$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: rCNVqa9+QNJ55ibT8cMJ+xPkIFACfYt+A+SJ3lgEMh0= Subject key identifier: 3E:45:63:5E:55:F3:F9:3F:97:DF:9A:90:11:12:19:64:D1:42:06:E0 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019D9962F2F3ED32F85EF5910B42C49DBFEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 150D Signing time: Fri 17 Apr 2026 03:01:31 +0000 Manifest this update: Fri 17 Apr 2026 03:01:31 +0000 Manifest next update: Sat 18 Apr 2026 03:01:31 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: KwvE7ij4EKhb0ugHHKj6gqUc9+YHPA6YZppujPB6DYQ=) 7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) 12: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:f2:f3:ed:32:f8:5e:f5:91:0b:42:c4:9d:bf:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Apr 17 03:01:31 2026 GMT Not After : Apr 18 03:01:31 2026 GMT Subject: CN=3e45635e55f3f93f97df9a9011121964d14206e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:e6:d7:6a:ff:28:24:4d:05:7b:70:59:78: 15:d0:d3:f9:9d:9c:6a:35:c1:f1:ec:2b:bb:37:62: 11:41:e8:90:2c:fa:bd:75:44:24:ca:2c:11:17:d1: 57:25:b6:5b:19:fa:b8:84:bd:c1:f5:80:86:34:22: cc:86:c8:dd:c6:f7:db:cc:55:7a:34:90:50:55:c7: 41:cf:2b:6d:94:cf:f9:86:e0:73:0c:28:26:36:1c: 67:05:87:78:59:ca:2e:1e:8e:a8:8a:dc:ba:20:4f: 4b:73:ea:a6:0f:78:ad:30:53:0f:ce:91:c3:36:ae: 8f:bd:75:9e:b3:d6:d6:8c:b0:8b:7d:7d:ee:b5:7b: 62:e8:c2:8f:bc:46:f4:0b:19:d7:6e:69:9d:69:1c: 58:01:c9:87:62:85:cf:df:37:08:50:1c:e5:27:3c: 1d:35:24:71:f1:31:b4:85:8e:e6:6c:23:ca:ce:68: 8a:2e:2f:61:2c:81:2c:20:ea:67:d8:10:85:40:8a: 66:f3:89:1f:fe:60:73:3d:ab:9b:89:5e:5d:10:b6: 32:2c:fe:46:1a:19:f6:72:b5:28:03:70:fe:4c:29: c4:77:d3:1d:d3:7b:7b:99:14:25:cd:1c:09:18:62: 1c:5a:5a:6a:80:de:5e:da:de:01:3d:f7:60:6b:ef: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:45:63:5E:55:F3:F9:3F:97:DF:9A:90:11:12:19:64:D1:42:06:E0 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e4:b7:7a:e0:5f:67:05:e3:81:c0:01:32:6a:ea:3e:84:16: 58:7f:cb:b2:4d:e9:ca:53:67:76:6c:f1:9a:af:f3:95:1e:be: 96:9c:dd:77:3e:6f:0d:3a:49:03:15:fe:1b:09:0c:e8:68:34: 11:82:fe:01:94:18:9d:6f:03:97:c8:b9:f2:83:8a:01:47:75: 82:0c:1d:f2:06:d7:bc:ba:2a:72:fe:72:14:52:01:d9:84:a6: aa:24:79:32:b4:3f:c9:5f:4e:9a:fa:c5:f1:e8:91:55:ba:1a: 16:1d:2d:31:d5:4f:0b:e7:73:c3:77:b5:c2:f1:79:8a:99:3c: 22:99:1b:94:bb:b4:6d:43:c5:5d:3c:89:a7:66:8f:a6:e0:b3: a5:4a:bb:0e:1c:1d:cb:76:a7:a6:7b:7b:6d:30:90:ac:9b:4d: 94:b8:e8:13:1d:89:8b:1d:68:ce:46:c0:89:57:b2:0b:59:af: ce:6b:18:88:4e:31:59:88:da:bf:c1:02:77:ec:f9:88:13:1b: f0:6a:2c:b3:ff:33:7e:c9:63:df:3f:a6:3d:4b:c7:d0:fe:74: 58:90:36:8e:bf:63:38:06:9a:5e:1d:eb:7e:3b:ba:25:36:de: db:94:65:2f:72:8c:19:78:35:82:7d:aa:18:eb:df:8e:f4:55: bb:7e:ae:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYvLz7TL4XvWRC0LEnb/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwNDE3MDMwMTMxWhcNMjYwNDE4MDMwMTMxWjAzMTEwLwYDVQQD EygzZTQ1NjM1ZTU1ZjNmOTNmOTdkZjlhOTAxMTEyMTk2NGQxNDIwNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobjm12r/KCRNBXtwWXgV0NP5nZxq NcHx7Cu7N2IRQeiQLPq9dUQkyiwRF9FXJbZbGfq4hL3B9YCGNCLMhsjdxvfbzFV6 NJBQVcdBzyttlM/5huBzDCgmNhxnBYd4WcouHo6oity6IE9Lc+qmD3itMFMPzpHD Nq6PvXWes9bWjLCLfX3utXti6MKPvEb0CxnXbmmdaRxYAcmHYoXP3zcIUBzlJzwd NSRx8TG0hY7mbCPKzmiKLi9hLIEsIOpn2BCFQIpm84kf/mBzPaubiV5dELYyLP5G Ghn2crUoA3D+TCnEd9Md03t7mRQlzRwJGGIcWlpqgN5e2t4BPfdga+9RDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5FY15V8/k/l9+akBESGWTRQgbgMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+S3euBf ZwXjgcABMmrqPoQWWH/Lsk3pylNndmzxmq/zlR6+lpzddz5vDTpJAxX+GwkM6Gg0 EYL+AZQYnW8Dl8i58oOKAUd1ggwd8gbXvLoqcv5yFFIB2YSmqiR5MrQ/yV9OmvrF 8eiRVboaFh0tMdVPC+dzw3e1wvF5ipk8IpkblLu0bUPFXTyJp2aPpuCzpUq7Dhwd y3anpnt7bTCQrJtNlLjoEx2Jix1ozkbAiVeyC1mvzmsYiE4xWYjav8ECd+z5iBMb 8Goss/8zfslj3z+mPUvH0P50WJA2jr9jOAaaXh3rfju6JTbe25RlL3KMGXg1gn2q GOvfjvRVu36uvQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:32:11 2026 by rpki-client