$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft File: Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json) Hash identifier: jniaq7VtOGyHdWb7c64qijLwz1M+Pzs2k4sT2h1Vwm0= Subject key identifier: 3D:D2:55:21:2E:1F:BA:E2:38:DF:C6:A2:8A:B7:8D:CD:DA:98:E0:DD Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019D254CBD27C29D94424694A4CEEC97512F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft Manifest number: 0CAE Signing time: Wed 25 Mar 2026 14:01:19 +0000 Manifest this update: Wed 25 Mar 2026 14:01:19 +0000 Manifest next update: Thu 26 Mar 2026 14:01:19 +0000 Files and hashes: 1: 0SKuPZPHgx0DuZsSA5jf1vAaZOQ.roa (hash: oJFIU8Cu0N2S9/wG/IfXoDuZ2TzeSG92c58fXMAz65w=) 2: 1WFcAkubK0j9tuvoOEpKw8rrMZc.roa (hash: US4FVafwO24GeaH/vI2owb0qrhh125+5+tzixj9zkLg=) 3: 4YDvutSU0UmPrwnDFoLiKufwEY8.roa (hash: zJVa6p9/6hu2WbxRpiJdGV1n058lDV+uyqxwOAwNowA=) 4: 4hgz4QMM31Dnzsk16v76ApMHw1Q.roa (hash: uTIYHBVMNL1a8dqc59Xavlk6v2XFQUwkIp5IXWbQIxQ=) 5: 6CzQRMn6GnwsVxYiA_23IYKMeoo.roa (hash: yTq5lptLiZc3PV2A2cnpwYQvB925u7nVJPs/y3zGz+4=) 6: 7H2mFDg6qfXpVYnxbXn0fEFWELs.roa (hash: J9Hxga4uilgUHWboi+rXmCtEsrXocnGU8yxF/NAwyo4=) 7: 7xz9ZtbXj7qhOrWl1asjKBlzz1o.roa (hash: al7m3r3hlQECrtwI9lRqdu9jwLTy7M0zSKzMUXGbBvQ=) 8: 8c8fo4MttyJv5SLRbDdRYu1xnic.roa (hash: 1vjbMqaT77+AxTSiKxSoxcqnrNY36Cpct9YPE7m/ttQ=) 9: 8cSFy7Ko1nag59SAcofvgS4Nnmg.roa (hash: IveoawDTw5t/FsiNYzrV2ir2XqSXTfIr+SxjBonLcNI=) 10: 93Dd5LlqoQp6iKYdx6lcOcDR9oc.roa (hash: AJlYL2EFP/0kQaoDXjXnYGJqco+B4D+CiQvUKCb/WIw=) 11: 9w8n7TtHePHsLOfepkD5dQlDWpY.roa (hash: QNQ16n2FmGQi82u0p2e9PUzGlGzw6yfmOHXwlBjHsbQ=) 12: DPy9szbNMOQKof88htrB5gYXHg8.roa (hash: KpMcLwZt2U9k9KODAobx45vqz6G1VYYTX/rJeTqqTFA=) 13: HcULhPVBvVigoye4t6FA-KQWO9w.roa (hash: hAIwfnXvBlSldAfdYYWFGxIbO3wQO108WhCVpchVN6Y=) 14: LwRV0I5aAABSv2rkP0tPW4FRNzs.roa (hash: koEQn+aNjm6TSUwuZfgQBvNwwQjzXH0iVoRIHsH/lmI=) 15: Om-Yq1ZGRM1IIUjBT3G8r_WH3vI.roa (hash: NbN2DC3J+/IORMxUWXp73u1pYhmDVgIteGSJjaWkIyM=) 16: OwtGWChxCNtRyJj6ElbibxId-aQ.roa (hash: ka/36kkAkjg2s/fwE4e37YvaQAs87ErAmYuEuoZciXg=) 17: PCm2Il224mWbxHMgp2-whFWp5Y8.roa (hash: li5I0uPh7E9cKNVsRWXspiiKnjbCYQjxIQb8POSntgc=) 