$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: Y/EUGj+ABHYEoBB/Xzc/Bzm/NBY+XhLGgheuLEI9A7Y= Subject key identifier: 19:02:F5:71:B7:39:49:1B:65:78:DF:9E:36:DB:01:45:DF:04:21:12 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 01A089428EF524BFD7C16570CEB1D570AFF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 1693 Signing time: Thu 10 Sep 2026 03:00:35 +0000 Manifest this update: Thu 10 Sep 2026 03:00:35 +0000 Manifest next update: Fri 11 Sep 2026 03:00:35 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: tfKHZTNR26vFlOJD0nsG1FTKov3Z0Ayn5biJ6kYX5eM=) 7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) 12: u08NEvufIyYOw5wjByrYL3KDftg.roa (hash: +kuBshu076KXzQxN7e8+v+U/mTU0N1n8TG4+SUR96MM=) 13: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 03:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:42:8e:f5:24:bf:d7:c1:65:70:ce:b1:d5:70:af:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Sep 10 03:00:35 2026 GMT Not After : Sep 11 03:00:35 2026 GMT Subject: CN=1902f571b739491b6578df9e36db0145df042112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:93:ee:9e:79:0e:e6:20:52:67:6b:c3:69: 17:8e:1c:6c:01:83:47:1a:a9:c3:6f:d0:28:e8:a6: d9:61:07:0d:3e:03:53:be:58:56:1b:03:b3:96:6c: a0:e3:13:f6:60:20:41:3d:38:15:a5:4b:38:d9:bc: e5:a3:5a:09:d1:2e:b1:2b:f0:c7:67:78:c5:81:ff: ef:3e:18:b7:c9:de:22:b7:dd:aa:70:2d:9e:9a:76: 70:d3:55:58:db:17:48:1b:3c:ad:ac:f7:83:33:fb: 2a:e4:e8:24:ee:c3:02:2a:b5:20:eb:d1:a8:74:9f: 3a:d4:9a:c0:84:ac:cc:26:11:9b:12:fa:a4:76:61: 56:7e:d0:9a:07:5a:0a:4d:d1:e6:4a:05:b7:12:83: e4:85:45:08:86:c4:14:db:1a:fb:ec:ce:d8:38:f2: 5a:e8:02:e6:a2:26:f5:fc:34:2c:8c:bc:2a:bf:24: 9d:1c:87:02:57:3a:7e:5b:bb:38:5f:b8:c2:ae:d2: a3:73:ad:09:70:32:ff:94:fc:61:bf:ec:74:38:fc: dd:62:0d:45:fe:7b:5c:c7:e6:60:3f:6c:a7:1d:4a: 4c:2a:2f:8c:d3:ac:44:80:49:6c:6f:a6:be:24:cf: f3:43:d9:56:37:5f:e0:20:e1:b5:b3:85:10:d5:35: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:02:F5:71:B7:39:49:1B:65:78:DF:9E:36:DB:01:45:DF:04:21:12 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e2:bd:ce:01:21:e2:49:e5:64:d8:6f:0c:1c:f4:e9:4e:f7: 0c:33:b9:81:38:eb:6e:a9:29:c0:b9:63:0c:1a:8f:34:14:35: 23:80:3b:03:a5:89:dd:5a:8a:3a:19:36:c4:ca:80:75:28:94: 9d:dd:8b:0a:c6:df:50:fe:ef:e8:37:b3:bf:ce:1d:49:98:0b: 93:1a:71:d5:76:07:d2:d9:ee:fa:92:b8:27:b9:21:d1:36:83: be:06:de:ef:c8:ef:4b:99:c3:9e:8f:35:b5:0d:0d:5a:c7:be: 2c:5e:31:09:ad:90:9b:c9:07:e5:d7:5c:54:e7:86:3d:a9:21: d2:a0:10:c3:52:81:b0:88:c2:b6:15:33:52:77:27:05:eb:7a: 6c:80:66:ec:46:cc:67:85:32:ff:aa:e2:71:38:27:3a:06:1c: 45:65:73:51:8c:39:2d:50:2c:8d:13:6a:7a:89:b0:19:ea:0e: e3:63:ce:f8:c5:19:2b:00:58:a2:b3:3b:f7:ed:75:6f:47:03: 32:ff:6b:0d:f5:2d:7d:eb:8d:54:c0:98:d5:77:cf:08:bc:11: 2a:ee:2a:ca:b0:26:cd:58:93:49:fc:96:c3:c4:63:f1:08:8f: a5:4a:23:d0:d7:d4:39:d6:36:70:a5:1b:6b:0e:34:2f:57:74: 4d:aa:ec:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJQo71JL/XwWVwzrHVcK/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwOTEwMDMwMDM1WhcNMjYwOTExMDMwMDM1WjAzMTEwLwYDVQQD EygxOTAyZjU3MWI3Mzk0OTFiNjU3OGRmOWUzNmRiMDE0NWRmMDQyMTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSST7p55DuYgUmdrw2kXjhxsAYNH GqnDb9Ao6KbZYQcNPgNTvlhWGwOzlmyg4xP2YCBBPTgVpUs42bzlo1oJ0S6xK/DH Z3jFgf/vPhi3yd4it92qcC2emnZw01VY2xdIGzytrPeDM/sq5Ogk7sMCKrUg69Go dJ861JrAhKzMJhGbEvqkdmFWftCaB1oKTdHmSgW3EoPkhUUIhsQU2xr77M7YOPJa 6ALmoib1/DQsjLwqvySdHIcCVzp+W7s4X7jCrtKjc60JcDL/lPxhv+x0OPzdYg1F /ntcx+ZgP2ynHUpMKi+M06xEgElsb6a+JM/zQ9lWN1/gIOG1s4UQ1TVALwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkC9XG3OUkbZXjfnjbbAUXfBCESMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeK9zgEh 4knlZNhvDBz06U73DDO5gTjrbqkpwLljDBqPNBQ1I4A7A6WJ3VqKOhk2xMqAdSiU nd2LCsbfUP7v6Dezv84dSZgLkxpx1XYH0tnu+pK4J7kh0TaDvgbe78jvS5nDno81 tQ0NWse+LF4xCa2Qm8kH5ddcVOeGPakh0qAQw1KBsIjCthUzUncnBet6bIBm7EbM Z4Uy/6ricTgnOgYcRWVzUYw5LVAsjRNqeomwGeoO42PO+MUZKwBYorM79+11b0cD Mv9rDfUtfeuNVMCY1XfPCLwRKu4qyrAmzViTSfyWw8Rj8QiPpUoj0NfUOdY2cKUb aw40L1d0Tarslw== -----END CERTIFICATE-----Generated at Thu Sep 10 11:24:16 2026 by rpki-client