$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: CCQDH2PcNiS9RDkWm0qusu4+gzqWuugiN79YqOWKQnw= Subject key identifier: 0C:F2:DF:B1:C5:1C:1F:6D:A2:92:34:E6:62:5E:3C:5C:FF:8D:BE:53 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019D254CDB0334759C07F99AC3B3DED0CDDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 189B Signing time: Wed 25 Mar 2026 14:01:26 +0000 Manifest this update: Wed 25 Mar 2026 14:01:26 +0000 Manifest next update: Thu 26 Mar 2026 14:01:26 +0000 Files and hashes: 1: 5bw3FxzpBWgCUPFGor6BeS_x13E.roa (hash: vbv6Fyo711z5Y6WllYiF1+hQCuBRfjBj2SnqOdmQ/Ko=) 2: KClfXxgk0wRzsCWY2cBjE-9OUBw.roa (hash: mZTkzVHUlv75y3/sF2jX1yQ3NF8yk3kbKCgMEXnClVc=) 3: OPUmPq2MCSSLajil_N8xjasEED0.roa (hash: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI=) 4: PVZJLc9tODZFqXK-cJmdd7K-baM.roa (hash: nv2FNyj3NvI+l9/bwumlpSj6KXBZJHOiEr8IoIDWWBs=) 5: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (hash: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY=) 6: RTtrcIMD_1Pooh2hybtppswd0Cs.roa (hash: gHzBppcBQRTrZFKZdzTeaIz8G3KIuJKhpm0DEQdKM5o=) 7: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (hash: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI=) 8: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: 4BvP+HTq6KR/lWtFHbpzKPNemlSXK7ZclFtw+EGSRV0=) 9: iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa (hash: Xmy3joGzE7DOFCUoxtKq+8sQb3nS9R29UjEKhSZ9+oA=) 10: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (hash: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM=) 11: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (hash: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4=) 12: vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa (hash: HHDiRi1+BOUzXevtTy1X6aaBtWS9/5nRjSa9y3Tpifg=) 13: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (hash: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 14:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:4c:db:03:34:75:9c:07:f9:9a:c3:b3:de:d0:cd:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Mar 25 14:01:26 2026 GMT Not After : Mar 26 14:01:26 2026 GMT Subject: CN=0cf2dfb1c51c1f6da29234e6625e3c5cff8dbe53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:bc:84:54:83:09:82:b0:55:ae:0d:5b:ea: 11:7a:a8:b5:a1:2c:ef:43:3c:30:2a:10:fc:b6:f2: 7e:27:d0:7a:80:17:d0:5a:68:be:dc:7e:bb:67:14: 5d:a2:1a:f8:1f:20:72:8c:ee:74:55:f9:3f:7d:34: 21:b6:31:39:22:2e:57:b4:43:d7:6e:9c:4b:ef:23: 59:b4:95:7d:98:8d:44:b2:1c:2f:f5:42:44:b9:17: fe:ab:7b:c4:62:e6:90:59:6e:1f:5b:bf:d1:20:d2: 93:ab:bd:a1:71:bc:60:dd:7d:fa:75:34:76:5c:53: 