$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: +qdkKc+u1RINruJKRW7U3l+t5+2zN4f5dhh0rYXkN3A= Subject key identifier: 16:21:DA:72:43:1F:04:72:49:81:AC:F2:3C:80:0D:E2:BD:19:B0:5D Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019EB7D78AF257F58AD4FDB55505734EB2D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 15A2 Signing time: Thu 11 Jun 2026 18:00:16 +0000 Manifest this update: Thu 11 Jun 2026 18:00:16 +0000 Manifest next update: Fri 12 Jun 2026 18:00:16 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: R3ijd53OBKTyAyHa1KTVMyITpv4IdM8WcSQOrNkIBn8=) 7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) 12: u08NEvufIyYOw5wjByrYL3KDftg.roa (hash: +kuBshu076KXzQxN7e8+v+U/mTU0N1n8TG4+SUR96MM=) 13: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:d7:8a:f2:57:f5:8a:d4:fd:b5:55:05:73:4e:b2:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jun 11 18:00:16 2026 GMT Not After : Jun 12 18:00:16 2026 GMT Subject: CN=1621da72431f04724981acf23c800de2bd19b05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b3:69:d5:fb:db:00:b3:8f:d1:a2:dc:28:fa: 8f:d1:21:dd:25:c2:ab:3b:1c:bf:5b:c2:32:37:24: d0:ff:a6:f1:3e:56:d1:d7:dd:63:9d:93:0c:34:c2: b6:3a:06:58:f7:7b:32:01:46:ad:44:47:81:f1:33: 16:00:ea:a1:3e:14:9f:70:38:d2:04:79:f3:6c:2b: 17:75:20:95:42:e9:76:48:5b:fd:9f:f3:d9:fb:af: 01:c9:0a:b1:a8:8b:4b:22:ae:c3:26:e7:f4:c8:e8: c5:27:41:fe:e3:30:fd:86:2f:fb:94:ac:e0:d1:db: db:09:1c:b8:17:de:11:64:57:e8:3c:01:95:4a:d4: da:91:c9:da:b7:c1:5d:13:1b:29:4b:f0:3d:e2:12: 16:26:cd:c6:2b:52:2d:ca:45:cb:71:df:24:09:75: 83:2a:1c:8d:86:98:80:2f:05:17:9e:9c:77:48:9b: 78:db:6c:79:27:39:bc:ef:bf:9a:f7:dd:d1:1f:48: c2:60:8e:a5:8b:51:d9:81:87:48:41:75:1c:38:38: d3:1f:de:50:02:47:41:15:8f:ba:84:54:11:6c:f8: f7:c5:a4:4c:1f:bf:2a:21:bb:f0:5a:7d:6b:0e:c0: 7c:8b:f5:6b:72:93:d4:22:79:3c:17:74:67:a9:82: 5b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:21:DA:72:43:1F:04:72:49:81:AC:F2:3C:80:0D:E2:BD:19:B0:5D X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:92:a0:20:11:15:22:35:8b:68:13:ba:83:fa:7d:11:2a:d4: e9:5d:35:45:ae:b7:b2:ac:6a:ae:93:b7:4d:06:68:e8:d0:f1: 93:74:ba:6c:9b:f8:0b:87:58:73:c6:31:e6:fc:5b:f0:29:c3: 3b:f4:a0:a6:4d:7f:9c:e1:d0:20:fb:52:ef:07:0d:82:40:e5: c2:73:51:d1:ad:32:32:fe:74:21:27:20:35:bd:49:e6:01:be: 8d:6a:31:32:5d:9d:f6:92:4c:bd:cf:af:78:83:f2:f4:e6:6b: 45:45:0b:20:3e:95:f0:6b:fe:2b:10:55:fb:25:34:33:7d:9d: e4:ba:8c:6c:21:81:d2:16:e4:c6:cc:3a:2d:c0:d4:a5:bf:41: 4a:e9:14:cb:ae:2a:3c:45:1f:6f:83:82:a2:48:f4:29:e7:7a: 99:42:a8:0c:c8:ef:ba:40:02:41:80:23:ed:37:c2:1f:0d:13: d6:64:a3:ad:e5:4a:cb:03:68:ca:25:80:f6:75:db:50:fb:93: 0a:e6:0d:d6:b6:32:3a:56:e6:83:ff:86:d3:cd:dd:76:05:ce: c2:1f:fa:02:c6:cd:a4:0c:51:1e:97:9d:e1:d0:bc:e5:50:ee: 9a:5c:19:de:dc:5e:1e:6c:b6:78:f2:a9:1d:3a:0b:49:5f:d9: e6:f1:b6:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6314ryV/WK1P21VQVzTrLSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwNjExMTgwMDE2WhcNMjYwNjEyMTgwMDE2WjAzMTEwLwYDVQQD EygxNjIxZGE3MjQzMWYwNDcyNDk4MWFjZjIzYzgwMGRlMmJkMTliMDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLNp1fvbALOP0aLcKPqP0SHdJcKr Oxy/W8IyNyTQ/6bxPlbR191jnZMMNMK2OgZY93syAUatREeB8TMWAOqhPhSfcDjS BHnzbCsXdSCVQul2SFv9n/PZ+68ByQqxqItLIq7DJuf0yOjFJ0H+4zD9hi/7lKzg 0dvbCRy4F94RZFfoPAGVStTakcnat8FdExspS/A94hIWJs3GK1ItykXLcd8kCXWD KhyNhpiALwUXnpx3SJt422x5Jzm877+a993RH0jCYI6li1HZgYdIQXUcODjTH95Q AkdBFY+6hFQRbPj3xaRMH78qIbvwWn1rDsB8i/VrcpPUInk8F3RnqYJbxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYh2nJDHwRySYGs8jyADeK9GbBdMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZKgIBEV IjWLaBO6g/p9ESrU6V01Ra63sqxqrpO3TQZo6NDxk3S6bJv4C4dYc8Yx5vxb8CnD O/Sgpk1/nOHQIPtS7wcNgkDlwnNR0a0yMv50IScgNb1J5gG+jWoxMl2d9pJMvc+v eIPy9OZrRUULID6V8Gv+KxBV+yU0M32d5LqMbCGB0hbkxsw6LcDUpb9BSukUy64q PEUfb4OCokj0Ked6mUKoDMjvukACQYAj7TfCHw0T1mSjreVKywNoyiWA9nXbUPuT CuYN1rYyOlbmg/+G083ddgXOwh/6AsbNpAxRHped4dC85VDumlwZ3txeHmy2ePKp HToLSV/Z5vG2pw== -----END CERTIFICATE-----Generated at Thu Jun 11 22:40:16 2026 by rpki-client