$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: c5R3F5J3WdaN9A/8sAZh84flzjS1fDRfaldrAjw0Hu8= Subject key identifier: 38:D5:92:0A:CD:BE:B8:1C:B4:B4:DA:4B:13:E8:B3:F7:AD:43:C8:50 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 01A1C5FA4D1B22EB54DD240526CE60852CB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 1737 Signing time: Tue 10 Nov 2026 15:01:17 +0000 Manifest this update: Tue 10 Nov 2026 15:01:17 +0000 Manifest next update: Wed 11 Nov 2026 15:01:17 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: Qs1sAcLxCvHUL1WviikOTCeSVvyHo5IjBU90lZEfV3A=) 7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) 12: u08NEvufIyYOw5wjByrYL3KDftg.roa (hash: +kuBshu076KXzQxN7e8+v+U/mTU0N1n8TG4+SUR96MM=) 13: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:c5:fa:4d:1b:22:eb:54:dd:24:05:26:ce:60:85:2c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Nov 10 15:01:17 2026 GMT Not After : Nov 11 15:01:17 2026 GMT Subject: CN=38d5920acdbeb81cb4b4da4b13e8b3f7ad43c850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:d9:22:2d:8e:ba:72:1b:0f:30:5d:7e:c3: 44:a7:d6:ba:e1:96:ed:17:19:1a:84:65:03:fc:92: d4:24:77:63:65:50:cc:26:59:40:53:6b:84:b4:e6: 7d:51:70:54:10:6a:ef:d6:b0:97:07:58:8d:2c:2e: 63:74:d2:45:ce:83:c5:1d:28:e2:a8:bd:5b:59:97: d9:ca:ce:d5:e1:9e:87:55:33:01:e8:c3:04:92:98: 9c:0d:72:00:b9:7d:ae:f7:59:74:99:f4:88:0b:60: d0:ad:1c:d5:cd:ad:1a:8b:80:3d:07:4b:9d:38:70: c3:65:91:e8:d1:97:8e:63:b0:7e:b7:94:22:64:6e: d8:e3:0f:bc:d7:5b:1b:79:36:00:16:0d:0a:b7:a8: e4:9e:4f:c7:a3:0a:ab:1f:dc:79:b1:32:73:30:b0: 66:c8:3b:e0:b0:e0:c3:0b:8b:c5:48:2f:de:d1:5d: 3f:be:87:08:c0:0e:86:5a:c6:2c:f4:aa:2c:fe:5d: 54:56:18:c6:de:2f:57:a7:84:e2:a6:80:0c:35:7e: 4c:5d:c7:17:6f:8a:a6:11:d1:1e:99:7d:9d:47:75: 08:7a:d7:27:bb:f2:73:6c:1a:3b:43:db:71:5d:dc: 1e:a7:0f:2e:f3:93:81:98:aa:7b:6b:5a:c1:3e:26: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D5:92:0A:CD:BE:B8:1C:B4:B4:DA:4B:13:E8:B3:F7:AD:43:C8:50 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:53:92:13:bd:82:a0:01:2e:23:32:2f:61:fa:a9:6a:0c:df: 5b:95:fa:9a:26:9c:cd:ee:8f:40:ee:de:56:17:fc:dd:11:04: 03:8b:37:7b:65:fc:c1:2f:01:ee:1b:b9:ee:fb:10:44:fc:b3: fa:f9:18:96:36:5a:a4:71:6c:8f:87:d8:72:11:a3:b1:84:4a: 6e:d1:1f:fd:59:6d:5d:4f:d3:27:a5:d7:9a:f0:b2:01:cf:23: e3:45:63:f9:25:ea:d1:d6:58:4e:da:0c:f0:0b:ed:49:b4:5a: 01:75:d0:25:d4:c6:bc:0f:3f:9d:ba:34:a3:57:c0:05:ac:60: f2:ef:7e:a9:1e:0d:ee:4b:3b:79:ae:b0:a0:6d:35:3e:6c:b7: 52:9d:14:80:b6:f5:06:06:6d:d0:90:13:64:50:c3:14:0d:1f: 56:77:7f:5a:f9:6e:47:6c:23:0d:64:5c:ae:1e:6e:5d:6e:e9: 65:90:10:a8:82:53:a9:98:24:da:4e:1d:21:31:aa:25:7c:0e: 67:b0:cc:97:38:e6:d7:da:47:ca:b1:af:e6:f8:14:59:dc:9e: 2e:09:7d:3a:2c:b5:78:f1:56:90:31:62:d7:94:3d:52:11:ec: 8f:23:4e:ac:4e:a8:89:96:0d:d3:d8:41:69:54:c4:5b:d5:a2: 75:e0:93:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHF+k0bIutU3SQFJs5ghSy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYxMTEwMTUwMTE3WhcNMjYxMTExMTUwMTE3WjAzMTEwLwYDVQQD EygzOGQ1OTIwYWNkYmViODFjYjRiNGRhNGIxM2U4YjNmN2FkNDNjODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI3ZIi2OunIbDzBdfsNEp9a64Zbt FxkahGUD/JLUJHdjZVDMJllAU2uEtOZ9UXBUEGrv1rCXB1iNLC5jdNJFzoPFHSji qL1bWZfZys7V4Z6HVTMB6MMEkpicDXIAuX2u91l0mfSIC2DQrRzVza0ai4A9B0ud OHDDZZHo0ZeOY7B+t5QiZG7Y4w+811sbeTYAFg0Kt6jknk/HowqrH9x5sTJzMLBm yDvgsODDC4vFSC/e0V0/vocIwA6GWsYs9Kos/l1UVhjG3i9Xp4TipoAMNX5MXccX b4qmEdEemX2dR3UIetcnu/JzbBo7Q9txXdwepw8u85OBmKp7a1rBPiZIAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjVkgrNvrgctLTaSxPos/etQ8hQMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1OSE72C oAEuIzIvYfqpagzfW5X6miacze6PQO7eVhf83REEA4s3e2X8wS8B7hu57vsQRPyz +vkYljZapHFsj4fYchGjsYRKbtEf/VltXU/TJ6XXmvCyAc8j40Vj+SXq0dZYTtoM 8AvtSbRaAXXQJdTGvA8/nbo0o1fABaxg8u9+qR4N7ks7ea6woG01Pmy3Up0UgLb1 BgZt0JATZFDDFA0fVnd/WvluR2wjDWRcrh5uXW7pZZAQqIJTqZgk2k4dITGqJXwO Z7DMlzjm19pHyrGv5vgUWdyeLgl9Oiy1ePFWkDFi15Q9UhHsjyNOrE6oiZYN09hB aVTEW9WideCT1A== -----END CERTIFICATE-----Generated at Wed Nov 11 00:48:16 2026 by rpki-client