$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: ejfx1cmeowS3PvwFfNF4hSUcu9Ejgfj3BL8Tb3K4oKI= Subject key identifier: FE:70:1E:3A:34:9D:8F:89:A1:63:E7:16:CF:79:86:2C:94:F8:97:71 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 01A0FD59DD3AE92DCA76CD010E53E6DE5822 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1AAD Signing time: Fri 02 Oct 2026 16:01:59 +0000 Manifest this update: Fri 02 Oct 2026 16:01:59 +0000 Manifest next update: Sat 03 Oct 2026 16:01:59 +0000 Files and hashes: 1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=) 2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=) 3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=) 4: F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa (hash: ZxjcHW/x0pQR0hwLPPsZsPvzwQS05l4bLGzkALrvzrE=) 5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=) 6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=) 7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=) 8: W2OrB0j0-nYPTzXGx8wglEsSrTg.roa (hash: VYxarI+ue3iiKP2yq3ncIk9PFzz9Y9KND/jO/nEButo=) 9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=) 10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=) 11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=) 12: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=) 13: uHcHm-Q2inkIqyesgnfD4jPip48.roa (hash: 4PMfdYi17AF2Wi/23XG4oqCHUKA2wU+FYFq+eyTKfzA=) 14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: p7KTe72IEj6ngnF/2bEzw4ONBfnLP9/e0MIUMFbN6T8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Oct 2026 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:fd:59:dd:3a:e9:2d:ca:76:cd:01:0e:53:e6:de:58:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Oct 2 16:01:59 2026 GMT Not After : Oct 3 16:01:59 2026 GMT Subject: CN=fe701e3a349d8f89a163e716cf79862c94f89771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:04:59:de:43:47:17:0d:77:1c:0e:2e:ce: be:21:22:b0:62:17:ec:0a:a2:9c:a6:bf:7a:c0:9d: b5:29:31:7d:6f:13:f3:c0:67:e9:8f:67:2d:be:f8: 24:61:2e:95:45:a2:32:af:b6:35:ef:d9:5d:f6:eb: 5e:a8:f9:48:b2:64:6e:90:11:bc:64:7c:bd:1a:e9: f3:93:d4:57:40:cb:2a:0a:b7:4a:50:57:5f:a6:7a: 38:2d:bd:49:f0:c7:ce:f0:db:b4:66:ad:e6:95:5b: 7c:e7:a6:a6:80:c6:00:cb:ab:64:35:a5:6e:cc:11: 80:aa:48:21:8a:07:27:92:c8:03:70:d1:cf:8c:f7: f6:63:cc:52:b2:a8:e9:86:6f:62:46:9a:f8:4a:82: a5:b7:33:d0:90:85:e4:17:7d:96:bc:a4:52:05:48: ff:3a:99:c8:d6:08:cf:82:b5:cc:c3:78:9e:e7:87: d0:9d:c1:6a:f3:ce:f8:cd:2a:d9:c7:83:ac:c1:f0: f9:80:95:9f:07:2d:d9:53:1a:df:83:89:96:e9:69: 11:4f:77:0c:50:8e:8f:fd:21:70:65:59:88:3b:b5: cb:57:fc:3a:79:77:49:00:58:18:e7:15:f4:b8:a0: 30:cb:d6:06:63:bd:86:89:03:7c:83:54:66:6b:92: 96:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:70:1E:3A:34:9D:8F:89:A1:63:E7:16:CF:79:86:2C:94:F8:97:71 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a8:c0:8f:e1:3e:99:f1:e7:dd:cc:11:f9:55:75:d6:54:1f: d7:8d:83:b2:24:76:fc:e3:22:0f:99:80:22:81:8c:ba:3d:1d: 06:0b:bb:4e:72:ba:fa:9f:44:fe:b0:bd:3d:d7:b7:98:29:88: cf:f7:d1:06:53:2e:cb:55:ea:84:0c:a8:e6:b6:10:ca:9a:05: 57:90:5b:ab:bb:1d:08:65:e3:b1:7f:ce:0a:58:e7:da:59:2a: 23:dc:f5:f2:23:63:41:c3:7e:6e:22:ee:e4:42:71:ea:8a:3c: 4f:04:da:08:0e:bb:e4:b4:aa:0f:32:b6:e5:26:52:da:11:c7: 6a:60:e7:9a:b1:fb:66:67:61:8c:45:b9:1a:23:d2:25:89:ff: 74:d7:4d:d7:c9:e2:a5:53:6e:3c:fe:75:3b:d1:56:7c:f4:a5: 9a:9e:6d:bd:42:19:0e:a0:d3:6a:b1:69:c5:1f:7b:ce:cc:39: 86:4d:6f:30:d7:c6:4f:d4:26:84:28:8c:6d:37:1c:cc:3d:41: a2:34:38:96:71:77:f6:37:28:1f:64:66:81:c4:37:b8:01:67: a4:a0:bf:de:d3:6e:10:78:b8:c1:4b:29:a4:23:e9:f1:dc:f4: b8:0c:37:a4:71:1f:88:d0:b7:9d:7c:be:4b:83:0e:e2:2d:9c: 54:5d:46:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaD9Wd066S3Kds0BDlPm3lgiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYxMDAyMTYwMTU5WhcNMjYxMDAzMTYwMTU5WjAzMTEwLwYDVQQD EyhmZTcwMWUzYTM0OWQ4Zjg5YTE2M2U3MTZjZjc5ODYyYzk0Zjg5NzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN0EWd5DRxcNdxwOLs6+ISKwYhfs CqKcpr96wJ21KTF9bxPzwGfpj2ctvvgkYS6VRaIyr7Y179ld9uteqPlIsmRukBG8 ZHy9Gunzk9RXQMsqCrdKUFdfpno4Lb1J8MfO8Nu0Zq3mlVt856amgMYAy6tkNaVu zBGAqkghigcnksgDcNHPjPf2Y8xSsqjphm9iRpr4SoKltzPQkIXkF32WvKRSBUj/ OpnI1gjPgrXMw3ie54fQncFq8874zSrZx4OswfD5gJWfBy3ZUxrfg4mW6WkRT3cM UI6P/SFwZVmIO7XLV/w6eXdJAFgY5xX0uKAwy9YGY72GiQN8g1Rma5KW4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5wHjo0nY+JoWPnFs95hiyU+JdxMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6jAj+E+ mfHn3cwR+VV11lQf142DsiR2/OMiD5mAIoGMuj0dBgu7TnK6+p9E/rC9Pde3mCmI z/fRBlMuy1XqhAyo5rYQypoFV5Bbq7sdCGXjsX/OCljn2lkqI9z18iNjQcN+biLu 5EJx6oo8TwTaCA675LSqDzK25SZS2hHHamDnmrH7ZmdhjEW5GiPSJYn/dNdN18ni pVNuPP51O9FWfPSlmp5tvUIZDqDTarFpxR97zsw5hk1vMNfGT9QmhCiMbTcczD1B ojQ4lnF39jcoH2RmgcQ3uAFnpKC/3tNuEHi4wUsppCPp8dz0uAw3pHEfiNC3nXy+ S4MO4i2cVF1Gjg== -----END CERTIFICATE-----Generated at Fri Oct 2 18:51:57 2026 by rpki-client