$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: ufaIfjyjKXkR1PEcTm1Yn6uhrZaN7ReY6Kt/AfwdtJI= Subject key identifier: 53:19:5F:FC:45:3F:DE:3A:92:7A:61:1E:D7:91:3E:1D:59:8A:29:C8 Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 019D26CCE76C7D8BA2E95E8B461407B9A47C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 055C Signing time: Wed 25 Mar 2026 21:00:55 +0000 Manifest this update: Wed 25 Mar 2026 21:00:55 +0000 Manifest next update: Thu 26 Mar 2026 21:00:55 +0000 Files and hashes: 1: 3ni1lXz0xo-b4HoXI3wRu6vJL-c.roa (hash: 7b3P7fNZC5J3JcfQvJqiC/2neHH6f8kadDw6/l3P8/Y=) 2: AmdO1jA2vkBtxkn2vv7Y1wu4dFM.roa (hash: wY1LZtovvbzyHM2W8YhMwLuam5z9V3nwmwDqM8gEEF4=) 3: BYtnuImtTGdi14Pvw9xlRKAL65k.roa (hash: hUoeJXbJ5fZg7WKvqap5HxU1pLmROBa7LXCxisf4SP4=) 4: CNFp8fRkRFtEQks7R0O2wgi6-xA.roa (hash: bXlKDyyKKGdmKBfoGxYPygp5JG45Ozo2FLYDRNT3VpM=) 5: HrFuB2F4P326FdIKDHmR_z_oGqs.roa (hash: d1+J0bs8Jd4Tmg8E7c67C6CZ18CYNi+0jZ3ouxTsd3M=) 6: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: GGzvo6Kb4gruG6nEct8gCt6ga4ke9IKJDVKCvZ4ne+w=) 7: RlmY2epIKRhq-2nW5GPMGi-42ho.roa (hash: P+PIwilqQ8xdGydeEaJcPqihgDM4ZC5j7iY8+NEd9i0=) 8: YlYX0-EwdZ0RjwlcesbIkWVsVTo.roa (hash: 12tzR601qVt1Vj7EME9V9wBl6cqsNdP8VmiHIJgAu5Q=) 9: cNqycsZxVsHcATCP8JWqqaoM9SI.roa (hash: CX+xOUuMFEXPOxevDnRNct6cRUm/jc1q9b58M6PTWZo=) 10: gE3k0i8jHZvr5aE-wjNKPwzJxvE.roa (hash: CuCVWX3Bl6EYyE6nnbYJN+zyPfahHe62RUo//GoIy9o=) 11: lBlo6PUCc6IqER-nFwmpK7D7yqo.roa (hash: Z5uCFtdD3Jko3O/Znx9FA924V5ua0wn5UjLkJKE8KyE=) 12: qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa (hash: qH3mt9TzRYD5CJqPjTYWZEejOSD69A/a1ZIdDauUkQo=) 13: urqr3QuscnM9Gexd4HqCzda04Hs.roa (hash: +eFtvrmvtLAGjqTjuO2JbNNCYDwjSBJV6qDXXX+HoPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cc:e7:6c:7d:8b:a2:e9:5e:8b:46:14:07:b9:a4:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Mar 25 21:00:55 2026 GMT Not After : Mar 26 21:00:55 2026 GMT Subject: CN=53195ffc453fde3a927a611ed7913e1d598a29c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:ee:ff:74:ba:7e:9e:a3:05:01:be:43:be: dc:42:63:6e:14:70:82:0c:47:ff:1e:eb:22:03:10: 20:aa:ab:58:4c:0e:6e:13:7e:46:3b:7a:57:83:bb: a9:63:83:50:5f:a0:88:3d:9f:43:61:e3:c4:8d:f2: 86:52:0b:2a:5f:4a:97:f8:02:0a:fb:f5:66:91:9a: 11:bd:d0:2b:a7:32:e8:2d:41:0b:69:a0:36:12:8a: 33:8e:60:77:9a:78:c6:35:5c:4f:f7:78:3d:14:11: 31:52:ba:48:31:a0:95:f9:5a:a9:b5:cf:4e:37:84: c7:9f:56:f5:2e:86:1c:33:50:44:a5:ea:96:53:24: dc:a8:b0:56:0a:19:c4:77:ee:ac:8e:4b:df:e7:2b: 