$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft File: VUwk1Deg1Wub0L5IimDP1czI-b8.mft (raw, json) Hash identifier: yy4HVAI7uXM0hI/ObNpTtOnJL1glWlzJhAvlfjR/zdc= Subject key identifier: 24:67:27:C2:DA:94:B5:CC:E3:E2:B8:BB:88:BE:EF:D3:BF:71:DD:4F Authority key identifier: 55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF Certificate issuer: /CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf Certificate serial: 019D99994CBB1D4CD479B52B4D191443F056 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft Manifest number: AF Signing time: Fri 17 Apr 2026 04:00:53 +0000 Manifest this update: Fri 17 Apr 2026 04:00:53 +0000 Manifest next update: Sat 18 Apr 2026 04:00:53 +0000 Files and hashes: 1: AOkKST9KwSJH3sXE5USL9gzAqUU.roa (hash: aXhO9sIv6q5kHGbb9/fb2Aw1F2NhhrGlB5l1s7C1sMo=) 2: DCZgz3VaJZPCqv-Xdr9kw9h7brE.roa (hash: DyiZMiJQd8x2jp86BuGzWff7b7OfU0LvcqAW62QVCmg=) 3: Jpc9akMn776zSYTD6mXsyRzavLU.roa (hash: ZfuvokmeEiQYfhhAu6Yv9wBQKPiuHqzkSEN6L6pFYXs=) 4: VRMDqGgJNAkkzV2QU5k7y3ameDM.roa (hash: +dcQEak+RgFEIETOwcJ9qNLzNVuw4mUqjHHzKz8y2Vg=) 5: VUwk1Deg1Wub0L5IimDP1czI-b8.crl (hash: x14cIw2oBm+0IEBPNFmalg5IziZAqF7Kl7nf/63iYl0=) 6: YUvNuDDndHcf-AWuGGf2zqBhFIE.roa (hash: 7DuazkLVNE3f7cMkbQDSXftJtVier8QCOPrebbq+iTo=) 7: kMXVbz2TuORvoHZ7UfuE6YxZLcc.roa (hash: tU3JunGy9A12HYURdznAlTij6asn5+6G+/mvxmK09Xw=) 8: lHlRsL-Mq2IXLN_FCgk3n5SW5Ow.roa (hash: AUB+QIsy3NSsT4UqxQv/l15uvrlHGM0Y5Yne/M+wgrs=) 9: q5A4k1LuI-8fQrtHp3b5trdFPzQ.roa (hash: KFUng+vVrjLAjS4gi17nWldghXXi/irFXTH6lAnJMPU=) 10: stcR-lSqkJU2Cb-qmerN4K0gerA.roa (hash: VXZV1NgbHgfdGJFJNdfWgsLM9jnWqEunQBxug2Zcoyg=) 11: z-M8hA9YhJMehJj6l7J_V1Cf40s.roa (hash: 8tsU5K53aTtChU1kltfQFAvWJiRSonY1j+RJ+vsZrJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:99:4c:bb:1d:4c:d4:79:b5:2b:4d:19:14:43:f0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf Validity Not Before: Apr 17 04:00:53 2026 GMT Not After : Apr 18 04:00:53 2026 GMT Subject: CN=246727c2da94b5cce3e2b8bb88beefd3bf71dd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:34:2a:09:84:0f:8e:a7:4e:17:ce:2f:64: 17:bd:21:07:90:c4:72:6e:ad:29:0a:2a:cc:0c:dc: 77:e0:e7:da:6a:00:b5:04:f3:5c:18:e1:c5:a2:ac: 89:c5:ee:00:87:c6:0a:71:44:f0:d0:3b:b3:75:ab: 35:96:c3:9f:33:73:ef:2c:c2:cf:37:d1:af:6e:71: c6:f0:b9:a0:8e:8a:f7:6b:04:11:cf:63:bb:38:96: e4:91:21:0b:ff:72:30:a9:05:97:2d:7d:9a:21:50: b5:b4:a1:ab:e8:dc:1a:e1:ed:26:2d:0d:3b:89:31: ce:bc:3a:a1:15:e6:b1:a4:ee:6b:51:58:ad:ec:b1: b9:d8:c9:4c:f7:1a:dc:71:6d:fb:d3:8e:64:3b:9c: 3b:8a:17:91:d2:64:6a:27:67:fc:cf:5b:1c:5b:54: 33:a9:21:d4:72:5e:19:77:24:f6:66:1b:91:46:a4: 05:20:c5:15:80:d1:8b:c8:fc:88:3d:f5:f7:7b:9c: 81:1e:68:86:61:41:34:a6:70:f4:d0:23:02:e0:68: 