$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: Yecnz8oFGsXR+isYxTqWPdC1HDUBpOiR2E4uJVw9Fgo= Subject key identifier: 7F:E6:D4:DE:61:AF:C1:3C:26:33:94:CF:6F:57:80:31:A4:E9:2E:E6 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019D254CD49BAF9EA541AB8B1BF2BF1B5011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0DBE Signing time: Wed 25 Mar 2026 14:01:25 +0000 Manifest this update: Wed 25 Mar 2026 14:01:25 +0000 Manifest next update: Thu 26 Mar 2026 14:01:25 +0000 Files and hashes: 1: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=) 2: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=) 3: 5vGd1hrRUgjw-VsLzTylini_B7Q.roa (hash: sg0Um8p6l1c6gl4UvV5+SwzisrScl+Xsl5xaWUIwQqQ=) 4: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=) 5: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=) 6: QGAJExkL2FvXDViXp-Coxz1ISyE.roa (hash: KqS/q7o4Pi5DS6O8i7jT3UhmWb+gbQp5j9Y+K8+kuI8=) 7: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=) 8: Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa (hash: 11efmsxVKEDPybIj7bqcT7q0gfbmOyOH1LpPDuuPMuI=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: jk_vo45DTCE6Qch6NeSYYIx2UVA.roa (hash: Y3KIabgiInfNA/NNjT/XlQnKjIR2mWc9rhmGkHb5FNU=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=) 13: pgVasoGtiLKSu7Gip3svipxzZPk.roa (hash: 0SihNtYkT1G6gzAeawF0Zf7V1EZDtwvsDM2yXROG1dk=) 14: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: /RwsIUJ9gUHDH66nXa4Uyo4TfyPxjS+MCebXoPcAdR8=) 15: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=) 16: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 14:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:4c:d4:9b:af:9e:a5:41:ab:8b:1b:f2:bf:1b:50:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Mar 25 14:01:25 2026 GMT Not After : Mar 26 14:01:25 2026 GMT Subject: CN=7fe6d4de61afc13c263394cf6f578031a4e92ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:fb:94:0d:30:6e:85:be:3e:79:e1:20:0f: 76:4f:b8:ef:f1:ac:18:18:7c:2e:cc:af:b3:7c:b6: 7d:91:09:35:b9:c0:ae:8b:ba:3b:1c:4f:09:2f:ea: 58:c8:af:90:ad:d3:80:32:55:f6:89:60:dc:6a:18: 8a:4d:b9:9f:f6:7e:37:8c:de:3b:84:17:31:5e:61: 0d:4c:33:65:dd:92:b7:12:f4:f2:a0:5d:cb:c5:4e: 3f:58:8e:34:21:83:16:0c:42:c9:80:49:af:a2:53: ce:62:e6:c5:b7:5f:c8:ea:33:50:b4:c9:86:49:ac: 4d:1c:1d:6e:65:59:e3:74:23:ae:6d:3c:8d:11:0e: 2c:6c:8e:7d:0d:7e:b3:3c:0f:43:58:19:25:11:18: 78:71:72:4f:43:ad:9c:d5:de:6e:99:64:89:f1:34: bf:c3:66:9c:95:23:53:0d:6a:80:c3:c9:61:11:f5: ec:fd:a9:1a:d9:15:e8:bf:a7:82:1f:ff:91:70:9d: b5:09:e9:73:89:a6:58:bd:cd:38:21:dc:53:b8:85: 8c:00:27:45:ca:d1:fc:2d:ca:46:f8:34:bf:37:11: 52:17:d1:e7:2a:0a:e5:fd:df:4d:2c:62:85:8f:bf: b5:e7:f9:5a:66:05:80:86:16:70:bf:16:c3:a1:cb: 60:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E6:D4:DE:61:AF:C1:3C:26:33:94:CF:6F:57:80:31:A4:E9:2E:E6 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:26:d7:ef:70:86:22:63:c5:60:c5:b9:f9:fb:16:4e:cb:44: db:ad:ae:49:82:25:9e:99:19:aa:06:62:fb:c4:e1:6f:47:8f: 0a:45:f9:e0:d3:86:14:91:58:28:bc:80:12:c7:f6:61:d3:f5: 4e:11:3b:32:41:4a:a7:e1:84:f4:85:d7:01:29:94:23:77:c5: 5e:93:51:24:31:64:f9:eb:1c:8f:29:7a:b0:bf:b9:98:cf:f1: c9:4d:c5:e9:b8:11:69:b3:35:a3:8c:ed:8a:bd:3a:da:02:39: 7f:89:ee:7e:3d:ad:17:53:65:12:b9:0d:c9:84:9c:4c:cb:3f: 54:22:6b:3b:1f:15:60:8b:a8:c7:89:c6:33:89:fe:4b:ea:f9: 88:b2:8e:3f:e9:54:94:8e:41:1d:08:94:d2:7c:ae:d3:e0:b8: 8a:e8:91:c5:99:db:70:74:8e:62:f3:82:7d:70:42:97:31:2b: 99:a3:db:6a:a2:7c:a4:fd:7d:1e:da:bb:c7:17:ee:60:d2:5b: 2c:62:68:26:eb:38:8c:7b:12:20:97:e9:76:7d:b8:11:d4:3e: 1f:82:48:12:3c:49:7e:9e:3a:13:38:97:ca:ec:78:0b:91:58: 06:3a:3a:d7:95:30:ad:db:94:87:7f:9e:6b:56:88:19:14:72: 53:4c:73:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lTNSbr56lQauLG/K/G1ARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwMzI1MTQwMTI1WhcNMjYwMzI2MTQwMTI1WjAzMTEwLwYDVQQD Eyg3ZmU2ZDRkZTYxYWZjMTNjMjYzMzk0Y2Y2ZjU3ODAzMWE0ZTkyZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPb7lA0wboW+PnnhIA92T7jv8awY GHwuzK+zfLZ9kQk1ucCui7o7HE8JL+pYyK+QrdOAMlX2iWDcahiKTbmf9n43jN47 hBcxXmENTDNl3ZK3EvTyoF3LxU4/WI40IYMWDELJgEmvolPOYubFt1/I6jNQtMmG SaxNHB1uZVnjdCOubTyNEQ4sbI59DX6zPA9DWBklERh4cXJPQ62c1d5umWSJ8TS/ w2aclSNTDWqAw8lhEfXs/aka2RXov6eCH/+RcJ21CelziaZYvc04IdxTuIWMACdF ytH8LcpG+DS/NxFSF9HnKgrl/d9NLGKFj7+15/laZgWAhhZwvxbDoctgCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/m1N5hr8E8JjOUz29XgDGk6S7mMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwSbX73CG ImPFYMW5+fsWTstE262uSYIlnpkZqgZi+8Thb0ePCkX54NOGFJFYKLyAEsf2YdP1 ThE7MkFKp+GE9IXXASmUI3fFXpNRJDFk+escjyl6sL+5mM/xyU3F6bgRabM1o4zt ir062gI5f4nufj2tF1NlErkNyYScTMs/VCJrOx8VYIuox4nGM4n+S+r5iLKOP+lU lI5BHQiU0nyu0+C4iuiRxZnbcHSOYvOCfXBClzErmaPbaqJ8pP19Htq7xxfuYNJb LGJoJus4jHsSIJfpdn24EdQ+H4JIEjxJfp46EziXyux4C5FYBjo615UwrduUh3+e a1aIGRRyU0xzkw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:17:52 2026 by rpki-client