$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: aN6RWMc5fwp2D8jmHlb624zZ45uZbkmAp+J04oLVJuA= Subject key identifier: B6:23:2D:E9:50:78:BA:D7:AC:BF:0A:F2:9C:E7:59:41:85:69:24:10 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019D26965E3E5ABAB058C3554095A3C2D63F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 188D Signing time: Wed 25 Mar 2026 20:01:21 +0000 Manifest this update: Wed 25 Mar 2026 20:01:21 +0000 Manifest next update: Thu 26 Mar 2026 20:01:21 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: Ymu1z1+5qYpAVe87GBqCpi3YfNqb3WbGMwDR4zav5to=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:96:5e:3e:5a:ba:b0:58:c3:55:40:95:a3:c2:d6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Mar 25 20:01:21 2026 GMT Not After : Mar 26 20:01:21 2026 GMT Subject: CN=b6232de95078bad7acbf0af29ce7594185692410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b7:90:34:14:83:c1:ea:1a:1b:18:81:e8:10: e9:47:c4:fd:fb:8c:68:39:5e:5a:65:63:5d:07:26: 51:a0:0d:5f:46:fd:f2:cd:cf:d1:8a:32:53:b6:d9: 27:e7:d5:72:9a:75:97:08:7a:6c:19:42:e0:01:33: ea:6e:c2:c2:cc:3e:fe:6f:8e:4f:bc:25:d8:5a:9e: a3:0d:e8:0d:02:4d:ff:9b:79:46:b3:08:3c:98:67: 70:ec:c6:4f:51:e5:96:c2:bf:22:8c:4a:06:1e:72: 99:c4:dc:f2:1b:d6:e4:a6:9b:6d:71:db:cb:77:db: e2:31:e6:65:d9:6a:8e:75:46:f5:92:16:76:e4:9b: c2:63:9d:ca:74:c8:90:dd:1b:f8:ff:37:1f:2f:32: 08:44:77:c8:e6:46:b0:7b:7a:b0:a5:c4:91:58:c4: 1b:7e:29:91:45:80:c9:f9:b4:e6:3f:9f:39:c9:13: 55:28:a4:a4:81:d6:72:73:39:ff:dc:bf:64:82:4e: 9b:93:3f:a4:ee:9a:85:96:5c:5b:e0:6a:47:63:25: 14:80:19:82:59:6c:3f:32:0d:2b:6a:64:44:0f:ff: 57:39:54:79:ba:fd:ca:6a:e1:56:5f:0d:c4:6a:73: 89:e5:95:a1:19:a6:9f:a2:51:a6:c5:57:18:2e:e8: 30:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:23:2D:E9:50:78:BA:D7:AC:BF:0A:F2:9C:E7:59:41:85:69:24:10 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f5:67:f2:c7:73:ed:a6:2c:c4:9f:20:4c:5c:04:96:df:65: 2d:94:c3:5f:f8:da:c6:11:01:b8:42:80:1a:d6:85:81:7d:81: 53:3d:0d:7f:2d:06:91:66:a0:08:bd:a6:e5:0b:51:f8:5a:a4: d1:f2:e5:6e:ea:7c:d8:b0:b3:dd:d8:95:8c:5a:4e:fe:49:c1: 3c:c3:e4:31:e6:ae:5b:52:d8:04:40:df:70:7d:cb:7b:bb:eb: 7e:1c:cb:1e:49:3e:1f:72:55:a7:eb:ec:6e:fb:ef:31:6d:5d: 5a:d8:f6:db:98:80:b4:19:87:24:c7:fe:c2:0d:da:13:28:17: ba:6f:c7:c3:0e:50:5a:96:7a:05:e1:97:5b:eb:ed:09:e3:f0: 11:07:05:9e:30:22:13:2f:ab:24:40:c9:6f:64:26:d9:b8:45: 91:3c:0c:45:a4:08:ab:d5:60:eb:ee:92:66:2e:77:f3:42:b6: a5:eb:28:02:18:30:e5:97:1e:60:33:9c:6a:f9:44:d0:8a:3f: d9:12:3a:b7:ce:27:99:fe:a5:f7:b2:fc:11:a0:a0:70:6f:d8: d6:63:b2:48:56:79:3c:14:ee:e7:43:a0:95:0b:89:2a:c5:08: 8f:9a:57:3c:2f:95:25:f2:c1:c6:df:4e:54:78:df:09:ec:0d: 93:70:79:8c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ0mll4+WrqwWMNVQJWjwtY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwMzI1MjAwMTIxWhcNMjYwMzI2MjAwMTIxWjAzMTEwLwYDVQQD EyhiNjIzMmRlOTUwNzhiYWQ3YWNiZjBhZjI5Y2U3NTk0MTg1NjkyNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57eQNBSDweoaGxiB6BDpR8T9+4xo OV5aZWNdByZRoA1fRv3yzc/RijJTttkn59VymnWXCHpsGULgATPqbsLCzD7+b45P vCXYWp6jDegNAk3/m3lGswg8mGdw7MZPUeWWwr8ijEoGHnKZxNzyG9bkppttcdvL d9viMeZl2WqOdUb1khZ25JvCY53KdMiQ3Rv4/zcfLzIIRHfI5kawe3qwpcSRWMQb fimRRYDJ+bTmP585yRNVKKSkgdZyczn/3L9kgk6bkz+k7pqFllxb4GpHYyUUgBmC WWw/Mg0ramRED/9XOVR5uv3KauFWXw3EanOJ5ZWhGaafolGmxVcYLugwRQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLYjLelQeLrXrL8K8pznWUGFaSQQMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvVn 8sdz7aYsxJ8gTFwElt9lLZTDX/jaxhEBuEKAGtaFgX2BUz0Nfy0GkWagCL2m5QtR +Fqk0fLlbup82LCz3diVjFpO/knBPMPkMeauW1LYBEDfcH3Le7vrfhzLHkk+H3JV p+vsbvvvMW1dWtj225iAtBmHJMf+wg3aEygXum/Hww5QWpZ6BeGXW+vtCePwEQcF njAiEy+rJEDJb2Qm2bhFkTwMRaQIq9Vg6+6SZi5380K2pesoAhgw5ZceYDOcavlE 0Io/2RI6t84nmf6l97L8EaCgcG/Y1mOySFZ5PBTu50OglQuJKsUIj5pXPC+VJfLB xt9OVHjfCewNk3B5jA== -----END CERTIFICATE-----Generated at Wed Mar 25 22:47:00 2026 by rpki-client