$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: vk33RYRzMoKYzOLfoQi3/klilMZkcEyKyYYjj0/fGIo= Subject key identifier: 83:01:70:FE:31:7D:2E:42:7C:BB:71:F7:CB:80:73:01:43:55:71:2D Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 01A13F02CB379C9CB1A71B95202E5D263DA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 1AB3 Signing time: Thu 15 Oct 2026 10:01:50 +0000 Manifest this update: Thu 15 Oct 2026 10:01:50 +0000 Manifest next update: Fri 16 Oct 2026 10:01:50 +0000 Files and hashes: 1: 05JvlK8l5zGiZuKN0_KQ-Ov5CiY.roa (hash: ot1oRZWtexWP8FkLp7pJg/bXEU47s255RLNkcaHGXF8=) 2: 4t9SG8r_UQN0bIbjGjmh-w7-zT4.roa (hash: nVIZnWls1sIIik8WAyGLvHsDtoBb4V67LyqEiuL3hhM=) 3: 5E3SENo7enmJV0f5QzVUO8ZLEBY.roa (hash: c2R0qq7Mhrj8ssta1I81r5ZynPZiiMEvO75gJxGz+s8=) 4: 5d-FBtLfeZqIezw12H0l7p2J7yQ.roa (hash: d84QOVN+1AP2/0GG7hx3uB1uInDZl8CHvh9J2TCGVTc=) 5: 9X0nqUKArhus_YUqfdP3WTiMnG8.roa (hash: c1biU22O73yr/MYC9AlC9fUEO9WNlunWbEG9QDYb8AA=) 6: A1WtZ_NCi3HRctp1iEUsUikRlRM.roa (hash: 2lGWGw+d+TArO/mPqTalF9zlkxryWG+SZsKODp2pgBY=) 7: PftedbvI9uIuGEN_e3yVk4LES7w.roa (hash: 9ALJe0lDwIScP2qwOJuyd3SZeutT5jJfaDAcFe7xqEQ=) 8: Q1gsiMhG7KeFlqjLEtCWXzCSx7w.roa (hash: IGSzzbDAIRV0gMo02Xu7ZT8JSjcCTONJ9LlOYiDEp/g=) 9: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: dm7tQRRRfPhyvRHP23lp1jCkb9Y3sO5/eluFg6FcupU=) 10: _90PdAdYFkH9HSAzXdpXa1HTPhg.roa (hash: r2HnEsU3YMp8gF0il12do2DrsODy0omS2NrJJQ+cHvg=) 11: fzzU9xiTwboQ9mMNg2Eegpb3LX0.roa (hash: nwpw3EqTS3bDEUKnzI/z5QrY+YFUcA5dqpUchh6jOTc=) 12: pB8Kq_WPMtszmruRpmO0DJJ4JMs.roa (hash: Tb4DafAqkHk2LhEolFtqXJ4NxI34mPUG6zMArDdgQBU=) 13: rZ5DYUMFdaYY8A4drz6E1fNVozQ.roa (hash: JY8aR7gymzRVW+zZjreC+9drKDyPLMEiDLQuy04AC5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Oct 2026 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:3f:02:cb:37:9c:9c:b1:a7:1b:95:20:2e:5d:26:3d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Oct 15 10:01:50 2026 GMT Not After : Oct 16 10:01:50 2026 GMT Subject: CN=830170fe317d2e427cbb71f7cb8073014355712d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:af:75:d0:90:22:9d:19:7d:19:fc:d8:58: b3:e1:d7:6e:0c:f9:36:9f:28:bc:01:bb:23:53:f0: 79:7d:9a:50:15:7c:95:99:cb:5e:4f:af:b9:7e:47: fa:56:4c:1b:70:12:6e:77:c3:9a:88:de:41:28:0a: df:55:ad:3f:e6:2e:88:92:67:54:ea:a6:9f:b5:4b: df:68:cd:d0:c0:14:6a:68:9b:c3:47:49:73:6c:4a: 15:b2:fe:e7:75:ad:11:67:d3:c6:ac:11:60:2e:92: b0:41:32:08:03:3e:37:a6:57:0c:b8:55:de:0b:99: c2:20:9d:a8:b5:77:ad:24:1f:d5:8a:2e:3b:f3:c0: 5b:e1:26:83:2c:80:b7:a4:f5:6a:e8:d1:42:aa:7c: 