$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft File: g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft (raw, json) Hash identifier: i+a1ZptV45xnBk3xIxEhzBMaG3r2hCkzRCgJddV47oM= Subject key identifier: 7C:D7:AD:42:B5:34:0B:BB:67:A6:3B:A3:D6:89:B9:81:0D:D9:67:53 Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Certificate serial: 019D29CE9F2A4519F3681FB352ECDACE83A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft Manifest number: 0BF2 Signing time: Thu 26 Mar 2026 11:01:40 +0000 Manifest this update: Thu 26 Mar 2026 11:01:40 +0000 Manifest next update: Fri 27 Mar 2026 11:01:40 +0000 Files and hashes: 1: 1o8rc1B2rz8EJdbZ3z6LILHJGLM.roa (hash: RgVkOLGuQmy3f1VaDolVM/xuPM7B5/Thq2bqgQQQ5KI=) 2: 9CiYOh3Tvo2DBfl0jabQvFLWLFc.roa (hash: 43nWzmq/RjcNjuxCi4y1M8IbSxUCfohc5YoCfDEycLQ=) 3: MwBfnIeh4icyMtphU38ylCMXamk.roa (hash: CEXyVLtqmaHwpYLSDbPmPnIa3IY69NeBED7KXP3ze6c=) 4: ezYsw2_e3R9NDcGghu9oCFEJ53c.roa (hash: 2lry/rf4POpaKlgjomChorPFhc51fpzfavcz/xLZEo0=) 5: g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl (hash: 18nC3Vq3tzU7ooCkqDmbrShqDOlzMBYOqaTXaYT9W94=) 6: kdEPUuQDUI6I6jbSpPW6P-kkOuA.roa (hash: zinbJQSjE4KwqubnM0+SQjc1EG+tlbXwWx2ZhYd6qEA=) 7: n94KenbJMH70fjR1rrFahdY8U34.roa (hash: yP/yPEDoYrtpaNUeRocAKawwYPvsmMlpzOFnFwFc4BQ=) 8: q5kphRSAlG3DN63C9RqhU3DMVds.roa (hash: VfvnDEZYHd7dijCx60k38qn3Wzq30eQaAO0QQVJTt/4=) 9: qbbxFuzSkULQOBICM7rqsaqrwu4.roa (hash: hvKhotK2pMOwPjulJduMi4iCjCSu8N/+Goyf1aqun7Y=) 10: sNj_laiOcAyx4yKKoT5eo1FxYbQ.roa (hash: MfbxVfKPhfU7+vz/KhDXRG39RyplbnNlSLuWA903WKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:ce:9f:2a:45:19:f3:68:1f:b3:52:ec:da:ce:83:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Validity Not Before: Mar 26 11:01:40 2026 GMT Not After : Mar 27 11:01:40 2026 GMT Subject: CN=7cd7ad42b5340bbb67a63ba3d689b9810dd96753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:d8:12:05:6a:89:f0:07:8e:43:96:ef:e9: 2c:92:af:3b:59:7a:be:65:fe:9e:9e:29:06:ad:a6: c5:c9:f8:0d:6e:f3:97:64:f8:05:ae:0d:df:84:cb: f6:14:f0:32:c7:e0:a7:b5:1f:91:5e:a7:f0:a6:8b: 0d:44:d9:f1:08:d8:0a:23:bf:c8:2b:19:3a:57:71: 2f:b7:20:a3:84:1c:8c:e7:3d:54:a5:ad:ff:64:30: 85:9a:93:5c:ab:d6:4f:ec:a4:9f:4c:a1:09:7e:f7: fd:22:7b:cd:75:f5:ac:2a:99:13:b0:6e:52:84:0b: b1:c0:5a:77:bc:e5:a8:c6:4f:3c:17:4f:ce:33:35: 36:f9:fa:65:2b:ca:60:42:d6:1d:1b:d8:71:16:1a: bd:25:1b:aa:24:04:87:32:d6:37:57:87:37:4a:f7: 0d:a3:7f:c0:33:1f:06:ac:53:2f:1e:5c:84:5f:92: 15:05:4f:18:78:18:af:99:16:b7:2d:b3:51:10:3e: 68:11:23:3b:66:ad:44:60:d6:6a:2d:4c:0e:3c:63: