$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: JRud+stsrnMzpBIwkfp34pM2PMbo3+qv4El1daIS9pk= Subject key identifier: CF:8D:FC:61:5C:1A:AC:2A:24:4C:3B:D0:E2:D9:DD:4F:CD:2F:EA:7C Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019D26965B57C3607C7A52B437DDA6AD5ECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 18AB Signing time: Wed 25 Mar 2026 20:01:21 +0000 Manifest this update: Wed 25 Mar 2026 20:01:21 +0000 Manifest next update: Thu 26 Mar 2026 20:01:21 +0000 Files and hashes: 1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=) 2: 5-O3kCpdmq18iNUwmO0ZTCpUo08.roa (hash: Pn13Ni86cbQVGEtITYrHSb+ijN3wYdEs/RyamQlC+Nw=) 3: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=) 4: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=) 5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=) 6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=) 7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=) 8: S7aKv_q0tDa7opJxCQ6myrERZA8.roa (hash: Uo1iMGWEBLYQiw+xllR1axWHCCwJA31+dccJblnLXsY=) 9: YbiVbFuXcTmnqDJPuqbutg5azlI.roa (hash: suv2Xv3nrxD/FlkPKIbbU1EFp7k8UcHgjFF/BnohR4s=) 10: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=) 11: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=) 12: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=) 13: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=) 14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: 1DXIekWMGdq92JppWIFsSgySMe1Ui72D5HvpEDEIyyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:96:5b:57:c3:60:7c:7a:52:b4:37:dd:a6:ad:5e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Mar 25 20:01:21 2026 GMT Not After : Mar 26 20:01:21 2026 GMT Subject: CN=cf8dfc615c1aac2a244c3bd0e2d9dd4fcd2fea7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:79:fc:f7:ce:3f:b9:30:bc:6f:63:45:94: b1:f4:7e:02:5f:d9:a2:7b:1e:3c:b8:3a:f7:48:6b: e8:d9:2b:de:48:ba:a2:74:84:e7:5e:02:5f:15:50: 76:a5:6b:1a:23:19:37:e3:52:e5:7c:05:cd:f4:63: 8f:bb:69:24:97:86:21:6c:86:70:3d:c2:e5:77:67: f9:54:5c:bc:35:61:95:d4:e2:85:3f:d4:08:b4:93: 96:1d:b1:56:34:94:9c:ee:62:69:60:dd:3e:36:13: 4f:f7:3d:79:b4:87:0f:3a:4c:a5:06:e0:f8:7a:bf: ac:36:54:4c:8f:64:6d:ae:82:17:b8:44:c0:40:5d: 9f:da:23:c9:1e:f5:43:91:cb:05:e7:89:85:65:58: 5a:55:fd:c3:e4:3d:b4:84:8b:42:81:00:85:35:b3: 90:27:fb:40:f2:70:4e:22:57:23:77:53:41:a0:31: 47:61:68:8c:c2:6c:64:ed:8e:e2:20:47:82:9a:cb: 54:ba:af:cb:53:9c:3a:b1:0e:f2:77:ed:e1:bd:ae: 32:21:7a:34:b6:24:ca:9c:c2:db:71:73:fc:90:a9: d7:68:62:61:87:9d:52:fa:a6:64:04:b9:ad:12:7c: af:ca:cf:d6:f8:08:a4:17:ae:91:03:3b:23:60:98: 02:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8D:FC:61:5C:1A:AC:2A:24:4C:3B:D0:E2:D9:DD:4F:CD:2F:EA:7C X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:65:6d:3e:01:c7:9a:42:9f:a5:73:fe:9b:fc:7e:0d:04:74: a7:ff:6f:be:bd:40:84:97:40:f5:cb:a9:df:8c:fb:0a:f9:a1: 7f:b3:51:3b:2b:ef:b3:26:99:0b:aa:b7:de:5c:4e:b7:0c:7b: 10:a7:68:04:73:f7:f8:31:67:60:06:b9:68:af:35:aa:70:5b: d5:4b:43:6c:b5:61:81:21:50:f8:0c:9e:db:09:52:07:38:5c: 06:42:47:ac:4b:81:bb:ad:14:5a:38:dd:98:32:e5:5c:4f:4b: 00:48:62:27:93:be:91:b9:a6:62:ed:db:ae:d8:65:a3:a2:00: ea:c7:6a:04:ad:2e:61:5f:cf:25:83:71:7a:71:3f:78:d6:5a: 6d:d9:69:81:3d:1b:b5:2b:7f:f4:43:cc:d0:e2:3c:7d:5b:e6: ff:f1:22:da:bc:d5:6c:b8:ee:7a:5c:fc:70:5a:a4:72:da:92: 12:78:4f:ae:bd:2c:11:de:e9:b1:3f:ba:74:9d:f9:b9:87:08: ac:43:08:2c:16:fc:d4:c1:27:d4:7d:91:d5:2a:b1:3b:ca:dc: 31:1c:cd:56:0b:55:ab:14:be:50:6b:32:2a:89:ae:66:90:9e: 06:f1:1d:c7:f5:2a:40:4a:e0:a9:10:39:be:5e:cf:26:3a:e6: 26:01:15:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mlltXw2B8elK0N92mrV7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYwMzI1MjAwMTIxWhcNMjYwMzI2MjAwMTIxWjAzMTEwLwYDVQQD EyhjZjhkZmM2MTVjMWFhYzJhMjQ0YzNiZDBlMmQ5ZGQ0ZmNkMmZlYTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DJ5/PfOP7kwvG9jRZSx9H4CX9mi ex48uDr3SGvo2SveSLqidITnXgJfFVB2pWsaIxk341LlfAXN9GOPu2kkl4YhbIZw PcLld2f5VFy8NWGV1OKFP9QItJOWHbFWNJSc7mJpYN0+NhNP9z15tIcPOkylBuD4 er+sNlRMj2RtroIXuETAQF2f2iPJHvVDkcsF54mFZVhaVf3D5D20hItCgQCFNbOQ J/tA8nBOIlcjd1NBoDFHYWiMwmxk7Y7iIEeCmstUuq/LU5w6sQ7yd+3hva4yIXo0 tiTKnMLbcXP8kKnXaGJhh51S+qZkBLmtEnyvys/W+AikF66RAzsjYJgC/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+N/GFcGqwqJEw70OLZ3U/NL+p8MB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmVtPgHH mkKfpXP+m/x+DQR0p/9vvr1AhJdA9cup34z7Cvmhf7NROyvvsyaZC6q33lxOtwx7 EKdoBHP3+DFnYAa5aK81qnBb1UtDbLVhgSFQ+Aye2wlSBzhcBkJHrEuBu60UWjjd mDLlXE9LAEhiJ5O+kbmmYu3brthlo6IA6sdqBK0uYV/PJYNxenE/eNZabdlpgT0b tSt/9EPM0OI8fVvm//Ei2rzVbLjuelz8cFqkctqSEnhPrr0sEd7psT+6dJ35uYcI rEMILBb81MEn1H2R1SqxO8rcMRzNVgtVqxS+UGsyKomuZpCeBvEdx/UqQErgqRA5 vl7PJjrmJgEVdQ== -----END CERTIFICATE-----Generated at Thu Mar 26 03:35:06 2026 by rpki-client