$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: cXTxuARBGkogC3P639WFezy1NugDN4XAx0hV/Wao5LE= Subject key identifier: 05:30:9C:0C:86:11:AC:CA:65:1D:12:20:77:22:07:17:9C:CA:FE:5B Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019E3117B4746616304F7FAAC5310AD6DCCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 0D69 Signing time: Sat 16 May 2026 14:01:37 +0000 Manifest this update: Sat 16 May 2026 14:01:37 +0000 Manifest next update: Sun 17 May 2026 14:01:37 +0000 Files and hashes: 1: 0bOZqErT7cPqtg8A6up5AuWvx0k.roa (hash: TLkmyalxkw5UtbYf/UBevHhaws4BaWA7DIMpjH0huR4=) 2: 0nKy3DcrJQbiUx0L11st8vPu4iU.roa (hash: p61zFKqkHY6u5BC22bvQD8WFNXvs2Yw1bGFGniYo/EE=) 3: BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa (hash: FSP05ciRv7cgg2ori440lYssEdhe7MklJbnbswJVXz8=) 4: C-Kmr5FT1ri-wqW_PoFuVOWIXaY.roa (hash: ERXgmbLSjJDQYHfslHu3SRPoPi7u4SxKIXUEFniHGbE=) 5: N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa (hash: sJ/b4s+wOONAASz+jNAdnE8FTPixklTn6DITWj2Oz+o=) 6: NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa (hash: tjAGBxyE9MUK6tIC8hGVGZt0+cyyEXn5+tt8NlkIgvY=) 7: ROFAtVDItt_EMagnNMRUK_8AFAo.roa (hash: 0/7Uq0DIP8W8M/AoQNG3rBHtAMug83v1CzVSyAShVQQ=) 8: SDv_Hv3j1zQYKdMKKJahi--bpbA.roa (hash: wiXpFtlqxh3vGK37wBoqcCvYsCDy5XPVC/ufdC7sY8c=) 9: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: atIixgpxGfgRui4bRIEx/oAhl7dIqZ1ARtL7vZphOVk=) 10: bbeNuCdJXqCYIUtyU2bTHnhe0pM.roa (hash: /lbmYbffftG0vT1jDvQWmIRNnGgrK51SKBZCKYo4Ly0=) 11: fCShZlzeyORIZqRpva0LWa9CXcY.roa (hash: Zw1W+vklKFKa/7FceWUPbOmP+yw3OCVtUAYFmYvIIHY=) 12: hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa (hash: P18VNSJRod1881sL7FyXf+LS0GoW/VI4U88shR2WTxY=) 13: iryj8oj2-V8BM-nhifn9xaWFT6k.roa (hash: J2c6WbxcvYg3n0i5rwopADF8nqS8/EkzKqjIvyGqKVg=) 14: nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa (hash: mBMzJHf7kRboGL+NsWlN+QzAIvKztq5wCERZ3i/DuXc=) 15: ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa (hash: O7M0cdecg0k5jJU4EYSgvz6r2GhJVnkR6Wsg7m7uOsk=) 16: x35bCF8o2frE0yVudoR1l5CD4FU.roa (hash: P9cerXMElreTy2+e7EkdqIb26AnuXW2v3h+k00K0LsA=) 17: yNGeTwwu6nvLd6pVRj1m7SWFsRI.roa (hash: DIGoHvjBhbh21gUmE9LE4Pi0LqvQbAY6Y2ak9deQj74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 12:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:31:17:b4:74:66:16:30:4f:7f:aa:c5:31:0a:d6:dc:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: May 16 14:01:37 2026 GMT Not After : May 17 14:01:37 2026 GMT Subject: CN=05309c0c8611acca651d1220772207179ccafe5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a1:61:20:a7:9f:f0:03:eb:2e:5f:13:e6:df: 34:3a:54:8e:fd:ef:c2:0d:7a:4e:80:09:59:e8:7f: be:67:3f:59:24:53:bd:da:0e:7f:6b:6d:44:66:af: 77:41:18:a1:f5:4d:4a:c0:c9:c9:50:8b:2a:da:82: 