$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft File: 6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json) Hash identifier: nh1c1o0Pcoul3iBHAnY0h2j4Fvix2nN5BOu2C1Snhtw= Subject key identifier: C7:6A:12:71:D5:8D:9C:E6:B3:6C:3E:AF:46:C8:9C:E7:A8:3C:D0:C6 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019D2816DB1F084A6CE644009A54500B70B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft Manifest number: 18A7 Signing time: Thu 26 Mar 2026 03:01:19 +0000 Manifest this update: Thu 26 Mar 2026 03:01:19 +0000 Manifest next update: Fri 27 Mar 2026 03:01:19 +0000 Files and hashes: 1: 3_x1fMTPoRvLX1TcN9jNkDdkszI.roa (hash: qChZ12jGPt+igqR3YYtp2bz0dKJAKMPd592ma9NcCNg=) 2: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: qOmj9MiRzo8baioyKiLXsZePHkapCQodTGnYThWIJiU=) 3: 6amDSMQ_855VNIbRII_DXHjnq_k.roa (hash: HCMqnracA8A73jBfs9v8hnmmkLDx0vR0XfYQrjLn7vw=) 4: BV0kbYMEcmAv6rpHU2pEh-w65Xo.roa (hash: ouC+rh/o+/bFmEFqwkxPbJmSVE32vMaY+/Xhjpux2a0=) 5: F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa (hash: FrHQz6VBgsdDzG1EgR21e8l/oyJBYEHWEEgLbKK49Oc=) 6: Ifo6NwD56xJA6y61SpEQqvLf_R8.roa (hash: ArTm2IJOiT2dFcspxzA0JNm1iU6P54xELTMvSTOHQ8U=) 7: N2hJlPxzOaiP-0JOcE7E0Kk14z8.roa (hash: lBlro6ZfcBUQahYTWw9cYvjI96CLCeStJjQ3Cmlkpxs=) 8: O0zR1L9MgT5YwBbq6ISw_Bf7MB0.roa (hash: cICGD+vgHpne8r3yKqEMRJZStOofj1K0i19NpAHXpU4=) 9: S8CzuNBRlFxh0RCxcEYtrsSnrsU.roa (hash: etDBZKFL1Nfc+kBaajeV+YtDevN2RBSTQ7egtdVU0rg=) 10: _dXE-UR4YRoA9ses5dqlWyYCiIk.roa (hash: mq7uXlOBNSd5zRdIjUiiLaVvztFPBgtSE6JrvNPES20=) 11: bvcvNYojmTtMnBysPzJxWFLdF80.roa (hash: rEF2pNowtb5e9TFBM+KqVgoLZ9CLxZ76uZKkrlZ2GsU=) 12: cBwp2ouu-kTQUV0AP3SgjoKtpKE.roa (hash: 2mn/5LNm9rX3SfstPhosdI3pLFHA9jE4gvH4r7JdHQg=) 13: rYWyVFJzLrFOCnVo-LA8TMd7XMk.roa (hash: /09X2rjXIYAHVxxz61B+a44mcYZqQFBBx89GEQ/r21o=) 14: yYJYN7yB_Q-nMabNeBbuq0usaU8.roa (hash: JotV8yhZRYv27OMcLIgmr6zSV2UH9Ktauyk4zm0D0HY=) 15: zbuFuKdn8FFVoWiKIOgewd-9diY.roa (hash: 36jMzQUc3TxS+/RDyNv/sTqqO15sLlzoMkMaWAxXiIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:16:db:1f:08:4a:6c:e6:44:00:9a:54:50:0b:70:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Mar 26 03:01:19 2026 GMT Not After : Mar 27 03:01:19 2026 GMT Subject: CN=c76a1271d58d9ce6b36c3eaf46c89ce7a83cd0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:49:2e:58:f4:67:b0:f0:db:cd:3a:79:db:17: 1c:79:d9:35:a8:5e:70:60:6f:8f:e0:f2:15:5c:90: e8:c8:46:ca:91:b0:f4:a7:39:14:ba:c7:b7:fa:b2: ee:a1:69:bc:df:f2:e9:b2:b1:d5:91:fc:ed:f1:9c: 76:54:c4:7d:d4:57:16:b1:01:49:d1:9f:b3:fa:fd: 78:3c:48:d0:ca:68:69:c8:37:b1:7a:44:10:53:38: cb:0a:8b:47:cf:bf:28:69:5a:b8:0e:eb:6b:73:24: