$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft File: 9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json) Hash identifier: 2Uf+wLcus8vSQ7gIDGKEnq0kcYiut5s8ZD1BV1xhAjw= Subject key identifier: 6D:DA:20:A6:D6:08:19:E1:21:C9:B9:9E:AA:C5:A3:DE:D6:F9:D0:A3 Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Certificate serial: 019D277215B676DD2C82DCF91C9A23686079 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft Manifest number: 0EA8 Signing time: Thu 26 Mar 2026 00:01:21 +0000 Manifest this update: Thu 26 Mar 2026 00:01:21 +0000 Manifest next update: Fri 27 Mar 2026 00:01:21 +0000 Files and hashes: 1: 1-TEmL5jbsK3PrKD8j52WhCZ0qeI.roa (hash: VGXlZbSa6lTTDzWoioV4bwS7txIXqiiihar6C8uT+sc=) 2: 7C0V1hBB2j4Z0mWBIUgnztA_FKo.roa (hash: NHdUGwrw8MVcwcj4xNyKJAEIGlAjm+SSRTtlFS7q5aU=) 3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: uBX7vekmKOk6dK3vN5VJ7HL52XPdKRWybHLDb+jadIE=) 4: DcE-uEXszb5ayDTueYLPblzewrc.roa (hash: WBQTxgPKlUiSMhQCjL0lfoGz2y68CFK39DGZphxj/FM=) 5: DvDmZHxr7NLVC2ShFbjqDWMVPSU.roa (hash: HGxEJ7LQfFiHhcT+DYcnCzFrTwYKp05D1m1E5DMnD6I=) 6: RZj6Q6dbNwuwz_b4LiYbYjt7s0Q.roa (hash: rZ5431yDGBLhE9MGa187xIN7yECgb8/EV3ZIyUsR8Xg=) 7: WSPBUC21vET1uaZZlnbFvCFRchE.roa (hash: 3N3I5TdJSWNVy1VYKwR1h9RK2xmp3aVZDnmQUt1fbBg=) 8: WzC3ng1LgvNoGeAWK-E4mAth79c.roa (hash: in7OVP806sec7BG3P2bRg0+XxW/GuztBYg8LKPCWtFc=) 9: b-KOOCgewsVhwidcvQfpRRWqU7I.roa (hash: X+AfcL5bK9mDooKI7JczwqJxSPkb+6057fPwNRB9rIo=) 10: sp7cckHOAVZ1urLLSuO5BmgV-dQ.roa (hash: YprGBhX6AZyr1/u6kF21WaMH+OCGQvlx5wwg1Z8Rfhk=) 11: ychIJ2QPcZlZoWi9AtRiqbIeEes.roa (hash: Hs1swYEG/DTaRK/PwknMDVO6VvDFcV2evpuVVIze/ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:15:b6:76:dd:2c:82:dc:f9:1c:9a:23:68:60:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Validity Not Before: Mar 26 00:01:21 2026 GMT Not After : Mar 27 00:01:21 2026 GMT Subject: CN=6dda20a6d60819e121c9b99eaac5a3ded6f9d0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:46:e7:ad:60:97:2b:38:b1:b1:6e:e9:90: d1:d7:f1:da:7e:dc:5b:94:1e:94:c2:35:84:b5:7b: 5a:5d:85:0e:04:06:5f:58:8a:f7:18:e9:08:64:f0: 84:58:a6:62:bd:cc:d0:a5:05:a6:06:5c:54:53:77: 13:5e:d5:76:c5:49:ab:9d:3f:20:13:b8:63:38:22: cb:cd:3b:9c:6a:22:a2:b3:96:bc:4c:b8:4a:9c:da: 9d:65:2f:d4:7e:ec:b4:2e:b7:48:6a:4d:ee:f1:e2: 29:9c:fe:9a:69:da:8a:82:96:f3:98:42:a4:f6:ab: b8:31:99:40:69:55:40:76:c7:b2:93:ea:0b:57:27: 2a:da:c1:81:8a:ed:51:cb:c0:9f:4c:18:ba:2a:e7: 55:b7:4e:f9:dd:df:43:6f:c3:ec:6c:3b:67:8e:26: a0:36:7a:ff:d5:ba:5d:8a:ad:14:85:cc:01:b7:20: