$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: TMwX3qD2SfSoHDC0VJwC0wxMO3XeVWGWatLGJDHcjAw= Subject key identifier: 2C:9C:A4:17:49:46:B8:07:70:74:41:D5:7B:88:45:20:8B:56:39:6C Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 019D26CD1F9F2AFA7BF873D7026A81B5D7AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 1852 Signing time: Wed 25 Mar 2026 21:01:10 +0000 Manifest this update: Wed 25 Mar 2026 21:01:10 +0000 Manifest next update: Thu 26 Mar 2026 21:01:10 +0000 Files and hashes: 1: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: GGCtAWJ9qAGojx7GqO1YjZxd1KXx20QN/ATxk85JQN0=) 2: 6RiDdnednlszc5nfc-ANOJUv2-o.roa (hash: jp3uEswNG4RA6H4G2MDNF+CFUPavRhXT4rfyfKyq6LE=) 3: Ckff1S9rQwDmb1fYOy6uaMvBYaQ.roa (hash: po3/SD3l27xL71DpVgMNbKKZYbb+hPc9NcBH/9yqqcs=) 4: Nu_9r8H3m3GpfJQaXI9Z_gksBSE.roa (hash: A0MtvPieujf5jUqev3piW+xmWcpxjiKiXWnP9KoZX/U=) 5: ObexSGVy696Wkd2DRhwt2_VaBs8.roa (hash: Ly1Ec9X97SiqjYPYhofzign3IKjIwUM2uHbt0VCXmE4=) 6: ObzqjXT5GtzebuI8BcIwPsXaLb8.roa (hash: CxduJ99uKrCwZPdYUZzvhflelo5OchrVkeFU+IICnVU=) 7: Y236QjVhGrl24C2bEpBZTpmsO9g.roa (hash: roo618zomZv/80bpPa5A4SKzRxktEgno100+FqWeWZU=) 8: teSjGmrvY_tu6RkdG_34GiE8KM0.roa (hash: yc8bd5ePK4M8XX+rsAFOZYDdIrq94apPIscjQGUl9lw=) 9: ugVQrwIOiOMJPcA4zFZm9kWmY04.roa (hash: Q8pDB3SA4JzJaHb+up2jkC0do3Kit4mBYGTJ7TNXFRI=) 10: yVNkXVkYAsUkDHmi1iOR26VcPwA.roa (hash: 9IcESbTw/7zUxZn/VITc3/gUtOCZh9x6GgV2B2YugRU=) 11: yWZ-5OdaSQI1LPfjNeNs7tCX608.roa (hash: esuWPq3Xg5U/Su3ABpCWC8pkIxvEw4LQCmVfV8WC2QE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:1f:9f:2a:fa:7b:f8:73:d7:02:6a:81:b5:d7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Mar 25 21:01:10 2026 GMT Not After : Mar 26 21:01:10 2026 GMT Subject: CN=2c9ca4174946b807707441d57b8845208b56396c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:c2:a7:d0:ae:ba:d2:7b:b4:04:f4:34:72: b1:48:25:f5:4a:9a:64:fd:3b:5e:37:cd:f9:45:cd: 4c:2d:8f:01:8d:94:43:5f:5a:89:85:d2:0b:fe:2a: e9:bf:d8:1a:2b:e1:0f:d2:d8:26:74:23:58:2b:9c: 4e:2d:cf:f9:c4:65:5a:e3:9f:51:bf:81:1c:78:a6: 49:57:05:fa:44:30:20:2c:29:2c:8a:57:fe:bf:53: df:ae:bb:bb:5a:83:94:80:8e:cf:50:08:1f:9c:42: 19:3a:81:f3:b9:7a:e1:4b:42:7d:37:40:75:e8:7d: c8:c6:e8:29:4d:45:77:e9:30:4a:82:6c:60:32:79: a8:3c:09:bc:ed:05:ff:e0:18:27:ff:8c:68:b9:04: 59:52:1e:98:d2:53:a3:92:8a:1c:2f:d5:64:b9:bf: 33:04:9e:ca:4c:55:83:f0:50:21:83:ca:93:55:ce: