$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft File: VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json) Hash identifier: 5Igz07iMrvWjRw0vgmrO2OaBYPV67erKDFiYnzT3D/s= Subject key identifier: 89:A3:11:37:C9:8D:80:CF:49:BC:D8:44:4A:94:CF:E9:21:4D:85:AA Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019DA868384E123E076BB92F3CB1B3ADE7EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft Manifest number: 04DC Signing time: Mon 20 Apr 2026 01:01:35 +0000 Manifest this update: Mon 20 Apr 2026 01:01:35 +0000 Manifest next update: Tue 21 Apr 2026 01:01:35 +0000 Files and hashes: 1: 03LMksp47oDVGmMApNkpC-Qj5oE.roa (hash: f/U7iiBnLhVZvsPDN3o9USa5Z6pVWUtWsL9gLOdZA8I=) 2: 0SWMflMJJlOILq6C9nu-h1OKJN8.roa (hash: kcK4B39yPXgK0nHshs5JakDk15PknxxnhcLimNeC6n8=) 3: 1-kUcSo0TEpKw_YLYby0R4DVb4yg.roa (hash: FnVQZ/f6EWlkoWkdWzbkkjdOeMD2B5h8cDHMDm/NyV4=) 4: 11f9_EaW8zxcu9dcHLvxzqf38Lo.roa (hash: xnewyzlXOwnExIP64JF1ik9DrSmsUZyhmiA3DXOiK4o=) 5: 2OHYoT-Zosv0TSP0mD3syDltxiI.roa (hash: n1Lo9lXpdHgGuXNEAwoEn0rduxR1E46L0wmYc1TnePY=) 6: 3-Q2O8n8MtHCsBjFCINxeBCa274.roa (hash: u7IBZo9GQpzsOLdip4CXpah+A0lRzXrTr/IcG21JJEA=) 7: 48T8vYE2PIuF-JUHACGRSktJ5kI.roa (hash: gSU/+8oQIH7vKHyOi++4cnwLf3TJw4y7dFrpKBaFihg=) 8: 7id4rlXpKhqEgoklo_n3TPOh2_w.roa (hash: 9Ebf5x7jwBaHozUQJp+V5eIJIfXdcY7VPlSLOLpK8uU=) 9: BWSDCyaaYztqf8x04OxukY8CPY4.roa (hash: U38FUPvoykxIjgiJPRxBdZlYvPSwyO1mNNGTzXNpiZU=) 10: Bson5QpUOFI1QdCm6xHzbdmNIvE.roa (hash: DZHq8ozgpPl0uQCPljJHruwM7dHQ/jyriOu62FT2zks=) 11: CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa (hash: JqW6uDJ3RG9f6mu4pHvOKIPsSL2yj5yYpAboStI8ffM=) 12: F5t3iNFuoDTJdVcFFvhLuvZHnmk.roa (hash: onvtW2FhvquKskWb8kYzMP0qs7tpSTfSO5Ae7USIC5U=) 13: FMYHLE6DdmEpeVMePkQCK7G0jsA.roa (hash: U9W0uSh64vdUp2XVkXkHbBV/og/HtsBpfruoNhoMZbU=) 14: Fgu5stglO6Pq50uJK8P5w9nSOtg.roa (hash: hoqPMWoSa2QjmLpPeHJ7kH0PELVdBPVI3YHS2rHkY1Q=) 15: G6PfcTBBnGMmYTxAX2kEhfoKgDo.roa (hash: yy5VfaRyRkaXKFtJ7nRL6lqT6Vibse1ushGJE3d+Pjw=) 16: GfOWGiLPv2wccjOXnStMVeJn2AM.roa (hash: 4kXzqP7Ueen81fNYyTvCfhk/Yz0qWdHHeusnErlkgAI=) 17: GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa (hash: hAGmhAwZhhoWhp04cLiGpWwuwXg8Kk2Qjb8VbTs9ZtE=) 18: KqWucH5sI4MugF5p4PjTBd1XImI.roa (hash: qMFzUBwuT4BEanu+eOpO2co0/ErViX4f8esF8yniEM0=) 19: LV0V0NNyPxtE4vETFcvY45gcr6s.roa (hash: 5VTc45UaaPFNqhaYRkLyvLy0Lfj/i1VTU/bhpzsFgYw=) 20: