$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft File: VUwk1Deg1Wub0L5IimDP1czI-b8.mft (raw, json) Hash identifier: xo+Y2jNlZ373OV7xbaiVviNtH9oslSrI0RqduI2bc+Y= Subject key identifier: 27:E1:22:7F:8F:06:4A:A5:38:A9:B3:18:FF:D8:FB:3D:A9:E0:3C:E7 Authority key identifier: 55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF Certificate issuer: /CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf Certificate serial: 019D826C4659940C256C5782BEE9F73FE62F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft Manifest number: A3 Signing time: Sun 12 Apr 2026 16:00:27 +0000 Manifest this update: Sun 12 Apr 2026 16:00:27 +0000 Manifest next update: Mon 13 Apr 2026 16:00:27 +0000 Files and hashes: 1: AOkKST9KwSJH3sXE5USL9gzAqUU.roa (hash: aXhO9sIv6q5kHGbb9/fb2Aw1F2NhhrGlB5l1s7C1sMo=) 2: DCZgz3VaJZPCqv-Xdr9kw9h7brE.roa (hash: DyiZMiJQd8x2jp86BuGzWff7b7OfU0LvcqAW62QVCmg=) 3: Jpc9akMn776zSYTD6mXsyRzavLU.roa (hash: ZfuvokmeEiQYfhhAu6Yv9wBQKPiuHqzkSEN6L6pFYXs=) 4: VRMDqGgJNAkkzV2QU5k7y3ameDM.roa (hash: +dcQEak+RgFEIETOwcJ9qNLzNVuw4mUqjHHzKz8y2Vg=) 5: VUwk1Deg1Wub0L5IimDP1czI-b8.crl (hash: pc2Pmo748ckLJAdfDCQhvc4c6+TgN4X5MXt296KmBrQ=) 6: YUvNuDDndHcf-AWuGGf2zqBhFIE.roa (hash: 7DuazkLVNE3f7cMkbQDSXftJtVier8QCOPrebbq+iTo=) 7: kMXVbz2TuORvoHZ7UfuE6YxZLcc.roa (hash: tU3JunGy9A12HYURdznAlTij6asn5+6G+/mvxmK09Xw=) 8: lHlRsL-Mq2IXLN_FCgk3n5SW5Ow.roa (hash: AUB+QIsy3NSsT4UqxQv/l15uvrlHGM0Y5Yne/M+wgrs=) 9: q5A4k1LuI-8fQrtHp3b5trdFPzQ.roa (hash: KFUng+vVrjLAjS4gi17nWldghXXi/irFXTH6lAnJMPU=) 10: stcR-lSqkJU2Cb-qmerN4K0gerA.roa (hash: VXZV1NgbHgfdGJFJNdfWgsLM9jnWqEunQBxug2Zcoyg=) 11: z-M8hA9YhJMehJj6l7J_V1Cf40s.roa (hash: 8tsU5K53aTtChU1kltfQFAvWJiRSonY1j+RJ+vsZrJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Apr 2026 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:82:6c:46:59:94:0c:25:6c:57:82:be:e9:f7:3f:e6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf Validity Not Before: Apr 12 16:00:27 2026 GMT Not After : Apr 13 16:00:27 2026 GMT Subject: CN=27e1227f8f064aa538a9b318ffd8fb3da9e03ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fa:24:58:c3:ff:45:69:6f:9f:fe:02:e3:5d: 25:03:e8:c7:dc:1b:cc:20:85:79:21:15:de:09:cb: 34:8e:7b:71:3a:8c:2a:6c:67:fc:2a:e4:3e:fa:6f: cc:33:da:be:1c:00:7c:3c:f1:0f:1f:68:56:23:ce: 73:60:30:dd:b4:32:7d:e5:87:4f:d1:09:10:0b:af: 50:1f:36:db:f9:bc:d5:b8:ba:01:02:a1:fe:91:4e: 33:b9:9b:ea:81:94:52:90:79:23:65:6b:1f:b7:57: c7:24:53:5a:33:c1:05:3b:28:f2:8c:bf:b3:2b:8b: 05:d4:ac:d8:b0:07:8c:38:a4:32:15:17:de:fd:91: d5:b5:e8:a6:d3:c3:a2:6a:a2:d7:6c:c4:c3:1c:4f: 8a:44:57:23:a7:d9:6f:c8:01:09:23:ca:6e:ef:c7: 54:c3:da:a7:97:3a:85:a6:cb:f1:a1:d0:26:9f:74: de:ea:cd:97:ff:ca:49:b1:a6:23:86:64:34:44:83: 