c1:00:73:2f:16:e6:97:73:2d:f8:00:e8:0a:da:b3: 4c:8d:72:e5:bf:4e:04:41:94:3c:bf:48:1e:fd:c0: 07:5d:43:49:b4:22:fb:fe:ae:1e:12:aa:6c:82:7f: c9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D7:AD:42:B5:34:0B:BB:67:A6:3B:A3:D6:89:B9:81:0D:D9:67:53 X509v3 Authority Key Identifier: keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:45:3d:c5:c1:63:a5:32:96:9f:d1:a5:a8:78:fc:02:62:c7: da:89:f1:69:8a:0c:90:4b:51:a4:be:a6:eb:ea:0b:bd:95:ac: a9:dc:3b:c9:92:61:40:be:94:17:81:d1:3a:ad:f2:2f:08:aa: e5:55:98:75:89:84:13:60:9b:2e:b3:48:72:46:b2:67:ab:c7: 52:0a:1f:a9:c8:41:73:c6:7d:d4:27:60:68:ce:42:46:f9:86: 72:2c:34:fb:54:cb:38:98:be:ec:f0:61:55:50:26:7a:95:2c: cf:b2:5a:f3:48:08:76:c9:63:8d:4f:ff:f7:c8:b6:11:ee:03: a1:1e:52:bd:f2:b7:e3:f5:82:a3:c7:8a:36:c8:2c:94:b8:9b: 9c:d0:eb:f8:84:06:f9:96:6f:0f:a4:1e:1a:26:c0:6a:db:06: 6a:9a:5c:96:df:19:c4:6a:f2:38:e0:08:8b:b1:21:95:c6:91: 8b:a6:83:e5:d7:7c:69:de:7d:cf:2f:65:c6:eb:d8:5a:aa:0d: 9a:2a:26:37:36:48:bc:78:82:0d:0d:76:d9:22:c8:aa:2a:33: 04:0b:4b:67:88:63:fe:24:3e:a5:4b:31:0a:4c:1f:71:0d:ca: 0f:7b:00:02:4f:b2:8a:30:09:05:7f:de:86:80:39:4a:7d:ac: d3:d8:93:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pzp8qRRnzaB+zUuzazoOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZjM2YjBhZGVlNmNiNTUxODc2M2I1YmM4ZWFhM2Q0MWYy M2U5MzgwHhcNMjYwMzI2MTEwMTQwWhcNMjYwMzI3MTEwMTQwWjAzMTEwLwYDVQQD Eyg3Y2Q3YWQ0MmI1MzQwYmJiNjdhNjNiYTNkNjg5Yjk4MTBkZDk2NzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XPYEgVqifAHjkOW7+kskq87WXq+ Zf6enikGrabFyfgNbvOXZPgFrg3fhMv2FPAyx+CntR+RXqfwposNRNnxCNgKI7/I Kxk6V3EvtyCjhByM5z1Upa3/ZDCFmpNcq9ZP7KSfTKEJfvf9InvNdfWsKpkTsG5S hAuxwFp3vOWoxk88F0/OMzU2+fplK8pgQtYdG9hxFhq9JRuqJASHMtY3V4c3SvcN o3/AMx8GrFMvHlyEX5IVBU8YeBivmRa3LbNRED5oESM7Zq1EYNZqLUwOPGPBAHMv FuaXcy34AOgK2rNMjXLlv04EQZQ8v0ge/cAHXUNJtCL7/q4eEqpsgn/JFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzXrUK1NAu7Z6Y7o9aJuYEN2WdTMB8GA1UdIwQY MBaAFIPzawre5stVGHY7W8jqo9QfI+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGIt YWY2NGYzZmEyNDU5LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGItYWY2NGYzZmEyNDU5 LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEU9xcFj pTKWn9GlqHj8AmLH2onxaYoMkEtRpL6m6+oLvZWsqdw7yZJhQL6UF4HROq3yLwiq 5VWYdYmEE2CbLrNIckayZ6vHUgofqchBc8Z91CdgaM5CRvmGciw0+1TLOJi+7PBh VVAmepUsz7Ja80gIdsljjU//98i2Ee4DoR5SvfK34/WCo8eKNsgslLibnNDr+IQG +ZZvD6QeGibAatsGappclt8ZxGryOOAIi7EhlcaRi6aD5dd8ad59zy9lxuvYWqoN miomNzZIvHiCDQ122SLIqiozBAtLZ4hj/iQ+pUsxCkwfcQ3KD3sAAk+yijAJBX/e hoA5Sn2s09iTgw== -----END CERTIFICATE-----Generated at Thu Mar 26 17:56:48 2026 by rpki-client