$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: 229DWKNkdNL+zzuJVqzkeJHkhwfwdZZzgyEwauZY7c4= Subject key identifier: 79:6D:52:7F:2B:64:97:8F:F8:0C:37:54:A8:6B:CC:FA:A3:C7:46:81 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019D32630F5E2D600698F42A781B3B791449 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1929 Signing time: Sat 28 Mar 2026 03:00:45 +0000 Manifest this update: Sat 28 Mar 2026 03:00:45 +0000 Manifest next update: Sun 29 Mar 2026 03:00:45 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: YXJX9MmrPI6yo67vsJ0N9qP6Bi5Bhj8/VcwhuCz937s=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 2tSMN_pYPToDr9I5ka7QuhM6K8c.roa (hash: EKsO7v439UBdRALGntRf+KdOY/pezXTdYABa+aa0lNw=) 6: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 7: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 8: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 9: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 10: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 11: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 12: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 13: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 14: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 15: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 16: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 17: KE8wPpi49xiO7rZJQ7uhlqOLLHw.roa (hash: 2TxPIJ9ZSPXuWkn0jdm0N4HJMJsSy4jeH/o6WF6Nqr8=) 18: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 19: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 20: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 21: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 22: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 23: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 24: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 25: c2Yu4gx5LPJ3HF69pXhK7_25yXI.roa (hash: Q4DNvIlUJ8XVj3rmssf9V95x20ibWTrUMeHs2DCLCj8=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: fEH6GXoroSfAEDj0z55rGNitKMU.roa (hash: Zmq+V4G0nlMIUgVrJqMNAD4Dj5EQvHd5LCZ6hw/cQJg=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:32:63:0f:5e:2d:60:06:98:f4:2a:78:1b:3b:79:14:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Mar 28 03:00:45 2026 GMT Not After : Mar 29 03:00:45 2026 GMT Subject: CN=796d527f2b64978ff80c3754a86bccfaa3c74681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:43:48:f1:90:c3:93:12:27:52:1d:42:dd:61: 37:9a:d3:d0:29:e7:48:2f:f1:b5:4c:a1:9b:2b:64: 1e:3f:84:12:eb:f7:c0:e8:cc:77:88:63:04:1d:34: bd:8e:05:36:0c:c3:29:54:52:2e:c4:2c:19:ea:21: b2:99:3d:88:9f:ef:f1:90:cd:d6:34:5c:bb:b5:ba: ad:12:a5:d9:33:d5:18:a2:72:56:8e:2b:ab:e6:37: 41:b4:ba:89:7a:70:d8:bc:12:b6:65:61:de:ba:ba: 8e:26:62:13:6a:f3:3a:da:25:4b:43:91:34:00:3b: b0:ac:f3:2d:b4:14:cc:ee:2f:fa:fd:8e:35:be:5d: 92:97:3e:bf:d7:24:a3:ba:bc:9b:1b:86:c7:a5:c1: 66:4c:12:b5:33:3e:80:a0:17:af:45:02:e9:5b:fc: 1c:7e:42:b3:dd:61:eb:e6:43:06:af:57:6c:98:65: 2b:9f:4d:34:a8:31:f5:de:6a:c7:3b:07:df:c7:ee: c8:44:7a:32:59:15:13:40:7f:c6:3f:48:1f:03:4c: 18:a7:e0:d8:1a:f0:4e:8b:df:52:cd:ac:2e:50:1f: 27:46:8b:ae:4d:6f:78:6b:56:27:e0:78:41:11:da: 4c:4b:ff:09:93:2b:17:27:db:79:da:96:ca:3c:61: 85:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6D:52:7F:2B:64:97:8F:F8:0C:37:54:A8:6B:CC:FA:A3:C7:46:81 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:12:09:93:f6:ac:ab:e8:fb:b8:c8:c0:24:52:67:ae:0c:b1: 2d:5d:d8:62:23:a2:83:43:9f:83:d4:28:22:69:d0:4e:58:30: cb:11:de:6b:fd:e4:6c:29:a8:6d:fd:df:94:0b:43:c3:95:ad: 1d:83:eb:85:7a:55:24:fa:fe:70:c1:72:c2:f7:71:f6:6a:d2: 3f:a9:dd:91:b5:1e:26:29:04:66:19:f1:70:2d:a3:bb:cd:65: f8:dc:11:1c:9e:72:68:2c:3f:df:af:39:34:f3:16:63:53:19: 30:5d:7f:8b:7b:f1:c6:5c:c2:44:df:f3:f2:c3:2a:81:a3:23: ae:11:c1:04:36:0d:81:bd:91:94:20:b5:69:b6:6c:cd:49:82: 64:2b:4a:8a:b8:f7:cc:e2:10:89:05:eb:c4:a2:a0:57:ee:7e: 28:8a:6d:c6:b4:f0:4e:29:af:0a:57:6e:3d:7b:c5:93:49:86: d8:a3:f1:c3:7e:59:5f:9b:5b:64:7c:b4:4f:30:35:94:23:ff: 58:37:26:fb:34:fd:1c:de:23:d4:9c:90:68:28:a5:1f:e9:b5: ac:67:cb:86:2d:e4:46:51:bc:5f:78:08:a3:43:78:68:48:80: 9c:35:06:a2:0c:c2:c4:5e:d7:5b:04:29:4e:27:16:17:9c:6b: 1f:25:64:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0yYw9eLWAGmPQqeBs7eRRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMzI4MDMwMDQ1WhcNMjYwMzI5MDMwMDQ1WjAzMTEwLwYDVQQD Eyg3OTZkNTI3ZjJiNjQ5NzhmZjgwYzM3NTRhODZiY2NmYWEzYzc0NjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuENI8ZDDkxInUh1C3WE3mtPQKedI L/G1TKGbK2QeP4QS6/fA6Mx3iGMEHTS9jgU2DMMpVFIuxCwZ6iGymT2In+/xkM3W NFy7tbqtEqXZM9UYonJWjiur5jdBtLqJenDYvBK2ZWHeurqOJmITavM62iVLQ5E0 ADuwrPMttBTM7i/6/Y41vl2Slz6/1ySjurybG4bHpcFmTBK1Mz6AoBevRQLpW/wc fkKz3WHr5kMGr1dsmGUrn000qDH13mrHOwffx+7IRHoyWRUTQH/GP0gfA0wYp+DY GvBOi99SzawuUB8nRouuTW94a1Yn4HhBEdpMS/8JkysXJ9t52pbKPGGFhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHltUn8rZJeP+Aw3VKhrzPqjx0aBMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxIJk/as q+j7uMjAJFJnrgyxLV3YYiOig0Ofg9QoImnQTlgwyxHea/3kbCmobf3flAtDw5Wt HYPrhXpVJPr+cMFywvdx9mrSP6ndkbUeJikEZhnxcC2ju81l+NwRHJ5yaCw/3685 NPMWY1MZMF1/i3vxxlzCRN/z8sMqgaMjrhHBBDYNgb2RlCC1abZszUmCZCtKirj3 zOIQiQXrxKKgV+5+KIptxrTwTimvClduPXvFk0mG2KPxw35ZX5tbZHy0TzA1lCP/ WDcm+zT9HN4j1JyQaCilH+m1rGfLhi3kRlG8X3gIo0N4aEiAnDUGogzCxF7XWwQp TicWF5xrHyVkpQ== -----END CERTIFICATE-----Generated at Sat Mar 28 12:13:11 2026 by rpki-client