43:42:36:7b:c1:c9:07:c1:3a:f2:c9:11:3f:0c:b2: 3b:97:78:c7:45:ec:47:7a:83:64:20:6d:aa:c2:6a: e5:f4:2a:92:ef:ae:d9:a5:5b:14:b0:f4:38:42:63: c8:59:e5:64:c6:56:54:a5:c1:05:b2:5e:b1:19:5f: 13:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E1:22:7F:8F:06:4A:A5:38:A9:B3:18:FF:D8:FB:3D:A9:E0:3C:E7 X509v3 Authority Key Identifier: keyid:55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f3:ee:8c:01:ae:71:f5:43:74:1e:5e:87:41:70:7b:99:73: 18:71:1c:8e:12:4e:9b:41:7c:c8:d1:68:3e:eb:42:b8:32:7e: 3d:a2:6a:d6:b6:06:8a:00:cb:ad:02:4f:9a:24:89:83:ab:a8: 28:11:44:af:83:36:8c:50:13:c0:c4:af:e6:37:1b:db:87:b0: ec:18:fb:58:a7:fa:5e:82:22:ff:9f:0e:6b:40:f4:7c:ea:2f: 41:0b:bd:8c:b8:2d:de:11:6b:0f:01:c0:e7:02:0e:e9:67:f2: 34:c8:24:b2:91:17:a9:44:66:a6:9a:95:ab:04:01:f9:e6:65: e7:d0:e5:7a:40:79:a2:98:68:c7:b6:54:cc:6c:04:d2:c9:8b: 07:36:1c:7b:ae:9b:66:4c:3e:e9:5d:f9:a5:2a:52:e9:0d:34: 1e:5c:cf:76:c4:63:fb:1c:2f:ac:9e:21:6e:52:a8:c7:ca:97: ba:85:8b:e2:5e:96:43:f8:48:42:bb:94:69:c3:ce:9f:fc:0a: e1:51:d8:12:bc:64:b7:a8:38:93:a9:f0:c9:f8:54:22:94:12: a8:e0:e1:59:6b:7c:d9:f7:4f:13:4d:40:86:41:df:ef:3d:96: 6c:2b:a3:d6:30:f4:00:96:66:90:d8:8d:ac:49:82:e5:9b:d8: 20:5f:2b:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2CbEZZlAwlbFeCvun3P+YvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NGMyNGQ0MzdhMGQ1NmI5YmQwYmU0ODhhNjBjZmQ1Y2Nj OGY5YmYwHhcNMjYwNDEyMTYwMDI3WhcNMjYwNDEzMTYwMDI3WjAzMTEwLwYDVQQD EygyN2UxMjI3ZjhmMDY0YWE1MzhhOWIzMThmZmQ4ZmIzZGE5ZTAzY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/okWMP/RWlvn/4C410lA+jH3BvM IIV5IRXeCcs0jntxOowqbGf8KuQ++m/MM9q+HAB8PPEPH2hWI85zYDDdtDJ95YdP 0QkQC69QHzbb+bzVuLoBAqH+kU4zuZvqgZRSkHkjZWsft1fHJFNaM8EFOyjyjL+z K4sF1KzYsAeMOKQyFRfe/ZHVteim08OiaqLXbMTDHE+KRFcjp9lvyAEJI8pu78dU w9qnlzqFpsvxodAmn3Te6s2X/8pJsaYjhmQ0RINDQjZ7wckHwTryyRE/DLI7l3jH RexHeoNkIG2qwmrl9CqS767ZpVsUsPQ4QmPIWeVkxlZUpcEFsl6xGV8TNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfhIn+PBkqlOKmzGP/Y+z2p4DznMB8GA1UdIwQY MBaAFFVMJNQ3oNVrm9C+SIpgz9XMyPm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lMjgyZTctNGJmMS00Y2I4LWFlNmUt NjliYWExMWQ1NzhmLzEvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lMjgyZTctNGJmMS00Y2I4LWFlNmUtNjliYWExMWQ1Nzhm LzEvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/PujAGu cfVDdB5eh0Fwe5lzGHEcjhJOm0F8yNFoPutCuDJ+PaJq1rYGigDLrQJPmiSJg6uo KBFEr4M2jFATwMSv5jcb24ew7Bj7WKf6XoIi/58Oa0D0fOovQQu9jLgt3hFrDwHA 5wIO6WfyNMgkspEXqURmppqVqwQB+eZl59DlekB5ophox7ZUzGwE0smLBzYce66b Zkw+6V35pSpS6Q00HlzPdsRj+xwvrJ4hblKox8qXuoWL4l6WQ/hIQruUacPOn/wK 4VHYErxkt6g4k6nwyfhUIpQSqODhWWt82fdPE01AhkHf7z2WbCuj1jD0AJZmkNiN rEmC5ZvYIF8rlw== -----END CERTIFICATE-----Generated at Mon Apr 13 02:31:14 2026 by rpki-client