Odbdm6cKt4WDOHN_XBHawpwl1Es.roa (hash: Bkz9cTBI4HMn2Xl/2SrHu4Q2QKOVxBc3yaUrG0BVNnU=) 21: PJmcxay0WtSRJnIDudY6DzRck9Q.roa (hash: g6fJ4GyCp1px6ym38QN41UvtwhfWNwAeKWC1qAkBcM0=) 22: Pfn4rcRbKDJuVSkrcgYb9cu78A4.roa (hash: idjJ3BOFW0sv/bdtwbSz3j+KpA5MQW5Fct3dXY7lh4s=) 23: VFq7oOwuoK-4Ezbw8Byjy6HKneY.roa (hash: /kEtmYfU+u/9qUgUdtsAwlr6x9IMzXSTi0t0BiXXPhA=) 24: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: itIxmpTVQjeNXDLA4QwDSiH89AfqC0LFVH7kNgOCVUU=) 25: X_0hIN0va-0jvdAJVMfFLxivNSA.roa (hash: k1fbZWSxifyuA7Cy1hbrkSYFKAfUuvJ6q3xYjvLFtgg=) 26: Zbh0v3jIkeNHK_huafJIUWzUhjE.roa (hash: u5gxSyEmcqN6U6zIZdAUeM1zmLtdQN7lxXducAeyTVA=) 27: bDvb5V_NvXzVB717pdCTD20bb00.roa (hash: ChhXp3O83O9ZmRYnZaMtI6G7Chl71zYrgMZ6bXKJJnU=) 28: ekRgt1kJi2v662mflC7yokLhh34.roa (hash: 3lpPZiQnRkbCD6keXb41MVLx99s2aoWKQrtAqDsCux0=) 29: gsac_hujsl4V25neoCYlP-goXZA.roa (hash: f0Llg36q6UkTqWjndQ3byQjqzCK5X7ul+OGUwbOgVPo=) 30: hghyc97Sy2diOyOgG-262iZpols.roa (hash: VL8wfcosa3T3usYRFGudjvGeLoBvlHt0J3TslPSQMSk=) 31: oMXuSjHyTi2ISV5ZXkeB_GmQ2qQ.roa (hash: 1OWtYAgWFUz9U3ZRyQBV7HsQLa1e5YTunuUhvpeW3zA=) 32: qJ3z1ihZIOwElkJSoUeKWwqew00.roa (hash: oNBQlAijhAtDnA03PxF8fUwBG0UV/qjZqXRIo/Dqekg=) 33: u_2w56w9VDiTEhKc_ZitgndOhPo.roa (hash: hQUv7XEtV7+B7R0n+5Br9ftO2lm1ptUCoJiMKucjmPE=) 34: wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa (hash: hs9hA8TNugivRwbaXq2Cd+gZQT+LQBaaFDtqCrqGbck=) 35: ypSiLSto3RjwAtlvFMK5kNDrdzk.roa (hash: 0ZlVmf2An7RemdJ7LPaj0U4nO3qgfQ0MKBoflfLZxpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a8:68:38:4e:12:3e:07:6b:b9:2f:3c:b1:b3:ad:e7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Apr 20 01:01:35 2026 GMT Not After : Apr 21 01:01:35 2026 GMT Subject: CN=89a31137c98d80cf49bcd8444a94cfe9214d85aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:2d:b6:df:34:6a:54:14:f5:e3:96:20:ce: 5b:b7:59:4d:41:2d:f8:8b:b3:c7:9d:dd:9e:a4:ae: 8d:ba:6e:70:c7:32:09:a7:a8:13:0d:08:b1:44:1f: 29:d4:d6:ee:8c:a3:d2:52:74:61:e6:4f:2f:70:57: 23:86:6c:90:84:64:8d:78:b5:84:bc:be:6c:60:77: c8:e9:b8:fc:f0:86:1b:3f:d5:48:b1:1f:18:74:45: 9f:77:61:79:cf:3e:8c:51:f8:86:a2:b6:bc:e1:d4: ac:5c:1c:7d:3c:ff:8e:aa:6c:59:49:1b:74:95:82: 62:03:a5:ba:f5:51:5b:10:47:fc:fd:c8:b8:90:63: f6:5b:54:b0:a3:1e:f6:e3:30:78:9b:9c:89:c1:07: fd:c9:d6:d6:c4:39:59:eb:3b:a2:73:52:39:2a:f9: 2e:0c:14:a9:5a:49:15:7e:73:a7:41:2b:d7:c5:b5: df:1c:c4:be:52:a2:15:27:42:8e:ef:5a:a5:ca:c1: 