$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: ZfqBxID670Af0DAJnpvxq6802/JSsiMaKm6nn2n0/U4= Subject key identifier: 95:C7:00:B7:7F:F6:8E:99:08:E5:4A:EE:43:83:DA:62:DA:2F:0E:3F Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019CABA1CC133FCE4034C538510BC8EC9387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 1556 Signing time: Sun 01 Mar 2026 23:00:33 +0000 Manifest this update: Sun 01 Mar 2026 23:00:33 +0000 Manifest next update: Mon 02 Mar 2026 23:00:33 +0000 Files and hashes: 1: 0kY6OhYo0S_p-TBiI-10NgXfoNY.roa (hash: iP04yPh9hD6VA4QlzUY//5ykcFDzpWeK08TGnMp/HjE=) 2: 1-Be0qYmJvYKBUxk0IWyWJ9tviM0.roa (hash: tc+kUBwm2r2jABu8hBV/usYgfuja/aedEg4A7BKntHA=) 3: 1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa (hash: XKv+d2a7iEMY8sWanXfCdCcSCUwEPvHDN059QvO18Cw=) 4: 2C-X2uadj7WRXm8t5tJaxHqVG08.roa (hash: gQBfeyRFTlWRJ0NIJIiAdSoSCyYg2yZW/gURVO4/TQE=) 5: ILMdvMW_ucbbRxIWVM1lnkFSdus.roa (hash: u/PCttKjeIAvbeBnImGYH+I587LQsMk+S6mJXKbyOpQ=) 6: OCaG69L4oGw_KiLZLKBePPSp7CE.roa (hash: vtJ6sg+cCvGmbdxUocxZh93rGJH1rOZrPXnfYKxcVyQ=) 7: R5tQPzZZIZkEHxABLHLrU7SFsrM.roa (hash: lKQiJli3qPxi+zmIfwUnOVyI/PWON56dIb4pJxeLxAM=) 8: SSB8nChvF9M5SEjUm0HbeOBN31I.roa (hash: WGAc9tKQkiqsemqW1u4qV4GbNPs9MVItouZPC6JW3X8=) 9: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: bkkC6nmSRHQjlm86CKilRLSp06VKqHmCKpBPSPDcnho=) 10: w2-qYaghmoafRduGM784BXKEDOc.roa (hash: hsq/kaLWVFBw1VLdikb24btA8t/Mb4PbJLUevEVWF+U=) 11: yOnpLpdVWl0jXoYFDk87GuN8z4k.roa (hash: cwz0V2O5OmYd3M4lJ6axTmY7I9UVlCXySVV3pV4gm0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:a1:cc:13:3f:ce:40:34:c5:38:51:0b:c8:ec:93:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Mar 1 23:00:33 2026 GMT Not After : Mar 2 23:00:33 2026 GMT Subject: CN=95c700b77ff68e9908e54aee4383da62da2f0e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:14:d5:96:0e:47:af:3c:78:43:d3:d4:4b: 11:33:29:ff:d3:68:c7:1b:cd:d6:79:58:8f:88:2e: 7b:1d:13:49:4b:48:d4:13:e1:38:fc:be:69:00:1b: 45:93:1d:02:ad:0f:d7:23:88:ed:eb:f7:a4:fe:4c: 63:8a:29:3d:5d:89:6f:2e:dd:07:5e:3b:37:f7:7a: 95:51:9e:b5:d6:7b:ea:a4:0d:aa:10:d5:c0:e3:64: 20:45:3a:04:4a:86:e6:a4:0d:60:ba:fd:9a:ba:da: cf:ca:c4:0b:de:d5:e3:a4:b6:9b:5e:56:de:17:1b: 36:ad:24:2d:3d:f5:ac:ac:f6:89:74:8f:cf:6d:85: 4d:06:3e:f9:26:83:5a:a0:43:f7:4e:90:42:41:c0: 22:ed:40:04:3e:5a:a5:5d:f2:bf:e9:44:ff:6f:93: b5:16:ef:6d:67:b8:c4:3b:c8:88:1c:01:a1:73:71: 