$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft File: VUwk1Deg1Wub0L5IimDP1czI-b8.mft (raw, json) Hash identifier: q9uee4XMd0lt07e4OPimrtg1iP5rDGUCOP9UVpEScvs= Subject key identifier: A0:E5:0D:66:2C:39:F3:E9:D4:D9:04:E0:27:53:60:CE:D0:21:93:A7 Authority key identifier: 55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF Certificate issuer: /CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf Certificate serial: 019C98BFDD8C0C4A239EA24C6CC8055629B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft Manifest number: 2A Signing time: Thu 26 Feb 2026 07:00:36 +0000 Manifest this update: Thu 26 Feb 2026 07:00:36 +0000 Manifest next update: Fri 27 Feb 2026 07:00:36 +0000 Files and hashes: 1: AOkKST9KwSJH3sXE5USL9gzAqUU.roa (hash: aXhO9sIv6q5kHGbb9/fb2Aw1F2NhhrGlB5l1s7C1sMo=) 2: DCZgz3VaJZPCqv-Xdr9kw9h7brE.roa (hash: DyiZMiJQd8x2jp86BuGzWff7b7OfU0LvcqAW62QVCmg=) 3: Jpc9akMn776zSYTD6mXsyRzavLU.roa (hash: ZfuvokmeEiQYfhhAu6Yv9wBQKPiuHqzkSEN6L6pFYXs=) 4: VRMDqGgJNAkkzV2QU5k7y3ameDM.roa (hash: +dcQEak+RgFEIETOwcJ9qNLzNVuw4mUqjHHzKz8y2Vg=) 5: VUwk1Deg1Wub0L5IimDP1czI-b8.crl (hash: dPq3E/g5kQVlDIvHST0vopFvqMZjcF3LLQpRtrLDuNM=) 6: YUvNuDDndHcf-AWuGGf2zqBhFIE.roa (hash: 7DuazkLVNE3f7cMkbQDSXftJtVier8QCOPrebbq+iTo=) 7: kMXVbz2TuORvoHZ7UfuE6YxZLcc.roa (hash: tU3JunGy9A12HYURdznAlTij6asn5+6G+/mvxmK09Xw=) 8: lHlRsL-Mq2IXLN_FCgk3n5SW5Ow.roa (hash: AUB+QIsy3NSsT4UqxQv/l15uvrlHGM0Y5Yne/M+wgrs=) 9: q5A4k1LuI-8fQrtHp3b5trdFPzQ.roa (hash: KFUng+vVrjLAjS4gi17nWldghXXi/irFXTH6lAnJMPU=) 10: stcR-lSqkJU2Cb-qmerN4K0gerA.roa (hash: VXZV1NgbHgfdGJFJNdfWgsLM9jnWqEunQBxug2Zcoyg=) 11: z-M8hA9YhJMehJj6l7J_V1Cf40s.roa (hash: 8tsU5K53aTtChU1kltfQFAvWJiRSonY1j+RJ+vsZrJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Feb 2026 07:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:98:bf:dd:8c:0c:4a:23:9e:a2:4c:6c:c8:05:56:29:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf Validity Not Before: Feb 26 07:00:36 2026 GMT Not After : Feb 27 07:00:36 2026 GMT Subject: CN=a0e50d662c39f3e9d4d904e0275360ced02193a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6d:3b:42:3f:e5:f8:65:38:f5:dd:ef:6c:cc: 6e:8e:b0:3d:22:ff:c9:e8:2f:07:78:e4:1d:ad:5f: 91:23:f7:d3:fe:b8:3f:4c:21:01:ad:7b:6d:df:3f: 6f:fd:f4:d9:ba:b9:9d:ac:aa:53:3d:a3:2e:ff:91: 2c:81:68:c3:0c:29:37:d3:73:e9:7d:df:76:e2:9b: 02:7a:d8:af:15:ad:10:69:b9:bc:4d:47:2d:72:35: ef:76:d9:36:a7:f5:33:fb:70:aa:06:21:6f:67:00: fd:01:c9:c9:8a:24:5b:a8:f5:77:a0:81:1a:a0:6f: 22:8b:a8:41:4f:fc:d3:e3:d5:e1:b1:c3:5a:64:18: 1a:f8:2e:ab:cc:64:86:5d:d0:f5:4e:72:52:da:ec: a7:54:36:5f:90:e1:4a:13:58:72:7d:59:17:cc:01: 7b:89:37:fd:d6:db:11:5b:1c:48:86:7b:36:27:ab: c7:f1:27:61:9a:40:ab:22:1a:64:be:a9:d1:e2:9a: 