$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: UBScdXfoy379+x2/82mOO8A/4xlrx9wLhX9wMRrETmU= Subject key identifier: A2:98:85:36:3C:26:9C:72:36:75:B9:4D:15:07:D6:8E:EC:67:1E:C3 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019D26CD84CC357C1A04ADABA511475DFA8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 15AB Signing time: Wed 25 Mar 2026 21:01:36 +0000 Manifest this update: Wed 25 Mar 2026 21:01:36 +0000 Manifest next update: Thu 26 Mar 2026 21:01:36 +0000 Files and hashes: 1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=) 2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=) 3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=) 4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=) 5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=) 6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=) 7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=) 8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=) 9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: ESVgALGgrMQY3Sb/OnmHOYh+GpJCMMAPRWoSbMnv+Ks=) 10: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=) 11: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=) 12: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=) 13: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=) 14: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=) 15: y8jNpNhJhN8HEtdIA-w7AJf_i5Q.roa (hash: 8sIOOrWgw4Q4JWzlfJJ/cqOkQmwBNx1SNCCheRpOVMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:84:cc:35:7c:1a:04:ad:ab:a5:11:47:5d:fa:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Mar 25 21:01:36 2026 GMT Not After : Mar 26 21:01:36 2026 GMT Subject: CN=a29885363c269c723675b94d1507d68eec671ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:b0:bf:f1:63:1f:c8:a3:f5:08:60:a6:c0: 0e:e2:c9:17:2d:c3:b4:c4:44:0e:fd:9f:89:a3:99: 2f:ca:40:32:3f:90:72:57:75:06:7e:46:f2:2f:c9: 5c:6e:cd:c7:80:59:09:d8:74:8c:b5:fa:88:8c:c8: 20:cf:3c:9e:43:f2:62:e8:60:d7:96:4c:62:52:04: b6:79:83:69:27:ed:7a:f9:80:62:8d:49:eb:9e:22: 7a:8e:df:7b:35:87:97:da:6a:5b:59:d9:a7:35:fc: 1e:d7:1a:a2:12:9b:b3:c7:d1:21:46:90:fd:1e:b9: 4f:0e:67:86:aa:c8:92:ba:d3:c5:57:3f:88:29:1e: 65:d1:3e:35:87:2f:d2:2f:41:82:be:a9:ed:0c:3e: 65:3b:4f:2b:23:b4:b2:db:e4:92:50:f5:d1:84:cc: 20:c1:9e:7b:18:6d:89:84:d9:11:4d:78:42:2b:fb: 48:14:48:10:2c:06:98:fa:3b:44:fd:7f:90:1c:c1: cb:a6:cc:43:56:d1:7a:24:30:aa:b5:96:f6:f4:3a: 80:a0:54:b4:9c:d7:ce:37:e8:34:02:aa:7b:6b:9c: 6e:48:92:6a:d8:ef:7a:ff:eb:c8:7f:2c:ce:0a:8e: 49:e4:48:ab:8f:04:b4:a7:52:57:9f:b5:ba:a0:bc: 19:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:98:85:36:3C:26:9C:72:36:75:B9:4D:15:07:D6:8E:EC:67:1E:C3 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:aa:63:08:96:e7:8a:72:9b:05:fc:fb:04:40:d2:e8:a5:ea: a2:14:0a:c0:86:ac:8a:a8:3d:cf:b4:5b:4a:e7:82:a8:fd:7d: 9d:89:b0:7c:9c:b7:82:10:1e:51:60:e9:08:e0:a7:9e:f1:d3: 6d:b4:e3:f2:45:3e:94:bc:83:a7:1d:a0:16:d8:2f:40:33:dd: f9:c9:9c:8c:ab:eb:39:70:ca:c1:4c:c7:12:50:8f:23:77:75: 20:72:af:af:b0:94:a1:aa:0d:7c:21:06:dc:55:2e:e8:f5:26: 63:38:10:55:ce:0a:d0:f1:5d:42:26:7c:4d:4b:31:0a:f7:89: e4:d8:92:a2:59:19:fb:2d:83:03:11:97:64:a6:d9:b6:ae:32: 6b:20:2f:3e:87:26:d7:e7:e5:6e:78:b6:5b:07:ae:3a:4d:83: a8:d1:a5:6c:08:b6:28:d9:e9:12:48:9a:06:a6:9e:c2:0a:c3: 07:19:58:a7:bc:a0:14:4a:da:55:e9:ee:cf:e1:ab:ca:ba:76: 72:c6:1f:01:fd:09:d8:48:f9:dd:96:04:98:8f:02:c0:c4:17: 69:56:20:45:09:48:86:75:43:35:4d:d5:94:b8:39:15:4e:5d: 01:ea:6a:e5:ff:1e:6c:a9:bb:39:75:eb:04:67:8c:7a:6e:64: 8b:04:4b:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzYTMNXwaBK2rpRFHXfqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwMzI1MjEwMTM2WhcNMjYwMzI2MjEwMTM2WjAzMTEwLwYDVQQD EyhhMjk4ODUzNjNjMjY5YzcyMzY3NWI5NGQxNTA3ZDY4ZWVjNjcxZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkawv/FjH8ij9QhgpsAO4skXLcO0 xEQO/Z+Jo5kvykAyP5ByV3UGfkbyL8lcbs3HgFkJ2HSMtfqIjMggzzyeQ/Ji6GDX lkxiUgS2eYNpJ+16+YBijUnrniJ6jt97NYeX2mpbWdmnNfwe1xqiEpuzx9EhRpD9 HrlPDmeGqsiSutPFVz+IKR5l0T41hy/SL0GCvqntDD5lO08rI7Sy2+SSUPXRhMwg wZ57GG2JhNkRTXhCK/tIFEgQLAaY+jtE/X+QHMHLpsxDVtF6JDCqtZb29DqAoFS0 nNfON+g0Aqp7a5xuSJJq2O96/+vIfyzOCo5J5EirjwS0p1JXn7W6oLwZnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKYhTY8JpxyNnW5TRUH1o7sZx7DMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKpjCJbn inKbBfz7BEDS6KXqohQKwIasiqg9z7RbSueCqP19nYmwfJy3ghAeUWDpCOCnnvHT bbTj8kU+lLyDpx2gFtgvQDPd+cmcjKvrOXDKwUzHElCPI3d1IHKvr7CUoaoNfCEG 3FUu6PUmYzgQVc4K0PFdQiZ8TUsxCveJ5NiSolkZ+y2DAxGXZKbZtq4yayAvPocm 1+flbni2WweuOk2DqNGlbAi2KNnpEkiaBqaewgrDBxlYp7ygFEraVenuz+Gryrp2 csYfAf0J2Ej53ZYEmI8CwMQXaVYgRQlIhnVDNU3VlLg5FU5dAepq5f8ebKm7OXXr BGeMem5kiwRLkg== -----END CERTIFICATE-----Generated at Thu Mar 26 03:35:23 2026 by rpki-client