$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: hBuw2ij6pYNo/ixXUCkm7VNUVqW12JbnTsrjts249mg= Subject key identifier: 66:5B:CF:68:07:F2:1A:93:0E:C1:56:7E:61:30:E0:12:6B:28:2D:EC Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 01A176CBD9A0ED74E2FB972EF80B0EB67934 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 170E Signing time: Mon 26 Oct 2026 06:00:33 +0000 Manifest this update: Mon 26 Oct 2026 06:00:33 +0000 Manifest next update: Tue 27 Oct 2026 06:00:33 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: 5F0J7vEOJCxK77qKMVKHEMkWr881/DYuBgqK9x2fjAs=) 7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) 12: u08NEvufIyYOw5wjByrYL3KDftg.roa (hash: +kuBshu076KXzQxN7e8+v+U/mTU0N1n8TG4+SUR96MM=) 13: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:76:cb:d9:a0:ed:74:e2:fb:97:2e:f8:0b:0e:b6:79:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Oct 26 06:00:33 2026 GMT Not After : Oct 27 06:00:33 2026 GMT Subject: CN=665bcf6807f21a930ec1567e6130e0126b282dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:90:df:e7:f4:9b:92:f3:0f:c1:3b:bc:72:a5: 59:06:bf:dd:c7:b3:a4:2b:6c:6c:98:ce:4c:38:fb: ef:97:9c:1e:a6:cc:c3:76:c5:6e:c5:63:19:2c:56: 89:81:e1:cb:a8:cc:23:2f:aa:7c:e4:ba:aa:c6:14: 64:62:42:29:1f:6f:e5:47:2d:a8:59:47:30:e2:27: 28:bd:4a:de:23:94:c2:dd:de:1f:65:54:c1:16:f9: 56:5e:c7:78:5a:1e:0c:6a:e3:6e:99:ce:d1:2d:ed: 21:6d:8c:45:8a:bf:15:dc:4f:a3:a4:93:41:6d:fc: 32:d1:58:ab:04:6f:b4:3e:2f:e5:7a:10:df:09:53: f1:68:28:4a:75:45:00:92:55:8b:f3:28:f2:21:96: 23:12:6b:f7:46:4c:14:4c:c6:75:51:4a:d6:33:b0: 26:33:14:c9:f5:2a:73:2b:d0:3a:06:f1:0b:9c:63: 37:a6:df:00:4b:fd:ee:24:f9:86:d7:4d:07:bd:82: 99:bc:93:76:ec:42:63:aa:7a:e2:e5:9f:f4:b7:b4: 7b:14:df:b6:79:35:d0:08:34:61:ce:1e:b4:be:f4: 33:cc:f5:d9:a5:23:96:10:dc:a2:1f:db:d4:a1:30: 2d:0f:fb:40:80:ae:6d:53:35:d7:dd:1f:b6:0c:81: c0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5B:CF:68:07:F2:1A:93:0E:C1:56:7E:61:30:E0:12:6B:28:2D:EC X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d5:8f:75:28:af:10:dd:bb:1d:94:87:40:4c:e5:24:27:48: 45:61:c3:c3:ed:38:c0:f5:ce:6e:1f:41:c1:37:42:15:4a:78: 94:1e:c4:1c:d0:65:a2:05:5b:46:8d:0f:95:da:e4:dd:68:1a: 3d:c4:68:e2:aa:c1:47:47:07:e4:53:74:7d:65:4e:8d:86:5f: 3f:f3:cd:40:32:b7:1b:82:d1:1a:3f:24:34:54:c6:8f:70:5c: 03:48:68:00:da:a9:b5:83:e6:e1:7b:5c:2d:6c:c6:4c:42:86: 3a:da:e3:6d:80:8a:ea:d7:e9:3e:24:26:fc:ed:c7:3a:f6:49: 4a:10:70:69:41:6e:59:d0:98:53:b4:6d:62:c1:20:5d:b3:f7: a4:2c:57:d5:dc:4a:b1:08:38:bc:c2:83:68:c1:8b:4b:65:70: c4:fc:42:52:7d:f7:96:09:ea:dc:49:5c:1c:ec:dc:c3:66:ec: c6:05:c4:bd:d1:2d:bc:48:74:79:e0:a9:7c:73:2d:cd:81:6a: 20:70:5e:1f:62:95:fc:f3:ff:3b:2a:48:98:67:47:47:51:97: fa:fa:d2:af:bb:4f:0d:fd:2f:b2:65:89:df:40:3b:d7:00:da: d3:4b:fa:67:18:12:4e:ca:25:2d:49:d9:41:88:42:01:0d:ea: 9f:50:58:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF2y9mg7XTi+5cu+AsOtnk0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYxMDI2MDYwMDMzWhcNMjYxMDI3MDYwMDMzWjAzMTEwLwYDVQQD Eyg2NjViY2Y2ODA3ZjIxYTkzMGVjMTU2N2U2MTMwZTAxMjZiMjgyZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JDf5/SbkvMPwTu8cqVZBr/dx7Ok K2xsmM5MOPvvl5wepszDdsVuxWMZLFaJgeHLqMwjL6p85LqqxhRkYkIpH2/lRy2o WUcw4icovUreI5TC3d4fZVTBFvlWXsd4Wh4MauNumc7RLe0hbYxFir8V3E+jpJNB bfwy0VirBG+0Pi/lehDfCVPxaChKdUUAklWL8yjyIZYjEmv3RkwUTMZ1UUrWM7Am MxTJ9SpzK9A6BvELnGM3pt8AS/3uJPmG100HvYKZvJN27EJjqnri5Z/0t7R7FN+2 eTXQCDRhzh60vvQzzPXZpSOWENyiH9vUoTAtD/tAgK5tUzXX3R+2DIHARQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZbz2gH8hqTDsFWfmEw4BJrKC3sMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdWPdSiv EN27HZSHQEzlJCdIRWHDw+04wPXObh9BwTdCFUp4lB7EHNBlogVbRo0Pldrk3Wga PcRo4qrBR0cH5FN0fWVOjYZfP/PNQDK3G4LRGj8kNFTGj3BcA0hoANqptYPm4Xtc LWzGTEKGOtrjbYCK6tfpPiQm/O3HOvZJShBwaUFuWdCYU7RtYsEgXbP3pCxX1dxK sQg4vMKDaMGLS2VwxPxCUn33lgnq3ElcHOzcw2bsxgXEvdEtvEh0eeCpfHMtzYFq IHBeH2KV/PP/OypImGdHR1GX+vrSr7tPDf0vsmWJ30A71wDa00v6ZxgSTsolLUnZ QYhCAQ3qn1BY4g== -----END CERTIFICATE-----Generated at Mon Oct 26 12:39:11 2026 by rpki-client