$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: DWcFFTDzZMZOC83Qo1C01pJwOf7BJBmoBtC/dKVsjTs= Subject key identifier: C8:72:E5:34:03:EC:76:4F:8B:E8:65:13:C5:F4:64:B9:1F:C8:65:B1 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019D27DFDA1CE96BC844154B29747E793B32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 08D2 Signing time: Thu 26 Mar 2026 02:01:14 +0000 Manifest this update: Thu 26 Mar 2026 02:01:14 +0000 Manifest next update: Fri 27 Mar 2026 02:01:14 +0000 Files and hashes: 1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=) 2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=) 3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: y4fP9fUFknzb3DdKxU7xZ1jiSzyq2EE/hD0lGhQhgDI=) 4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=) 5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=) 6: DC-2va12O2p4wJaztsxQYqxlteI.roa (hash: 8DuSeuFCejqmMZ/sp4dL3rLoQsC1vmmd0qUYceaaN1Y=) 7: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=) 8: GXpP16JP0Mjym_u_vszjldIXucM.roa (hash: 0GFGujZKcR3Ga+pFC/exC5L1CnjeKo6DgEs39y2hAc4=) 9: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=) 10: QxRT0q4FzTnTcacN8tWvzsCAarc.roa (hash: XiEdwKLVvGeQdfVFaF47mebbaJXtp25EOB5RwY48keA=) 11: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=) 12: SyWHbYOnHu_cvDaajuYM-To7M1w.roa (hash: YSRENKcj3fhKWRCWRTPdwxBLbJ6LeYaoc5YN/u+MBoM=) 13: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=) 14: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=) 15: _Hrgg9TwnO9PoE-2Cm9MNkAYl0w.roa (hash: bu/cyj5EwB3TDiwyIVSQeElzT+joOr0r21e4GEpp8jI=) 16: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=) 17: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=) 18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=) 19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:df:da:1c:e9:6b:c8:44:15:4b:29:74:7e:79:3b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Mar 26 02:01:14 2026 GMT Not After : Mar 27 02:01:14 2026 GMT Subject: CN=c872e53403ec764f8be86513c5f464b91fc865b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:0f:52:b8:40:08:be:22:bb:7d:ce:95:26: 4e:a9:76:3b:af:02:72:05:85:7b:a7:70:70:b7:91: 69:14:26:7f:77:72:1f:ee:a3:59:8d:96:ae:0e:22: d3:70:5a:e5:54:db:37:e3:63:9e:5f:66:5d:2b:51: c7:fd:2e:a8:7b:0c:b9:0d:a3:33:da:f9:dd:4b:85: 64:4c:87:7e:57:7c:ec:d7:64:89:70:43:51:27:40: 1b:08:51:aa:ff:0d:a5:f3:19:d6:5d:da:ac:5a:86: 4d:ae:f3:73:be:0d:68:87:0e:03:5c:b0:cc:51:71: d8:7e:59:89:ff:53:0f:aa:2c:1c:3f:80:34:84:43: 9a:f9:af:bf:39:42:3c:c2:e9:e7:8d:82:77:d2:f2: 4f:32:37:de:83:33:9f:0d:d1:8e:9d:40:e0:45:e3: f9:92:f6:77:4a:39:6e:33:e6:fe:71:dc:b7:9f:e3: 46:20:75:6f:db:93:33:37:08:e7:9c:c7:5f:1e:bd: b7:4f:05:5c:44:76:ee:dd:19:a9:f3:23:38:b8:d7: e1:01:96:81:70:b3:96:8c:13:ef:73:86:c8:38:58: ed:13:10:ca:d2:45:39:fa:51:94:67:26:0b:92:99: 93:42:e9:c3:75:70:6a:7a:b4:00:13:d7:f8:c8:31: 88:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:72:E5:34:03:EC:76:4F:8B:E8:65:13:C5:F4:64:B9:1F:C8:65:B1 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:61:79:73:95:6e:43:d2:08:2e:1c:fe:93:a8:93:f6:5a:3a: 58:f3:02:48:3e:ce:30:d5:2e:9e:82:42:0c:c5:9a:ab:54:5b: fe:08:5f:41:b8:9f:08:4c:c5:59:56:55:61:24:c1:41:d4:bf: 84:d7:ae:09:90:75:b4:b8:b5:fb:f0:75:90:94:cd:d6:3a:23: d3:91:d8:f2:30:36:76:7b:be:2b:c2:23:ea:8a:49:e0:1a:33: c1:62:3e:c5:fb:a8:1f:99:08:14:c2:c9:8a:0e:55:c3:7f:fa: c3:97:ef:b7:11:5e:b3:ba:2f:7f:34:c4:f0:52:f9:67:98:04: d4:8b:f3:94:d8:b8:1b:d8:83:80:9f:be:42:b5:10:ed:b1:63: 04:2c:eb:13:af:36:ca:34:9f:6a:ed:37:6f:9b:b5:96:ce:4c: bc:7d:ab:4d:33:12:48:44:db:c7:66:52:de:c3:3f:be:54:9f: 5f:71:5a:b5:47:08:d2:ac:57:4d:fc:a0:7d:b1:aa:5f:36:37: f0:3f:21:f8:33:c0:17:52:9e:14:1d:95:ff:4c:70:40:f1:16: ea:7b:88:ca:91:7c:6c:ff:52:87:80:50:e6:3c:cb:c3:34:52: 23:26:60:83:94:97:87:c9:0f:12:7c:29:fc:d2:64:6f:b3:ff: ed:46:1e:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n39oc6WvIRBVLKXR+eTsyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwMzI2MDIwMTE0WhcNMjYwMzI3MDIwMTE0WjAzMTEwLwYDVQQD EyhjODcyZTUzNDAzZWM3NjRmOGJlODY1MTNjNWY0NjRiOTFmYzg2NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu58PUrhACL4iu33OlSZOqXY7rwJy BYV7p3Bwt5FpFCZ/d3If7qNZjZauDiLTcFrlVNs342OeX2ZdK1HH/S6oewy5DaMz 2vndS4VkTId+V3zs12SJcENRJ0AbCFGq/w2l8xnWXdqsWoZNrvNzvg1ohw4DXLDM UXHYflmJ/1MPqiwcP4A0hEOa+a+/OUI8wunnjYJ30vJPMjfegzOfDdGOnUDgReP5 kvZ3SjluM+b+cdy3n+NGIHVv25MzNwjnnMdfHr23TwVcRHbu3Rmp8yM4uNfhAZaB cLOWjBPvc4bIOFjtExDK0kU5+lGUZyYLkpmTQunDdXBqerQAE9f4yDGIbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhy5TQD7HZPi+hlE8X0ZLkfyGWxMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmF5c5Vu Q9IILhz+k6iT9lo6WPMCSD7OMNUunoJCDMWaq1Rb/ghfQbifCEzFWVZVYSTBQdS/ hNeuCZB1tLi1+/B1kJTN1joj05HY8jA2dnu+K8Ij6opJ4BozwWI+xfuoH5kIFMLJ ig5Vw3/6w5fvtxFes7ovfzTE8FL5Z5gE1IvzlNi4G9iDgJ++QrUQ7bFjBCzrE682 yjSfau03b5u1ls5MvH2rTTMSSETbx2ZS3sM/vlSfX3FatUcI0qxXTfygfbGqXzY3 8D8h+DPAF1KeFB2V/0xwQPEW6nuIypF8bP9Sh4BQ5jzLwzRSIyZgg5SXh8kPEnwp /NJkb7P/7UYeCw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:30:35 2026 by rpki-client