$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: oXbYU1Rb9MBXwn/dPCzmrnlWiNVVVt5FKR5bXe0aUE0= Subject key identifier: ED:AD:92:13:4D:17:8E:B1:D9:C4:C0:C9:96:06:BD:F3:D2:B1:6C:9E Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019D9961F39DD109C5B9E92D423B7CE52071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 0D1A Signing time: Fri 17 Apr 2026 03:00:26 +0000 Manifest this update: Fri 17 Apr 2026 03:00:26 +0000 Manifest next update: Sat 18 Apr 2026 03:00:26 +0000 Files and hashes: 1: 0bOZqErT7cPqtg8A6up5AuWvx0k.roa (hash: TLkmyalxkw5UtbYf/UBevHhaws4BaWA7DIMpjH0huR4=) 2: 0nKy3DcrJQbiUx0L11st8vPu4iU.roa (hash: p61zFKqkHY6u5BC22bvQD8WFNXvs2Yw1bGFGniYo/EE=) 3: BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa (hash: FSP05ciRv7cgg2ori440lYssEdhe7MklJbnbswJVXz8=) 4: C-Kmr5FT1ri-wqW_PoFuVOWIXaY.roa (hash: ERXgmbLSjJDQYHfslHu3SRPoPi7u4SxKIXUEFniHGbE=) 5: N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa (hash: sJ/b4s+wOONAASz+jNAdnE8FTPixklTn6DITWj2Oz+o=) 6: NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa (hash: tjAGBxyE9MUK6tIC8hGVGZt0+cyyEXn5+tt8NlkIgvY=) 7: ROFAtVDItt_EMagnNMRUK_8AFAo.roa (hash: 0/7Uq0DIP8W8M/AoQNG3rBHtAMug83v1CzVSyAShVQQ=) 8: SDv_Hv3j1zQYKdMKKJahi--bpbA.roa (hash: wiXpFtlqxh3vGK37wBoqcCvYsCDy5XPVC/ufdC7sY8c=) 9: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: 1/OW5Pvudh4RFQng/lAD1bA1bGDKCF0c14lNBy+auss=) 10: bbeNuCdJXqCYIUtyU2bTHnhe0pM.roa (hash: /lbmYbffftG0vT1jDvQWmIRNnGgrK51SKBZCKYo4Ly0=) 11: fCShZlzeyORIZqRpva0LWa9CXcY.roa (hash: Zw1W+vklKFKa/7FceWUPbOmP+yw3OCVtUAYFmYvIIHY=) 12: hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa (hash: P18VNSJRod1881sL7FyXf+LS0GoW/VI4U88shR2WTxY=) 13: iryj8oj2-V8BM-nhifn9xaWFT6k.roa (hash: J2c6WbxcvYg3n0i5rwopADF8nqS8/EkzKqjIvyGqKVg=) 14: kD9r2BSjKFazEYZ-CJU10Fned7o.roa (hash: uFgbV/8h9jMNryiWR5QfYdbYD5HwXj0XKBD49uDOBMI=) 15: nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa (hash: mBMzJHf7kRboGL+NsWlN+QzAIvKztq5wCERZ3i/DuXc=) 16: ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa (hash: O7M0cdecg0k5jJU4EYSgvz6r2GhJVnkR6Wsg7m7uOsk=) 17: yNGeTwwu6nvLd6pVRj1m7SWFsRI.roa (hash: DIGoHvjBhbh21gUmE9LE4Pi0LqvQbAY6Y2ak9deQj74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 03:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:61:f3:9d:d1:09:c5:b9:e9:2d:42:3b:7c:e5:20:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Apr 17 03:00:26 2026 GMT Not After : Apr 18 03:00:26 2026 GMT Subject: CN=edad92134d178eb1d9c4c0c99606bdf3d2b16c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:09:a5:56:12:46:ad:b8:c8:3f:7b:7f:10:41: fc:59:a5:f7:4e:29:c5:e2:03:ce:6a:0b:fd:94:c0: 19:3f:99:f2:b8:fc:1e:da:ec:a2:be:99:b1:69:ee: 21:93:9c:b0:c2:a0:64:4e:67:a6:87:d0:ab:15:fa: 