$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: UZDC/Vphr1JpLFCnQZ7fpWYqifA6Vlzjc5I1Uip5X3Q= Subject key identifier: 1D:59:0F:69:33:12:9F:DB:19:66:53:62:BD:9A:41:AE:B4:52:24:59 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019CABD8F2CDA3D8984E923C5583BA4E4F33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 1492 Signing time: Mon 02 Mar 2026 00:00:47 +0000 Manifest this update: Mon 02 Mar 2026 00:00:47 +0000 Manifest next update: Tue 03 Mar 2026 00:00:47 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: WAvIC4438dbpHenocjfBoqOQiKGewEDA0YYWKyU9TOQ=) 7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) 12: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:d8:f2:cd:a3:d8:98:4e:92:3c:55:83:ba:4e:4f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Mar 2 00:00:47 2026 GMT Not After : Mar 3 00:00:47 2026 GMT Subject: CN=1d590f6933129fdb19665362bd9a41aeb4522459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:f9:16:16:0d:54:68:3c:9a:d1:e1:04:4f: dc:5d:29:b5:83:91:6d:ba:60:0d:23:57:85:57:77: 5f:23:16:76:a5:d5:b3:a7:1b:2b:22:bc:aa:59:5d: 9f:c4:5b:22:d2:e5:c3:96:43:7f:92:9d:93:f6:15: e6:22:27:9e:ed:11:25:e3:e9:be:14:16:e2:d5:00: f8:ad:47:81:50:88:12:d2:da:99:62:50:b3:bf:5d: d7:8e:92:1b:a2:00:21:09:07:ef:6d:f3:01:15:b7: b0:a3:f8:90:04:49:39:5a:3f:eb:f7:39:9a:1a:58: a3:82:f0:0f:dd:7c:b9:f0:c4:d5:1e:a6:24:f7:58: 2a:b9:24:8b:aa:6c:3b:a6:8a:47:7d:a9:ea:c4:3a: ff:80:16:fa:e1:3e:0b:5b:80:0e:ca:71:8e:a0:33: e5:4b:5c:20:3d:4e:6b:bf:12:81:46:a2:50:be:7f: a2:a8:42:a9:1e:2e:0f:54:8b:5c:60:03:62:f6:5e: 99:ae:09:c2:85:da:2b:ba:cd:9a:a0:f5:01:0f:54: de:b0:83:a8:eb:3a:35:37:1d:d0:2f:eb:c0:46:bf: 74:76:40:80:6b:fe:66:49:cc:b4:25:a0:3a:8c:10: f1:0d:c7:bb:10:6c:a7:f6:09:5f:28:47:69:0a:73: ca:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:59:0F:69:33:12:9F:DB:19:66:53:62:BD:9A:41:AE:B4:52:24:59 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:1e:a3:ed:0d:6e:c3:e3:dc:21:83:70:bb:77:48:0c:0a:40: 76:9d:44:27:40:1c:76:ff:ff:c5:18:4a:9a:02:b8:23:b9:47: b3:c1:e7:01:04:f0:5f:89:d4:3d:68:05:06:4f:40:66:f4:2e: 3f:05:76:c2:4d:50:5b:5f:78:ce:84:99:7e:2e:ce:f6:5f:6e: ed:0b:7a:86:8d:f7:8c:93:0b:30:3d:38:7f:b4:c5:ef:e0:24: 96:c1:53:92:e1:bc:43:58:91:be:9a:80:1c:94:2a:37:10:d4: a6:23:39:af:eb:50:c2:cb:8c:1e:ac:de:8b:c3:c1:5e:ae:dd: 0b:2a:be:bd:94:7c:a1:43:1a:8b:63:02:b6:72:2e:ad:68:78: 1e:9d:53:41:9a:6d:02:d5:cc:0a:19:13:8c:3f:bb:d8:6d:9e: 4a:d3:17:58:37:93:6b:9c:f4:97:c4:49:74:0e:3a:04:c2:c9: bb:4b:5c:19:32:8e:3e:e7:21:89:cc:5c:cd:6e:c9:4c:87:8b: 19:cc:e0:c9:55:3e:91:61:57:c4:33:16:59:d4:4b:d5:e6:e6: 20:fc:70:18:46:1d:6e:c6:71:27:4f:a1:b2:da:d3:97:bb:0f: f9:3c:ac:1f:33:63:92:00:7d:cb:ea:8e:b5:ad:2b:1b:03:2d: 6f:d1:b5:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyr2PLNo9iYTpI8VYO6Tk8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwMzAyMDAwMDQ3WhcNMjYwMzAzMDAwMDQ3WjAzMTEwLwYDVQQD EygxZDU5MGY2OTMzMTI5ZmRiMTk2NjUzNjJiZDlhNDFhZWI0NTIyNDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIb5FhYNVGg8mtHhBE/cXSm1g5Ft umANI1eFV3dfIxZ2pdWzpxsrIryqWV2fxFsi0uXDlkN/kp2T9hXmIiee7REl4+m+ FBbi1QD4rUeBUIgS0tqZYlCzv13XjpIbogAhCQfvbfMBFbewo/iQBEk5Wj/r9zma GlijgvAP3Xy58MTVHqYk91gquSSLqmw7popHfanqxDr/gBb64T4LW4AOynGOoDPl S1wgPU5rvxKBRqJQvn+iqEKpHi4PVItcYANi9l6ZrgnChdorus2aoPUBD1TesIOo 6zo1Nx3QL+vARr90dkCAa/5mScy0JaA6jBDxDce7EGyn9glfKEdpCnPKFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1ZD2kzEp/bGWZTYr2aQa60UiRZMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYh6j7Q1u w+PcIYNwu3dIDApAdp1EJ0Acdv//xRhKmgK4I7lHs8HnAQTwX4nUPWgFBk9AZvQu PwV2wk1QW194zoSZfi7O9l9u7Qt6ho33jJMLMD04f7TF7+AklsFTkuG8Q1iRvpqA HJQqNxDUpiM5r+tQwsuMHqzei8PBXq7dCyq+vZR8oUMai2MCtnIurWh4Hp1TQZpt AtXMChkTjD+72G2eStMXWDeTa5z0l8RJdA46BMLJu0tcGTKOPuchicxczW7JTIeL GczgyVU+kWFXxDMWWdRL1ebmIPxwGEYdbsZxJ0+hstrTl7sP+TysHzNjkgB9y+qO ta0rGwMtb9G1XA== -----END CERTIFICATE-----Generated at Mon Mar 2 03:40:37 2026 by rpki-client