$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: mlGKcAADF7eOAEnq1em+sQ1K/1h8uDEcvdFNOggKNrM= Subject key identifier: 24:70:D7:E3:04:96:00:EA:BB:25:56:AB:15:F9:38:DA:4F:60:02:9E Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 01A1DB385F9E80940B7B89C0CCD70540E183 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 1742 Signing time: Sat 14 Nov 2026 18:01:07 +0000 Manifest this update: Sat 14 Nov 2026 18:01:07 +0000 Manifest next update: Sun 15 Nov 2026 18:01:07 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: Q6RvULbiNuOLC5ts2aOMOeR9DuI+pEiMJ+Pv9CC6Gkk=) 7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) 12: u08NEvufIyYOw5wjByrYL3KDftg.roa (hash: +kuBshu076KXzQxN7e8+v+U/mTU0N1n8TG4+SUR96MM=) 13: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:38:5f:9e:80:94:0b:7b:89:c0:cc:d7:05:40:e1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Nov 14 18:01:07 2026 GMT Not After : Nov 15 18:01:07 2026 GMT Subject: CN=2470d7e3049600eabb2556ab15f938da4f60029e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6e:2e:6c:1a:8a:29:01:34:c2:a4:4e:fa:d6: c8:8c:db:4d:63:9c:3e:08:a5:aa:80:1f:19:b9:01: 47:dd:5e:2e:47:15:7d:f5:76:d9:96:c9:ad:17:c4: d4:22:da:65:27:0d:17:c0:30:88:48:e2:48:db:bb: 08:b5:5f:ae:b8:90:3e:dd:b3:e0:2b:5e:33:35:8e: 5b:5e:2e:57:a7:d1:d3:bc:ac:4c:eb:f2:a0:7d:b6: af:b2:00:d7:70:26:51:4e:1c:ea:51:35:d0:99:76: 2f:90:8d:43:47:77:f5:0d:3f:51:41:0a:64:fb:cc: 21:68:b0:e2:74:52:8a:a6:1f:49:71:be:37:ac:38: 43:6e:b8:70:1b:73:b2:4a:13:71:39:44:0a:09:59: 66:8b:0e:77:1c:1f:f2:89:95:e5:4e:bd:fc:fd:89: db:b0:98:b2:59:f5:7d:51:ce:11:76:92:14:72:08: 1e:11:ff:b3:9a:83:e0:3c:20:e2:42:9e:aa:9e:28: 06:bb:74:75:de:af:1b:bc:b6:aa:c5:c3:7b:b2:bf: d6:7a:3d:4a:51:84:a3:ea:96:56:5b:1f:e9:8c:53: b0:31:90:71:93:24:d8:9a:95:9c:2b:1b:9d:b0:16: 73:41:35:53:a5:f3:b7:94:90:0d:b5:ad:d1:15:49: 9e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:70:D7:E3:04:96:00:EA:BB:25:56:AB:15:F9:38:DA:4F:60:02:9E X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a5:54:52:ab:ac:7d:97:06:53:d4:97:b9:d8:85:0e:54:40: 99:37:13:aa:9a:62:e1:09:c3:c4:ae:e2:da:c4:e6:e4:5e:0d: 59:43:9e:16:eb:d6:8a:1d:07:7f:44:bd:52:4a:55:04:32:58: 81:0c:8f:27:ee:b9:92:7b:c9:4c:ff:57:59:2e:bf:1b:80:8b: 58:95:05:23:56:35:79:ee:25:a2:52:88:bc:90:24:e3:d4:55: ae:18:da:7d:65:04:b3:04:60:31:b1:ac:b1:6b:99:bd:e6:17: b7:e1:7a:cf:12:28:d6:dc:fa:e1:e4:00:91:f6:a9:40:44:74: b2:b5:d5:6a:96:42:09:22:b7:c7:23:b8:aa:ff:51:a9:49:30: df:fb:39:21:64:04:78:37:79:32:c0:1d:60:45:fa:9c:77:a3: 42:94:19:87:d6:ae:50:91:8c:16:22:11:18:4d:ae:bd:a8:1b: d6:ce:de:29:8e:3b:51:30:f2:b6:d2:c2:b9:ea:02:07:37:1a: 29:ff:38:bd:69:62:ba:d7:e0:f6:19:a6:41:18:b0:06:26:d9: 15:29:62:0c:26:9f:65:ab:c7:fe:a4:d1:1d:76:44:55:50:75: 9c:28:e8:f8:54:c8:22:fb:d7:54:9e:b6:11:bc:53:05:28:39: e4:ec:2e:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbOF+egJQLe4nAzNcFQOGDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYxMTE0MTgwMTA3WhcNMjYxMTE1MTgwMTA3WjAzMTEwLwYDVQQD EygyNDcwZDdlMzA0OTYwMGVhYmIyNTU2YWIxNWY5MzhkYTRmNjAwMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW4ubBqKKQE0wqRO+tbIjNtNY5w+ CKWqgB8ZuQFH3V4uRxV99XbZlsmtF8TUItplJw0XwDCISOJI27sItV+uuJA+3bPg K14zNY5bXi5Xp9HTvKxM6/KgfbavsgDXcCZRThzqUTXQmXYvkI1DR3f1DT9RQQpk +8whaLDidFKKph9Jcb43rDhDbrhwG3OyShNxOUQKCVlmiw53HB/yiZXlTr38/Ynb sJiyWfV9Uc4RdpIUcggeEf+zmoPgPCDiQp6qnigGu3R13q8bvLaqxcN7sr/Wej1K UYSj6pZWWx/pjFOwMZBxkyTYmpWcKxudsBZzQTVTpfO3lJANta3RFUme+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRw1+MElgDquyVWqxX5ONpPYAKeMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqVUUqus fZcGU9SXudiFDlRAmTcTqppi4QnDxK7i2sTm5F4NWUOeFuvWih0Hf0S9UkpVBDJY gQyPJ+65knvJTP9XWS6/G4CLWJUFI1Y1ee4lolKIvJAk49RVrhjafWUEswRgMbGs sWuZveYXt+F6zxIo1tz64eQAkfapQER0srXVapZCCSK3xyO4qv9RqUkw3/s5IWQE eDd5MsAdYEX6nHejQpQZh9auUJGMFiIRGE2uvagb1s7eKY47UTDyttLCueoCBzca Kf84vWliutfg9hmmQRiwBibZFSliDCafZavH/qTRHXZEVVB1nCjo+FTIIvvXVJ62 EbxTBSg55OwuuA== -----END CERTIFICATE-----Generated at Sun Nov 15 00:47:29 2026 by rpki-client