$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft File: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json) Hash identifier: +Pota3sg4inYp+vGyLpaXuwVR1aYHnhr5nwGdEx68L0= Subject key identifier: 06:69:7F:53:4B:3E:44:B0:43:7E:EF:82:D3:77:7E:FB:12:09:28:3B Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019D262856EBE97F21844265126602639D00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft Manifest number: 1438 Signing time: Wed 25 Mar 2026 18:01:10 +0000 Manifest this update: Wed 25 Mar 2026 18:01:10 +0000 Manifest next update: Thu 26 Mar 2026 18:01:10 +0000 Files and hashes: 1: 0ZP8S6iuoWh8xgt74BfX9FsiWUE.roa (hash: 3Aof+qdhL+cCGNe+hdtvcBXfSgz4KVlL9GS8+nK3Uo0=) 2: 1-zo-vu3H5BPZZ7kya3z7KQG-O8M.roa (hash: wO9W+0kJ3rqdKQX4KDV5BoK4htjNlrERtnZ8OUi4AyI=) 3: 36fFRH4YUOLzCfa4FpCOqwCaGnY.roa (hash: w2yC99pJq/G0WFmIu7IRCBEE47mJ+HQkIbalFcg4HKA=) 4: 3ln1x2g8OU-tXC-DrXz9jW0X1gU.roa (hash: 2zWvHVgpKzwH8CHKZuYT/C7gjaJxfSRA4wNx6aFsjNQ=) 5: 6WfI7AreDwm37Fgy62Hm_HjVPIM.roa (hash: G4TpNMLm1OunCQZoJ8h7rE+E9esfv1Zs5yi2Rv7QUx0=) 6: 8n4dPL8KLxEQ-2_3ArsmO-lU_E0.roa (hash: sXtsv9v2SK+0bYiMZm7Fq+v0x6S/nkybrqMZTSmGc7o=) 7: B4wYxFww_X_iDCxVsYXjZhIjnK4.roa (hash: zX0gMbFt42KJdtED5J978ZIE/4qbULnV//fheUtafIs=) 8: E4moO9CLoHXgoV6vrJXJQ_jxi14.roa (hash: FEDRVix5XZV3UfT/XzbBUvsMscccpO5HTNPW06itXAo=) 9: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: Qait4M3lMVtpCWheT5Piqo7XsPd0omCFwPGKN709mKw=) 10: Gyy1MCCByROZBRXIY7QoJ1Lfx2Y.roa (hash: AjP6dUUnXVUHe2mbkVU2A0GKTeThVmR/SN82MGw/Wog=) 11: IazmGoMrfFtTUWHrMtD4VT_a5xM.roa (hash: mmhAv5nf447caUzE6DBRCP1tjF3/Qt3PMJlp3sCBJV0=) 12: SmOl0GvV5DsT7QCJ4G9S0D2y9JI.roa (hash: wO3PQDBi84MCPWOqSTZR9XqT3nmvEoAZ3UZDvn9zyIY=) 13: Zn2F_GITaJUFXYczVsLI2VOyKdU.roa (hash: CEg2vq6S7OzyDS7MVIrVNzF15tpZ2z6WrwU8c/VyAWA=) 14: aojI_JsDEIxXnOz4PZxsAnlJa3o.roa (hash: PJic4it1tGPs9tX49/CnUprlHognZespLJ+dZ7W4/TY=) 15: bCOP39p472Lk-lkmW7HPI2seXtc.roa (hash: LFvAsIyeBJmUq7QEzxWZPznh8Eot8p72RV5zfPuvMYU=) 16: dPcC6P2Ub94KhMYnU4O-c5682vk.roa (hash: g/ztEAIPkKUjRwwmBVeCjJEZxo+DRe9x5QOVITmEu/0=) 17: vrcNcGLKzc4126aByqCn10xR7hw.roa (hash: BJLHLu3Ei5L0mbo/lskPrmlmi+TRNkPtsukA9ptks7A=) 18: wLYTFgarc0-ql_9yDw0jet-6cdU.roa (hash: p6vpMWbNqzC01Ai5TEGReU7vIhGcrJ1tvziK4csCWpE=) 19: zh_Jy2MqKKarC-MDKrza1hiz6Ck.roa (hash: YXMs2R7ig2C7zGo2CvCc44PcqUIofxwBlRKFLyt5A3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 18:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:28:56:eb:e9:7f:21:84:42:65:12:66:02:63:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Mar 25 18:01:10 2026 GMT Not After : Mar 26 18:01:10 2026 GMT Subject: CN=06697f534b3e44b0437eef82d3777efb1209283b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:65:51:8e:ae:2c:7c:0a:c0:4d:b6:3a:88: da:8d:aa:9f:4a:6a:91:6d:00:f9:19:b1:52:d8:4e: 1d:13:b5:20:9d:62:e1:b2:ac:e3:a8:17:6e:e6:bf: