$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: Z9QEoSQXe0k7mjerVUp5KYyiu0A7PPxM0XxD3oyVyEE= Subject key identifier: AF:28:04:E2:CA:7D:E2:36:B4:23:35:A9:B6:4A:B9:48:74:E7:EF:3E Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019D25F0EDA1A12C47F483C068D48173646D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1988 Signing time: Wed 25 Mar 2026 17:00:39 +0000 Manifest this update: Wed 25 Mar 2026 17:00:39 +0000 Manifest next update: Thu 26 Mar 2026 17:00:39 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: EPsLDt0RAUlvXwoOw/zejpNN/VO7yK4osu9c8Rf4/fo=) 3: 2WrIc3-SP4DwQkwPJgua1bGNJ8U.roa (hash: 1n+jxmJd5F9eDLk5zWmpaiLv++ZbzD7Fd2FD1jx9EQI=) 4: 2tySjVTQSHiULWpIIHxe3UTXyKc.roa (hash: 11efIhc4jliYz5b7ccbbcBy+lueobimG/f4ImBFKSr4=) 5: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 6: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 7: CW-qcI1ohMNZFrtxwKP6h3IuUsY.roa (hash: Q0m3SYkmGKp057as4cDbrXW6Plo1d3nxk1JPEsbDaPY=) 8: EQGugxJGZZhy7ULlXu2xf-8SXLU.roa (hash: UznnK9y+/YnAzmFCMUsWlBbf7xpLU6GolAvI0bvVwdE=) 9: Hn6HT0rI8yw7OpMX6Ki5ydHEALE.roa (hash: zwMQqyYw0odC6f9bIE+RcXjMzhkbC7l0+euZhieJ6Hw=) 10: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 11: b9b4J-MZL7V3ZGeqeJgMGRcaM0U.asa (hash: 4N2HHHaR2GuXJ1UFnYx11sFy5wWNh7GfZPfqfmEWwDc=) 12: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 13: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 14: iyfIsG_zCzXslesxdnK347yeiF4.roa (hash: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=) 15: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 16: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f0:ed:a1:a1:2c:47:f4:83:c0:68:d4:81:73:64:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Mar 25 17:00:39 2026 GMT Not After : Mar 26 17:00:39 2026 GMT Subject: CN=af2804e2ca7de236b42335a9b64ab94874e7ef3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:fa:fc:91:54:e4:af:ed:01:98:2f:e0:19: 86:32:f9:32:0b:c8:7e:01:2d:04:44:57:fa:3b:63: 6c:f7:c3:66:20:90:4d:91:68:da:d7:33:43:dd:1b: 32:01:3c:ab:1c:4a:8a:e3:42:57:fd:0b:6b:e2:8b: cc:4a:0f:0e:90:41:c1:85:ba:9b:6c:68:70:54:af: 36:55:6c:06:92:3c:a2:a6:93:bb:7b:90:c2:27:b3: 04:2b:c2:b7:64:e5:e9:84:77:ed:e3:03:ad:46:39: 1d:12:b4:1d:12:6d:7d:ee:64:9a:f7:2b:ff:fb:77: 93:50:d3:31:05:1e:e4:10:2f:82:38:36:ae:f1:c7: 2f:6d:64:5e:e7:83:ac:f9:4e:08:63:4f:09:99:82: 04:49:e5:d0:21:f3:64:76:76:7a:2c:ff:76:ef:af: