$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: MmpR5ppUdb5qB5VzqXMGR1/DFwwX0+OGAo8T4rZuKIQ= Subject key identifier: 3C:13:EA:23:17:58:D0:6B:9A:B0:A4:3C:5B:3A:8D:28:68:5E:C6:7D Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 01A0D0B6A4CCBCA3E40FC7212B7924700662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 16B8 Signing time: Thu 24 Sep 2026 00:00:25 +0000 Manifest this update: Thu 24 Sep 2026 00:00:25 +0000 Manifest next update: Fri 25 Sep 2026 00:00:25 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: UvPYwXC7nVpnqmFv8mrASYkSWgEBVOKXKK6TXrtkke8=) 7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) 12: u08NEvufIyYOw5wjByrYL3KDftg.roa (hash: +kuBshu076KXzQxN7e8+v+U/mTU0N1n8TG4+SUR96MM=) 13: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:b6:a4:cc:bc:a3:e4:0f:c7:21:2b:79:24:70:06:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Sep 24 00:00:25 2026 GMT Not After : Sep 25 00:00:25 2026 GMT Subject: CN=3c13ea231758d06b9ab0a43c5b3a8d28685ec67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:60:f6:7d:63:a1:e5:7d:62:3b:28:de:b9:dc: af:01:7f:de:74:f7:e9:06:90:f2:ab:1a:f6:2e:6d: 12:ff:25:10:fc:b7:2d:ea:3f:6c:33:09:b0:68:64: 8d:89:21:f0:6d:0b:c4:39:69:29:d8:c7:9f:15:4d: 37:56:00:11:cb:9f:fe:3a:85:a4:a5:77:ae:20:5b: 6b:9e:5e:9c:da:1b:d6:a2:c6:e3:47:d4:c9:f3:9c: e6:8d:40:23:6d:9b:de:1e:7f:15:f7:eb:2c:6c:51: 9d:d5:6f:1f:d5:35:ef:62:7d:41:36:ae:e8:fa:2c: f1:fa:5b:d6:86:d6:ca:2d:b3:bd:49:a3:cf:2c:1a: 40:c1:a5:a6:98:e3:f5:ca:2c:09:6d:c0:9a:e0:c7: 60:a7:2a:e1:44:c1:28:04:e6:45:40:47:ce:84:8d: cd:e9:c4:20:c9:f9:1c:bd:b2:a3:bd:59:b9:f9:2d: c6:cf:27:c2:e3:b2:ea:6b:49:c8:0c:d6:38:5d:8e: 35:40:8e:0c:a5:55:15:f4:df:24:6a:30:9f:71:5d: ae:1b:54:a0:50:5e:a3:4c:f8:31:75:d8:8c:47:a8: db:6b:71:b4:41:ba:d8:13:bd:26:8d:f3:50:50:3f: 16:67:44:e3:61:30:7e:a0:98:06:6d:7b:28:f4:64: 11:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:13:EA:23:17:58:D0:6B:9A:B0:A4:3C:5B:3A:8D:28:68:5E:C6:7D X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:45:fb:82:d3:19:98:c5:13:6c:97:b0:f0:b7:61:25:4a:36: ba:dc:1f:f5:d0:d0:f5:f2:84:9b:dc:a0:54:b7:b6:18:05:8b: 98:66:d5:06:3a:94:74:bf:b4:95:d8:1b:ca:34:e5:77:90:74: 8b:c8:69:bc:f9:ce:f1:04:ad:07:96:ea:c5:2f:b3:96:48:cc: 2f:71:d9:d2:30:64:85:f2:b5:57:ec:0b:76:d7:cd:25:ac:20: 26:e6:be:c7:46:46:bc:67:29:6d:70:94:35:9a:d1:2a:3d:f3: 9d:e0:02:a1:44:e7:0b:7e:14:f4:92:ae:20:b3:1c:a8:e0:2d: 43:90:69:bf:f8:3d:7a:11:05:fb:94:a7:5e:e9:2e:0b:39:29: 46:f7:3e:41:a6:29:93:7f:48:e8:84:14:2d:08:d9:9a:8b:a6: 37:44:b1:96:9e:b4:43:74:4d:42:7f:b0:7d:87:f6:ac:68:ec: 72:51:6c:4b:12:f2:50:18:dc:15:03:9c:ad:6c:0e:32:c8:00: 7b:f3:88:0e:46:24:68:06:68:24:c3:15:a3:1e:db:f4:8f:0f: fd:ce:ca:fa:57:ab:c8:ec:c3:25:08:a4:02:4e:30:0c:3c:aa: 37:d7:ba:44:b7:e6:62:c9:0a:3f:4c:d0:67:55:ae:f6:a7:c4: 0d:b8:d3:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQtqTMvKPkD8chK3kkcAZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwOTI0MDAwMDI1WhcNMjYwOTI1MDAwMDI1WjAzMTEwLwYDVQQD EygzYzEzZWEyMzE3NThkMDZiOWFiMGE0M2M1YjNhOGQyODY4NWVjNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmD2fWOh5X1iOyjeudyvAX/edPfp BpDyqxr2Lm0S/yUQ/Lct6j9sMwmwaGSNiSHwbQvEOWkp2MefFU03VgARy5/+OoWk pXeuIFtrnl6c2hvWosbjR9TJ85zmjUAjbZveHn8V9+ssbFGd1W8f1TXvYn1BNq7o +izx+lvWhtbKLbO9SaPPLBpAwaWmmOP1yiwJbcCa4MdgpyrhRMEoBOZFQEfOhI3N 6cQgyfkcvbKjvVm5+S3GzyfC47Lqa0nIDNY4XY41QI4MpVUV9N8kajCfcV2uG1Sg UF6jTPgxddiMR6jba3G0QbrYE70mjfNQUD8WZ0TjYTB+oJgGbXso9GQRBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwT6iMXWNBrmrCkPFs6jShoXsZ9MB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0X7gtMZ mMUTbJew8LdhJUo2utwf9dDQ9fKEm9ygVLe2GAWLmGbVBjqUdL+0ldgbyjTld5B0 i8hpvPnO8QStB5bqxS+zlkjML3HZ0jBkhfK1V+wLdtfNJawgJua+x0ZGvGcpbXCU NZrRKj3zneACoUTnC34U9JKuILMcqOAtQ5Bpv/g9ehEF+5SnXukuCzkpRvc+QaYp k39I6IQULQjZmoumN0Sxlp60Q3RNQn+wfYf2rGjsclFsSxLyUBjcFQOcrWwOMsgA e/OIDkYkaAZoJMMVox7b9I8P/c7K+leryOzDJQikAk4wDDyqN9e6RLfmYskKP0zQ Z1Wu9qfEDbjT0g== -----END CERTIFICATE-----Generated at Thu Sep 24 05:54:35 2026 by rpki-client