b9:e1:fa:9d:30:17:68:84:0d:b7:f7:e5:0b:6a:53: d1:d8:c0:65:4c:1c:49:58:ac:8b:fe:3b:1f:89:16: 1b:d5:dc:fe:28:67:9b:bb:a9:af:f4:8c:91:e2:ed: 57:d1:45:e3:5a:3d:06:be:1d:b4:87:a4:aa:ba:e6: 2f:3c:63:d5:b0:20:6a:b6:69:0d:f5:5c:d7:90:f5: dd:7f:3d:ff:58:ba:63:a8:de:2b:83:69:49:ab:96: 73:ee:3c:f0:74:e8:20:84:e1:af:15:6a:49:7c:46: 60:00:93:ad:69:8d:a6:e8:b7:79:91:28:ad:03:3a: 3d:a3:69:68:c5:2d:8f:93:df:33:6a:dd:eb:ff:62: 3e:ab:ef:13:55:43:59:07:4f:5a:13:bc:f7:14:08: 03:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6A:12:71:D5:8D:9C:E6:B3:6C:3E:AF:46:C8:9C:E7:A8:3C:D0:C6 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:2c:b0:fe:9f:72:61:84:e0:00:b0:40:bb:2f:9c:94:25:89: d3:83:cd:c9:16:32:aa:a7:9e:74:fb:8f:93:9d:e8:0d:77:c3: ad:2a:95:82:74:ce:e9:89:b3:e0:0e:e7:01:b6:6c:87:f7:3f: d1:11:c8:25:95:79:fd:b0:63:36:ad:8a:b5:eb:f8:c5:3b:a6: 03:a9:63:ee:dd:13:d7:2e:3c:54:05:fb:52:10:83:27:74:fb: 21:da:af:16:b7:6e:64:78:c5:cd:d2:f2:c3:fc:ad:8c:a0:5c: 1b:cf:a1:95:a4:4d:5e:a5:7a:b4:0b:39:5e:90:48:cd:3d:e4: 38:f9:94:50:35:c6:40:ab:fe:db:99:bc:ce:13:48:a4:43:c5: b7:19:54:42:f9:f9:77:c2:b2:ed:70:b6:35:60:d2:e1:59:9d: b3:27:3f:45:8f:04:6d:03:be:19:c6:04:24:2f:77:f1:32:09: 3c:c8:fd:3e:33:74:ba:c2:01:22:f8:27:93:05:b5:f0:d4:d3: 8d:db:78:e0:74:c7:a6:23:89:b0:1b:69:67:94:d4:8d:e2:44: 13:46:04:44:ba:b3:8f:9c:e5:7b:97:1e:44:37:d8:e0:f8:3d: 77:74:0f:3a:75:53:b7:79:05:d7:81:53:60:32:c0:a5:d4:08: 3d:4d:75:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFtsfCEps5kQAmlRQC3C1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwMzI2MDMwMTE5WhcNMjYwMzI3MDMwMTE5WjAzMTEwLwYDVQQD EyhjNzZhMTI3MWQ1OGQ5Y2U2YjM2YzNlYWY0NmM4OWNlN2E4M2NkMGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0kuWPRnsPDbzTp52xccedk1qF5w YG+P4PIVXJDoyEbKkbD0pzkUuse3+rLuoWm83/LpsrHVkfzt8Zx2VMR91FcWsQFJ 0Z+z+v14PEjQymhpyDexekQQUzjLCotHz78oaVq4DutrcyS54fqdMBdohA239+UL alPR2MBlTBxJWKyL/jsfiRYb1dz+KGebu6mv9IyR4u1X0UXjWj0Gvh20h6SquuYv PGPVsCBqtmkN9VzXkPXdfz3/WLpjqN4rg2lJq5Zz7jzwdOgghOGvFWpJfEZgAJOt aY2m6Ld5kSitAzo9o2loxS2Pk98zat3r/2I+q+8TVUNZB09aE7z3FAgDrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdqEnHVjZzms2w+r0bInOeoPNDGMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCyw/p9y YYTgALBAuy+clCWJ04PNyRYyqqeedPuPk53oDXfDrSqVgnTO6Ymz4A7nAbZsh/c/ 0RHIJZV5/bBjNq2Ktev4xTumA6lj7t0T1y48VAX7UhCDJ3T7IdqvFrduZHjFzdLy w/ytjKBcG8+hlaRNXqV6tAs5XpBIzT3kOPmUUDXGQKv+25m8zhNIpEPFtxlUQvn5 d8Ky7XC2NWDS4Vmdsyc/RY8EbQO+GcYEJC938TIJPMj9PjN0usIBIvgnkwW18NTT jdt44HTHpiOJsBtpZ5TUjeJEE0YERLqzj5zle5ceRDfY4Pg9d3QPOnVTt3kF14FT YDLApdQIPU11hA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:47:24 2026 by rpki-client