23:57:85:9a:4a:4e:68:4d:f9:25:f0:09:66:35:d7: a2:38:30:b4:72:68:d5:a1:b6:d5:d5:56:2b:98:61: be:ab:7c:2e:2a:aa:d1:b6:38:04:29:a0:69:22:f5: 6b:b7:8f:6e:e7:56:13:ef:11:10:91:c0:5c:ca:cb: 7d:38:76:7f:df:5f:71:01:a2:06:92:7f:38:3c:84: 39:87:2c:2a:51:30:69:aa:1c:3d:b4:91:33:aa:f7: a0:78:dc:d0:a5:06:42:3a:48:67:d9:2f:e3:42:5a: 05:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:19:5F:FC:45:3F:DE:3A:92:7A:61:1E:D7:91:3E:1D:59:8A:29:C8 X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:a2:83:a1:1d:43:39:16:5c:f2:7b:06:08:12:1d:00:eb:2d: 76:e3:51:6f:94:e0:1a:0e:89:a7:28:94:26:b3:33:03:1c:61: 75:20:57:1c:de:50:9d:75:be:17:4d:33:bc:04:08:1c:51:70: c6:9e:b0:0b:98:6b:c6:42:f5:a6:2e:9e:1a:da:0f:47:1d:a6: 86:42:9e:51:0d:89:e4:7d:72:39:72:95:48:9d:1a:a7:d4:33: 26:17:d4:20:52:8d:a1:52:92:33:10:92:97:36:eb:84:4e:73: 93:62:91:37:b6:45:6d:3e:c2:c8:c9:5d:d9:0b:13:12:0b:b1: b6:41:5a:79:9c:13:7a:18:fd:62:ab:d4:64:1e:93:22:dd:eb: df:18:b8:7d:e1:86:10:da:33:d3:a1:79:e2:b9:d1:dd:05:f6: fe:d8:5f:ab:e6:2d:c4:5b:fe:62:98:90:f1:14:45:fe:40:6c: 00:35:41:96:75:47:14:a8:5e:73:c2:d6:7e:61:21:53:fc:8f: e2:d1:94:f0:fc:ba:3f:82:aa:c0:cf:52:13:96:ad:25:59:35: 34:5a:50:19:70:00:38:90:84:ea:5b:4d:66:8b:97:47:60:88: 07:c2:34:00:90:f2:d9:14:ab:66:8a:62:08:ec:46:aa:64:f8: d5:90:e6:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzOdsfYui6V6LRhQHuaR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjYwMzI1MjEwMDU1WhcNMjYwMzI2MjEwMDU1WjAzMTEwLwYDVQQD Eyg1MzE5NWZmYzQ1M2ZkZTNhOTI3YTYxMWVkNzkxM2UxZDU5OGEyOWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDbu/3S6fp6jBQG+Q77cQmNuFHCC DEf/HusiAxAgqqtYTA5uE35GO3pXg7upY4NQX6CIPZ9DYePEjfKGUgsqX0qX+AIK +/VmkZoRvdArpzLoLUELaaA2EoozjmB3mnjGNVxP93g9FBExUrpIMaCV+Vqptc9O N4THn1b1LoYcM1BEpeqWUyTcqLBWChnEd+6sjkvf5ysjV4WaSk5oTfkl8AlmNdei ODC0cmjVobbV1VYrmGG+q3wuKqrRtjgEKaBpIvVrt49u51YT7xEQkcBcyst9OHZ/ 319xAaIGkn84PIQ5hywqUTBpqhw9tJEzqvegeNzQpQZCOkhn2S/jQloFDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMZX/xFP946knphHteRPh1ZiinIMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvaKDoR1D ORZc8nsGCBIdAOstduNRb5TgGg6JpyiUJrMzAxxhdSBXHN5QnXW+F00zvAQIHFFw xp6wC5hrxkL1pi6eGtoPRx2mhkKeUQ2J5H1yOXKVSJ0ap9QzJhfUIFKNoVKSMxCS lzbrhE5zk2KRN7ZFbT7CyMld2QsTEguxtkFaeZwTehj9YqvUZB6TIt3r3xi4feGG ENoz06F54rnR3QX2/thfq+YtxFv+YpiQ8RRF/kBsADVBlnVHFKhec8LWfmEhU/yP 4tGU8Py6P4KqwM9SE5atJVk1NFpQGXAAOJCE6ltNZouXR2CIB8I0AJDy2RSrZopi COxGqmT41ZDmvQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:14:24 2026 by rpki-client