18: PCzr-8pfKu6Wr6hFTTQ8eQU8TPI.roa (hash: UsJVbDBJ3BYi/wLg7BLlATz/hycpIsDhQ1LAnNbDRWA=) 19: QJmnWjrF5SckYqXHMQVWx6L7kxc.roa (hash: ZzvvSvqGh3FCeEYQX83Fju97+ka1cm0UIM/Bcb7Vjew=) 20: RUng57NMoW7ac1B2TzLtvUsBHXs.roa (hash: bXdd060UNM819brDZVY/MNr90jZYyXFvlUoD/+9CalA=) 21: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: FJWl9qmXIwXFhZaZ5XIsvgo7QGDuwRv2OGTZykWCdLM=) 22: TDJgGMkZLrZ81GbvZCeAhhBMKFY.roa (hash: 6e5HzejThUKP+KfqmBRD2KB/4LGOct53fiIiefsSVx0=) 23: Un_KUA4UW3mBwqWIrQ2hRgrwqJ8.roa (hash: H+8IU6Ec/C7W0gUzGWdPCX/2d2iav4ezOCEab5gRvr0=) 24: W_BCOjmAdkWfODZ7bvZ_1VEo820.roa (hash: aAqSVSwbC6esRzER14YmpKx6m+Lo1g184jMJRY9Bonc=) 25: Wx6ujnx5V9SmWdGZ7fl6JX-A-ik.roa (hash: myAFROxX49mA8li5Tx07MgNtYqh4WpPg6VTHZGCCys8=) 26: Y9-xxrcFnsxDZauuv568t-PFy6A.roa (hash: xIyIZR1hVpjqPtioz/biAZM6H7ey8FMbjIcIVI3aaQQ=) 27: _F5w43RHV6dx3R_wQAV5wzUAHzc.roa (hash: BxgPa91m82H9cRlL0aKlQX+98I+Jq5YFGlS8SucX+mo=) 28: _IfucW-In1l5Fz3tjcTrBT7FS9I.roa (hash: 0d3RCOf/PgnlqbIN8XSmRiR9HJQfbIKvyOIHy7stdzo=) 29: djSIdX2gTX0MCxSL5llsn6i5hhM.roa (hash: fcqxImDjDHGTSuae1yCoZlPJZwU1d5hw+ezJF6PZbRg=) 30: eIpleKuOfZq1bPfCT2L77KdKRYg.roa (hash: czjz3eTpWUJaPaJtmnQVcyeyF+Dq4AtmQioUJnZMjK8=) 31: eSFc-jrx02A_dWByF1qGRiDKKWw.roa (hash: I6Kx+g6HRJvl92E2ZUTTlvthedWJjMU1Cjwr0YGI0s8=) 32: e_F7Xbi0XqAy8Omhy8vQyDQa9No.roa (hash: oE2eMUbGUqjLN7domDF+Is0SbYEsjgkb9FJzi5XwtZw=) 33: eiaI1-hJNAgrmp0gE_umAxWn1sI.roa (hash: 0+nXI30Kx9KhbtXb4L+JY50O7XiXe8UjeNblohyYrj0=) 34: epL-6pVwzhIEf7qPG0idZwvRAaU.roa (hash: PUOL+WHkVofoMPu8K9ZuIn3mIvtNQi0EbJERGXzRSaU=) 35: epUEByvctUQFdD6x8uykLVw28K4.roa (hash: mbKHV+YI3RW2KrL8/aMhBlFmfvhswGZcacqDnNW/6l8=) 36: g5P1CePj7Ig3Woj5axzABAMb-Fs.roa (hash: /SHldXpCq9rbN+oRz89QqyP1fUqetjOkr2DsYsUd4t8=) 37: h-GPzjeo3pqIKqWAgrNe1kVp3Xw.roa (hash: VkUy1q7rwk/bJY0kmudHR01ERlqKVDpha+69blCqd7w=) 38: lapBDQIlIdDm8E4XnEd-bMW2ILQ.roa (hash: MgQdaG1666kHidH2vRjUNtiAJVGqpfkJRhC7xtWbkDs=) 39: ljJZC2hEpJ5Azrtf0iqlzINfN74.roa (hash: 5Q5VXrZNXtx66LR6yEa6nurEugsz3hLaJZcfv1xig+w=) 40: oBbHZskBgePxfPA6yXAa9qsZaJ4.roa (hash: HMrh2dCkL1N2+YwCmiHFoho2RWsT9N7Z2PNHtiVeXho=) 41: ou98WwPXDlrEW3eM0KZKlXxPjU0.roa (hash: e6aNXSypQBdMmCLoYi3x6Uu9rY0X9chBD/3LiPy1/5c=) 42: pcwBdWeogQWKGBKaJvlkeUygt1Y.roa (hash: FyjOSrsEYcBQx6MNH4viXYO5bDrfzFXdgEpostcNkrE=) 43: qjLMBAbC6C2Qi8uRTUP5yrEkfoY.asa (hash: 53AqSfnCOo667DHb8w2oqtwcLknCSxXAHJeADmD+v3g=) 44: sMjP0DwIRUv_f7qQQgRGf3HaTWA.roa (hash: DgS24JG1c/l8UCWAl1zW8utqR4YjdbEUYY2s38b7VVE=) 45: siv7eihEdKW_ap7AUDG7_39jUmI.roa (hash: WFYLo+dkgFW4+MbeoyoZaYOFmKk3TOwdJdQSzSoQ9SE=) 46: tbVX_nBTaE5VNov1rsfXFt2f7SU.roa (hash: rfYnZjKJQ0wuXUnU3TmEpEijE4Fpnxn/YL0Ur1YiogQ=) 47: urL4Mc4DykB_e6TYmMEoYhi2954.roa (hash: gfx7b8/If2mHd3qPOzceO0clF1lE+PE3Ji80UoFnGp0=) 48: v28XBIDcOIWawnqoBUd5lqyUYxk.roa (hash: WxydDKnqf++ZAuoc5GMUeeHtdm5DstgCBzp6r96AGOg=) 49: xRZUDhx7ihJfUObQvwoPd_wjCIE.roa (hash: CaizEiyOxtBDcQtuUG7hvPJywCQ5SLbLXz2o0r0E2ec=) 50: ySNwW6swWEy9g206lS3TF8Hot7Y.roa (hash: 2G2m7gXWJPeDJ1CaSCcPPIj5TE8F3VNFo+mX4zQe6WU=) 51: za88ND0OSXOKBDkHlXDSgAc0j-o.roa (hash: 3SNDrnhjIHUyQtYp1P1Obkb/xEBrgav3aCIr/q2YN6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:4c:bd:27:c2:9d:94:42:46:94:a4:ce:ec:97:51:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Mar 25 14:01:19 2026 GMT Not After : Mar 26 14:01:19 2026 GMT Subject: CN=3dd255212e1fbae238dfc6a28ab78dcdda98e0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:3d:03:9d:54:59:54:f6:8b:47:4d:26:bf: 35:92:5f:63:f5:83:a8:4d:7f:94:45:28:e4:66:33: 5c:5e:cc:43:dc:ef:26:0a:dd:78:65:e9:9c:ea:8d: 9a:42:9f:e8:da:1c:b1:85:1f:a5:d6:e6:bd:76:a0: a6:ec:d7:c4:73:86:11:d3:40:3a:8e:cd:00:bd:5b: d5:49:af:f4:8b:ae:c1:f6:52:22:00:db:d8:8d:22: 71:03:1c:52:9f:82:94:9e:6f:89:5b:3a:fd:bb:2d: d8:f0:ef:7a:c4:92:19:e3:b2:c3:e3:08:5e:54:d6: 65:b3:47:9b:56:b3:8b:73:ab:04:6d:61:59:f0:da: 2e:a6:23:31:3c:6e:aa:5e:c5:0d:ad:14:94:05:ca: 1b:7a:00:a8:fb:36:fd:2c:74:f3:61:8c:48:72:12: c9:f3:1f:9a:83:ce:ec:2b:80:e0:d5:64:7b:de:9f: fa:1e:74:39:6d:0c:68:89:c8:33:96:9f:4c:4a:f7: fe:ac:e9:b7:c2:68:18:11:52:71:c7:a4:d0:bf:e8: f2:1b:6e:e6:e1:fa:ff:f1:e3:a1:30:b2:8f:bf:7d: 26:0a:61:fe:76:61:6c:06:4f:90:bc:19:82:e8:81: b5:54:c0:65:34:ae:2e:03:24:90:10:cd:a8:e9:f3: d2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D2:55:21:2E:1F:BA:E2:38:DF:C6:A2:8A:B7:8D:CD:DA:98:E0:DD X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:7d:f4:47:4b:64:c2:b0:a9:e5:24:8d:32:38:89:4d:48:e6: b8:a5:64:2f:c0:0d:77:80:71:5f:f0:40:3b:72:77:fa:9f:c4: c7:6b:3b:36:86:77:61:12:01:ad:39:a9:ce:52:55:d5:1d:7d: ca:ab:0e:b4:de:99:d1:6d:09:12:78:e1:f6:07:c8:69:9d:21: 47:ef:6d:ef:3f:b0:bb:c9:c9:47:0d:65:41:6f:74:c3:30:cd: ec:60:00:78:8f:25:4a:01:6a:75:fc:67:67:27:82:7d:f3:0c: ce:61:93:ed:f6:39:68:7e:49:6d:92:58:87:b5:34:1a:41:a6: 78:a3:99:82:3d:34:f2:f0:22:07:72:e6:de:84:56:53:b9:7d: 2e:ec:ee:ac:cd:f0:da:1d:5e:bd:11:48:84:2f:1a:dc:0a:78: 80:d5:5d:fb:45:da:4c:2f:fc:33:bd:b3:81:93:56:73:6f:27: 2c:d7:80:30:18:12:59:3f:1d:c4:a4:d3:3a:09:74:14:4f:ad: 19:10:f4:6c:a7:5d:89:0a:bf:95:a3:fb:c5:30:75:e5:8a:f4: ba:f8:99:3a:b0:06:9b:62:c4:00:98:6a:21:83:8d:59:46:5d: 33:fa:a6:ef:90:c6:b5:9f:20:ee:f0:fd:fd:d9:bd:6a:c7:ba: 5e:0a:27:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lTL0nwp2UQkaUpM7sl1EvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMzI1MTQwMTE5WhcNMjYwMzI2MTQwMTE5WjAzMTEwLwYDVQQD EygzZGQyNTUyMTJlMWZiYWUyMzhkZmM2YTI4YWI3OGRjZGRhOThlMGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg89A51UWVT2i0dNJr81kl9j9YOo TX+URSjkZjNcXsxD3O8mCt14Zemc6o2aQp/o2hyxhR+l1ua9dqCm7NfEc4YR00A6 js0AvVvVSa/0i67B9lIiANvYjSJxAxxSn4KUnm+JWzr9uy3Y8O96xJIZ47LD4whe VNZls0ebVrOLc6sEbWFZ8NoupiMxPG6qXsUNrRSUBcobegCo+zb9LHTzYYxIchLJ 8x+ag87sK4Dg1WR73p/6HnQ5bQxoicgzlp9MSvf+rOm3wmgYEVJxx6TQv+jyG27m 4fr/8eOhMLKPv30mCmH+dmFsBk+QvBmC6IG1VMBlNK4uAySQEM2o6fPSgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3SVSEuH7riON/Gooq3jc3amODdMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkn30R0tk wrCp5SSNMjiJTUjmuKVkL8ANd4BxX/BAO3J3+p/Ex2s7NoZ3YRIBrTmpzlJV1R19 yqsOtN6Z0W0JEnjh9gfIaZ0hR+9t7z+wu8nJRw1lQW90wzDN7GAAeI8lSgFqdfxn ZyeCffMMzmGT7fY5aH5JbZJYh7U0GkGmeKOZgj008vAiB3Lm3oRWU7l9LuzurM3w 2h1evRFIhC8a3Ap4gNVd+0XaTC/8M72zgZNWc28nLNeAMBgSWT8dxKTTOgl0FE+t GRD0bKddiQq/laP7xTB15Yr0uviZOrAGm2LEAJhqIYONWUZdM/qm75DGtZ8g7vD9 /dm9ase6XgonGQ== -----END CERTIFICATE-----Generated at Wed Mar 25 22:46:50 2026 by rpki-client