8f:57:d1:07:8b:a8:45:e0:6d:c0:a9:7e:fe:9a:89: c1:74:a4:f2:0a:17:ac:47:f9:bf:6f:50:62:47:0c: 18:d8:30:39:5f:26:62:c4:00:35:db:d4:96:8c:78: da:2d:ca:25:7a:f6:fb:2a:f4:e4:ff:59:f0:55:38: a3:40:e8:e4:8f:5f:f5:ff:7a:0d:57:bc:4c:dc:d0: 4b:e4:0b:b6:c0:53:87:a1:38:ae:11:8e:38:07:4b: 2d:10:00:6e:44:a1:85:56:66:0a:8a:37:c7:d0:46: 1a:16:fa:9b:32:ec:ef:73:09:f7:52:e7:0a:ef:eb: c7:24:43:4c:62:50:bc:3f:64:0f:b6:a7:35:b9:55: ad:4d:a9:51:52:dd:a6:53:ef:24:a4:5d:ae:ed:79: 52:55:8f:2a:44:6c:c4:a2:23:5c:b5:0e:76:df:00: 2f:27:1c:e6:8f:9e:ac:04:94:df:af:4c:c1:d4:e5: b6:33:91:5e:95:af:07:2f:90:d3:76:38:d1:e2:c1: 46:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:30:9C:0C:86:11:AC:CA:65:1D:12:20:77:22:07:17:9C:CA:FE:5B X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:98:e8:aa:de:28:c4:a0:df:e7:69:f9:ee:f3:b1:74:ed:c5: 44:0e:f6:1f:51:b0:17:d5:44:21:58:59:3a:aa:d4:18:4d:27: ca:22:e2:f5:00:4a:7e:39:e4:71:54:64:fc:4d:f5:db:e4:61: 5f:a3:57:b3:cf:46:20:0e:22:4a:dd:6d:22:f5:7b:9d:c3:40: 1e:41:66:2e:a7:6c:a6:7b:be:90:df:f4:e0:d5:28:d6:2e:3c: 28:f5:c2:a5:46:c2:9f:21:cc:9a:6e:4a:b9:59:06:af:e2:79: a5:de:1a:ba:f7:ad:14:b3:5e:74:2a:32:9d:20:74:0f:3d:7c: 31:cb:f3:81:ba:aa:19:40:65:33:66:a4:14:bc:61:86:0a:c4: 3b:85:7b:69:de:61:ca:94:b6:7c:bc:af:68:83:c5:32:b5:b8: b2:0a:76:7e:88:c1:e2:31:e2:33:39:ee:d8:75:21:e5:8e:bd: 9e:1e:ed:81:bf:84:0a:17:fa:fb:27:5b:3d:4e:4b:45:71:1e: d6:0b:54:59:11:6b:e0:50:d1:44:89:dd:76:21:cf:a0:a5:3a: f7:af:3d:55:cd:5e:b9:ff:4a:3a:ee:d5:72:f3:3a:fe:f6:b0: b2:ce:7c:8c:3d:a7:ed:44:6f:b2:c4:f2:83:0d:a6:fa:7c:4c: c5:83:ec:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4xF7R0ZhYwT3+qxTEK1tzOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjYwNTE2MTQwMTM3WhcNMjYwNTE3MTQwMTM3WjAzMTEwLwYDVQQD EygwNTMwOWMwYzg2MTFhY2NhNjUxZDEyMjA3NzIyMDcxNzljY2FmZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6FhIKef8APrLl8T5t80OlSO/e/C DXpOgAlZ6H++Zz9ZJFO92g5/a21EZq93QRih9U1KwMnJUIsq2oKPV9EHi6hF4G3A qX7+monBdKTyChesR/m/b1BiRwwY2DA5XyZixAA129SWjHjaLcolevb7KvTk/1nw VTijQOjkj1/1/3oNV7xM3NBL5Au2wFOHoTiuEY44B0stEABuRKGFVmYKijfH0EYa FvqbMuzvcwn3UucK7+vHJENMYlC8P2QPtqc1uVWtTalRUt2mU+8kpF2u7XlSVY8q RGzEoiNctQ523wAvJxzmj56sBJTfr0zB1OW2M5Fela8HL5DTdjjR4sFG0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUwnAyGEazKZR0SIHciBxecyv5bMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpjoqt4o xKDf52n57vOxdO3FRA72H1GwF9VEIVhZOqrUGE0nyiLi9QBKfjnkcVRk/E312+Rh X6NXs89GIA4iSt1tIvV7ncNAHkFmLqdspnu+kN/04NUo1i48KPXCpUbCnyHMmm5K uVkGr+J5pd4auvetFLNedCoynSB0Dz18McvzgbqqGUBlM2akFLxhhgrEO4V7ad5h ypS2fLyvaIPFMrW4sgp2fojB4jHiMznu2HUh5Y69nh7tgb+EChf6+ydbPU5LRXEe 1gtUWRFr4FDRRInddiHPoKU69689Vc1euf9KOu7VcvM6/vawss58jD2n7URvssTy gw2m+nxMxYPsxA== -----END CERTIFICATE-----Generated at Sat May 16 22:02:11 2026 by rpki-client