$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: RpWrNTDcjXCr3cQAQ8YOtps29IfqoKZCAfQMbN3EAlw= Subject key identifier: 55:EF:BA:EB:AB:C3:F2:FB:B6:F7:7C:83:4B:F4:65:62:FF:CB:CC:76 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019D2772C3608C3FF23D451852EE3F2BF539 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 14D2 Signing time: Thu 26 Mar 2026 00:02:05 +0000 Manifest this update: Thu 26 Mar 2026 00:02:05 +0000 Manifest next update: Fri 27 Mar 2026 00:02:05 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: zStnpvNCo6s3cLiU+80Gceao0HGI2soB2Nml4aC5j+k=) 7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) 12: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:c3:60:8c:3f:f2:3d:45:18:52:ee:3f:2b:f5:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Mar 26 00:02:05 2026 GMT Not After : Mar 27 00:02:05 2026 GMT Subject: CN=55efbaebabc3f2fbb6f77c834bf46562ffcbcc76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:56:f7:fe:8a:18:5e:3d:dc:e4:d0:4c:86:32: e9:aa:9e:f0:fc:6d:df:7e:9e:2a:27:2b:24:ec:c6: c5:e2:5f:e4:53:f5:62:66:3b:a0:ee:9e:33:fc:8a: bc:a2:69:3b:d8:de:d7:82:2c:d9:b1:da:0e:a8:11: 05:25:48:a6:2b:1a:77:4a:21:f6:19:31:6e:09:cb: 35:40:0d:bd:75:8d:d0:cd:a2:76:bf:7d:df:b3:05: 75:c7:3e:2d:28:3f:08:e1:7b:cb:da:8f:6d:97:d1: b7:b4:d4:de:e9:e0:6f:af:c3:9b:f2:69:04:1f:f5: 6f:f6:b7:de:74:f5:db:ba:68:c9:82:61:86:2d:81: 44:a0:25:6c:cc:f3:71:a7:0e:d1:e2:3c:9f:7d:47: 79:ac:d3:49:39:2f:0e:48:61:56:d5:ac:90:6e:c9: 42:20:4b:2c:a1:aa:5d:ae:f9:f1:c0:1f:bb:cd:18: 1f:7d:27:23:dd:03:cd:0a:52:7e:ff:d3:10:8c:29: a3:88:59:32:e5:46:b1:c6:e8:83:eb:7a:84:2a:8f: 3c:48:8d:d1:ce:c7:8a:12:eb:52:af:4b:de:e1:6d: 3f:fe:cf:10:2b:85:9d:7b:a4:25:bb:cb:2a:0e:17: 80:b9:95:84:f1:9b:ca:89:99:5e:f9:c0:a2:b1:e2: b7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EF:BA:EB:AB:C3:F2:FB:B6:F7:7C:83:4B:F4:65:62:FF:CB:CC:76 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b9:e1:10:a4:79:26:be:5c:a1:02:a2:ac:e2:e1:25:ea:54: 7b:33:db:ac:14:fa:ce:7e:55:a9:57:96:c2:e1:5e:bb:b4:bd: 97:03:d4:3f:d9:2f:3d:42:a3:e0:5d:02:5c:e6:91:29:73:6d: 69:5d:6e:5c:74:e8:3c:3d:e0:b0:0f:79:ab:8e:a7:a5:1e:1b: 1f:65:8c:e8:53:9d:4d:ac:22:b6:0f:16:6b:76:f5:3e:f0:9e: b3:5e:f5:d7:48:84:08:7f:9c:4d:0c:a3:4f:00:8a:43:3e:47: 86:54:a3:f1:f0:51:af:c7:d3:df:62:25:07:8c:54:a9:97:d8: aa:5d:d4:4a:47:90:a5:0f:4c:4f:6c:0b:6c:af:15:96:bc:ed: c1:64:93:0c:76:4f:d4:9a:5c:07:7d:1b:f1:f0:25:83:f8:22: 6d:ea:cd:d3:2e:65:af:d6:42:88:67:32:b8:fd:10:42:2b:bd: 58:a0:0b:c4:45:ae:70:45:e9:2f:1d:45:6c:52:e1:08:ef:7c: 3e:0b:d5:b1:10:8a:9f:9a:c0:91:a6:37:fe:e8:b5:b1:4c:ed: 9e:f9:18:93:ef:a0:ec:41:a4:e7:86:c9:d0:aa:37:4a:74:bc: 97:43:67:90:85:5e:24:55:f9:d6:0b:40:53:09:3d:17:a6:e0: 70:01:9c:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncsNgjD/yPUUYUu4/K/U5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwMzI2MDAwMjA1WhcNMjYwMzI3MDAwMjA1WjAzMTEwLwYDVQQD Eyg1NWVmYmFlYmFiYzNmMmZiYjZmNzdjODM0YmY0NjU2MmZmY2JjYzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllb3/ooYXj3c5NBMhjLpqp7w/G3f fp4qJysk7MbF4l/kU/ViZjug7p4z/Iq8omk72N7XgizZsdoOqBEFJUimKxp3SiH2 GTFuCcs1QA29dY3QzaJ2v33fswV1xz4tKD8I4XvL2o9tl9G3tNTe6eBvr8Ob8mkE H/Vv9rfedPXbumjJgmGGLYFEoCVszPNxpw7R4jyffUd5rNNJOS8OSGFW1ayQbslC IEssoapdrvnxwB+7zRgffScj3QPNClJ+/9MQjCmjiFky5UaxxuiD63qEKo88SI3R zseKEutSr0ve4W0//s8QK4Wde6Qlu8sqDheAuZWE8ZvKiZle+cCiseK3IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXvuuurw/L7tvd8g0v0ZWL/y8x2MB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7nhEKR5 Jr5coQKirOLhJepUezPbrBT6zn5VqVeWwuFeu7S9lwPUP9kvPUKj4F0CXOaRKXNt aV1uXHToPD3gsA95q46npR4bH2WM6FOdTawitg8Wa3b1PvCes17110iECH+cTQyj TwCKQz5HhlSj8fBRr8fT32IlB4xUqZfYql3USkeQpQ9MT2wLbK8VlrztwWSTDHZP 1JpcB30b8fAlg/giberN0y5lr9ZCiGcyuP0QQiu9WKALxEWucEXpLx1FbFLhCO98 PgvVsRCKn5rAkaY3/ui1sUztnvkYk++g7EGk54bJ0Ko3SnS8l0NnkIVeJFX51gtA Uwk9F6bgcAGcLw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:23:42 2026 by rpki-client