$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: twR4hmYqUj1UaoAQWflX7hKBFgMoUrNoVtplPkQeM9M= Subject key identifier: AB:CF:6D:83:06:2C:9B:57:8B:B7:7B:56:AE:BF:DF:FE:DB:E4:4E:53 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019DCC3CFC693979734BD1F48FA2F5AB9BA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 1528 Signing time: Mon 27 Apr 2026 00:00:41 +0000 Manifest this update: Mon 27 Apr 2026 00:00:41 +0000 Manifest next update: Tue 28 Apr 2026 00:00:41 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: A2ISPQ1tzfo3+PPF/HkPZbwu7uX8oOJ7ue/iv4KVj8Q=) 7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) 12: u08NEvufIyYOw5wjByrYL3KDftg.roa (hash: +kuBshu076KXzQxN7e8+v+U/mTU0N1n8TG4+SUR96MM=) 13: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:3c:fc:69:39:79:73:4b:d1:f4:8f:a2:f5:ab:9b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Apr 27 00:00:41 2026 GMT Not After : Apr 28 00:00:41 2026 GMT Subject: CN=abcf6d83062c9b578bb77b56aebfdffedbe44e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:8d:60:83:ed:6c:24:52:16:de:98:d4:c4: a0:92:b2:aa:ed:0b:f2:14:23:70:ec:62:86:f2:41: 92:c8:30:a3:9f:3b:ca:2c:f1:be:70:98:de:43:e0: 24:3e:0b:f9:72:fe:ac:60:38:f1:a2:4a:14:e5:71: 8c:4d:85:bd:16:6c:c9:ce:cb:65:e5:be:dc:d6:e8: ad:ae:ac:0c:2f:7c:3a:b1:0b:12:55:30:da:2e:0b: 4d:4c:5a:b1:cc:47:46:72:02:5c:44:2e:58:3b:04: a6:81:4d:fd:b1:5d:87:5f:92:dd:05:25:67:2e:da: d1:23:c6:61:70:97:64:d8:c2:8d:0c:cd:ef:96:31: 44:2d:4f:cf:40:2c:98:9d:62:01:af:81:e9:26:77: de:d0:6a:db:ad:3e:1c:7e:9e:da:45:fb:9d:1e:85: ba:83:c3:75:b5:71:3c:f3:97:ae:c8:6c:5e:96:5b: 5e:4e:34:bf:9c:77:1f:6d:bd:5c:81:84:fa:47:ab: 18:f4:c1:9b:48:34:12:45:be:a9:43:c0:7e:4a:3c: 2a:18:b7:0b:9b:fb:65:a3:e7:81:b1:cd:54:3d:3d: d6:63:6b:76:f4:52:11:a2:3b:a0:15:d6:7f:d1:de: 1b:f9:32:1b:59:bf:0d:b1:e0:2c:7c:b6:a9:fc:01: 9c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CF:6D:83:06:2C:9B:57:8B:B7:7B:56:AE:BF:DF:FE:DB:E4:4E:53 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b8:e3:ac:8a:15:da:fa:7a:e9:d6:f0:03:ac:d5:7a:1d:41: 28:9b:cc:44:15:19:30:00:65:34:b5:6e:80:2b:dd:37:1c:4a: 45:37:41:20:81:0d:c4:9d:be:a0:1e:84:8f:9f:82:63:e6:bd: 02:80:80:69:73:02:c8:c1:49:3f:47:88:e5:a8:0e:7e:a7:b2: 22:09:ec:69:d3:bd:e8:c6:74:5a:3f:36:da:a2:1c:0c:44:99: 4b:5e:a0:cb:95:d0:bb:50:a3:56:70:9a:ad:9a:8b:fb:25:e0: 35:0a:aa:0f:e2:60:10:57:6d:1e:5b:ed:07:1b:5e:a0:72:42: 95:10:56:d6:3f:32:25:b3:ce:1d:31:66:a9:f6:b9:a5:2d:72: 57:af:6d:a0:73:4e:04:2f:0d:46:36:ac:32:1a:df:b7:e6:f4: 53:4e:af:55:b1:ee:eb:21:35:36:f7:4c:8a:f9:73:13:ff:4a: 83:0e:ad:6f:f4:20:aa:60:3c:67:a6:d4:cc:50:18:55:0b:ba: 24:70:fa:08:13:06:f7:f6:f5:34:82:1b:5f:70:41:49:ec:a1: 98:d4:7b:f2:65:ae:d3:bd:28:a7:2c:da:53:3e:b9:09:e9:3e: 53:ea:3e:3a:5a:63:6e:f9:f5:3a:b3:bf:e2:fb:45:b2:90:f7: 67:86:87:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MPPxpOXlzS9H0j6L1q5upMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwNDI3MDAwMDQxWhcNMjYwNDI4MDAwMDQxWjAzMTEwLwYDVQQD EyhhYmNmNmQ4MzA2MmM5YjU3OGJiNzdiNTZhZWJmZGZmZWRiZTQ0ZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoeNYIPtbCRSFt6Y1MSgkrKq7Qvy FCNw7GKG8kGSyDCjnzvKLPG+cJjeQ+AkPgv5cv6sYDjxokoU5XGMTYW9FmzJzstl 5b7c1uitrqwML3w6sQsSVTDaLgtNTFqxzEdGcgJcRC5YOwSmgU39sV2HX5LdBSVn LtrRI8ZhcJdk2MKNDM3vljFELU/PQCyYnWIBr4HpJnfe0GrbrT4cfp7aRfudHoW6 g8N1tXE885euyGxellteTjS/nHcfbb1cgYT6R6sY9MGbSDQSRb6pQ8B+SjwqGLcL m/tlo+eBsc1UPT3WY2t29FIRojugFdZ/0d4b+TIbWb8NseAsfLap/AGcOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvPbYMGLJtXi7d7Vq6/3/7b5E5TMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrjjrIoV 2vp66dbwA6zVeh1BKJvMRBUZMABlNLVugCvdNxxKRTdBIIENxJ2+oB6Ej5+CY+a9 AoCAaXMCyMFJP0eI5agOfqeyIgnsadO96MZ0Wj822qIcDESZS16gy5XQu1CjVnCa rZqL+yXgNQqqD+JgEFdtHlvtBxteoHJClRBW1j8yJbPOHTFmqfa5pS1yV69toHNO BC8NRjasMhrft+b0U06vVbHu6yE1NvdMivlzE/9Kgw6tb/QgqmA8Z6bUzFAYVQu6 JHD6CBMG9/b1NIIbX3BBSeyhmNR78mWu070opyzaUz65Cek+U+o+Olpjbvn1OrO/ 4vtFspD3Z4aHbQ== -----END CERTIFICATE-----Generated at Mon Apr 27 09:15:30 2026 by rpki-client