$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft File: VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json) Hash identifier: EDATd6eVwgDmuuO9dGOuERKEuS2nKUNelldaXyMCi7I= Subject key identifier: A7:2A:9F:A5:ED:F4:96:E6:F2:08:0A:A1:73:A1:C7:CA:99:30:14:A9 Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Certificate serial: 019D9A749C9B9EFB60DEAC75872740665200 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft Manifest number: 18D7 Signing time: Fri 17 Apr 2026 08:00:26 +0000 Manifest this update: Fri 17 Apr 2026 08:00:26 +0000 Manifest next update: Sat 18 Apr 2026 08:00:26 +0000 Files and hashes: 1: ODrvOm-dJuUN_AAYKVaZFOpeRWo.roa (hash: BwrM7AQ3z89UNZnD9zdl+nzTro1rSz8r7mTAINtQABE=) 2: OpgFBnj58YZNhjqrjMPFmcXkMoM.roa (hash: x3izVxL+JnWf1wZ+LfTZxTJhtpQOQ2pahlLAm7S6090=) 3: ULfP7S3K6Ksk8C6TR4RZSqXerPo.roa (hash: jDQhgjn7JFfsrl3H/uni3GxDG1EWoZv53nMWeBGAfcA=) 4: UXO72pN93K891EJ5EOS-KSuDTh4.roa (hash: J4YBwoF1qT8QowRHgcLZczx88TgjbKfIhyS5Yc1Q/h4=) 5: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: 1wu9oZXP4smXfgwFtaErscS4d+tga/W06CWl4fkqEEE=) 6: a0aDU4a4xZXzCaPJpS-t6rp3SZE.roa (hash: nev3ZlkZIDciJtDsi+7x13JPGR4yMU3qauTuUIZEkIk=) 7: fyQVOXy16Gt7_ifnytbj200NH-Y.roa (hash: UyCkvhjGfT8atrl4wqMna6uOndaEBkveUoY6zrFvO4c=) 8: g2fN7tCyrysxEndgN_riAmLTYSU.roa (hash: XiGl00VYZp7eVqANIUc9SN7YbU0zcI0nIY4sSK0DTc4=) 9: kYXzTp4ydXYEubY6Zs2tRMwj1lA.asa (hash: lFVvdazmR0artN3g09nvxHrr2wgy8qv5IQaGXJwF9OU=) 10: l3M-xr60hrpxSkxGT1zOTrb_xW8.roa (hash: 2U8pj/J8QbJGMZnyHPhC1LIrWuoDRqXzuWrV+ncciiE=) 11: qDPjAzV1MESCMl_59kmxdlu5OwU.asa (hash: WPDQk2nWLa5ctCuNbhzwZYV7qaWfg4mN27IKtW1ZNiY=) 12: uPKrVXBdVJ52jFwUr1Sws2imUiQ.roa (hash: +P9LOhkgcvGB9Y0oqUbZdTK9wmnZzjn9rC57/GCZX0Q=) 13: yoxe9lLbCa2h6gtQRAHAduOM9X0.roa (hash: s8LyW32eS7lJnnnTP0eK55NVtnvGmgvQdGOQCvIfya4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:74:9c:9b:9e:fb:60:de:ac:75:87:27:40:66:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Validity Not Before: Apr 17 08:00:26 2026 GMT Not After : Apr 18 08:00:26 2026 GMT Subject: CN=a72a9fa5edf496e6f2080aa173a1c7ca993014a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:fc:d0:26:69:77:9a:b0:80:93:17:e8:9d: e9:07:d2:09:01:c1:19:9f:5c:74:50:8e:4c:45:a6: a8:54:0f:86:2c:a1:a4:85:a8:db:61:58:75:5b:9a: b0:6d:f7:57:94:76:f4:01:54:b6:9a:64:a6:2f:21: fb:80:0e:09:04:63:de:54:ac:70:d9:37:a7:e2:47: 35:16:a4:95:98:48:84:08:c7:1a:5a:c8:ad:32:fc: 2d:f1:46:8b:06:f2:ff:1c:5e:a1:d9:29:18:3c:96: 12:76:6c:a6:7a:24:3b:92:fc:9c:95:ab:91:1a:a9: ad:13:f2:81:86:f1:29:58:5b:6b:6a:dd:39:1c:b9: 67:81:95:25:a0:2c:6d:0a:70:f5:cf:ce:3e:f3:f1: