$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: tkgfLbcUthFuYqJQIY973syLBL0gnVbigK1zOhXrGUw= Subject key identifier: 44:A6:A8:74:F5:00:86:E1:4B:38:AA:5B:1B:54:B5:40:B1:DF:26:02 Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 019D37C0B4CA79F0444B7BD0165D37B6EF9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 189D Signing time: Sun 29 Mar 2026 04:01:09 +0000 Manifest this update: Sun 29 Mar 2026 04:01:09 +0000 Manifest next update: Mon 30 Mar 2026 04:01:09 +0000 Files and hashes: 1: 05JvlK8l5zGiZuKN0_KQ-Ov5CiY.roa (hash: ot1oRZWtexWP8FkLp7pJg/bXEU47s255RLNkcaHGXF8=) 2: 4t9SG8r_UQN0bIbjGjmh-w7-zT4.roa (hash: nVIZnWls1sIIik8WAyGLvHsDtoBb4V67LyqEiuL3hhM=) 3: 5E3SENo7enmJV0f5QzVUO8ZLEBY.roa (hash: c2R0qq7Mhrj8ssta1I81r5ZynPZiiMEvO75gJxGz+s8=) 4: 5d-FBtLfeZqIezw12H0l7p2J7yQ.roa (hash: d84QOVN+1AP2/0GG7hx3uB1uInDZl8CHvh9J2TCGVTc=) 5: 9X0nqUKArhus_YUqfdP3WTiMnG8.roa (hash: c1biU22O73yr/MYC9AlC9fUEO9WNlunWbEG9QDYb8AA=) 6: A1WtZ_NCi3HRctp1iEUsUikRlRM.roa (hash: 2lGWGw+d+TArO/mPqTalF9zlkxryWG+SZsKODp2pgBY=) 7: PftedbvI9uIuGEN_e3yVk4LES7w.roa (hash: 9ALJe0lDwIScP2qwOJuyd3SZeutT5jJfaDAcFe7xqEQ=) 8: Q1gsiMhG7KeFlqjLEtCWXzCSx7w.roa (hash: IGSzzbDAIRV0gMo02Xu7ZT8JSjcCTONJ9LlOYiDEp/g=) 9: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: zvFhTq/n52MzG9Lkr5xzMTm2EFwpQ32IrcKngOYXPgs=) 10: _90PdAdYFkH9HSAzXdpXa1HTPhg.roa (hash: r2HnEsU3YMp8gF0il12do2DrsODy0omS2NrJJQ+cHvg=) 11: fzzU9xiTwboQ9mMNg2Eegpb3LX0.roa (hash: nwpw3EqTS3bDEUKnzI/z5QrY+YFUcA5dqpUchh6jOTc=) 12: pB8Kq_WPMtszmruRpmO0DJJ4JMs.roa (hash: Tb4DafAqkHk2LhEolFtqXJ4NxI34mPUG6zMArDdgQBU=) 13: rZ5DYUMFdaYY8A4drz6E1fNVozQ.roa (hash: JY8aR7gymzRVW+zZjreC+9drKDyPLMEiDLQuy04AC5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:c0:b4:ca:79:f0:44:4b:7b:d0:16:5d:37:b6:ef:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Mar 29 04:01:09 2026 GMT Not After : Mar 30 04:01:09 2026 GMT Subject: CN=44a6a874f50086e14b38aa5b1b54b540b1df2602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5c:ae:04:df:87:44:3a:1c:f6:98:dc:fb:6a: 36:84:f5:f4:c7:3f:ed:12:ba:99:0c:37:b8:dc:27: e1:58:e9:cb:8f:e4:51:bc:60:b1:c7:11:29:ff:58: ee:4d:60:bd:f5:15:15:34:3b:48:5b:24:85:d9:40: 84:ab:57:00:81:4f:1f:cc:71:05:b7:26:95:8d:0f: be:bf:86:d2:b9:b6:5c:4c:f4:0a:26:16:40:0e:40: d7:d0:fd:f4:4f:99:d8:37:13:dc:36:96:1e:46:05: d1:ba:2b:ff:bc:88:f0:0c:5a:74:77:f5:e8:99:16: d5:87:d7:f8:24:9b:f5:4c:66:40:4b:04:f5:4a:df: db:43:23:7f:87:cb:82:01:86:dd:38:71:0c:ff:d4: d5:1e:47:5f:ad:45:1a:e1:73:16:61:92:71:5c:96: 71:a1:4b:20:79:e4:75:30:96:90:41:42:d6:1a:30: 6f:80:10:f7:fd:a3:d2:83:e2:53:5c:11:86:cd:c1: 4b:13:8e:e5:0e:31:71:4c:45:ef:36:16:09:4c:94: 35:1a:d5:6d:81:88:f0:f1:d1:f6:53:fb:8a:16:72: 5e:34:3f:f8:07:7d:55:6b:f3:c6:01:ca:68:bf:33: 73:56:e5:31:e1:e0:07:9f:aa:f6:be:ad:34:4a:29: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A6:A8:74:F5:00:86:E1:4B:38:AA:5B:1B:54:B5:40:B1:DF:26:02 X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:62:9a:b2:ac:cb:27:8a:42:18:7d:67:0d:6c:d0:71:69:fc: 7e:74:d4:be:86:4e:b2:1b:97:12:23:18:01:b4:4d:d1:31:0c: e7:7b:d0:d1:23:c2:44:6b:f4:a0:d9:9f:5d:df:f1:7a:b1:8e: be:8a:fc:a5:38:7a:ca:60:d1:bf:60:c3:2a:7f:4b:95:1a:28: cf:5a:62:da:08:b4:96:de:49:a4:33:5c:29:cf:82:d7:47:db: 3c:e9:54:a3:71:a5:0c:37:f5:b0:3c:a8:81:f1:54:7a:f2:6c: a5:5b:08:6e:8d:ed:68:f5:be:6d:8b:41:c8:e3:1f:76:70:50: e9:4a:b3:e7:a2:23:4d:b7:e0:fb:6d:ee:79:42:ab:d5:37:92: aa:08:6a:01:95:4a:27:8c:56:5b:3f:1a:fa:d4:99:b1:a0:8c: d6:d9:74:83:93:5d:b0:ab:dc:a1:5b:3d:93:95:5c:17:d5:84: b3:27:7f:49:3b:cd:0c:27:85:7c:ed:b7:01:c1:4a:df:1e:15: 2e:ea:02:23:13:ba:a2:7c:07:aa:f0:9e:84:b6:79:c9:40:44: 84:b2:ae:dc:1d:62:de:d1:60:8d:99:74:f2:fd:1f:a8:f9:e3: 2e:20:98:b3:2a:39:ff:c1:76:a2:4e:6f:cd:17:b8:56:f8:3c: 08:58:b9:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ03wLTKefBES3vQFl03tu+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjYwMzI5MDQwMTA5WhcNMjYwMzMwMDQwMTA5WjAzMTEwLwYDVQQD Eyg0NGE2YTg3NGY1MDA4NmUxNGIzOGFhNWIxYjU0YjU0MGIxZGYyNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlyuBN+HRDoc9pjc+2o2hPX0xz/t ErqZDDe43CfhWOnLj+RRvGCxxxEp/1juTWC99RUVNDtIWySF2UCEq1cAgU8fzHEF tyaVjQ++v4bSubZcTPQKJhZADkDX0P30T5nYNxPcNpYeRgXRuiv/vIjwDFp0d/Xo mRbVh9f4JJv1TGZASwT1St/bQyN/h8uCAYbdOHEM/9TVHkdfrUUa4XMWYZJxXJZx oUsgeeR1MJaQQULWGjBvgBD3/aPSg+JTXBGGzcFLE47lDjFxTEXvNhYJTJQ1GtVt gYjw8dH2U/uKFnJeND/4B31Va/PGAcpovzNzVuUx4eAHn6r2vq00SikZuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESmqHT1AIbhSziqWxtUtUCx3yYCMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGKasqzL J4pCGH1nDWzQcWn8fnTUvoZOshuXEiMYAbRN0TEM53vQ0SPCRGv0oNmfXd/xerGO vor8pTh6ymDRv2DDKn9LlRooz1pi2gi0lt5JpDNcKc+C10fbPOlUo3GlDDf1sDyo gfFUevJspVsIbo3taPW+bYtByOMfdnBQ6Uqz56IjTbfg+23ueUKr1TeSqghqAZVK J4xWWz8a+tSZsaCM1tl0g5NdsKvcoVs9k5VcF9WEsyd/STvNDCeFfO23AcFK3x4V LuoCIxO6onwHqvCehLZ5yUBEhLKu3B1i3tFgjZl08v0fqPnjLiCYsyo5/8F2ok5v zRe4Vvg8CFi5YA== -----END CERTIFICATE-----Generated at Sun Mar 29 11:16:40 2026 by rpki-client