$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: 7jqpmbQqmc8O+805r4Cy5DxiVxsxzx2M9vh817ppW6A= Subject key identifier: 9D:AC:07:14:D9:27:4A:D2:75:5A:1F:17:5F:49:64:F3:6A:25:59:1E Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019D2AA96F4E7689FFCEEC249FD61DBAB820 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 0577 Signing time: Thu 26 Mar 2026 15:00:40 +0000 Manifest this update: Thu 26 Mar 2026 15:00:40 +0000 Manifest next update: Fri 27 Mar 2026 15:00:40 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: LjebHDZkqLfWQCggF+XBJc6BadTk8DgmckJ2yNc3ajk=) 2: 4FvrTlxGhcdz6JszhweukK-HXp4.roa (hash: vyQEyyYQodDDsgXdHyrJ4jLSuzaa1xOpp48GTtDNY8I=) 3: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 4: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 5: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 6: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 7: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 8: ZVUX-ukmxmMuSmBaOHN4VXarmdk.roa (hash: v4YUjhuoNj8kXmli1Rh7WdYmfXPmnvN9UdaKmw/4lRw=) 9: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=) 10: drScQuu8h2g_2se7dOHArknd4Ds.roa (hash: fUimuz4hJDq1Gab0dPaysUI05hg+xTKYKa8TOAWvSRc=) 11: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 12: rAJ9_5zEd3dmMjWOCjfsZFUyKPQ.roa (hash: DyTaBCznWg0kaPfdOOVudlJY7K+OhAqJ5CvIYLUzE9s=) 13: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) 14: zlq4yjrsiwQ-lDB1rbbuPd4T-JA.roa (hash: uXc6oUOSXmZtScGHVD8LMsXSU4xPZkADb1L4rjkI9VU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:a9:6f:4e:76:89:ff:ce:ec:24:9f:d6:1d:ba:b8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Mar 26 15:00:40 2026 GMT Not After : Mar 27 15:00:40 2026 GMT Subject: CN=9dac0714d9274ad2755a1f175f4964f36a25591e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:65:b7:7a:65:a1:fb:db:bb:9d:69:eb:85:a6: 33:5f:f7:4f:48:4f:62:26:27:1c:01:87:a9:80:99: bd:2a:20:7e:32:90:1b:c9:24:99:53:f5:9d:37:db: de:1c:66:07:15:a5:d1:92:81:77:f3:e3:e1:a5:49: e3:e6:cf:a4:f5:56:4a:9c:b0:b0:d4:35:85:01:89: 2d:ce:92:ae:4c:52:7e:3f:9f:16:05:b1:62:78:6e: 0e:db:30:04:95:34:19:5f:a7:44:4c:c1:39:71:e1: 4a:06:05:c2:40:4e:76:f1:0e:22:9b:58:83:43:51: e7:01:5c:44:80:62:d6:ce:d4:15:f2:7d:3d:5f:b5: a1:72:b9:e8:36:bd:18:70:c1:de:e2:17:dd:d3:f7: 63:71:fd:47:09:be:37:48:3a:1d:20:b9:4c:19:1f: b2:26:e3:20:2c:2f:8c:cc:61:a7:bc:d3:94:3f:6b: c8:ee:96:3a:5e:45:e1:a1:4c:7e:56:e4:7c:8e:01: f4:49:4c:0d:3b:87:0a:c3:c5:bd:c8:a0:34:c2:28: 48:ab:3f:be:1f:15:76:ed:f5:c5:a2:c6:62:f5:66: ad:85:1d:9a:d8:10:56:f9:44:43:3c:be:e3:e1:88: 9d:c4:10:ea:04:b2:73:b6:56:09:ea:ef:f9:3c:d7: 97:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AC:07:14:D9:27:4A:D2:75:5A:1F:17:5F:49:64:F3:6A:25:59:1E X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:5d:6c:a3:ab:25:ee:e6:4a:f2:93:62:92:43:3f:9c:6a:dd: 38:2e:fd:4a:0e:a0:dd:b2:68:c1:32:57:f6:cd:6e:c0:9f:bd: fb:26:71:8a:b5:dc:b0:4e:86:a9:d9:ed:53:90:9f:fe:a1:5f: 23:bb:02:4c:86:a7:9b:21:fa:f9:82:69:0d:ba:f4:91:a3:1b: b5:db:43:c6:00:36:5f:91:af:4f:31:ca:89:30:45:9e:b8:0e: da:a1:0f:66:79:f1:69:29:5f:46:13:11:5a:fe:1e:f4:2a:26: 43:b5:ed:ab:7e:d6:b7:48:b3:16:7a:81:d9:e4:85:a9:9e:a3: 90:6d:15:6e:bc:ce:40:04:dd:92:b3:28:0f:68:ea:94:8e:6e: d6:4d:34:69:e1:4c:20:ec:b9:cd:20:14:80:56:8b:f7:20:9b: ab:8a:a5:b5:c7:69:38:e5:63:c6:65:4a:d6:b1:99:f8:6f:20: 24:50:c2:25:e0:ef:bd:7c:94:22:38:52:c5:36:3e:cf:32:3d: f6:21:4b:bd:40:9c:00:d9:90:2b:66:2d:c3:a0:be:ad:b1:43: 48:40:38:3e:6f:64:42:5d:78:06:41:4b:75:4e:c7:01:fa:f4: 57:e8:43:bc:24:25:b8:53:3c:b8:b9:d0:0b:9b:f6:62:1d:68: b0:da:f4:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qqW9Odon/zuwkn9YdurggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwMzI2MTUwMDQwWhcNMjYwMzI3MTUwMDQwWjAzMTEwLwYDVQQD Eyg5ZGFjMDcxNGQ5Mjc0YWQyNzU1YTFmMTc1ZjQ5NjRmMzZhMjU1OTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmW3emWh+9u7nWnrhaYzX/dPSE9i JiccAYepgJm9KiB+MpAbySSZU/WdN9veHGYHFaXRkoF38+PhpUnj5s+k9VZKnLCw 1DWFAYktzpKuTFJ+P58WBbFieG4O2zAElTQZX6dETME5ceFKBgXCQE528Q4im1iD Q1HnAVxEgGLWztQV8n09X7WhcrnoNr0YcMHe4hfd0/djcf1HCb43SDodILlMGR+y JuMgLC+MzGGnvNOUP2vI7pY6XkXhoUx+VuR8jgH0SUwNO4cKw8W9yKA0wihIqz++ HxV27fXFosZi9WathR2a2BBW+URDPL7j4YidxBDqBLJztlYJ6u/5PNeXLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2sBxTZJ0rSdVofF19JZPNqJVkeMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANl1so6sl 7uZK8pNikkM/nGrdOC79Sg6g3bJowTJX9s1uwJ+9+yZxirXcsE6GqdntU5Cf/qFf I7sCTIanmyH6+YJpDbr0kaMbtdtDxgA2X5GvTzHKiTBFnrgO2qEPZnnxaSlfRhMR Wv4e9ComQ7Xtq37Wt0izFnqB2eSFqZ6jkG0VbrzOQATdkrMoD2jqlI5u1k00aeFM IOy5zSAUgFaL9yCbq4qltcdpOOVjxmVK1rGZ+G8gJFDCJeDvvXyUIjhSxTY+zzI9 9iFLvUCcANmQK2Ytw6C+rbFDSEA4Pm9kQl14BkFLdU7HAfr0V+hDvCQluFM8uLnQ C5v2Yh1osNr0Bg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:49:07 2026 by rpki-client