4e:49:10:cb:88:91:b9:83:9c:cf:a5:39:62:f2:f5: 20:d7:d8:cc:ba:10:5b:0c:11:d8:dc:c2:5a:57:e1: ca:e2:b4:6f:c0:a9:bd:ea:7a:12:b2:b3:16:ea:d7: 47:2b:fc:41:74:c9:9c:2b:23:40:ff:52:db:0a:c0: bd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A3:11:37:C9:8D:80:CF:49:BC:D8:44:4A:94:CF:E9:21:4D:85:AA X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bb:95:5d:c8:b1:81:97:5c:72:9d:a8:86:65:88:68:b4:71: 00:3a:ee:80:35:5d:25:06:2d:3a:9a:a6:38:11:6c:65:da:f2: 02:4e:66:cb:fc:85:0a:0e:75:f5:99:31:46:c8:57:f3:6f:e6: a6:40:9b:91:a3:2d:1d:04:ff:3c:36:a3:10:e4:40:b9:8a:6a: 9a:bf:31:1a:f0:53:01:c7:39:02:6c:2e:9c:f6:fb:85:fc:c3: f3:f0:d2:f6:64:68:38:1c:b9:6f:70:c1:8a:07:64:7d:fb:be: 91:3c:bc:9c:b4:ca:c6:67:fe:31:bb:72:b6:38:33:58:a4:49: 2b:50:3e:47:d0:21:31:17:7a:fb:f3:4f:d3:40:73:4e:cf:4e: 54:82:72:df:16:9f:46:58:2b:cf:da:cf:be:c1:29:27:17:61: 51:aa:6f:34:c6:1d:36:f9:ec:4f:23:20:24:28:38:d6:d1:0e: ed:96:34:8e:b6:a0:db:78:dc:75:11:04:83:de:ec:67:6f:41: 06:96:c6:6c:37:34:94:a3:34:7b:03:5f:69:47:12:cf:60:16: 4b:fe:d1:f5:bb:8b:84:5a:86:a8:2c:a9:65:93:60:54:69:65: cf:ab:10:2c:1f:b8:ed:0e:e4:cb:bc:17:7e:e1:76:a6:56:b5: 96:68:8a:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2oaDhOEj4Ha7kvPLGzrefrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwNDIwMDEwMTM1WhcNMjYwNDIxMDEwMTM1WjAzMTEwLwYDVQQD Eyg4OWEzMTEzN2M5OGQ4MGNmNDliY2Q4NDQ0YTk0Y2ZlOTIxNGQ4NWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT4ttt80alQU9eOWIM5bt1lNQS34 i7PHnd2epK6Num5wxzIJp6gTDQixRB8p1NbujKPSUnRh5k8vcFcjhmyQhGSNeLWE vL5sYHfI6bj88IYbP9VIsR8YdEWfd2F5zz6MUfiGora84dSsXBx9PP+OqmxZSRt0 lYJiA6W69VFbEEf8/ci4kGP2W1Swox724zB4m5yJwQf9ydbWxDlZ6zuic1I5Kvku DBSpWkkVfnOnQSvXxbXfHMS+UqIVJ0KO71qlysFOSRDLiJG5g5zPpTli8vUg19jM uhBbDBHY3MJaV+HK4rRvwKm96noSsrMW6tdHK/xBdMmcKyNA/1LbCsC99QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImjETfJjYDPSbzYREqUz+khTYWqMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7uVXcix gZdccp2ohmWIaLRxADrugDVdJQYtOpqmOBFsZdryAk5my/yFCg519ZkxRshX82/m pkCbkaMtHQT/PDajEORAuYpqmr8xGvBTAcc5AmwunPb7hfzD8/DS9mRoOBy5b3DB igdkffu+kTy8nLTKxmf+MbtytjgzWKRJK1A+R9AhMRd6+/NP00BzTs9OVIJy3xaf Rlgrz9rPvsEpJxdhUapvNMYdNvnsTyMgJCg41tEO7ZY0jrag23jcdREEg97sZ29B BpbGbDc0lKM0ewNfaUcSz2AWS/7R9buLhFqGqCypZZNgVGllz6sQLB+47Q7ky7wX fuF2pla1lmiKeQ== -----END CERTIFICATE-----Generated at Mon Apr 20 06:09:18 2026 by rpki-client