4f:5f:08:a3:e0:f2:cf:a3:cb:0d:2e:b1:fa:a3:fa: 27:78:20:e5:ff:47:0c:56:8f:bf:5b:11:b5:a3:8c: e8:bf:78:49:bd:73:d3:85:2a:43:5a:49:33:66:e2: 26:cc:7f:78:f1:61:45:a3:d8:88:71:d0:ab:e9:a2: 49:31:78:5c:85:9a:9b:59:06:d4:a3:87:54:fa:25: 35:5b:21:e4:8d:03:f0:f5:ce:70:f2:a2:f1:51:64: 66:5c:50:21:4d:b2:3d:25:89:ea:d9:41:77:01:5a: f8:1f:8c:d5:f1:24:25:d0:3c:99:65:85:c6:70:9a: 86:81:29:b8:89:8e:0b:7d:84:ed:b2:20:7c:ff:8e: 72:2e:f0:bd:38:49:19:a5:3e:29:c1:1e:7e:bf:75: 69:8c:b5:42:88:01:54:99:12:1e:4d:b6:4d:30:8f: f0:15:b2:c1:64:b4:5c:0a:c2:c6:a3:17:37:3f:2b: c4:48:b4:3a:b0:9e:e1:06:a5:b4:bd:ae:b0:e8:b9: 51:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AD:92:13:4D:17:8E:B1:D9:C4:C0:C9:96:06:BD:F3:D2:B1:6C:9E X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:63:c1:70:13:80:3a:b0:6f:1f:4c:51:f8:eb:46:de:51:58: ef:be:6a:e0:21:b8:e8:14:b6:4c:c4:f1:0e:0d:94:89:4f:da: a1:00:d2:13:83:f8:a7:27:13:11:c1:ef:89:5f:d2:48:87:d9: 67:f8:d2:98:aa:13:23:85:5b:db:40:e7:8e:99:50:bb:9a:35: 7b:0e:9b:b6:59:2b:40:72:a3:6f:56:92:70:0b:ac:51:0e:b0: 99:ce:ab:a7:b6:da:76:61:6f:5f:3a:a4:a3:d2:3c:75:0e:b5: 02:73:24:88:9e:a0:d7:92:bb:60:34:b1:fe:cc:70:94:f8:31: 14:3a:ad:2c:0e:10:73:ea:16:a4:09:bf:0f:40:99:0c:c9:0d: 50:d4:42:d1:4e:f0:cf:77:be:61:a5:9d:66:e3:5d:7f:27:84: e3:fa:74:96:8f:79:c5:f5:de:7d:b9:94:e2:6f:f1:af:6b:6f: 17:e3:3b:ab:21:d0:78:46:e6:78:5b:16:22:a9:9f:f7:13:ea: 92:41:34:f9:df:e0:c6:64:4f:35:10:be:da:63:18:59:67:72: 8c:96:9f:1e:bd:e8:e6:72:c8:46:00:31:8c:db:6c:fb:d9:cb: f2:a5:12:8e:18:ef:60:72:97:8d:27:bd:72:a9:6d:10:14:36: 3c:9e:1f:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYfOd0QnFuektQjt85SBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjYwNDE3MDMwMDI2WhcNMjYwNDE4MDMwMDI2WjAzMTEwLwYDVQQD EyhlZGFkOTIxMzRkMTc4ZWIxZDljNGMwYzk5NjA2YmRmM2QyYjE2YzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwmlVhJGrbjIP3t/EEH8WaX3TinF 4gPOagv9lMAZP5nyuPwe2uyivpmxae4hk5ywwqBkTmemh9CrFfpPXwij4PLPo8sN LrH6o/oneCDl/0cMVo+/WxG1o4zov3hJvXPThSpDWkkzZuImzH948WFFo9iIcdCr 6aJJMXhchZqbWQbUo4dU+iU1WyHkjQPw9c5w8qLxUWRmXFAhTbI9JYnq2UF3AVr4 H4zV8SQl0DyZZYXGcJqGgSm4iY4LfYTtsiB8/45yLvC9OEkZpT4pwR5+v3VpjLVC iAFUmRIeTbZNMI/wFbLBZLRcCsLGoxc3PyvESLQ6sJ7hBqW0va6w6LlRjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2tkhNNF46x2cTAyZYGvfPSsWyeMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmPBcBOA OrBvH0xR+OtG3lFY775q4CG46BS2TMTxDg2UiU/aoQDSE4P4pycTEcHviV/SSIfZ Z/jSmKoTI4Vb20DnjplQu5o1ew6btlkrQHKjb1aScAusUQ6wmc6rp7badmFvXzqk o9I8dQ61AnMkiJ6g15K7YDSx/sxwlPgxFDqtLA4Qc+oWpAm/D0CZDMkNUNRC0U7w z3e+YaWdZuNdfyeE4/p0lo95xfXefbmU4m/xr2tvF+M7qyHQeEbmeFsWIqmf9xPq kkE0+d/gxmRPNRC+2mMYWWdyjJafHr3o5nLIRgAxjNts+9nL8qUSjhjvYHKXjSe9 cqltEBQ2PJ4fLQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:23:31 2026 by rpki-client