2b:06:04:3f:0a:04:a0:6d:f4:fa:df:2d:34:bd:c1: e3:65:55:c0:fe:15:15:e0:c7:d5:da:c5:0c:a3:4c: ee:1c:fa:26:f5:88:bf:61:90:6b:81:ab:f9:da:31: 4c:45:a0:9c:15:f2:5c:4f:e1:b1:71:8f:54:6a:67: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E5:0D:66:2C:39:F3:E9:D4:D9:04:E0:27:53:60:CE:D0:21:93:A7 X509v3 Authority Key Identifier: keyid:55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:00:1a:fd:88:68:8d:f8:61:cd:94:73:99:69:c3:ed:a7:a0: bb:ea:82:07:37:02:ae:4c:29:9c:13:6e:e3:d3:07:8c:79:66: 60:5f:c5:9c:9b:d5:cd:99:6c:89:d6:3f:3a:7f:c7:90:c7:32: 32:52:9a:d5:68:ae:0d:5a:ad:a4:14:52:43:ef:d7:24:f5:d9: c4:ff:f6:90:a5:c8:64:49:d4:ff:59:e4:e9:f1:e9:1f:e2:9f: 9a:c0:0b:09:5a:7c:67:67:7a:d6:da:cc:03:62:f0:3e:2f:5c: a0:04:95:50:d5:01:11:92:a9:0d:ae:94:83:f7:27:7d:5b:eb: 79:16:61:73:6e:d5:1b:6e:6c:44:6a:d7:0f:4a:b2:64:f4:16: 7a:5f:3a:a5:f1:12:2c:57:e5:57:eb:71:c2:3e:6a:fd:b7:28: af:c9:0f:b3:f7:ed:6b:9a:ff:d1:13:a7:12:ac:ba:d6:f9:79: b2:c6:a0:74:df:66:e5:4d:06:3b:3c:e2:28:64:f4:49:69:33: 74:08:29:b9:83:a6:15:16:38:76:89:37:77:e0:64:06:84:6c: 7b:a5:47:17:d7:eb:1b:37:17:6e:aa:d4:9f:0d:f4:55:7a:03: 95:ca:b8:bf:e8:ca:09:87:cf:ed:2b:e9:22:aa:95:17:93:05: 0d:2a:cd:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyYv92MDEojnqJMbMgFVimxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NGMyNGQ0MzdhMGQ1NmI5YmQwYmU0ODhhNjBjZmQ1Y2Nj OGY5YmYwHhcNMjYwMjI2MDcwMDM2WhcNMjYwMjI3MDcwMDM2WjAzMTEwLwYDVQQD EyhhMGU1MGQ2NjJjMzlmM2U5ZDRkOTA0ZTAyNzUzNjBjZWQwMjE5M2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm07Qj/l+GU49d3vbMxujrA9Iv/J 6C8HeOQdrV+RI/fT/rg/TCEBrXtt3z9v/fTZurmdrKpTPaMu/5EsgWjDDCk303Pp fd924psCetivFa0Qabm8TUctcjXvdtk2p/Uz+3CqBiFvZwD9AcnJiiRbqPV3oIEa oG8ii6hBT/zT49XhscNaZBga+C6rzGSGXdD1TnJS2uynVDZfkOFKE1hyfVkXzAF7 iTf91tsRWxxIhns2J6vH8SdhmkCrIhpkvqnR4porBgQ/CgSgbfT63y00vcHjZVXA /hUV4MfV2sUMo0zuHPom9Yi/YZBrgav52jFMRaCcFfJcT+GxcY9UamfIzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDlDWYsOfPp1NkE4CdTYM7QIZOnMB8GA1UdIwQY MBaAFFVMJNQ3oNVrm9C+SIpgz9XMyPm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lMjgyZTctNGJmMS00Y2I4LWFlNmUt NjliYWExMWQ1NzhmLzEvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lMjgyZTctNGJmMS00Y2I4LWFlNmUtNjliYWExMWQ1Nzhm LzEvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAAa/Yho jfhhzZRzmWnD7aegu+qCBzcCrkwpnBNu49MHjHlmYF/FnJvVzZlsidY/On/HkMcy MlKa1WiuDVqtpBRSQ+/XJPXZxP/2kKXIZEnU/1nk6fHpH+KfmsALCVp8Z2d61trM A2LwPi9coASVUNUBEZKpDa6Ug/cnfVvreRZhc27VG25sRGrXD0qyZPQWel86pfES LFflV+txwj5q/bcor8kPs/fta5r/0ROnEqy61vl5ssagdN9m5U0GOzziKGT0SWkz dAgpuYOmFRY4dok3d+BkBoRse6VHF9frGzcXbqrUnw30VXoDlcq4v+jKCYfP7Svp IqqVF5MFDSrNEA== -----END CERTIFICATE-----Generated at Thu Feb 26 17:12:16 2026 by rpki-client