a7:9a:9d:c1:e5:06:6b:2c:b0:ab:00:44:92:26:17: 68:e9:41:86:27:53:de:a0:15:56:db:06:bc:e1:e9: 72:b3:0b:18:0d:44:85:61:5a:4f:f1:29:8d:01:f0: 6b:a8:6d:16:f3:a2:36:8c:8b:37:bf:e9:24:2c:c4: fd:ad:43:a4:1c:a0:15:01:d0:e1:1e:fd:e1:b4:c6: 92:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DA:20:A6:D6:08:19:E1:21:C9:B9:9E:AA:C5:A3:DE:D6:F9:D0:A3 X509v3 Authority Key Identifier: keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:18:4b:09:13:92:39:d5:1d:75:06:21:87:f0:d3:84:f7:61: 29:dd:fe:58:c2:fa:cb:2f:06:c0:0f:8d:fe:e7:0d:33:4e:cb: e2:39:a6:88:80:91:37:3e:94:9e:3b:0c:e9:82:cd:36:f3:dd: c6:91:ee:43:b4:5d:c0:e0:ea:42:76:cc:55:7f:43:c0:c7:e7: f5:0d:99:c2:d9:80:1f:8d:6b:19:9b:d3:82:85:da:fa:9e:01: cc:90:a1:d7:a9:9c:04:2f:cc:1a:4f:2b:96:b5:6b:63:7b:6e: 02:c8:f1:1e:10:aa:12:c2:9b:db:ff:43:2c:e5:3e:58:0f:cf: 88:d9:99:43:18:9c:08:1a:54:ce:d7:34:22:e0:ba:07:a5:eb: d4:04:02:b7:99:54:ab:54:af:20:f7:e4:e1:9a:8c:78:2d:23: ff:3e:23:fa:fc:5c:77:c8:36:ac:6d:7e:1c:7f:51:24:33:68: b8:bf:67:c4:31:38:42:e9:36:7b:56:fe:a2:96:34:3a:50:fc: b8:b2:df:42:e6:9c:b0:4b:40:5c:94:d3:24:9b:92:44:bb:a7: 9f:c6:c4:d8:73:5a:93:54:1f:e8:39:73:34:ac:6e:62:d1:b7: 47:3a:30:f8:c8:e8:0a:a5:5f:12:67:93:63:42:a6:21:60:35: e4:a4:5a:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nchW2dt0sgtz5HJojaGB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1 ODg4MjcwHhcNMjYwMzI2MDAwMTIxWhcNMjYwMzI3MDAwMTIxWjAzMTEwLwYDVQQD Eyg2ZGRhMjBhNmQ2MDgxOWUxMjFjOWI5OWVhYWM1YTNkZWQ2ZjlkMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5BG561glys4sbFu6ZDR1/Haftxb lB6UwjWEtXtaXYUOBAZfWIr3GOkIZPCEWKZivczQpQWmBlxUU3cTXtV2xUmrnT8g E7hjOCLLzTucaiKis5a8TLhKnNqdZS/Ufuy0LrdIak3u8eIpnP6aadqKgpbzmEKk 9qu4MZlAaVVAdseyk+oLVycq2sGBiu1Ry8CfTBi6KudVt0753d9Db8PsbDtnjiag Nnr/1bpdiq0UhcwBtyCnmp3B5QZrLLCrAESSJhdo6UGGJ1PeoBVW2wa84elyswsY DUSFYVpP8SmNAfBrqG0W86I2jIs3v+kkLMT9rUOkHKAVAdDhHv3htMaS/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3aIKbWCBnhIcm5nqrFo97W+dCjMB8GA1UdIwQY MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct OGNmNDFjYWZkY2UyLzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsRhLCROS OdUddQYhh/DThPdhKd3+WML6yy8GwA+N/ucNM07L4jmmiICRNz6UnjsM6YLNNvPd xpHuQ7RdwODqQnbMVX9DwMfn9Q2ZwtmAH41rGZvTgoXa+p4BzJCh16mcBC/MGk8r lrVrY3tuAsjxHhCqEsKb2/9DLOU+WA/PiNmZQxicCBpUztc0IuC6B6Xr1AQCt5lU q1SvIPfk4ZqMeC0j/z4j+vxcd8g2rG1+HH9RJDNouL9nxDE4Quk2e1b+opY0OlD8 uLLfQuacsEtAXJTTJJuSRLunn8bE2HNak1Qf6DlzNKxuYtG3Rzow+MjoCqVfEmeT Y0KmIWA15KRaVg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:42:40 2026 by rpki-client