2a:64:62:e2:cc:9f:1a:5e:99:44:2f:72:c4:8f:86: 29:5e:b5:b1:4a:c9:2e:09:18:1b:93:55:f5:6e:ac: d9:bc:b6:66:43:2d:32:3a:a3:66:d3:ef:c7:83:73: 50:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:67:27:C2:DA:94:B5:CC:E3:E2:B8:BB:88:BE:EF:D3:BF:71:DD:4F X509v3 Authority Key Identifier: keyid:55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:cc:24:05:04:a1:b4:3f:cd:44:3a:66:93:18:54:af:4f:e7: 61:99:c4:1e:31:bf:97:b6:70:17:a0:51:5a:22:df:28:27:39: ff:1b:63:92:34:69:d3:8e:56:52:d1:f1:01:3e:86:58:1b:58: 4c:a6:df:48:11:0c:02:65:8e:00:68:0d:16:02:46:57:00:b1: 6f:15:62:6e:a9:ce:e4:ea:84:d1:36:9e:0a:b8:37:d4:c8:f6: ea:4c:06:03:55:7d:56:8d:91:94:c2:54:9e:73:66:d0:27:fc: 39:48:cd:65:cb:4b:e4:ea:b2:96:da:bf:6b:05:2e:ca:01:0f: 92:29:87:05:6e:d3:98:19:a3:65:03:b1:8b:5a:c2:2c:ec:42: 71:38:ef:83:d3:5b:b7:d1:e3:5f:e7:7e:24:12:46:c2:7b:21: 54:8f:3d:f6:48:ae:55:6e:ab:75:1a:74:97:2a:dc:69:48:c8: 1b:12:41:c4:3c:5c:05:d1:f8:a5:c9:4e:19:63:2c:41:bf:18: e2:08:c1:47:7d:48:41:75:9b:2a:bf:e3:ab:a7:95:e8:82:1d: 85:59:96:5f:64:a1:80:99:91:9a:ab:a5:73:fc:6b:18:6e:56: ed:6c:4a:3a:79:b4:a5:e4:b0:5f:7d:87:72:2d:22:20:a2:2c: 4b:c2:1e:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmUy7HUzUebUrTRkUQ/BWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NGMyNGQ0MzdhMGQ1NmI5YmQwYmU0ODhhNjBjZmQ1Y2Nj OGY5YmYwHhcNMjYwNDE3MDQwMDUzWhcNMjYwNDE4MDQwMDUzWjAzMTEwLwYDVQQD EygyNDY3MjdjMmRhOTRiNWNjZTNlMmI4YmI4OGJlZWZkM2JmNzFkZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoE0KgmED46nThfOL2QXvSEHkMRy bq0pCirMDNx34OfaagC1BPNcGOHFoqyJxe4Ah8YKcUTw0Duzdas1lsOfM3PvLMLP N9GvbnHG8Lmgjor3awQRz2O7OJbkkSEL/3IwqQWXLX2aIVC1tKGr6Nwa4e0mLQ07 iTHOvDqhFeaxpO5rUVit7LG52MlM9xrccW37045kO5w7iheR0mRqJ2f8z1scW1Qz qSHUcl4ZdyT2ZhuRRqQFIMUVgNGLyPyIPfX3e5yBHmiGYUE0pnD00CMC4GgqZGLi zJ8aXplEL3LEj4YpXrWxSskuCRgbk1X1bqzZvLZmQy0yOqNm0+/Hg3NQyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRnJ8LalLXM4+K4u4i+79O/cd1PMB8GA1UdIwQY MBaAFFVMJNQ3oNVrm9C+SIpgz9XMyPm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lMjgyZTctNGJmMS00Y2I4LWFlNmUt NjliYWExMWQ1NzhmLzEvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lMjgyZTctNGJmMS00Y2I4LWFlNmUtNjliYWExMWQ1Nzhm LzEvVlV3azFEZWcxV3ViMEw1SWltRFAxY3pJLWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMwkBQSh tD/NRDpmkxhUr0/nYZnEHjG/l7ZwF6BRWiLfKCc5/xtjkjRp045WUtHxAT6GWBtY TKbfSBEMAmWOAGgNFgJGVwCxbxVibqnO5OqE0TaeCrg31Mj26kwGA1V9Vo2RlMJU nnNm0Cf8OUjNZctL5Oqyltq/awUuygEPkimHBW7TmBmjZQOxi1rCLOxCcTjvg9Nb t9HjX+d+JBJGwnshVI899kiuVW6rdRp0lyrcaUjIGxJBxDxcBdH4pclOGWMsQb8Y 4gjBR31IQXWbKr/jq6eV6IIdhVmWX2ShgJmRmqulc/xrGG5W7WxKOnm0peSwX32H ci0iIKIsS8IeiQ== -----END CERTIFICATE-----Generated at Fri Apr 17 11:18:12 2026 by rpki-client