$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft File: VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json) Hash identifier: IyKlpbb2YdZG7cKIWsJ4B5q0666MXG+Dq/TikWyQwgo= Subject key identifier: EB:8D:58:71:51:76:12:9B:63:04:52:4C:F5:D6:AB:E9:1C:97:BA:C2 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 01A0C5FCE7C1A89F7E58CFD5551F2C48CFB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft Manifest number: 068D Signing time: Mon 21 Sep 2026 22:01:20 +0000 Manifest this update: Mon 21 Sep 2026 22:01:20 +0000 Manifest next update: Tue 22 Sep 2026 22:01:20 +0000 Files and hashes: 1: 0SWMflMJJlOILq6C9nu-h1OKJN8.roa (hash: kcK4B39yPXgK0nHshs5JakDk15PknxxnhcLimNeC6n8=) 2: 1-kUcSo0TEpKw_YLYby0R4DVb4yg.roa (hash: FnVQZ/f6EWlkoWkdWzbkkjdOeMD2B5h8cDHMDm/NyV4=) 3: 11f9_EaW8zxcu9dcHLvxzqf38Lo.roa (hash: xnewyzlXOwnExIP64JF1ik9DrSmsUZyhmiA3DXOiK4o=) 4: 7l1lpGV4ptT8nml-DHhj2477v7w.roa (hash: WRbHwiD/xFwzAYS55X0p7yc8DSBKcmaVY7wgLqrnwZM=) 5: 8syWpbRZFmsvwdyqtWxsX0pKmeY.roa (hash: Kum9fHu7WniF5m9wYLUYIqpdhJGb4LoqC5LKXjXu8bI=) 6: BWSDCyaaYztqf8x04OxukY8CPY4.roa (hash: U38FUPvoykxIjgiJPRxBdZlYvPSwyO1mNNGTzXNpiZU=) 7: Bson5QpUOFI1QdCm6xHzbdmNIvE.roa (hash: DZHq8ozgpPl0uQCPljJHruwM7dHQ/jyriOu62FT2zks=) 8: CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa (hash: JqW6uDJ3RG9f6mu4pHvOKIPsSL2yj5yYpAboStI8ffM=) 9: F5t3iNFuoDTJdVcFFvhLuvZHnmk.roa (hash: onvtW2FhvquKskWb8kYzMP0qs7tpSTfSO5Ae7USIC5U=) 10: FMYHLE6DdmEpeVMePkQCK7G0jsA.roa (hash: U9W0uSh64vdUp2XVkXkHbBV/og/HtsBpfruoNhoMZbU=) 11: G6PfcTBBnGMmYTxAX2kEhfoKgDo.roa (hash: yy5VfaRyRkaXKFtJ7nRL6lqT6Vibse1ushGJE3d+Pjw=) 12: GfOWGiLPv2wccjOXnStMVeJn2AM.roa (hash: 4kXzqP7Ueen81fNYyTvCfhk/Yz0qWdHHeusnErlkgAI=) 13: GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa (hash: hAGmhAwZhhoWhp04cLiGpWwuwXg8Kk2Qjb8VbTs9ZtE=) 14: JCOqWbRnRywHSsZh-fLz50m-PqY.roa (hash: aOTb2qew8LvghZhiTeoIMCTgriMUYXeo63zQWwudYXw=) 15: JkK4a04qS_Ajc6pDAo-VYjvdA8Y.roa (hash: XFQRjgmnGbFOUTfMnQoCwRx0veQhtTR1PpEKLvJMV+g=) 16: K_5UWL5IkQbpsAsxidIs-a910tQ.roa (hash: jfQdjzJB+uzffMoi8GywFxVevTRWSqD6hEzeDuvNmb4=) 17: KqWucH5sI4MugF5p4PjTBd1XImI.roa (hash: qMFzUBwuT4BEanu+eOpO2co0/ErViX4f8esF8yniEM0=) 18: PJmcxay0WtSRJnIDudY6DzRck9Q.roa (hash: g6fJ4GyCp1px6ym38QN41UvtwhfWNwAeKWC1qAkBcM0=) 19: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: qSV5BefQ2p7y3cAHp6U8fz/aFHBr8Bo3ymxtEl5VgHg=) 20: ViFP5rp9_kh71j905ntxU5SBk68.roa (hash: 58dlvwMJZtV0cctgTlo4T66Sg5qkkMyrdz4IEFt0NhQ=) 21: Z9annEhNXJRKB9imLkUdPhT85Nc.roa (hash: oy85S0enUEY7wVVeRJQ4+FT2oH5OrnRX3IvS0Tb+dKo=) 22: _sRckXeyoZxj9rukZRq18fDp3ik.roa (hash: 1WwE3fcT2kiL+v9mDl8uXlOyD5SD5f4wDk26AdtmLBQ=) 23: ahOBtrYhmRunqecYEU1ZWXuVovs.roa (hash: 6mLblxHv8sz/ui7lbUzb+nfqv0WmrUDxl+RoD+Q+z/I=) 24: bXd27v7vseLcs1p86WVPiFf581g.roa (hash: ph4o+crLTIHbzjOiEQPAhmzNlIZlfryhefh40UAzDLM=) 25: ekRgt1kJi2v662mflC7yokLhh34.roa (hash: 3lpPZiQnRkbCD6keXb41MVLx99s2aoWKQrtAqDsCux0=) 26: hs3h7Dj-b8z6Uxhv8HYqs7iBXD0.roa (hash: 5W1nhov/uvHu69XlxjaNWq1KRUFRi0VVoqIxSY+t7js=) 27: jNpTRZNm_bD5BiFoeh5OJnCcQAY.roa (hash: 1TgeIUZpeprmcZh4MLiiWQfSwXT8XyxkpN223zXb1O8=) 28: n-wdGNxhA3O26KGrsNj3L9h7eAw.roa (hash: 6R0f4WMAOxx3u7Zt38anUmVPSo1nBDSR8e8VksF4tmU=) 29: u-ddoqXehtb5m6JTXCSF4HyFY8E.roa (hash: UyjZhoeMOYj569cGU0irTIkbnK1IY9Bk6c1YVd6j+D8=) 30: u7SrUaeTfqqFlK6M8OkfEL87nc0.roa (hash: GsWYYAbN0tIazsbVktNVPeSXTKT3C0hkv53fF6GKkZI=) 31: u_2w56w9VDiTEhKc_ZitgndOhPo.roa (hash: hQUv7XEtV7+B7R0n+5Br9ftO2lm1ptUCoJiMKucjmPE=) 32: wXeQ_bqVYSAQNh8BsomXrKWEPnQ.roa (hash: DH+8dGO7ELMrzVWRl7HBCDYNR4gBReTuiDSGx/p0Ue4=) 33: wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa (hash: hs9hA8TNugivRwbaXq2Cd+gZQT+LQBaaFDtqCrqGbck=) 34: ypSiLSto3RjwAtlvFMK5kNDrdzk.roa (hash: 0ZlVmf2An7RemdJ7LPaj0U4nO3qgfQ0MKBoflfLZxpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:fc:e7:c1:a8:9f:7e:58:cf:d5:55:1f:2c:48:cf:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Sep 21 22:01:20 2026 GMT Not After : Sep 22 22:01:20 2026 GMT Subject: CN=eb8d58715176129b6304524cf5d6abe91c97bac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8b:68:e2:bb:4e:ba:26:d2:cf:ee:e7:2d:99: 8c:14:5e:f1:da:69:79:81:56:e4:d1:d9:b7:2f:9a: 28:65:47:99:4b:eb:52:fe:ac:fb:b5:f7:7a:fd:4d: 43:83:ac:a5:f3:c9:9c:c5:79:23:71:04:38:c9:8e: b4:41:d6:d2:da:ba:3f:5a:22:5c:08:e2:61:45:00: e3:53:67:7e:df:1f:6a:82:76:5f:99:b3:fd:17:5c: 23:d7:25:9a:7c:b4:47:59:97:d8:b2:f2:85:4a:45: 56:c6:71:ca:0f:8b:0d:a5:f2:b9:b8:b4:15:1f:02: 07:bc:57:34:cc:09:3c:43:f3:c4:f8:76:cb:4e:ad: 1b:7f:72:33:2c:1d:0f:59:ae:76:b2:9d:6a:7d:6a: 1c:8f:c4:f1:2d:95:52:81:35:25:41:45:ea:16:7a: 64:4a:16:4f:48:a9:d0:a7:3a:a6:50:47:b7:19:bf: 44:9f:99:96:70:d9:62:59:3d:9f:7a:03:36:b7:6d: c0:ca:23:17:28:e5:aa:89:a4:4c:10:e3:8b:7a:cd: 96:dd:e2:12:b6:ec:c0:d6:ad:51:d0:b2:07:b1:ac: 3f:61:59:cd:b7:4c:92:6d:cf:70:34:ee:7f:07:16: 0a:55:6f:b2:cb:bb:ff:36:3c:20:ec:f2:35:c1:2d: cd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8D:58:71:51:76:12:9B:63:04:52:4C:F5:D6:AB:E9:1C:97:BA:C2 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e7:2a:80:a6:93:a8:7d:c4:43:11:74:d3:35:bc:80:e6:4f: 9d:0f:8b:f8:da:a7:49:bf:48:59:0c:1f:9d:87:a2:2a:93:a3: 06:59:95:4e:00:b8:fa:0c:a1:4d:2c:d5:39:bc:d5:20:5b:89: 0d:f6:49:77:db:84:d3:e1:26:04:fa:3e:4a:46:ba:f5:13:62: 0a:a1:fd:a5:24:bc:78:e6:a5:26:c0:b2:94:06:c5:8e:a3:23: ca:17:55:1b:f9:a7:ab:f0:73:7e:3c:1a:a9:b0:13:cf:89:a2: 35:15:f1:d6:71:f2:f3:7e:fa:bf:d2:a2:74:c9:47:24:cb:84: dd:2f:d7:9a:a2:94:0f:b5:4a:b2:7e:4a:22:4e:25:0a:cb:cd: 43:f7:c4:1b:dd:fe:73:f3:31:62:73:fa:7e:bd:5c:e6:27:90: 94:ee:14:f2:75:57:c0:4d:c3:63:bb:37:93:53:0d:cb:51:fc: 86:72:1e:b1:2e:a6:d4:a0:6b:a9:07:94:21:8a:d5:36:cb:e0: 0f:cb:67:db:be:57:c0:28:66:a6:c3:a2:a5:bd:77:53:fa:b0: a1:b1:9d:93:38:33:67:12:c8:f6:61:5e:2c:00:7b:2e:8f:f2: 0f:c5:31:6d:14:37:40:7a:57:ee:7d:a2:2b:6d:5a:a6:ad:3d: 84:ea:29:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDF/OfBqJ9+WM/VVR8sSM+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwOTIxMjIwMTIwWhcNMjYwOTIyMjIwMTIwWjAzMTEwLwYDVQQD EyhlYjhkNTg3MTUxNzYxMjliNjMwNDUyNGNmNWQ2YWJlOTFjOTdiYWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oto4rtOuibSz+7nLZmMFF7x2ml5 gVbk0dm3L5ooZUeZS+tS/qz7tfd6/U1Dg6yl88mcxXkjcQQ4yY60QdbS2ro/WiJc COJhRQDjU2d+3x9qgnZfmbP9F1wj1yWafLRHWZfYsvKFSkVWxnHKD4sNpfK5uLQV HwIHvFc0zAk8Q/PE+HbLTq0bf3IzLB0PWa52sp1qfWocj8TxLZVSgTUlQUXqFnpk ShZPSKnQpzqmUEe3Gb9En5mWcNliWT2fegM2t23AyiMXKOWqiaRMEOOLes2W3eIS tuzA1q1R0LIHsaw/YVnNt0ySbc9wNO5/BxYKVW+yy7v/Njwg7PI1wS3NAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuNWHFRdhKbYwRSTPXWq+kcl7rCMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqucqgKaT qH3EQxF00zW8gOZPnQ+L+NqnSb9IWQwfnYeiKpOjBlmVTgC4+gyhTSzVObzVIFuJ DfZJd9uE0+EmBPo+Ska69RNiCqH9pSS8eOalJsCylAbFjqMjyhdVG/mnq/Bzfjwa qbATz4miNRXx1nHy8376v9KidMlHJMuE3S/XmqKUD7VKsn5KIk4lCsvNQ/fEG93+ c/MxYnP6fr1c5ieQlO4U8nVXwE3DY7s3k1MNy1H8hnIesS6m1KBrqQeUIYrVNsvg D8tn275XwChmpsOipb13U/qwobGdkzgzZxLI9mFeLAB7Lo/yD8UxbRQ3QHpX7n2i K21apq09hOopbg== -----END CERTIFICATE-----Generated at Tue Sep 22 06:54:22 2026 by rpki-client