$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: ulX4JY5jpCcfWcE79q1+v2tyRaadaIOBlhTPv4+4lmU= Subject key identifier: D7:BF:0E:A5:50:4E:27:F1:25:5B:1A:59:78:60:12:4C:FF:DE:E9:5D Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 01A1193D9FE16CD74B0786062BA1F008C104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 17A1 Signing time: Thu 08 Oct 2026 02:00:31 +0000 Manifest this update: Thu 08 Oct 2026 02:00:31 +0000 Manifest next update: Fri 09 Oct 2026 02:00:31 +0000 Files and hashes: 1: 0kY6OhYo0S_p-TBiI-10NgXfoNY.roa (hash: iP04yPh9hD6VA4QlzUY//5ykcFDzpWeK08TGnMp/HjE=) 2: 1-Be0qYmJvYKBUxk0IWyWJ9tviM0.roa (hash: tc+kUBwm2r2jABu8hBV/usYgfuja/aedEg4A7BKntHA=) 3: 1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa (hash: XKv+d2a7iEMY8sWanXfCdCcSCUwEPvHDN059QvO18Cw=) 4: 2C-X2uadj7WRXm8t5tJaxHqVG08.roa (hash: gQBfeyRFTlWRJ0NIJIiAdSoSCyYg2yZW/gURVO4/TQE=) 5: ILMdvMW_ucbbRxIWVM1lnkFSdus.roa (hash: u/PCttKjeIAvbeBnImGYH+I587LQsMk+S6mJXKbyOpQ=) 6: OCaG69L4oGw_KiLZLKBePPSp7CE.roa (hash: vtJ6sg+cCvGmbdxUocxZh93rGJH1rOZrPXnfYKxcVyQ=) 7: R5tQPzZZIZkEHxABLHLrU7SFsrM.roa (hash: lKQiJli3qPxi+zmIfwUnOVyI/PWON56dIb4pJxeLxAM=) 8: SSB8nChvF9M5SEjUm0HbeOBN31I.roa (hash: WGAc9tKQkiqsemqW1u4qV4GbNPs9MVItouZPC6JW3X8=) 9: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: AJzegH2nio8R8zPwp3QefzftQ7GOyPAr7KC+LQ2BXRw=) 10: w2-qYaghmoafRduGM784BXKEDOc.roa (hash: hsq/kaLWVFBw1VLdikb24btA8t/Mb4PbJLUevEVWF+U=) 11: yOnpLpdVWl0jXoYFDk87GuN8z4k.roa (hash: cwz0V2O5OmYd3M4lJ6axTmY7I9UVlCXySVV3pV4gm0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 18:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:19:3d:9f:e1:6c:d7:4b:07:86:06:2b:a1:f0:08:c1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Oct 8 02:00:31 2026 GMT Not After : Oct 9 02:00:31 2026 GMT Subject: CN=d7bf0ea5504e27f1255b1a597860124cffdee95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:df:8e:7e:d1:bf:29:f7:8d:6c:b5:f8:d2: f3:8e:90:57:8a:9b:92:77:c1:f2:b4:c9:65:d1:eb: 8d:ee:0b:4a:5a:80:95:70:d6:29:82:70:f6:c8:ac: 12:43:ab:97:34:a7:00:45:9b:cb:ac:9a:d2:ad:2b: b1:90:e3:5e:f6:ea:dc:a8:5f:07:75:a7:e2:ae:74: 05:44:1e:23:f1:32:12:eb:8d:6f:0b:39:41:56:d2: 9d:61:5a:f0:b8:5c:25:64:6f:86:ee:4f:9b:b5:04: 81:fd:d0:d4:1a:31:78:88:e5:71:c3:c7:73:6f:cf: 50:ab:f7:55:de:df:4d:9b:72:77:7f:8d:76:12:8c: bd:77:cf:45:2b:c4:34:f1:ac:c2:b5:c1:2c:f6:65: ee:a7:66:73:38:03:42:77:d2:cb:b2:d3:94:9b:b0: 