$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: +YWib672IsaTfs6fEOSlDyy6RJc6joKIHZydHz4Uv2c= Subject key identifier: 9D:DA:4A:6A:30:98:C8:21:0C:4E:B0:44:8A:02:54:A6:12:1A:87:3E Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019D26CCCFE779ADB2A889AF489ABCD87E1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1AD6 Signing time: Wed 25 Mar 2026 21:00:49 +0000 Manifest this update: Wed 25 Mar 2026 21:00:49 +0000 Manifest next update: Thu 26 Mar 2026 21:00:49 +0000 Files and hashes: 1: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 2: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 3: B-4Y5enlVk_Sd-7mbbGmudhFVWs.roa (hash: VrFv29MZjRI9WiKBoXLP+DEm/34C4C5KG6TpaM7VLEg=) 4: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 5: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 6: DSmFcc3CMB07sjJqwgYvCDZ71oA.roa (hash: KbPU8Oi7PTcvYEb3lmld7J6qciV9VSvqVrEzwyBTsnw=) 7: FpwdnH1vSeaA9IvOMd_9OlvXF-Q.roa (hash: dR81pd4Z3d3hQtP7AcMh1To0rqIYfbx/ZlCHk7Sp1DE=) 8: JwhseqEU52AOEPBi0chPmCNtUI0.roa (hash: /a2TVrOcM4P+LJSIiJ0JbsH1G/ALY7F0MYP/SRiM7WY=) 9: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 10: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: cKLDUxB0yrKrGMwTcUUxHIWM6Bc9m7uLcweBpeXkJkU=) 11: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 12: QUSad9EfoyydrwUjL6UuKzZIeMg.roa (hash: VHq9puEsGA44rdNujULet4x2g3yNOAEgK6THQ2HkMZQ=) 13: UHXvtX8IMLd4zONKPe_pIM09xQ4.roa (hash: Nr/4kqhxxX7JW0R3yp+WhJP3/Vk86QSnLpWM2aR3Dgk=) 14: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 15: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 16: _Kp7PDTcmGkJiJKewtOccSGpSgs.roa (hash: WM5hEQgIwiPSrdXKA7JsjCjXu6TD5zpoJlxCQduZru4=) 17: aRdn5BZWfdwoWUA8vowIVMkP9FQ.roa (hash: X/fX+ifSBYRhsTHBvZdQhrna5KPFQHlBeLI1OXv4yRk=) 18: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 19: br6ophJ_seKpgle-GRBelvZMVCQ.roa (hash: xvaIA/IEe05JlJTHof0J+fBcnGDDmy2RurdQ52mdItM=) 20: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 21: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 22: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 23: iVHD7VIScc_bmYavlKZJ2ezNKcw.roa (hash: yVV/qMkCECkBEz4uxAU1f+pA2VYLLRt6TM3iu0HQ6aU=) 24: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (hash: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q=) 25: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) 26: zIIfu8DaVVMD0XsvOwpHzYoyB-g.roa (hash: nAFu8qJSmPstdE0SpXNpv/f9vO79bXQFH0mxColfbbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cc:cf:e7:79:ad:b2:a8:89:af:48:9a:bc:d8:7e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Mar 25 21:00:49 2026 GMT Not After : Mar 26 21:00:49 2026 GMT Subject: CN=9dda4a6a3098c8210c4eb0448a0254a6121a873e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cd:07:3e:f9:b5:54:3b:8c:db:4e:4b:3a:1b: 05:a0:81:07:b6:6b:79:22:87:d0:ac:c1:c4:5c:7c: ee:8a:42:0b:bb:ec:81:37:b8:8e:f3:2e:ce:51:ff: f3:de:2c:c5:b5:4b:e9:81:41:00:87:7c:bc:0d:9f: aa:d3:34:98:95:78:d6:52:52:14:56:f1:b1:84:bb: 06:ae:05:2c:37:d7:a6:1b:65:b9:56:a4:fd:22:fa: 3a:16:25:32:f3:38:2b:8e:d9:5f:db:a2:5f:e5:4d: 1f:fe:04:a2:ec:48:2d:ff:2e:da:58:b8:c5:c3:86: 0a:96:a8:c8:7f:ba:71:cf:66:c2:21:92:e8:17:2a: 0c:26:72:a1:ed:37:24:7e:db:35:ef:17:56:15:64: 8b:ea:02:8d:8e:5c:67:83:b4:97:c7:f3:08:30:f1: b8:df:e7:c1:a4:6f:42:19:86:30:2a:66:ce:23:3f: 72:ae:b7:a1:0d:4d:88:d6:c9:ec:53:ed:4d:6f:01: d6:64:bf:b6:f3:42:07:13:8b:d6:ce:89:dd:85:fb: e9:93:16:64:6e:20:85:fd:e3:90:bd:0b:cf:83:2f: a2:f8:33:b5:71:d5:a9:b0:42:11:cd:49:e9:81:a1: 32:5a:05:b1:e9:16:61:78:34:aa:fc:84:b6:b0:f7: de:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DA:4A:6A:30:98:C8:21:0C:4E:B0:44:8A:02:54:A6:12:1A:87:3E X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e2:b7:d8:da:fd:29:64:d6:e1:2e:e6:e1:43:82:52:4b:a6: 54:10:e1:0e:79:58:8f:4f:7d:8f:41:7c:eb:24:87:3b:7d:59: 27:c9:4e:aa:51:7a:0a:f4:8d:50:72:3e:55:46:35:0d:99:75: f4:3b:e5:27:ac:9f:38:9e:b5:52:3d:cc:bd:8f:3b:c8:50:83: 11:c8:32:75:08:bd:27:dd:96:35:56:82:dd:3e:2b:f2:fa:7c: cc:a5:df:f7:96:df:4c:9d:84:f7:96:c7:02:a2:1c:05:a7:35: a3:25:9f:77:f7:13:c2:05:6a:bc:c6:7b:05:7a:52:64:4e:9f: 2e:22:c3:01:05:72:fa:b9:b5:a8:52:99:1c:66:fa:b9:92:97: 20:e3:87:34:80:42:c0:ca:89:e3:83:b9:e7:96:fd:ad:e5:cd: b9:8d:fb:8a:46:37:e2:de:ba:e3:c0:5e:70:d9:69:dc:c5:45: 80:61:43:6c:c8:70:6e:76:d2:7e:47:a7:1a:ae:ee:9b:5a:b0: f9:a9:63:3e:84:c9:4f:6b:4d:a3:e8:07:2e:70:cc:75:00:cb: 04:6a:9d:42:42:a8:f8:e3:47:cd:f8:da:ca:b4:c5:57:21:35: d9:ce:e9:b1:04:54:6b:94:f9:8a:a8:52:f8:fc:69:04:2b:af: c1:b3:70:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzM/nea2yqImvSJq82H4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMzI1MjEwMDQ5WhcNMjYwMzI2MjEwMDQ5WjAzMTEwLwYDVQQD Eyg5ZGRhNGE2YTMwOThjODIxMGM0ZWIwNDQ4YTAyNTRhNjEyMWE4NzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M0HPvm1VDuM205LOhsFoIEHtmt5 IofQrMHEXHzuikILu+yBN7iO8y7OUf/z3izFtUvpgUEAh3y8DZ+q0zSYlXjWUlIU VvGxhLsGrgUsN9emG2W5VqT9Ivo6FiUy8zgrjtlf26Jf5U0f/gSi7Egt/y7aWLjF w4YKlqjIf7pxz2bCIZLoFyoMJnKh7Tckfts17xdWFWSL6gKNjlxng7SXx/MIMPG4 3+fBpG9CGYYwKmbOIz9yrrehDU2I1snsU+1NbwHWZL+280IHE4vWzondhfvpkxZk biCF/eOQvQvPgy+i+DO1cdWpsEIRzUnpgaEyWgWx6RZheDSq/IS2sPferwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3aSmowmMghDE6wRIoCVKYSGoc+MB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOK32Nr9 KWTW4S7m4UOCUkumVBDhDnlYj099j0F86ySHO31ZJ8lOqlF6CvSNUHI+VUY1DZl1 9DvlJ6yfOJ61Uj3MvY87yFCDEcgydQi9J92WNVaC3T4r8vp8zKXf95bfTJ2E95bH AqIcBac1oyWfd/cTwgVqvMZ7BXpSZE6fLiLDAQVy+rm1qFKZHGb6uZKXIOOHNIBC wMqJ44O555b9reXNuY37ikY34t6648BecNlp3MVFgGFDbMhwbnbSfkenGq7um1qw +aljPoTJT2tNo+gHLnDMdQDLBGqdQkKo+ONHzfjayrTFVyE12c7psQRUa5T5iqhS +PxpBCuvwbNwrg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:22:01 2026 by rpki-client