$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json) Hash identifier: ftg9/lJS7TXKyzX9jzL3shjz0TFkT78lcDLknWA8+vM= Subject key identifier: E5:AE:1D:72:72:65:26:59:39:08:68:AC:3E:FE:55:94:46:A2:92:79 Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce Certificate serial: 019D29CE9C140078FBD419AD440608E691A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft Manifest number: 18B1 Signing time: Thu 26 Mar 2026 11:01:39 +0000 Manifest this update: Thu 26 Mar 2026 11:01:39 +0000 Manifest next update: Fri 27 Mar 2026 11:01:39 +0000 Files and hashes: 1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=) 2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=) 3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=) 4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: dg9NJ1Scb7yE0nSZIepPqzkkMlKbwNWyQMQcTzof4EY=) 5: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=) 6: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=) 7: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=) 8: e6E78PhXHpGFjckaurV7HRo45Qc.roa (hash: /P55Uaooj8U1yQTcKMlV6RxlENtuteMc4CS0XE887QU=) 9: pc9jqeFvGm_Ya7ftOHGOywYXqHk.roa (hash: hvmbpnMOx6aLgariBv7H4no6hWJ9AktUdxssOvOvSNs=) 10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:ce:9c:14:00:78:fb:d4:19:ad:44:06:08:e6:91:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce Validity Not Before: Mar 26 11:01:39 2026 GMT Not After : Mar 27 11:01:39 2026 GMT Subject: CN=e5ae1d7272652659390868ac3efe559446a29279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:a5:12:5c:50:37:f2:c5:b6:22:2b:20:99: c3:fe:60:71:0c:53:7d:0f:43:f6:37:8a:1e:0f:bc: 01:57:82:b2:c3:0b:52:0a:32:36:6a:f0:47:a8:f4: 00:cd:b2:54:4d:aa:03:b9:44:6e:5d:ab:72:7d:b2: cb:ab:7d:5e:cd:68:78:f8:f4:a1:1f:55:6a:cf:4c: 22:2c:57:91:b6:9e:74:9a:e2:ec:e7:98:3f:8e:06: ac:20:63:5c:34:0f:61:f1:b6:00:db:cd:26:bc:8d: ea:0e:a7:e8:6b:89:90:73:df:b4:56:5d:44:dd:54: 8c:9a:e1:d7:6b:d3:cd:78:60:2b:c9:15:7f:ba:7e: b8:e1:97:48:90:0b:da:c4:4e:97:d3:2a:b0:f5:3d: 0d:87:db:ac:0b:17:b6:31:e4:de:75:8a:5d:29:c9: a6:af:53:54:9e:a3:50:72:d4:b2:35:e1:2f:48:92: 95:9f:ee:31:84:34:35:d3:80:20:bc:a7:82:9f:44: 0b:2b:ac:e2:3d:9c:cf:74:fe:33:c3:a8:e2:87:50: ba:5e:64:0c:6e:83:7b:9e:2f:ad:0a:28:18:50:6d: dd:d5:f4:72:76:c6:d4:16:6e:61:37:27:17:fa:23: b0:20:f4:52:27:a8:ef:7a:f3:98:ad:d3:d8:b5:c2: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AE:1D:72:72:65:26:59:39:08:68:AC:3E:FE:55:94:46:A2:92:79 X509v3 Authority Key Identifier: keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:7e:ad:66:c5:87:69:83:04:94:23:37:dd:2c:c7:12:31:63: 1f:b2:b9:be:2d:3b:ef:59:cf:03:f1:88:f7:bb:0c:85:42:c2: d3:ef:0e:6e:a7:aa:d0:2f:da:90:7d:fe:f4:46:38:68:e0:09: 4c:9f:61:53:e0:9c:e8:ac:7d:35:d7:78:c1:5e:e3:ff:cd:38: d3:83:bf:04:c0:db:a8:7b:ea:5f:e2:70:c3:c3:c5:c8:0c:0f: e7:38:54:5e:67:4f:49:9e:12:d1:20:f4:2f:34:fd:47:5e:28: 6d:51:38:90:d1:b2:64:09:16:16:42:f1:e4:21:6f:f6:49:78: 8e:e2:37:a3:5f:1f:e0:5f:88:4d:98:f3:f7:88:ed:50:57:5d: a7:49:5f:82:96:eb:c5:fb:78:8c:f4:54:b1:a0:d4:75:31:ab: 7b:3e:6f:a8:b9:85:cd:12:53:47:f0:fd:30:b8:df:36:02:78: 9a:7c:5a:f8:3a:cc:76:56:62:6b:89:88:6e:3a:7a:f1:29:52: 51:b1:c5:b1:37:aa:5d:7b:e8:2d:b5:cb:6a:40:19:c3:5f:f2: c7:7f:fb:cb:79:bf:ba:42:0d:87:f5:61:a6:0b:5d:e4:95:bf: 97:9c:e3:7e:6e:6a:28:c6:d0:eb:14:9c:ea:62:ac:be:97:76: 99:8a:14:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pzpwUAHj71BmtRAYI5pGpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0 N2ZkY2UwHhcNMjYwMzI2MTEwMTM5WhcNMjYwMzI3MTEwMTM5WjAzMTEwLwYDVQQD EyhlNWFlMWQ3MjcyNjUyNjU5MzkwODY4YWMzZWZlNTU5NDQ2YTI5Mjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLmlElxQN/LFtiIrIJnD/mBxDFN9 D0P2N4oeD7wBV4KywwtSCjI2avBHqPQAzbJUTaoDuURuXatyfbLLq31ezWh4+PSh H1Vqz0wiLFeRtp50muLs55g/jgasIGNcNA9h8bYA280mvI3qDqfoa4mQc9+0Vl1E 3VSMmuHXa9PNeGAryRV/un644ZdIkAvaxE6X0yqw9T0Nh9usCxe2MeTedYpdKcmm r1NUnqNQctSyNeEvSJKVn+4xhDQ104AgvKeCn0QLK6ziPZzPdP4zw6jih1C6XmQM boN7ni+tCigYUG3d1fRydsbUFm5hNycX+iOwIPRSJ6jvevOYrdPYtcJJ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWuHXJyZSZZOQhorD7+VZRGopJ5MB8GA1UdIwQY MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt YjczYTM2ZDkzOWIyLzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFH6tZsWH aYMElCM33SzHEjFjH7K5vi0771nPA/GI97sMhULC0+8Obqeq0C/akH3+9EY4aOAJ TJ9hU+Cc6Kx9Ndd4wV7j/80404O/BMDbqHvqX+Jww8PFyAwP5zhUXmdPSZ4S0SD0 LzT9R14obVE4kNGyZAkWFkLx5CFv9kl4juI3o18f4F+ITZjz94jtUFddp0lfgpbr xft4jPRUsaDUdTGrez5vqLmFzRJTR/D9MLjfNgJ4mnxa+DrMdlZia4mIbjp68SlS UbHFsTeqXXvoLbXLakAZw1/yx3/7y3m/ukINh/Vhpgtd5JW/l5zjfm5qKMbQ6xSc 6mKsvpd2mYoUIw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:53:01 2026 by rpki-client