5b:4d:9e:ca:ae:f3:6f:72:4e:0e:f4:85:96:df:bd: 90:a0:65:5f:61:87:5a:74:6b:a4:d7:b5:f7:0e:9b: da:e9:6a:d7:29:a4:1c:97:01:c7:a3:1f:78:51:f7: bf:8f:02:5a:74:58:92:a8:99:fd:fc:cb:24:cc:7d: f2:36:19:35:ff:31:fd:8f:f4:9a:ad:e7:d8:14:9a: a7:4d:20:0a:24:94:1e:79:46:32:5a:97:b2:3d:12: a5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BF:0E:A5:50:4E:27:F1:25:5B:1A:59:78:60:12:4C:FF:DE:E9:5D X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:3d:a3:92:75:e7:a8:64:88:69:fb:3e:00:7c:e9:1b:05:b2: 5a:21:72:d6:b3:d0:03:23:fa:05:a3:c5:1a:1e:a3:d2:0a:1b: bd:3b:1d:e6:89:b0:f1:90:e4:94:77:6c:42:ca:48:57:22:12: f1:7a:de:a9:a1:6c:e5:32:8c:d3:62:a0:29:09:a1:72:7b:81: 3b:23:e0:47:e5:74:95:e3:cd:6d:66:c5:f3:cf:ed:c1:c7:6d: 07:78:6f:2a:30:4e:7a:b4:76:38:a3:4f:ca:b6:0c:ed:45:86: 10:35:08:34:22:57:57:01:6a:78:9f:9e:bf:e3:db:7f:93:a2: 81:80:01:27:c3:33:cb:2d:d2:4d:16:33:25:cf:fa:55:a2:b5: 23:5b:e8:e3:38:8b:a0:8f:3d:bb:bc:e5:5a:5c:82:a8:87:2e: 02:e4:d0:fa:98:2c:ac:8c:29:f2:b7:66:21:71:9d:49:cf:1c: bd:69:5f:da:c6:da:29:56:b7:b7:b4:56:1a:85:93:30:aa:37: 2a:6a:68:44:5f:47:00:44:e2:f5:3f:df:cd:63:0c:47:cc:48: 66:9f:1b:e0:43:61:78:4b:40:89:5d:69:9f:fa:85:43:68:42: c2:03:01:db:d1:08:f2:af:83:b9:13:0d:76:90:49:6f:11:b3: b2:db:22:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEZPZ/hbNdLB4YGK6HwCMEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYxMDA4MDIwMDMxWhcNMjYxMDA5MDIwMDMxWjAzMTEwLwYDVQQD EyhkN2JmMGVhNTUwNGUyN2YxMjU1YjFhNTk3ODYwMTI0Y2ZmZGVlOTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ7fjn7Rvyn3jWy1+NLzjpBXipuS d8HytMll0euN7gtKWoCVcNYpgnD2yKwSQ6uXNKcARZvLrJrSrSuxkONe9urcqF8H dafirnQFRB4j8TIS641vCzlBVtKdYVrwuFwlZG+G7k+btQSB/dDUGjF4iOVxw8dz b89Qq/dV3t9Nm3J3f412Eoy9d89FK8Q08azCtcEs9mXup2ZzOANCd9LLstOUm7Bb TZ7KrvNvck4O9IWW372QoGVfYYdadGuk17X3Dpva6WrXKaQclwHHox94Ufe/jwJa dFiSqJn9/MskzH3yNhk1/zH9j/SarefYFJqnTSAKJJQeeUYyWpeyPRKloQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNe/DqVQTifxJVsaWXhgEkz/3uldMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOT2jknXn qGSIafs+AHzpGwWyWiFy1rPQAyP6BaPFGh6j0gobvTsd5omw8ZDklHdsQspIVyIS 8XreqaFs5TKM02KgKQmhcnuBOyPgR+V0lePNbWbF88/twcdtB3hvKjBOerR2OKNP yrYM7UWGEDUINCJXVwFqeJ+ev+Pbf5OigYABJ8Mzyy3STRYzJc/6VaK1I1vo4ziL oI89u7zlWlyCqIcuAuTQ+pgsrIwp8rdmIXGdSc8cvWlf2sbaKVa3t7RWGoWTMKo3 KmpoRF9HAETi9T/fzWMMR8xIZp8b4ENheEtAiV1pn/qFQ2hCwgMB29EI8q+DuRMN dpBJbxGzstsiOQ== -----END CERTIFICATE-----Generated at Thu Oct 8 03:43:40 2026 by rpki-client