nqP00cFsvr6Ii+7q7kG0nrD/OzuqRJ831Z0hUjvWSDe6nxr7p/lOzpFCtuj9yI kN3rX6U4U801wBNOyBLrVbmHiH+9cPGy3HEJCor9dNowVdG3xCfnpISzi4Cln798 yBhpRanfvKQ/oVillFH0hFwI9r3yqKI9YF2SiYyBdHSMsUV42o6gwLOtYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAzVcqR5yg2cF6MncXqzMivhmrxMB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsKPa8jw uHrQMJe3AVlhEpyaJ2U6jBeQgWIfoKhnlNEDmMpneTsxGBmAIgSbnRO3RLK4O/1s Ag5dOGhyFKPyiErHPrqeSF3RpAOj6QkouNyp0kfiXW7hTzzkeeFhjxNpHXsVkne7 a+j4L09eXPbI24QzwL+2/6FfBkTG4whTLr/IapGTs+xzbseHpcqPqxehDjB1SUvW scptSziZnJL3eTmGJh7Cbq+sSI7sp6DX7VQmjVzhCl1fUBJmGqxrp9u17ifGfo1R 9zfXd0ezwsC+Xm4K4YDeYmfzoUZ+1anYwggXXp2Ql/nSIGiD4ngINxAw9xpzuMXC GOubUHlC0ghdhA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:22:13 2026 by rpki-client