$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json) Hash identifier: vhqV7kKHCifTtasCkr4Lx2MoyMY33gm3WOLwh9qB+vk= Subject key identifier: 10:86:A5:AD:C5:7D:94:EE:E5:80:61:1B:E7:2D:03:B0:E0:ED:09:F4 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019D29609BFE4882AC4FBBB78067E1FE56EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft Manifest number: 1183 Signing time: Thu 26 Mar 2026 09:01:30 +0000 Manifest this update: Thu 26 Mar 2026 09:01:30 +0000 Manifest next update: Fri 27 Mar 2026 09:01:30 +0000 Files and hashes: 1: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=) 2: AHDv73qMQL9wbDKFTRsjL6r00oQ.roa (hash: AVkBVXP0K0ecnq2H74GPC3d5N3jhZ95iI/h0cjx0eMI=) 3: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: Gv+Xa14Gr0YpIpmHKrlTIntm//Rqbws8Ge1otXPl2IU=) 4: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=) 5: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=) 6: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=) 7: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=) 8: KLI9lQwUC5VTV4Cut0plGC56kr4.roa (hash: rUAMk0OUXXf0cF+q5isqU/kNi2S0D4fL5AOOV6b9LlQ=) 9: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=) 10: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=) 11: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=) 12: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=) 13: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=) 14: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=) 15: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=) 16: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=) 17: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=) 18: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=) 19: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=) 20: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=) 21: qABofJud5u1thFUHFuMgR1s31kI.roa (hash: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=) 22: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=) 23: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=) 24: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=) 25: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (hash: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU=) 26: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:60:9b:fe:48:82:ac:4f:bb:b7:80:67:e1:fe:56:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Mar 26 09:01:30 2026 GMT Not After : Mar 27 09:01:30 2026 GMT Subject: CN=1086a5adc57d94eee580611be72d03b0e0ed09f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:21:ec:1f:67:f1:8b:8a:0b:d3:3e:86:16: 4b:c4:9d:60:be:8a:75:0d:f7:c2:d1:2b:bb:d7:4e: 2c:be:51:0b:b5:97:0a:f4:f7:84:79:bd:32:37:63: 57:47:66:9b:94:ac:3e:08:ad:43:a4:db:6c:c1:62: 8f:7a:16:86:f8:0c:29:9e:0b:25:ac:01:6f:d6:f1: c2:d1:d0:4d:3e:7e:03:04:d2:6e:29:26:d0:13:63: 30:cf:e3:25:05:8a:0e:e1:58:26:01:4b:6d:13:32: 31:1b:05:7d:dd:81:ef:da:a6:1a:7d:92:86:cc:af: 54:f5:d1:90:22:83:46:72:67:c3:5d:f8:80:12:c5: 1d:cc:d1:7c:48:b1:2b:04:81:2a:67:27:27:e2:60: 7b:d6:ba:c6:d0:ee:f1:23:16:91:df:12:d5:40:e3: 9e:50:1c:3b:25:24:80:e4:79:fa:41:4b:5e:3b:2a: b8:6d:0c:35:37:3a:5e:5f:b9:de:b9:df:97:b4:27: 61:7d:cb:d2:b0:62:65:dc:a9:d4:d1:26:3f:8f:03: 54:5a:64:92:c7:f0:f4:98:c0:79:22:2f:60:8f:13: 36:82:cd:e2:7e:b6:f9:dc:01:02:aa:15:06:0f:e4: 1a:b5:97:5e:dd:e3:f6:98:21:b6:59:84:06:6b:93: be:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:86:A5:AD:C5:7D:94:EE:E5:80:61:1B:E7:2D:03:B0:E0:ED:09:F4 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ab:94:5c:c3:96:e2:60:0b:40:dd:7d:6e:1b:94:03:f0:6d: 8b:88:3c:96:be:48:6f:c7:c1:fa:38:2e:85:db:26:b4:c2:a9: 17:69:de:cc:67:60:07:1f:29:1a:70:57:d7:d5:02:b7:80:a9: 38:52:2a:ad:7a:35:6f:fe:a4:2b:b1:11:13:57:f2:06:d0:5d: bb:33:28:57:39:68:13:b3:2f:4f:af:ba:36:a8:d7:39:c5:8e: 00:ff:08:cb:2c:33:95:ca:ad:5a:aa:15:9c:d2:49:a3:0a:5f: d2:eb:1e:30:c8:53:2d:f6:fa:6b:51:ae:aa:b4:3f:f4:1a:db: f3:0b:58:fb:ed:2c:8f:36:6c:21:42:e1:03:c3:07:e0:37:08: 20:ec:95:d3:7d:7c:81:0f:fa:92:b8:76:f5:6d:a0:12:11:33: 46:bb:e0:91:14:02:ff:03:f5:8f:34:25:33:77:4c:67:bf:ee: 16:ab:05:a3:70:42:94:e1:aa:4d:7c:bc:dd:fd:c7:82:9d:d6: 91:06:d7:43:59:6c:65:e1:48:ef:d9:04:11:f3:bf:e0:9f:79: d8:1f:40:bd:ca:4a:b8:36:2d:3a:e1:39:f2:bf:58:ae:9a:55: b3:47:e3:ba:58:76:fe:24:6e:79:ef:11:ac:70:22:ba:26:7b: 67:ca:c3:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pYJv+SIKsT7u3gGfh/lbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMzI2MDkwMTMwWhcNMjYwMzI3MDkwMTMwWjAzMTEwLwYDVQQD EygxMDg2YTVhZGM1N2Q5NGVlZTU4MDYxMWJlNzJkMDNiMGUwZWQwOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF4h7B9n8YuKC9M+hhZLxJ1gvop1 DffC0Su7104svlELtZcK9PeEeb0yN2NXR2ablKw+CK1DpNtswWKPehaG+Awpngsl rAFv1vHC0dBNPn4DBNJuKSbQE2Mwz+MlBYoO4VgmAUttEzIxGwV93YHv2qYafZKG zK9U9dGQIoNGcmfDXfiAEsUdzNF8SLErBIEqZycn4mB71rrG0O7xIxaR3xLVQOOe UBw7JSSA5Hn6QUteOyq4bQw1NzpeX7neud+XtCdhfcvSsGJl3KnU0SY/jwNUWmSS x/D0mMB5Ii9gjxM2gs3ifrb53AECqhUGD+QatZde3eP2mCG2WYQGa5O+OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCGpa3FfZTu5YBhG+ctA7Dg7Qn0MB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6uUXMOW 4mALQN19bhuUA/Bti4g8lr5Ib8fB+jguhdsmtMKpF2nezGdgBx8pGnBX19UCt4Cp OFIqrXo1b/6kK7ERE1fyBtBduzMoVzloE7MvT6+6NqjXOcWOAP8IyywzlcqtWqoV nNJJowpf0useMMhTLfb6a1GuqrQ/9Brb8wtY++0sjzZsIULhA8MH4DcIIOyV0318 gQ/6krh29W2gEhEzRrvgkRQC/wP1jzQlM3dMZ7/uFqsFo3BClOGqTXy83f3Hgp3W kQbXQ1lsZeFI79kEEfO/4J952B9AvcpKuDYtOuE58r9YrppVs0fjulh2/iRuee8R rHAiuiZ7Z8rDiQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:52 2026 by rpki-client