$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: vE4PWzumrsrnReEmng13GuSPTPsqPnzoh7w39MhNMpI= Subject key identifier: F8:FA:14:A4:AE:BB:00:58:93:BB:C6:0F:BC:96:70:82:34:19:FD:97 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019D29619F8DDE2E543482229253F5317C0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 15B7 Signing time: Thu 26 Mar 2026 09:02:36 +0000 Manifest this update: Thu 26 Mar 2026 09:02:36 +0000 Manifest next update: Fri 27 Mar 2026 09:02:36 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 2zIgCHVsuwyzUlczHTmtHzKbcqo.roa (hash: XtTVvuJ7wJ6AMvDlLc/Z9ph2kaE/WMDOHDw0P5r/pfY=) 3: 3aV_UzeZWkVLYdBcdJhGvghnl4c.roa (hash: zIZrgZNehbD7uBxLcLO/tdVtklU882uJK8x5m1rGUnw=) 4: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 5: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 6: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: yPaAiQxmCnw+oO0yQpx28eYbOftJ6xyE82lhrQKg71I=) 7: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 8: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 9: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 10: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 11: j_Se_UUpvXzgFBHV0DKpPTUboes.roa (hash: NyS6Ky7kfRsPmVEkp6PDfLDSTRMbr7bwze8MtEAMXCc=) 12: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 13: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) 14: zVLW9HFt-3z2M7Ja19rIMJwG2_Y.roa (hash: /CaIYvptsHDUu9JqgaUmQ5T95opFTVpgVggOdpKaM0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:61:9f:8d:de:2e:54:34:82:22:92:53:f5:31:7c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Mar 26 09:02:36 2026 GMT Not After : Mar 27 09:02:36 2026 GMT Subject: CN=f8fa14a4aebb005893bbc60fbc9670823419fd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:3d:46:89:95:15:95:d4:cd:7c:53:81:53: b6:18:9e:3a:be:51:76:e9:f8:37:75:3b:53:4f:8b: e3:52:08:86:a9:80:05:d1:e5:95:58:ca:25:11:3d: 31:cc:d7:cf:d2:56:1e:14:7c:e1:37:54:25:67:95: af:57:d3:dd:e5:33:58:99:ca:08:45:28:2f:40:0b: d5:13:f8:c6:31:a7:70:76:c5:a7:0d:a6:5b:88:2a: 7f:8a:30:35:b9:de:ab:56:4d:b8:cc:c9:20:07:26: 42:b6:c8:26:0c:ff:45:5e:90:fd:80:63:a6:98:85: 7c:58:59:36:ba:78:80:a3:81:5a:ab:0c:db:f6:75: 5a:48:4f:25:99:3f:e8:55:75:4c:c9:2e:2a:59:73: d9:52:79:89:93:34:e4:69:8c:89:f6:25:7f:70:f3: 13:98:33:2e:11:ff:bd:97:9b:66:2c:f6:e8:18:79: 38:d5:ee:3c:82:e2:2c:f1:f5:5d:a8:0d:a7:f4:4c: d0:d1:ea:4e:f8:bc:89:5a:56:8d:a1:9e:92:5e:72: 56:21:1c:3a:3e:47:5c:f9:c4:5d:f7:c6:02:f8:5d: 03:ee:68:58:cc:ec:8e:ce:7a:0c:94:7a:e5:ce:de: 07:34:ed:ee:27:7d:f1:73:30:ba:6b:3a:41:c2:bd: 4d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FA:14:A4:AE:BB:00:58:93:BB:C6:0F:BC:96:70:82:34:19:FD:97 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:cd:e2:0c:48:75:f9:3a:a4:e1:3e:82:59:a1:39:ff:49:74: 80:0c:28:ba:27:44:cd:df:c3:f7:89:40:42:0e:7e:2a:34:1f: ab:15:a2:d4:dc:da:fa:8a:52:99:3e:6f:47:b5:31:50:0e:14: 75:4e:d4:7c:fb:3a:9b:e5:e0:5c:2d:fa:18:77:ee:4e:d8:0e: 56:ec:5b:6f:58:a8:fe:20:66:48:b9:9f:a3:e0:0b:35:a3:b9: 7e:c2:b7:d8:44:53:d8:ab:11:54:69:0d:71:d2:05:d7:bb:82: ba:f1:c6:ec:b2:87:0f:d9:fb:5f:91:0e:c9:63:06:b9:0d:fe: 5c:e0:62:bb:c3:fd:99:d6:8e:a3:fa:55:78:68:96:8f:b3:66: a6:83:80:a4:24:05:a6:76:c3:2e:5d:cb:8a:55:fa:76:5a:e3: f9:ce:36:0b:e8:fa:d9:b1:d2:75:d3:0f:e8:34:af:e9:41:3a: a1:57:23:5c:be:b3:8e:55:3c:ef:2f:54:fc:a9:1f:10:18:0d: 3e:78:78:b7:08:f2:ca:95:c0:af:54:a5:5c:9f:41:08:28:59: d0:6f:ca:56:fc:44:67:39:38:c6:10:5e:a2:ef:e1:d4:11:45: 57:8a:42:1f:09:e6:f0:73:32:a0:ae:11:bb:03:c9:27:10:3d: a3:d7:2c:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pYZ+N3i5UNIIiklP1MXwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwMzI2MDkwMjM2WhcNMjYwMzI3MDkwMjM2WjAzMTEwLwYDVQQD EyhmOGZhMTRhNGFlYmIwMDU4OTNiYmM2MGZiYzk2NzA4MjM0MTlmZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nc9RomVFZXUzXxTgVO2GJ46vlF2 6fg3dTtTT4vjUgiGqYAF0eWVWMolET0xzNfP0lYeFHzhN1QlZ5WvV9Pd5TNYmcoI RSgvQAvVE/jGMadwdsWnDaZbiCp/ijA1ud6rVk24zMkgByZCtsgmDP9FXpD9gGOm mIV8WFk2uniAo4Faqwzb9nVaSE8lmT/oVXVMyS4qWXPZUnmJkzTkaYyJ9iV/cPMT mDMuEf+9l5tmLPboGHk41e48guIs8fVdqA2n9EzQ0epO+LyJWlaNoZ6SXnJWIRw6 Pkdc+cRd98YC+F0D7mhYzOyOznoMlHrlzt4HNO3uJ33xczC6azpBwr1NSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPj6FKSuuwBYk7vGD7yWcII0Gf2XMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoc3iDEh1 +Tqk4T6CWaE5/0l0gAwouidEzd/D94lAQg5+KjQfqxWi1Nza+opSmT5vR7UxUA4U dU7UfPs6m+XgXC36GHfuTtgOVuxbb1io/iBmSLmfo+ALNaO5fsK32ERT2KsRVGkN cdIF17uCuvHG7LKHD9n7X5EOyWMGuQ3+XOBiu8P9mdaOo/pVeGiWj7NmpoOApCQF pnbDLl3LilX6dlrj+c42C+j62bHSddMP6DSv6UE6oVcjXL6zjlU87y9U/KkfEBgN Pnh4twjyypXAr1SlXJ9BCChZ0G/KVvxEZzk4xhBeou/h1BFFV4pCHwnm8HMyoK4R uwPJJxA9o9cskA== -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:24 2026 by rpki-client