a5:74:14:50:b2:ae:a7:3a:6d:99:6a:04:64:d2:98: c7:6f:26:ec:eb:de:0e:f1:78:ea:16:45:43:58:36: 14:70:b6:04:8a:f1:79:9f:02:ab:25:ef:5f:73:25: 25:13:c8:7b:03:af:ea:ce:c0:c3:68:e8:db:f8:f6: 59:56:bf:ec:88:ed:01:b4:d6:22:ae:b6:79:ec:5a: 31:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9C:A4:17:49:46:B8:07:70:74:41:D5:7B:88:45:20:8B:56:39:6C X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9f:ec:96:33:c1:0d:68:c2:56:c8:d7:9a:2d:ee:ca:61:73: cb:4c:02:bc:72:36:6c:17:87:5f:0c:60:78:a2:7e:11:88:33: 18:d4:2b:32:cc:96:c8:70:21:d3:78:8f:65:ed:d7:d7:85:2d: ca:98:ce:9b:fa:8a:3c:31:ea:2a:9a:a2:81:66:71:a5:17:8f: 24:39:2d:5a:85:b3:05:e9:94:bd:e5:07:3e:42:09:73:95:a3: e3:f5:d3:03:0b:cb:b9:64:29:a1:da:2d:e6:0d:81:cd:04:79: 7e:76:b5:ba:00:62:44:15:00:ab:35:df:23:93:77:e2:42:c9: c9:90:6d:18:5c:c1:ce:b1:f6:eb:5e:92:ce:b5:32:3e:d1:84: cf:f1:96:d3:3f:4e:34:26:2f:d0:2f:fb:ed:aa:df:01:b7:78: 0e:d0:b4:09:5d:dc:33:4e:9c:ef:c5:95:c9:38:45:11:4a:e7: 88:5b:da:55:ec:fa:e0:9e:42:71:72:b7:f4:7e:54:17:37:ba: cc:22:c9:b7:d9:54:c3:8d:97:b2:02:cd:1c:5d:1e:cc:07:e4: 41:af:16:9d:00:51:e7:a9:e1:0e:1e:d3:1b:8a:4f:c9:d3:f6: 79:13:cc:ee:41:84:84:1b:58:83:ca:99:80:b3:e1:3f:50:fb: 6d:66:11:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzR+fKvp7+HPXAmqBtdeqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjYwMzI1MjEwMTEwWhcNMjYwMzI2MjEwMTEwWjAzMTEwLwYDVQQD EygyYzljYTQxNzQ5NDZiODA3NzA3NDQxZDU3Yjg4NDUyMDhiNTYzOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpzCp9CuutJ7tAT0NHKxSCX1Sppk /TteN835Rc1MLY8BjZRDX1qJhdIL/irpv9gaK+EP0tgmdCNYK5xOLc/5xGVa459R v4EceKZJVwX6RDAgLCksilf+v1Pfrru7WoOUgI7PUAgfnEIZOoHzuXrhS0J9N0B1 6H3IxugpTUV36TBKgmxgMnmoPAm87QX/4Bgn/4xouQRZUh6Y0lOjkoocL9Vkub8z BJ7KTFWD8FAhg8qTVc6ldBRQsq6nOm2ZagRk0pjHbybs694O8XjqFkVDWDYUcLYE ivF5nwKrJe9fcyUlE8h7A6/qzsDDaOjb+PZZVr/siO0BtNYirrZ57FoxbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCycpBdJRrgHcHRB1XuIRSCLVjlsMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXp/sljPB DWjCVsjXmi3uymFzy0wCvHI2bBeHXwxgeKJ+EYgzGNQrMsyWyHAh03iPZe3X14Ut ypjOm/qKPDHqKpqigWZxpRePJDktWoWzBemUveUHPkIJc5Wj4/XTAwvLuWQpodot 5g2BzQR5fna1ugBiRBUAqzXfI5N34kLJyZBtGFzBzrH2616SzrUyPtGEz/GW0z9O NCYv0C/77arfAbd4DtC0CV3cM06c78WVyThFEUrniFvaVez64J5CcXK39H5UFze6 zCLJt9lUw42XsgLNHF0ezAfkQa8WnQBR56nhDh7TG4pPydP2eRPM7kGEhBtYg8qZ gLPhP1D7bWYRGg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:26:56 2026 by rpki-client