41:09:82:4d:3e:c3:03:05:71:91:f3:a5:4c:7a:96: 1a:6c:be:52:0c:a4:86:a6:d8:1f:87:c7:62:45:3c: 7b:31:20:c9:cb:ae:d0:20:4a:92:a0:9d:15:25:65: 3f:50:1c:71:4d:e4:84:a2:c3:ef:3c:f7:26:d5:ba: fc:79:77:56:ed:6c:68:c4:74:51:a7:94:af:a7:d6: d9:6e:35:e7:a0:fc:c6:da:16:5d:d5:4f:55:db:05: a7:dd:0b:ee:dd:78:3b:f0:aa:4b:15:fe:1b:92:ed: 2d:e1:bd:78:00:7f:ec:82:55:47:16:b4:cf:b8:0e: 27:de:af:b5:4a:a8:42:23:6c:2c:5e:a0:08:1c:7f: e0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F2:DF:B1:C5:1C:1F:6D:A2:92:34:E6:62:5E:3C:5C:FF:8D:BE:53 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:18:a3:2e:01:4b:49:8a:06:9c:6d:81:f1:64:05:57:41:7c: 99:72:5d:1f:12:f8:29:e5:91:e1:65:26:80:82:b2:6c:8b:fd: 84:0c:b5:95:72:d1:4e:b2:63:6c:01:a6:aa:4f:2f:b4:82:1a: 58:65:52:69:6f:ff:1a:ea:40:6f:6c:54:e9:2c:cf:c1:86:fa: 63:70:1e:52:8d:4e:f3:ad:bb:3d:61:00:25:3c:36:62:46:80: ff:db:c7:35:01:23:c2:a2:85:71:fd:03:9e:4f:fc:b0:5b:b8: 0a:62:98:bc:88:f4:0e:e6:a2:22:4f:b0:64:b3:bd:f5:24:87: 4e:26:b7:9c:3c:08:81:00:59:ca:86:eb:08:bb:08:25:af:99: 30:f9:86:e6:5a:aa:12:6c:31:89:62:ac:30:b6:b0:4d:a4:fb: 01:9e:4a:fc:c7:95:da:eb:b8:93:da:da:89:e5:0d:f9:7d:49: 96:ca:74:4a:5f:03:76:48:f1:3f:72:72:ba:34:01:ea:92:50: 1e:5c:1e:58:df:b6:58:e0:7a:c6:e7:71:0e:7f:5a:ab:ff:40: f0:57:79:a4:49:36:4c:e7:cc:bb:90:68:87:89:57:5c:6f:6a: 4a:2c:81:3a:0b:87:8a:48:41:d8:1e:d9:b1:b5:70:03:bd:ff: 12:1e:b8:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lTNsDNHWcB/maw7Pe0M3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwMzI1MTQwMTI2WhcNMjYwMzI2MTQwMTI2WjAzMTEwLwYDVQQD EygwY2YyZGZiMWM1MWMxZjZkYTI5MjM0ZTY2MjVlM2M1Y2ZmOGRiZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxme8hFSDCYKwVa4NW+oReqi1oSzv QzwwKhD8tvJ+J9B6gBfQWmi+3H67ZxRdohr4HyByjO50Vfk/fTQhtjE5Ii5XtEPX bpxL7yNZtJV9mI1Eshwv9UJEuRf+q3vEYuaQWW4fW7/RINKTq72hcbxg3X36dTR2 XFNBCYJNPsMDBXGR86VMepYabL5SDKSGptgfh8diRTx7MSDJy67QIEqSoJ0VJWU/ UBxxTeSEosPvPPcm1br8eXdW7WxoxHRRp5Svp9bZbjXnoPzG2hZd1U9V2wWn3Qvu 3Xg78KpLFf4bku0t4b14AH/sglVHFrTPuA4n3q+1SqhCI2wsXqAIHH/gHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzy37HFHB9topI05mJePFz/jb5TMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBijLgFL SYoGnG2B8WQFV0F8mXJdHxL4KeWR4WUmgIKybIv9hAy1lXLRTrJjbAGmqk8vtIIa WGVSaW//GupAb2xU6SzPwYb6Y3AeUo1O8627PWEAJTw2YkaA/9vHNQEjwqKFcf0D nk/8sFu4CmKYvIj0DuaiIk+wZLO99SSHTia3nDwIgQBZyobrCLsIJa+ZMPmG5lqq EmwxiWKsMLawTaT7AZ5K/MeV2uu4k9raieUN+X1Jlsp0Sl8DdkjxP3JyujQB6pJQ HlweWN+2WOB6xudxDn9aq/9A8Fd5pEk2TOfMu5Boh4lXXG9qSiyBOguHikhB2B7Z sbVwA73/Eh64Pg== -----END CERTIFICATE-----Generated at Wed Mar 25 21:25:52 2026 by rpki-client