e3:3f:8c:49:4b:70:02:df:eb:a5:44:d7:39:1c:bc: 92:d8:c8:d0:f2:ef:70:f5:61:c4:44:88:5a:f1:c4: 55:c1:66:25:0a:f0:d1:1e:0e:7c:99:76:ad:a7:73: 26:76:b5:a9:d0:b8:11:18:b6:94:6a:b3:c8:4c:10: 0d:ee:1c:34:96:5a:cf:cf:8d:83:ea:3e:7a:1e:5f: 94:84:67:20:6c:83:b5:7b:66:98:11:00:11:54:a6: ee:d9:a9:1b:77:5e:d3:78:66:0f:e2:b9:60:59:1a: fb:d4:66:ce:5c:48:8d:87:ba:10:d5:56:3d:b8:dd: 94:3c:30:b1:81:83:e5:4f:d3:d5:bd:e0:5f:10:0c: 5e:95:4d:d3:78:db:4a:11:e0:91:3b:04:63:eb:c8: 7c:5c:0c:7b:3a:b6:1d:96:0f:b0:91:32:b7:25:43: 60:41:29:24:36:5d:28:1f:f1:28:5a:b7:61:e4:b9: cd:3d:0e:1e:9b:a6:d6:b5:fa:e3:22:91:52:f1:08: 71:0f:b3:17:86:72:6c:c7:b3:73:44:31:3b:6a:61: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:69:7F:53:4B:3E:44:B0:43:7E:EF:82:D3:77:7E:FB:12:09:28:3B X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e5:5f:aa:ba:1f:fe:99:25:a2:56:1c:80:e1:f3:4b:76:c1: e7:3d:20:25:51:67:cc:6d:d8:f2:d8:0d:8a:57:12:31:f7:89: 07:c3:88:3e:a2:10:58:67:62:5a:c3:93:11:5c:c1:5b:cd:54: d2:79:7f:2e:25:8e:65:b1:53:e3:8d:24:ec:68:a9:3a:16:1a: 09:a2:80:c8:a7:1a:87:db:66:90:1f:3a:a0:1c:ef:3d:e1:57: b6:e1:b8:52:76:2e:f6:82:fa:3d:87:b1:ee:ee:6c:bd:b0:aa: 6b:8b:d4:34:44:8e:d5:51:04:9b:e6:47:27:b5:cd:e9:cd:cd: d6:13:94:85:a5:d2:da:19:58:e0:07:4f:fd:c6:45:f4:b1:08: 06:52:ee:fc:f6:f9:49:8c:76:d5:b2:9c:a5:f9:75:26:15:a6: ad:68:84:91:3e:e8:46:cc:86:d3:2e:e2:9e:bf:53:19:88:22: c9:b4:80:50:c9:eb:29:3e:79:3a:82:05:cf:9e:e7:75:a1:4b: 28:d7:d9:9d:ab:4d:15:78:ce:c9:8d:db:10:03:ec:f7:73:ea: 27:36:88:4d:f2:94:3c:01:1d:59:6d:0a:f2:44:ac:de:4b:73: c3:01:34:ed:5e:f5:78:3d:fd:3a:7d:2c:98:58:86:e8:8f:a1: 2c:a8:4e:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mKFbr6X8hhEJlEmYCY50AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMzI1MTgwMTEwWhcNMjYwMzI2MTgwMTEwWjAzMTEwLwYDVQQD EygwNjY5N2Y1MzRiM2U0NGIwNDM3ZWVmODJkMzc3N2VmYjEyMDkyODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXNlUY6uLHwKwE22OojajaqfSmqR bQD5GbFS2E4dE7UgnWLhsqzjqBdu5r/jP4xJS3AC3+ulRNc5HLyS2MjQ8u9w9WHE RIha8cRVwWYlCvDRHg58mXatp3MmdrWp0LgRGLaUarPITBAN7hw0llrPz42D6j56 Hl+UhGcgbIO1e2aYEQARVKbu2akbd17TeGYP4rlgWRr71GbOXEiNh7oQ1VY9uN2U PDCxgYPlT9PVveBfEAxelU3TeNtKEeCROwRj68h8XAx7OrYdlg+wkTK3JUNgQSkk Nl0oH/EoWrdh5LnNPQ4em6bWtfrjIpFS8QhxD7MXhnJsx7NzRDE7amHt2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZpf1NLPkSwQ37vgtN3fvsSCSg7MB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguVfqrof /pklolYcgOHzS3bB5z0gJVFnzG3Y8tgNilcSMfeJB8OIPqIQWGdiWsOTEVzBW81U 0nl/LiWOZbFT440k7GipOhYaCaKAyKcah9tmkB86oBzvPeFXtuG4UnYu9oL6PYex 7u5svbCqa4vUNESO1VEEm+ZHJ7XN6c3N1hOUhaXS2hlY4AdP/cZF9LEIBlLu/Pb5 SYx21bKcpfl1JhWmrWiEkT7oRsyG0y7inr9TGYgiybSAUMnrKT55OoIFz57ndaFL KNfZnatNFXjOyY3bEAPs93PqJzaITfKUPAEdWW0K8kSs3ktzwwE07V71eD39On0s mFiG6I+hLKhO0A== -----END CERTIFICATE-----Generated at Thu Mar 26 03:29:14 2026 by rpki-client