ab:9b:80:8a:7d:86:72:86:99:3c:0e:bb:62:93:8f: 56:ea:a5:74:4e:da:26:c6:3b:b8:b7:24:93:f1:ec: 00:e2:6a:78:91:c8:57:33:64:0f:24:82:a8:00:37: e1:b2:4e:b9:40:92:83:61:14:cf:7f:c5:34:77:02: e2:15:d8:4d:d7:6c:9e:c5:8f:6e:6b:1b:72:59:8f: 8e:7e:b2:d0:a0:c6:ab:65:d4:38:04:8f:d9:7d:27: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:28:04:E2:CA:7D:E2:36:B4:23:35:A9:B6:4A:B9:48:74:E7:EF:3E X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:bf:01:f9:1d:7b:50:fc:d0:50:1a:11:31:0e:f9:fb:2b:62: 53:98:ae:60:f8:90:eb:39:27:a7:04:51:10:92:cc:57:43:ac: e6:2b:96:33:5d:52:8f:f7:02:80:f1:30:85:29:4d:de:bf:11: 3e:6e:ad:9b:76:8a:45:89:20:51:a7:7f:c0:9e:77:36:9e:67: 66:69:22:ae:76:ab:5b:2d:70:fa:3f:de:59:d2:71:98:1d:b9: 64:c6:6f:1a:4a:96:7d:5e:6f:e3:5a:35:a5:2e:ea:dc:6a:0c: 1f:25:95:f5:e6:d7:f3:3f:e5:99:e6:93:f0:88:cf:c1:c3:24: 73:39:d6:bc:f8:1c:04:28:3b:bf:a7:47:21:0d:e7:2a:f8:aa: 14:1d:98:b3:e0:95:4b:b2:99:8f:1f:a4:5d:ed:58:64:c5:ef: c4:9c:d3:2e:75:9c:ae:96:e9:d0:08:4c:49:6f:ac:b1:54:ae: 3b:5c:7e:e4:68:41:1c:d1:8d:45:d4:96:2c:06:7e:26:e5:d6: 09:66:a6:8e:9f:51:91:46:46:61:47:dd:1e:ad:e8:d1:e5:fa: b3:7d:0d:90:aa:75:9c:7e:7b:a4:13:0e:e9:8e:c5:91:d0:0b: e0:b8:58:85:cd:4e:9d:0a:dc:39:56:d4:72:ca:c7:96:c5:ee: 94:0b:8d:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8O2hoSxH9IPAaNSBc2RtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwMzI1MTcwMDM5WhcNMjYwMzI2MTcwMDM5WjAzMTEwLwYDVQQD EyhhZjI4MDRlMmNhN2RlMjM2YjQyMzM1YTliNjRhYjk0ODc0ZTdlZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYX6/JFU5K/tAZgv4BmGMvkyC8h+ AS0ERFf6O2Ns98NmIJBNkWja1zND3RsyATyrHEqK40JX/Qtr4ovMSg8OkEHBhbqb bGhwVK82VWwGkjyippO7e5DCJ7MEK8K3ZOXphHft4wOtRjkdErQdEm197mSa9yv/ +3eTUNMxBR7kEC+CODau8ccvbWRe54Os+U4IY08JmYIESeXQIfNkdnZ6LP9276+r m4CKfYZyhpk8Drtik49W6qV0Ttomxju4tyST8ewA4mp4kchXM2QPJIKoADfhsk65 QJKDYRTPf8U0dwLiFdhN12yexY9uaxtyWY+OfrLQoMarZdQ4BI/ZfSfPgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8oBOLKfeI2tCM1qbZKuUh05+8+MB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmr8B+R17 UPzQUBoRMQ75+ytiU5iuYPiQ6zknpwRREJLMV0Os5iuWM11Sj/cCgPEwhSlN3r8R Pm6tm3aKRYkgUad/wJ53Np5nZmkirnarWy1w+j/eWdJxmB25ZMZvGkqWfV5v41o1 pS7q3GoMHyWV9ebX8z/lmeaT8IjPwcMkcznWvPgcBCg7v6dHIQ3nKviqFB2Ys+CV S7KZjx+kXe1YZMXvxJzTLnWcrpbp0AhMSW+ssVSuO1x+5GhBHNGNRdSWLAZ+JuXW CWamjp9RkUZGYUfdHq3o0eX6s30NkKp1nH57pBMO6Y7FkdAL4LhYhc1OnQrcOVbU csrHlsXulAuNvQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:08:02 2026 by rpki-client