8b:6b:cc:ad:8c:04:9e:4d:83:fb:7b:7d:78:d9:ff: 78:0e:08:d8:05:0a:58:8b:c4:8b:85:19:70:1a:72: dc:60:2d:be:b7:e5:95:e6:51:32:e2:3e:15:5f:76: 4c:ba:56:c1:c5:39:30:b9:c4:06:57:59:8e:9f:c0: c8:6a:9c:41:5b:01:28:7e:a0:e6:4a:33:5a:d8:fb: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C7:00:B7:7F:F6:8E:99:08:E5:4A:EE:43:83:DA:62:DA:2F:0E:3F X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2e:87:65:d8:1a:22:4a:94:a4:72:54:46:87:c0:a9:c8:0d: 3c:a6:59:1f:02:e3:48:bd:42:1e:b8:0d:be:01:54:95:73:79: 1c:61:67:7d:fa:2a:8b:9b:52:21:2e:fd:ca:53:dc:a1:5c:e7: d7:66:c0:8d:e2:f1:87:75:25:96:b8:82:0e:55:05:76:1a:69: 68:29:c5:90:6c:b2:67:5f:b7:43:c2:61:83:13:ba:c0:a2:d8: 77:bd:4c:2b:4f:88:66:bd:21:18:89:d1:a9:70:ae:20:cc:e3: 02:0e:3d:58:25:81:47:46:43:14:30:a0:39:e9:63:90:1c:6e: b1:71:e9:8c:cd:8a:1a:ce:bb:4f:89:a2:d5:6c:83:fc:09:c7: 93:67:dc:eb:73:99:1d:0f:18:31:15:53:2e:6b:0a:b0:57:e8: e9:73:c7:97:4e:42:d3:0c:c1:1d:da:a7:fc:49:0d:3c:28:07: c1:4d:83:f9:8d:b8:f4:f4:e3:c1:a4:58:b7:bd:7f:09:9f:87: 44:c3:0f:89:cd:66:4b:22:a4:a8:9b:df:6b:15:e7:98:51:7e: 1d:b2:7e:05:e9:72:8a:f1:e2:54:9d:0c:5a:d5:d9:f3:fe:4c: c5:11:37:61:95:b0:42:45:15:70:b4:4c:65:9d:0a:ec:df:1f: b9:f9:c5:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrocwTP85ANMU4UQvI7JOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYwMzAxMjMwMDMzWhcNMjYwMzAyMjMwMDMzWjAzMTEwLwYDVQQD Eyg5NWM3MDBiNzdmZjY4ZTk5MDhlNTRhZWU0MzgzZGE2MmRhMmYwZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUEU1ZYOR688eEPT1EsRMyn/02jH G83WeViPiC57HRNJS0jUE+E4/L5pABtFkx0CrQ/XI4jt6/ek/kxjiik9XYlvLt0H Xjs393qVUZ611nvqpA2qENXA42QgRToESobmpA1guv2autrPysQL3tXjpLabXlbe Fxs2rSQtPfWsrPaJdI/PbYVNBj75JoNaoEP3TpBCQcAi7UAEPlqlXfK/6UT/b5O1 Fu9tZ7jEO8iIHAGhc3GLa8ytjASeTYP7e3142f94DgjYBQpYi8SLhRlwGnLcYC2+ t+WV5lEy4j4VX3ZMulbBxTkwucQGV1mOn8DIapxBWwEofqDmSjNa2PszKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXHALd/9o6ZCOVK7kOD2mLaLw4/MB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS6HZdga IkqUpHJURofAqcgNPKZZHwLjSL1CHrgNvgFUlXN5HGFnffoqi5tSIS79ylPcoVzn 12bAjeLxh3UllriCDlUFdhppaCnFkGyyZ1+3Q8JhgxO6wKLYd71MK0+IZr0hGInR qXCuIMzjAg49WCWBR0ZDFDCgOeljkBxusXHpjM2KGs67T4mi1WyD/AnHk2fc63OZ HQ8YMRVTLmsKsFfo6XPHl05C0wzBHdqn/EkNPCgHwU2D+Y249PTjwaRYt71/CZ+H RMMPic1mSyKkqJvfaxXnmFF+HbJ+BelyivHiVJ0MWtXZ8/5MxRE3YZWwQkUVcLRM ZZ0K7N8fufnFMg== -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:23 2026 by rpki-client