f2:20:7e:c5:5a:d7:1a:7f:cf:c0:b6:30:13:9e:41: e9:50:9a:57:03:46:a0:67:e3:c3:e0:6a:4d:43:81: b3:81:8e:76:fa:0b:d6:fc:c2:83:1a:f7:d7:6a:1e: 8c:de:fd:b0:14:73:d8:7c:fc:5c:6f:a7:4e:c3:4c: 5a:4c:cd:c5:85:5c:2b:ad:d2:a2:1a:e1:fb:5c:92: 8f:47:0e:1e:53:47:2e:af:b9:1e:e4:b3:65:b6:dc: 07:52:04:1a:5d:0a:fa:ee:2b:ff:af:3e:83:aa:9d: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2A:9F:A5:ED:F4:96:E6:F2:08:0A:A1:73:A1:C7:CA:99:30:14:A9 X509v3 Authority Key Identifier: keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:50:54:ef:17:9e:06:75:59:d3:4e:48:90:f1:f6:f9:b6:56: 49:e1:91:bc:24:7c:c5:e2:08:12:96:cc:4d:77:fe:f4:1e:e1: c6:ad:5a:1f:71:df:9f:bf:20:27:67:bc:b1:2f:fd:42:07:2a: 81:17:d6:85:3c:77:81:08:ee:9a:6e:40:fc:93:61:ae:d3:4e: 65:c7:e5:2a:c1:05:0f:aa:1d:f2:06:70:55:b4:b4:10:f8:56: ca:b1:6f:26:d6:90:be:b6:d3:f7:3d:ea:e2:21:74:a7:1f:de: 01:cb:b6:c1:5b:e8:1f:6a:aa:ec:46:45:01:52:4c:e7:d4:25: 17:1c:bc:1b:d2:1f:f9:e6:a2:b2:0a:45:a9:14:f6:9c:ac:b2: 90:9a:07:cc:6f:aa:30:51:af:dc:32:6a:1f:42:38:f5:a2:de: 66:fe:57:0f:b8:cd:d7:42:67:08:6c:4a:42:3a:a1:77:70:10: 36:91:e1:1f:bf:4f:f3:c2:28:25:72:5b:b8:77:29:4f:fb:e8: ff:64:22:61:cb:98:e4:0d:53:f3:de:1c:81:50:b7:1c:2c:26: 4c:46:4b:b9:fb:88:8d:5a:ca:40:bf:64:56:14:cd:39:2c:96: 3e:fd:f4:df:10:a0:80:b4:21:d9:c4:1c:95:d3:60:c8:6b:f8: 9f:84:63:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2adJybnvtg3qx1hydAZlIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj NjA0NmMwHhcNMjYwNDE3MDgwMDI2WhcNMjYwNDE4MDgwMDI2WjAzMTEwLwYDVQQD EyhhNzJhOWZhNWVkZjQ5NmU2ZjIwODBhYTE3M2ExYzdjYTk5MzAxNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIT80CZpd5qwgJMX6J3pB9IJAcEZ n1x0UI5MRaaoVA+GLKGkhajbYVh1W5qwbfdXlHb0AVS2mmSmLyH7gA4JBGPeVKxw 2Ten4kc1FqSVmEiECMcaWsitMvwt8UaLBvL/HF6h2SkYPJYSdmymeiQ7kvyclauR GqmtE/KBhvEpWFtrat05HLlngZUloCxtCnD1z84+8/HyIH7FWtcaf8/AtjATnkHp UJpXA0agZ+PD4GpNQ4GzgY52+gvW/MKDGvfXah6M3v2wFHPYfPxcb6dOw0xaTM3F hVwrrdKiGuH7XJKPRw4eU0cur7ke5LNlttwHUgQaXQr67iv/rz6Dqp0aTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcqn6Xt9Jbm8ggKoXOhx8qZMBSpMB8GA1UdIwQY MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt MjM5NGM2NjAwMDIyLzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlBU7xee BnVZ005IkPH2+bZWSeGRvCR8xeIIEpbMTXf+9B7hxq1aH3Hfn78gJ2e8sS/9Qgcq gRfWhTx3gQjumm5A/JNhrtNOZcflKsEFD6od8gZwVbS0EPhWyrFvJtaQvrbT9z3q 4iF0px/eAcu2wVvoH2qq7EZFAVJM59QlFxy8G9If+eaisgpFqRT2nKyykJoHzG+q MFGv3DJqH0I49aLeZv5XD7jN10JnCGxKQjqhd3AQNpHhH79P88IoJXJbuHcpT/vo /2QiYcuY5A1T894cgVC3HCwmTEZLufuIjVrKQL9kVhTNOSyWPv303xCggLQh2cQc ldNgyGv4n4Rj/g== -----END CERTIFICATE-----Generated at Fri Apr 17 17:55:52 2026 by rpki-client