5c:ee:1e:19:66:92:bd:58:81:21:42:32:ac:5d:11: c0:f4:3b:5e:95:b8:39:3e:ea:d3:03:6c:a8:a9:cb: 41:75:ce:90:b4:be:c6:68:af:d1:41:ee:96:d9:66: cb:e8:de:5e:11:22:7f:3a:6a:55:2c:0a:b9:38:a4: e5:36:aa:e7:f6:cf:ce:99:01:52:df:d6:e6:a4:b2: e3:8a:14:f3:28:a8:40:28:12:0f:bd:28:e2:e6:49: ba:49:1c:52:15:7b:d1:fc:c2:9d:e7:e3:8e:df:39: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:01:70:FE:31:7D:2E:42:7C:BB:71:F7:CB:80:73:01:43:55:71:2D X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:dc:d1:ca:da:09:9b:01:5f:1d:3c:38:75:d7:3c:e1:34:a5: 6c:b0:69:bf:e3:ee:0a:30:51:00:c2:45:ab:6c:23:c4:4f:b0: cd:6d:69:88:a1:e6:04:79:3c:c5:c5:e4:00:c2:59:2a:b3:9e: 86:72:51:c6:05:b4:c3:8e:00:3e:f8:2e:bc:1a:15:37:21:2c: 4e:86:17:a7:d2:06:83:65:7d:33:64:e4:11:0d:3a:52:d6:27: 05:4a:dd:58:49:74:48:70:a8:34:68:c6:9c:40:06:89:99:ef: 3c:b3:76:96:99:17:8b:43:a9:b0:b9:ad:6b:fc:53:78:8b:c7: 43:5f:84:5f:43:fc:81:8a:70:ca:0b:0f:d1:0c:29:c3:ce:d6: a1:72:d5:65:5e:dd:b8:1b:b9:9f:b4:e7:49:3a:e2:32:04:01: 86:d5:94:4b:ad:79:e8:e0:e6:92:ae:b7:51:0c:71:27:ea:c8: ca:53:18:83:db:8b:32:f0:e5:1b:2e:0a:83:b0:01:9c:41:b5: b4:e4:d1:6b:cf:4b:2b:1d:5a:f8:55:f3:a0:99:de:3e:01:46: 08:31:75:c4:a7:a9:6e:94:75:fe:2f:3b:14:09:df:32:ec:ee: 9e:6f:f7:af:35:b2:46:0b:10:be:38:69:b8:1c:e0:2b:a0:b9: fa:5a:c5:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE/Ass3nJyxpxuVIC5dJj2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjYxMDE1MTAwMTUwWhcNMjYxMDE2MTAwMTUwWjAzMTEwLwYDVQQD Eyg4MzAxNzBmZTMxN2QyZTQyN2NiYjcxZjdjYjgwNzMwMTQzNTU3MTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSmvddCQIp0ZfRn82Fiz4dduDPk2 nyi8AbsjU/B5fZpQFXyVmcteT6+5fkf6VkwbcBJud8OaiN5BKArfVa0/5i6IkmdU 6qaftUvfaM3QwBRqaJvDR0lzbEoVsv7nda0RZ9PGrBFgLpKwQTIIAz43plcMuFXe C5nCIJ2otXetJB/Vii4788Bb4SaDLIC3pPVq6NFCqnxc7h4ZZpK9WIEhQjKsXRHA 9Dtelbg5PurTA2yoqctBdc6QtL7GaK/RQe6W2WbL6N5eESJ/OmpVLAq5OKTlNqrn 9s/OmQFS39bmpLLjihTzKKhAKBIPvSji5km6SRxSFXvR/MKd5+OO3zkltwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMBcP4xfS5CfLtx98uAcwFDVXEtMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtzRytoJ mwFfHTw4ddc84TSlbLBpv+PuCjBRAMJFq2wjxE+wzW1piKHmBHk8xcXkAMJZKrOe hnJRxgW0w44APvguvBoVNyEsToYXp9IGg2V9M2TkEQ06UtYnBUrdWEl0SHCoNGjG nEAGiZnvPLN2lpkXi0OpsLmta/xTeIvHQ1+EX0P8gYpwygsP0Qwpw87WoXLVZV7d uBu5n7TnSTriMgQBhtWUS6156ODmkq63UQxxJ+rIylMYg9uLMvDlGy4Kg7ABnEG1 tOTRa89LKx1a+FXzoJnePgFGCDF1xKepbpR1/i87FAnfMuzunm/3rzWyRgsQvjhp uBzgK6C5+lrFWQ== -----END CERTIFICATE-----Generated at Thu Oct 15 16:26:35 2026 by rpki-client