$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: WN0TPbXqYQdS7KPhWQIlzLrz34PC8kdkmVsr9IHRP+8= Subject key identifier: 0B:0D:38:5F:39:55:82:DC:EA:C5:A3:3C:F8:17:04:CF:DB:AA:F0:53 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019D28BBBDC6BD890ECDABC734739C0334C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 1896 Signing time: Thu 26 Mar 2026 06:01:25 +0000 Manifest this update: Thu 26 Mar 2026 06:01:25 +0000 Manifest next update: Fri 27 Mar 2026 06:01:25 +0000 Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=) 2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=) 3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=) 4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=) 5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=) 6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=) 7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=) 8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=) 9: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=) 10: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=) 11: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=) 12: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=) 13: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=) 14: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=) 15: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=) 16: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=) 17: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=) 18: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=) 19: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=) 20: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=) 21: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=) 22: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=) 23: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: TA6ps/6zEpPTFbF39tQAZJ2y8lgaDuF2GowOVslys9s=) 24: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=) 25: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=) 26: z5014MFfxmYQTm_qnLF3yXwV-3I.roa (hash: 7VbwY0J0VcsEt+trFtXcwclY4yBnf//EolgJB0xn4Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:bb:bd:c6:bd:89:0e:cd:ab:c7:34:73:9c:03:34:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Mar 26 06:01:25 2026 GMT Not After : Mar 27 06:01:25 2026 GMT Subject: CN=0b0d385f395582dceac5a33cf81704cfdbaaf053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:82:c2:c7:3d:74:89:86:f2:3c:44:ba:01: 79:e0:da:2c:4c:12:5d:b1:0d:85:46:50:8a:2e:79: 54:dc:de:a6:26:3d:d7:0e:bc:14:bb:78:8f:1b:04: 8a:c1:f9:e6:8c:88:9c:e3:1b:ca:51:cd:cf:94:6d: 88:2c:31:cc:43:11:66:e3:ad:5d:72:18:f7:e3:c0: 41:cd:19:11:8f:29:31:06:05:d5:e9:63:67:53:d6: 21:0d:bb:27:cc:60:cf:19:9a:73:f7:9b:04:1f:59: 87:06:2a:d4:ce:3f:36:1c:5b:29:fd:9d:9f:51:37: 77:4b:f8:6b:62:bd:34:60:4c:8a:4c:31:70:a9:01: 13:83:ad:d8:53:d2:18:0c:24:d1:76:92:21:7d:f2: f8:6f:04:44:9f:0c:4a:01:05:ff:11:28:82:f1:b9: 19:9a:09:f5:05:f0:3e:30:a2:24:5f:92:65:bf:dc: ce:99:30:e9:a2:85:0f:3a:88:3d:ca:68:e0:5c:59: 10:d2:f9:87:91:11:c9:43:ef:f7:fe:10:27:8d:0d: 8c:ab:55:22:7d:34:80:d6:28:e0:9f:1a:ae:df:aa: 39:34:7d:62:8c:65:07:42:36:65:0e:8a:9d:e0:87: 4f:04:91:95:ec:6d:76:68:b6:eb:0c:a9:9f:58:4d: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0D:38:5F:39:55:82:DC:EA:C5:A3:3C:F8:17:04:CF:DB:AA:F0:53 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:8f:6e:99:35:a7:a4:0b:64:58:5f:a9:a4:32:e6:85:5e:72: bc:bf:25:cb:2e:88:84:43:fb:99:72:43:e4:2a:73:8d:a4:2c: c1:3a:93:b6:f8:8b:04:13:81:f5:e8:31:28:6d:8b:3c:d9:00: 14:8b:91:93:2d:22:96:a4:15:82:17:c1:3a:ec:b5:3f:44:9b: c3:4c:70:42:1e:51:fc:33:66:dc:38:94:4b:a1:d0:b8:26:36: da:d2:2c:e2:91:48:69:5a:90:b1:4e:6b:80:27:a3:81:53:fa: fa:b6:95:80:5c:65:fb:79:2d:ed:cc:9e:0c:91:57:4a:5e:b8: 52:03:a9:ed:62:4e:ae:6b:b8:13:9a:b4:3b:81:3d:9c:be:a3: 8f:cf:64:54:9c:49:0b:a6:87:cb:1d:c2:d5:b9:8b:bf:51:4c: a4:fe:89:9d:50:8d:9e:34:d3:2c:5a:67:0b:02:69:04:54:d8: e9:7b:7a:37:59:65:8f:15:7b:50:cc:5b:6d:50:0c:07:44:0f: bd:61:01:57:25:98:05:69:5e:de:ad:30:df:d7:43:2c:d3:cf: 84:56:15:5b:8e:51:04:2d:3d:54:29:67:3b:76:1a:bb:63:49: 0a:85:e5:d6:36:37:9c:0a:5f:f5:61:58:79:a8:5d:ec:62:bd: 72:bb:0d:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ou73GvYkOzavHNHOcAzTGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMzI2MDYwMTI1WhcNMjYwMzI3MDYwMTI1WjAzMTEwLwYDVQQD EygwYjBkMzg1ZjM5NTU4MmRjZWFjNWEzM2NmODE3MDRjZmRiYWFmMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+iCwsc9dImG8jxEugF54NosTBJd sQ2FRlCKLnlU3N6mJj3XDrwUu3iPGwSKwfnmjIic4xvKUc3PlG2ILDHMQxFm461d chj348BBzRkRjykxBgXV6WNnU9YhDbsnzGDPGZpz95sEH1mHBirUzj82HFsp/Z2f UTd3S/hrYr00YEyKTDFwqQETg63YU9IYDCTRdpIhffL4bwREnwxKAQX/ESiC8bkZ mgn1BfA+MKIkX5Jlv9zOmTDpooUPOog9ymjgXFkQ0vmHkRHJQ+/3/hAnjQ2Mq1Ui fTSA1ijgnxqu36o5NH1ijGUHQjZlDoqd4IdPBJGV7G12aLbrDKmfWE1PkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsNOF85VYLc6sWjPPgXBM/bqvBTMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY49umTWn pAtkWF+ppDLmhV5yvL8lyy6IhEP7mXJD5CpzjaQswTqTtviLBBOB9egxKG2LPNkA FIuRky0ilqQVghfBOuy1P0Sbw0xwQh5R/DNm3DiUS6HQuCY22tIs4pFIaVqQsU5r gCejgVP6+raVgFxl+3kt7cyeDJFXSl64UgOp7WJOrmu4E5q0O4E9nL6jj89kVJxJ C6aHyx3C1bmLv1FMpP6JnVCNnjTTLFpnCwJpBFTY6Xt6N1lljxV7UMxbbVAMB0QP vWEBVyWYBWle3q0w39dDLNPPhFYVW45RBC09VClnO3Yau2NJCoXl1jY3nApf9WFY eahd7GK9crsNAg== -----END CERTIFICATE-----Generated at Thu Mar 26 13:02:20 2026 by rpki-client