$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft File: VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json) Hash identifier: zNxhL0Inw/tXVrpGGD4Ga09azF58dQeDrEXufLcdoHw= Subject key identifier: 63:E5:60:20:06:A6:23:E9:5D:AF:49:F2:3D:F1:E5:8C:A1:D1:4C:F5 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019CA8D87F4210A5930974B082774061411E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft Manifest number: 0449 Signing time: Sun 01 Mar 2026 10:01:26 +0000 Manifest this update: Sun 01 Mar 2026 10:01:26 +0000 Manifest next update: Mon 02 Mar 2026 10:01:26 +0000 Files and hashes: 1: 1-stHiFG5ZJA2mFzyfwwy5QNNsDM.roa (hash: Lb2pUc7C5pGRhFwMsbtZNxQa9QnU9Kd72Auny3MOmpY=) 2: 11f9_EaW8zxcu9dcHLvxzqf38Lo.roa (hash: xnewyzlXOwnExIP64JF1ik9DrSmsUZyhmiA3DXOiK4o=) 3: 5dUccTjOeXcH3PFxvpgXM81-0uk.roa (hash: 7RrrJVqzPlIAsA/Vb+L/2hzt7ubyCiLJfQ+Wwlb716w=) 4: B0NZx8wGc2BfFV7HL837EN9xDmk.roa (hash: PhnHNgGL/ecjQNAEqTX4yvFXZgk/h6y3wBnt7UEfO/w=) 5: BWSDCyaaYztqf8x04OxukY8CPY4.roa (hash: U38FUPvoykxIjgiJPRxBdZlYvPSwyO1mNNGTzXNpiZU=) 6: Bson5QpUOFI1QdCm6xHzbdmNIvE.roa (hash: DZHq8ozgpPl0uQCPljJHruwM7dHQ/jyriOu62FT2zks=) 7: CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa (hash: JqW6uDJ3RG9f6mu4pHvOKIPsSL2yj5yYpAboStI8ffM=) 8: F5t3iNFuoDTJdVcFFvhLuvZHnmk.roa (hash: onvtW2FhvquKskWb8kYzMP0qs7tpSTfSO5Ae7USIC5U=) 9: FMYHLE6DdmEpeVMePkQCK7G0jsA.roa (hash: U9W0uSh64vdUp2XVkXkHbBV/og/HtsBpfruoNhoMZbU=) 10: G6PfcTBBnGMmYTxAX2kEhfoKgDo.roa (hash: yy5VfaRyRkaXKFtJ7nRL6lqT6Vibse1ushGJE3d+Pjw=) 11: GfOWGiLPv2wccjOXnStMVeJn2AM.roa (hash: 4kXzqP7Ueen81fNYyTvCfhk/Yz0qWdHHeusnErlkgAI=) 12: GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa (hash: hAGmhAwZhhoWhp04cLiGpWwuwXg8Kk2Qjb8VbTs9ZtE=) 13: KqWucH5sI4MugF5p4PjTBd1XImI.roa (hash: qMFzUBwuT4BEanu+eOpO2co0/ErViX4f8esF8yniEM0=) 14: LPQ-W0swhnuqJDRK5OyZUQ5_co0.roa (hash: KipecPu2PdIqjOLDLPj5vSkqEcsQ5HSI7mi05C0Snjo=) 15: PJmcxay0WtSRJnIDudY6DzRck9Q.roa (hash: g6fJ4GyCp1px6ym38QN41UvtwhfWNwAeKWC1qAkBcM0=) 16: Pfn4rcRbKDJuVSkrcgYb9cu78A4.roa (hash: idjJ3BOFW0sv/bdtwbSz3j+KpA5MQW5Fct3dXY7lh4s=) 17: QoSldck7JuNQZZNum-VAZuQLAsE.roa (hash: BhLiuJKGAUIK/3IE4lS7ceagXck8UETCu/pPkUpva/Q=) 18: VFq7oOwuoK-4Ezbw8Byjy6HKneY.roa (hash: /kEtmYfU+u/9qUgUdtsAwlr6x9IMzXSTi0t0BiXXPhA=) 19: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: ZHDBcRallJuNoo+XYhfcFfVxDqac0qpaiZncdGbYIkw=) 20: Zbh0v3jIkeNHK_huafJIUWzUhjE.roa (hash: u5gxSyEmcqN6U6zIZdAUeM1zmLtdQN7lxXducAeyTVA=) 21: ekRgt1kJi2v662mflC7yokLhh34.roa (hash: 3lpPZiQnRkbCD6keXb41MVLx99s2aoWKQrtAqDsCux0=) 22: j4nUYOaKHoPffJAz1cqPosqerIk.roa (hash: qzx6KYLIX2I4Q509IMnF1YKlqNXT2ELmgiXx8moWdwc=) 23: nCxmMvqeJn__lxGCNUJCZkLMOTc.roa (hash: Ai3iY7UqLgg+IqHPxW+NvQb5rxDBknt3AUCWv9ikXpU=) 24: oMXuSjHyTi2ISV5ZXkeB_GmQ2qQ.roa (hash: 1OWtYAgWFUz9U3ZRyQBV7HsQLa1e5YTunuUhvpeW3zA=) 25: u_2w56w9VDiTEhKc_ZitgndOhPo.roa (hash: hQUv7XEtV7+B7R0n+5Br9ftO2lm1ptUCoJiMKucjmPE=) 26: vBgWOLwGFhFl4PcsLO1_iz1Pd28.roa (hash: HMFB9WBALYD9h4RLHvYHJTUV6TnrOwPF6X+4N/rsrBo=) 27: wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa (hash: hs9hA8TNugivRwbaXq2Cd+gZQT+LQBaaFDtqCrqGbck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:d8:7f:42:10:a5:93:09:74:b0:82:77:40:61:41:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Mar 1 10:01:26 2026 GMT Not After : Mar 2 10:01:26 2026 GMT Subject: CN=63e5602006a623e95daf49f23df1e58ca1d14cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d4:69:90:eb:6e:06:b7:43:72:81:33:08:ee: 0d:57:c2:01:93:80:44:7f:79:e5:c0:73:67:85:1e: 76:11:db:ab:db:2e:15:5b:34:3a:79:3f:22:a2:0b: b4:31:0f:72:8e:34:08:62:0c:9c:40:61:78:06:2c: 54:37:7e:2f:f5:db:97:bb:d2:ac:50:5c:22:89:dd: 68:4d:b4:11:c8:99:61:55:07:49:46:97:e5:c8:6c: 25:0b:c1:e4:b3:71:59:c0:ea:59:9b:1c:4d:3d:70: bc:08:64:bc:a0:72:b7:bc:bf:b7:f6:43:fd:8c:09: 97:01:63:80:a5:d5:d6:b4:d2:c8:d2:eb:92:22:53: 77:d1:da:d7:75:d9:48:ee:65:25:81:ed:d4:c0:db: 60:7f:ca:09:96:76:8b:c3:77:ca:75:13:1b:05:52: 65:98:e0:36:ee:aa:f6:2b:bb:2e:9c:46:0a:95:41: f9:c1:2a:a5:52:7e:cc:53:b0:38:49:7d:7c:5b:58: 50:13:43:3b:63:03:90:1d:ea:3a:6e:8a:34:29:4d: c1:43:e5:83:7c:5a:73:8c:b5:aa:ac:bd:02:d1:c5: 66:eb:86:9f:d0:31:cc:08:f7:98:a5:43:1d:88:10: 79:a2:94:e8:35:1a:7f:af:ae:39:9f:28:b0:46:7e: d8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E5:60:20:06:A6:23:E9:5D:AF:49:F2:3D:F1:E5:8C:A1:D1:4C:F5 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:bb:8d:e2:b0:97:4b:94:09:53:bf:ce:7f:37:12:7c:31:f7: e4:12:6b:ad:b1:11:03:2b:20:87:ba:e2:58:f5:4f:24:10:f4: 08:19:49:a0:e6:7a:4c:bc:83:19:bf:f3:3a:13:24:df:bb:94: b5:52:d4:67:01:ed:ef:a9:10:22:4b:2e:e7:dc:10:23:7d:e2: a6:5b:91:22:a4:1a:d2:d1:a9:ac:cd:0b:cd:80:a5:3f:06:8e: 62:92:d8:ed:b2:c7:3f:83:7e:47:af:0f:eb:fb:ba:7e:fc:d4: 0c:ce:32:3d:5c:c1:a0:24:ee:18:da:b9:13:33:ad:8a:47:2b: c0:23:db:98:d6:a8:05:a9:7e:29:e0:e3:de:57:87:8d:59:a4: 9a:d6:c9:11:8b:f4:9d:d3:9a:52:c8:7c:1c:8a:1b:2a:89:3c: b9:72:6a:e4:9c:66:c9:70:80:67:f5:55:d6:29:0b:75:7c:6d: 44:d2:68:cd:2e:cb:ae:16:d9:bf:48:db:a5:e8:b7:bd:41:0a: 48:b5:39:74:fb:ab:34:a4:9a:2f:60:5c:66:e6:50:9e:42:37: a4:1d:95:2b:bd:69:ac:6b:47:f9:d0:1a:31:8b:8a:18:91:b7: e7:7a:7b:10:ba:88:a8:63:7c:c9:b6:85:0a:3d:d2:fd:fe:33: 98:7b:4e:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyo2H9CEKWTCXSwgndAYUEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMzAxMTAwMTI2WhcNMjYwMzAyMTAwMTI2WjAzMTEwLwYDVQQD Eyg2M2U1NjAyMDA2YTYyM2U5NWRhZjQ5ZjIzZGYxZTU4Y2ExZDE0Y2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltRpkOtuBrdDcoEzCO4NV8IBk4BE f3nlwHNnhR52Edur2y4VWzQ6eT8iogu0MQ9yjjQIYgycQGF4BixUN34v9duXu9Ks UFwiid1oTbQRyJlhVQdJRpflyGwlC8Hks3FZwOpZmxxNPXC8CGS8oHK3vL+39kP9 jAmXAWOApdXWtNLI0uuSIlN30drXddlI7mUlge3UwNtgf8oJlnaLw3fKdRMbBVJl mOA27qr2K7sunEYKlUH5wSqlUn7MU7A4SX18W1hQE0M7YwOQHeo6boo0KU3BQ+WD fFpzjLWqrL0C0cVm64af0DHMCPeYpUMdiBB5opToNRp/r645nyiwRn7YswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPlYCAGpiPpXa9J8j3x5Yyh0Uz1MB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbuN4rCX S5QJU7/OfzcSfDH35BJrrbERAysgh7riWPVPJBD0CBlJoOZ6TLyDGb/zOhMk37uU tVLUZwHt76kQIksu59wQI33ipluRIqQa0tGprM0LzYClPwaOYpLY7bLHP4N+R68P 6/u6fvzUDM4yPVzBoCTuGNq5EzOtikcrwCPbmNaoBal+KeDj3leHjVmkmtbJEYv0 ndOaUsh8HIobKok8uXJq5JxmyXCAZ/VV1ikLdXxtRNJozS7LrhbZv0jbpei3vUEK SLU5dPurNKSaL2BcZuZQnkI3pB2VK71prGtH+dAaMYuKGJG353p7ELqIqGN8ybaF Cj3S/f4zmHtOAg== -----END CERTIFICATE-----Generated at Sun Mar 1 18:22:53 2026 by rpki-client