$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: BA5RA0Zchn6HhVH4WuBqn+ybvFihzxzRtUcWpdj5mdo= Subject key identifier: 75:5E:1F:D4:A7:7D:82:73:7C:E3:0E:4A:F1:12:53:D8:60:DD:5C:BD Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019D270445E1ABAF7246E9D06A596306FA8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 1255 Signing time: Wed 25 Mar 2026 22:01:24 +0000 Manifest this update: Wed 25 Mar 2026 22:01:24 +0000 Manifest next update: Thu 26 Mar 2026 22:01:24 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 3: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 4: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 5: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 6: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 7: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 8: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 9: hd0YhlJ9IDoyXw3U8pgJ3ceuKRI.roa (hash: /lIMMHgK4zk88anoXyRyBTEvoIowJEiVJJvaW0LTkSw=) 10: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: MX8SRmX0TU9ju9K7zS8zQ08JFV0sOsuFey3Zmu1pigg=) 11: ran8AN3AZ4R2r49zo9zOMgljp88.roa (hash: VSrPvf3ym2RdveR02NWlYwS27b6vZOatiWbKlgNRz08=) 12: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) 13: uCc138TA6I8oKDd9GfZ4DDo3vbk.roa (hash: 9QywaX+xNWWX8/eIoZHqrPbZhEsxSCi5Zlf0wOs/po0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:45:e1:ab:af:72:46:e9:d0:6a:59:63:06:fa:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Mar 25 22:01:24 2026 GMT Not After : Mar 26 22:01:24 2026 GMT Subject: CN=755e1fd4a77d82737ce30e4af11253d860dd5cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:45:ed:a7:e4:fa:4c:13:b2:b7:5b:5e:b4:ce: ad:f1:c2:2f:a7:4c:a1:82:8a:9e:39:af:a0:db:67: 3e:9a:c8:d4:75:42:a3:63:4e:26:db:b0:37:40:4f: 34:70:2d:ae:70:8c:a4:6c:88:92:0c:a6:2d:18:8f: 34:62:f1:9e:7d:d8:8e:84:68:38:80:d2:43:84:89: e7:45:50:4d:4a:8e:93:69:90:bb:99:b4:d0:de:94: dc:2a:4e:ea:a0:38:c4:7d:20:7e:68:63:60:e6:6a: 12:6f:ed:03:63:c1:d8:45:43:18:c5:c9:c5:1f:21: 20:fb:7a:76:24:3d:3a:f4:32:15:6d:9c:5e:28:3a: 36:9c:0b:9a:ab:55:76:e8:45:0b:89:ef:02:94:1b: 92:03:77:d5:73:81:2f:fd:22:51:58:4a:95:58:c2: d7:c0:4c:b6:cd:ee:84:11:f6:67:87:4e:e4:21:1c: ea:c0:0d:1b:1b:44:4c:27:8e:4b:43:86:57:13:26: fb:f6:0f:d6:cd:ea:6a:f9:2a:3b:54:0f:ec:97:84: b0:ea:51:b1:4d:01:07:60:ad:86:c0:7c:89:79:8e: 0c:99:0b:a5:52:57:48:33:f1:ba:d1:7f:5a:7e:d6: 64:77:5e:73:12:48:99:6b:71:70:ee:b8:c1:84:22: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5E:1F:D4:A7:7D:82:73:7C:E3:0E:4A:F1:12:53:D8:60:DD:5C:BD X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5e:12:45:41:7d:30:1b:72:3f:f3:b0:eb:48:7d:58:05:a5: 6c:0e:b9:c6:db:ea:78:19:70:05:d1:8a:66:7b:5a:61:2f:63: ed:ef:71:25:77:f5:59:95:34:0e:9e:cf:13:4b:d2:fc:8c:78: d1:6e:31:34:88:61:fa:39:c4:f5:a4:94:40:7c:38:bf:45:06: a5:91:cd:20:15:29:cb:41:b5:a5:74:2f:cc:49:88:55:21:b4: 06:97:6c:aa:ce:84:f5:c8:ca:b5:d5:ce:12:fd:3c:1f:b1:98: 0f:c5:73:0a:ef:09:60:66:00:2e:ab:91:06:8f:a0:b1:9a:2d: da:16:a0:0f:68:e6:c9:97:36:aa:88:31:35:9a:cf:ab:ba:60: 9f:0a:19:7a:91:d8:24:17:d8:14:77:fa:e8:6b:4b:f5:e1:54: 40:5e:bf:3f:76:94:4d:8a:9d:ca:fb:93:16:4e:ed:ee:56:e5: 89:69:a9:ce:75:6f:5e:50:43:ee:6b:9b:68:8e:40:e2:2e:b8: 9e:bc:6d:4a:56:76:f6:75:ec:82:24:ad:7b:87:43:bd:60:c3: f4:d8:03:36:b1:1b:51:8e:f8:99:d6:ea:b1:1e:9d:f4:73:2b: 19:7f:61:9c:01:86:6b:e7:e6:0a:e5:07:7b:7c:8f:ad:b4:a9: 87:e2:bd:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBEXhq69yRunQalljBvqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwMzI1MjIwMTI0WhcNMjYwMzI2MjIwMTI0WjAzMTEwLwYDVQQD Eyg3NTVlMWZkNGE3N2Q4MjczN2NlMzBlNGFmMTEyNTNkODYwZGQ1Y2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kXtp+T6TBOyt1tetM6t8cIvp0yh goqeOa+g22c+msjUdUKjY04m27A3QE80cC2ucIykbIiSDKYtGI80YvGefdiOhGg4 gNJDhInnRVBNSo6TaZC7mbTQ3pTcKk7qoDjEfSB+aGNg5moSb+0DY8HYRUMYxcnF HyEg+3p2JD069DIVbZxeKDo2nAuaq1V26EULie8ClBuSA3fVc4Ev/SJRWEqVWMLX wEy2ze6EEfZnh07kIRzqwA0bG0RMJ45LQ4ZXEyb79g/Wzepq+So7VA/sl4Sw6lGx TQEHYK2GwHyJeY4MmQulUldIM/G60X9aftZkd15zEkiZa3Fw7rjBhCKZswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVeH9SnfYJzfOMOSvESU9hg3Vy9MB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHV4SRUF9 MBtyP/Ow60h9WAWlbA65xtvqeBlwBdGKZntaYS9j7e9xJXf1WZU0Dp7PE0vS/Ix4 0W4xNIhh+jnE9aSUQHw4v0UGpZHNIBUpy0G1pXQvzEmIVSG0Bpdsqs6E9cjKtdXO Ev08H7GYD8VzCu8JYGYALquRBo+gsZot2hagD2jmyZc2qogxNZrPq7pgnwoZepHY JBfYFHf66GtL9eFUQF6/P3aUTYqdyvuTFk7t7lbliWmpznVvXlBD7mubaI5A4i64 nrxtSlZ29nXsgiSte4dDvWDD9NgDNrEbUY74mdbqsR6d9HMrGX9hnAGGa+fmCuUH e3yPrbSph+K9xQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:52:57 2026 by rpki-client