$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: anF2TCHP1bsZMUjTikQtuJNPHnYOushJZwKDDjIo86E= Subject key identifier: 43:C9:57:C2:6F:2D:1D:C6:34:AB:A7:EC:84:C1:DB:DD:EA:7E:8D:4C Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019D28F225505C3745247F132507B36C320E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 189C Signing time: Thu 26 Mar 2026 07:00:51 +0000 Manifest this update: Thu 26 Mar 2026 07:00:51 +0000 Manifest next update: Fri 27 Mar 2026 07:00:51 +0000 Files and hashes: 1: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=) 2: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=) 3: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=) 4: FQSV18p_T_droUZh08zoIA9Ax8A.roa (hash: znhD3qntwxP0GJzV41Y9fLTZXvTyllhrzmb59F4/qY4=) 5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=) 6: QWGsJlARLoXD3dTifaZvCAad7X4.roa (hash: Qzx6/bGY/9F07uNBPAulRDJPcAim/44VXRU8uq17XTM=) 7: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=) 8: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=) 9: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=) 10: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: bwYgVxgOpxPCyI63M/cyZMq5QhIdOSbPVz6FRsgaudc=) 11: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:f2:25:50:5c:37:45:24:7f:13:25:07:b3:6c:32:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Mar 26 07:00:51 2026 GMT Not After : Mar 27 07:00:51 2026 GMT Subject: CN=43c957c26f2d1dc634aba7ec84c1dbddea7e8d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0c:7e:78:ba:fc:cd:18:ec:0f:1f:93:3d:16: b6:f9:16:1e:a5:67:31:d7:4b:94:aa:ef:7f:a8:f7: 7e:74:31:c5:c3:77:9d:d5:da:2e:19:fd:b0:e2:04: 11:a9:ed:fa:11:85:f4:5b:6e:62:bf:e6:fc:30:0d: 79:b7:30:2d:c4:73:e7:d2:84:4b:8f:9b:e1:7e:61: 8c:66:41:23:6c:6f:c1:53:81:f8:ce:be:fe:5d:ba: bb:53:0e:36:54:9e:57:69:44:14:a4:62:fc:a2:23: 2f:12:f6:32:99:2e:67:81:88:46:4b:4d:62:04:83: cb:4c:5e:77:51:80:f2:f5:ca:33:45:3d:de:18:7d: 29:44:09:25:f4:56:b4:58:e5:05:b9:c8:bf:a3:9d: b5:a6:a4:19:c6:73:11:2e:e2:bc:75:c8:dc:75:df: b5:4f:5c:5b:62:a0:95:50:a4:da:c0:31:4d:d1:17: 79:9b:3b:9e:3e:1c:01:de:64:e4:05:ff:3f:a6:e5: eb:da:f0:c1:51:c9:02:a9:58:53:e7:29:9a:c1:75: ea:ca:99:68:4f:7f:70:b2:28:d6:4f:2c:99:18:cb: b8:54:74:6b:47:42:3f:4e:80:08:26:08:dd:ee:dd: 62:e7:37:3e:f2:8e:4e:a8:3c:1d:53:6d:fa:63:24: c1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C9:57:C2:6F:2D:1D:C6:34:AB:A7:EC:84:C1:DB:DD:EA:7E:8D:4C X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:48:9d:6a:8a:37:e8:30:7d:b2:e4:ad:38:a9:c5:7e:20:6c: a6:44:60:37:30:69:49:b1:36:2d:41:dc:07:cb:8a:08:ae:c8: c3:d8:74:dc:60:02:6e:9b:13:f9:8c:f5:60:66:d1:6f:8e:93: 1d:e6:cf:35:1d:2e:a0:b3:01:e2:ec:b4:2f:93:87:5c:3b:33: 44:af:60:df:e1:6f:51:37:1b:e1:10:3e:19:89:26:25:09:41: 40:cc:df:81:e6:73:de:58:2c:b5:59:71:24:c5:8f:e8:fe:28: 6e:e1:4a:eb:ed:a8:f6:32:59:6d:dc:6a:9e:e4:7a:c1:89:4e: f9:61:e2:5e:bf:3f:58:4e:50:87:75:fa:22:5f:e2:cd:76:25: 1b:31:e3:9e:4c:d1:4c:05:0e:3c:9e:38:58:a5:4b:43:57:21: 3f:fd:6e:ed:3a:1e:e9:e4:ec:c2:40:4e:28:c2:f1:c7:49:f9: 26:82:07:6b:e3:fb:e4:72:ec:87:b6:34:5b:27:58:3a:ea:60: ef:4d:d2:53:4c:bc:1e:16:99:39:0d:38:ca:ba:04:e5:0a:df: 4a:fe:e2:96:6e:bb:15:2a:42:9b:f6:37:90:74:4c:9d:65:fc: 51:6b:1e:86:f3:55:c4:f7:44:7d:cf:4f:39:a1:93:8b:b6:f1: 36:76:f9:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0o8iVQXDdFJH8TJQezbDIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwMzI2MDcwMDUxWhcNMjYwMzI3MDcwMDUxWjAzMTEwLwYDVQQD Eyg0M2M5NTdjMjZmMmQxZGM2MzRhYmE3ZWM4NGMxZGJkZGVhN2U4ZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qx+eLr8zRjsDx+TPRa2+RYepWcx 10uUqu9/qPd+dDHFw3ed1douGf2w4gQRqe36EYX0W25iv+b8MA15tzAtxHPn0oRL j5vhfmGMZkEjbG/BU4H4zr7+Xbq7Uw42VJ5XaUQUpGL8oiMvEvYymS5ngYhGS01i BIPLTF53UYDy9cozRT3eGH0pRAkl9Fa0WOUFuci/o521pqQZxnMRLuK8dcjcdd+1 T1xbYqCVUKTawDFN0Rd5mzuePhwB3mTkBf8/puXr2vDBUckCqVhT5ymawXXqyplo T39wsijWTyyZGMu4VHRrR0I/ToAIJgjd7t1i5zc+8o5OqDwdU236YyTBjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPJV8JvLR3GNKun7ITB293qfo1MMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0idaoo3 6DB9suStOKnFfiBspkRgNzBpSbE2LUHcB8uKCK7Iw9h03GACbpsT+Yz1YGbRb46T HebPNR0uoLMB4uy0L5OHXDszRK9g3+FvUTcb4RA+GYkmJQlBQMzfgeZz3lgstVlx JMWP6P4obuFK6+2o9jJZbdxqnuR6wYlO+WHiXr8/WE5Qh3X6Il/izXYlGzHjnkzR TAUOPJ44WKVLQ1chP/1u7Toe6eTswkBOKMLxx0n5JoIHa+P75HLsh7Y0WydYOupg 703SU0y8HhaZOQ04yroE5QrfSv7ilm67FSpCm/Y3kHRMnWX8UWsehvNVxPdEfc9P OaGTi7bxNnb59g== -----END CERTIFICATE-----Generated at Thu Mar 26 10:31:29 2026 by rpki-client