$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: k7nBPZqTD2mRWCfyr+rw3IYnfpIzGoDqHSe9H/Gja3c= Subject key identifier: C7:D7:2F:90:C0:D1:D0:BF:07:FF:56:8D:CE:89:C8:80:45:A5:A3:54 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019FAB2C9E755450237775CEAC819E1AFF41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 1620 Signing time: Wed 29 Jul 2026 00:00:55 +0000 Manifest this update: Wed 29 Jul 2026 00:00:55 +0000 Manifest next update: Thu 30 Jul 2026 00:00:55 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: 3B8cIOw8Jws5WnYXmXdeppUWfk8E20YEmJjsfAwtZ5w=) 7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) 12: u08NEvufIyYOw5wjByrYL3KDftg.roa (hash: +kuBshu076KXzQxN7e8+v+U/mTU0N1n8TG4+SUR96MM=) 13: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:2c:9e:75:54:50:23:77:75:ce:ac:81:9e:1a:ff:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jul 29 00:00:55 2026 GMT Not After : Jul 30 00:00:55 2026 GMT Subject: CN=c7d72f90c0d1d0bf07ff568dce89c88045a5a354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:b5:f4:78:a0:74:a0:f9:62:5b:00:2b:25: 50:59:ff:9e:9a:dc:42:f5:97:15:50:31:fa:c4:4e: ff:95:60:14:32:1b:2c:39:6a:7c:56:90:32:5e:b7: 32:24:01:87:20:09:0b:de:be:ce:62:9b:b5:ee:d7: e4:c3:45:4f:9f:bf:36:3e:27:bf:ff:d6:bf:45:2d: 7b:4e:d5:86:e2:ef:a5:b5:da:5a:c7:4e:e4:44:49: 5f:15:9a:5e:fe:5d:f2:8c:e1:fb:bc:d3:ab:e5:1e: 08:72:74:4e:f0:bd:1b:16:95:8a:c9:4c:64:5b:87: da:63:db:0c:e2:cd:94:82:b1:fc:52:87:6d:4f:d8: dc:f7:69:d6:d9:dd:4a:48:77:e5:d7:32:a6:44:36: dd:3c:01:9d:77:2e:e6:7f:15:18:0a:1e:20:01:c4: 02:c9:5d:1c:0c:bd:1f:a8:12:84:d1:61:59:90:2f: b0:4f:d6:c4:40:18:59:18:74:44:56:7a:e5:ae:da: 1f:40:bb:fd:1f:04:6c:ca:cc:96:46:83:4f:b6:80: a1:01:0b:da:25:d2:e4:7e:0c:7c:c0:3a:ca:ad:7f: bb:d7:31:2f:ca:59:49:3b:78:df:5d:f3:2e:40:1e: d0:df:52:09:50:0d:ae:e3:fc:6e:31:17:f6:6d:c7: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D7:2F:90:C0:D1:D0:BF:07:FF:56:8D:CE:89:C8:80:45:A5:A3:54 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f0:c3:d7:0c:fa:53:ed:0f:4e:20:37:82:90:4f:53:54:b4: 9b:89:ee:95:f9:fa:8a:a2:34:69:0a:d7:c8:37:a8:0d:1b:47: 38:38:bd:73:25:3d:bf:5d:9d:74:b2:34:a6:b4:73:69:eb:15: 3b:bf:59:c8:f8:72:99:1a:34:a9:87:51:92:a9:b7:98:38:5a: db:73:b1:90:c5:11:22:15:6d:53:f5:ff:e0:95:c9:cc:61:9d: cf:5a:64:a1:f6:26:b2:b4:20:d1:85:02:5b:5f:17:cd:8a:c8: 6e:26:ed:0d:1a:05:64:6e:01:74:6a:72:57:ac:dd:e8:73:6c: 52:11:5d:91:e0:b7:5e:38:88:cb:51:a3:8a:4c:83:73:06:cf: e7:24:0f:ba:52:98:1d:63:26:41:ca:83:7b:59:fd:dc:71:c8: ab:d9:2b:b1:0a:90:d1:fe:8e:2a:a0:a5:5b:78:a8:aa:11:45: 78:c1:67:99:64:c9:4a:2e:90:94:17:73:03:c5:23:27:83:0a: a7:0a:44:0e:69:98:94:2c:c5:37:5f:c1:85:8c:cc:94:d5:b9: ff:50:d0:df:a5:6d:76:80:50:74:fd:1d:2f:e7:32:5a:80:b1: c3:91:a4:2f:f9:67:10:b5:da:2e:80:f3:42:71:ed:7a:cc:9f: 7c:a4:59:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rLJ51VFAjd3XOrIGeGv9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwNzI5MDAwMDU1WhcNMjYwNzMwMDAwMDU1WjAzMTEwLwYDVQQD EyhjN2Q3MmY5MGMwZDFkMGJmMDdmZjU2OGRjZTg5Yzg4MDQ1YTVhMzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa219HigdKD5YlsAKyVQWf+emtxC 9ZcVUDH6xE7/lWAUMhssOWp8VpAyXrcyJAGHIAkL3r7OYpu17tfkw0VPn782Pie/ /9a/RS17TtWG4u+ltdpax07kRElfFZpe/l3yjOH7vNOr5R4IcnRO8L0bFpWKyUxk W4faY9sM4s2UgrH8UodtT9jc92nW2d1KSHfl1zKmRDbdPAGddy7mfxUYCh4gAcQC yV0cDL0fqBKE0WFZkC+wT9bEQBhZGHREVnrlrtofQLv9HwRsysyWRoNPtoChAQva JdLkfgx8wDrKrX+71zEvyllJO3jfXfMuQB7Q31IJUA2u4/xuMRf2bccj/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfXL5DA0dC/B/9Wjc6JyIBFpaNUMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/DD1wz6 U+0PTiA3gpBPU1S0m4nulfn6iqI0aQrXyDeoDRtHODi9cyU9v12ddLI0prRzaesV O79ZyPhymRo0qYdRkqm3mDha23OxkMURIhVtU/X/4JXJzGGdz1pkofYmsrQg0YUC W18XzYrIbibtDRoFZG4BdGpyV6zd6HNsUhFdkeC3XjiIy1GjikyDcwbP5yQPulKY HWMmQcqDe1n93HHIq9krsQqQ0f6OKqClW3ioqhFFeMFnmWTJSi6QlBdzA8UjJ4MK pwpEDmmYlCzFN1/BhYzMlNW5/1DQ36VtdoBQdP0dL+cyWoCxw5GkL/lnELXaLoDz QnHtesyffKRZ6g== -----END CERTIFICATE-----Generated at Wed Jul 29 02:18:51 2026 by rpki-client