$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: oZt+LAu03MQV416V5xhIiBhxsQMbQngWocF0YQZrzfc= Subject key identifier: C1:0C:A0:A8:41:EC:62:7E:8F:C5:DD:C2:F9:A1:70:DE:5D:1B:30:DE Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019D28BB406E922F6D4D7B1B70A1D68C22D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0ECC Signing time: Thu 26 Mar 2026 06:00:53 +0000 Manifest this update: Thu 26 Mar 2026 06:00:53 +0000 Manifest next update: Fri 27 Mar 2026 06:00:53 +0000 Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=) 2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=) 3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=) 4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=) 5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=) 6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=) 7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: sn+d+lZIPCguk1HF3p+lIZUXNEg+rhF3ye0jwFxPFZU=) 8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=) 9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=) 10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=) 11: f2waKQNAA11ZmElzUDNQuE551eg.roa (hash: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8=) 12: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=) 13: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=) 14: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:bb:40:6e:92:2f:6d:4d:7b:1b:70:a1:d6:8c:22:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Mar 26 06:00:53 2026 GMT Not After : Mar 27 06:00:53 2026 GMT Subject: CN=c10ca0a841ec627e8fc5ddc2f9a170de5d1b30de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:5b:76:f0:fc:5a:ec:3e:bb:15:ae:46:be: fc:80:e2:10:71:e6:e5:a6:3d:5a:a9:69:3b:08:ad: a7:2a:6a:b5:2a:f2:d6:15:e3:58:61:b7:fc:00:46: 99:69:2e:0a:a1:45:e1:40:b7:71:18:5d:73:23:e3: e9:e8:19:63:4a:68:f3:ed:0d:a3:74:93:a3:d1:e7: 4f:5c:d7:ab:61:14:5e:e8:14:e7:7c:63:7c:89:f1: 16:5b:1d:13:52:0a:65:74:3f:13:8b:bc:41:87:5c: 54:87:9f:c2:b0:1c:22:44:56:55:4a:d3:c4:c9:6e: ea:57:45:ad:dc:8a:08:6b:e5:ff:46:66:2f:24:2b: df:4d:f2:f3:ec:81:00:f7:35:67:3d:d4:5c:eb:58: 5b:25:12:fd:21:5d:d3:92:d1:86:e8:fc:ec:6e:dd: 1d:68:61:3b:48:ba:f1:85:e2:f1:38:3f:7f:87:26: 9d:d4:16:40:94:db:17:30:d2:93:db:1a:bc:dc:1a: 09:2d:21:41:a0:c8:63:71:db:eb:55:1f:81:8e:c4: b3:48:9a:35:9f:2d:d8:be:24:e7:4b:db:7d:b5:2d: 6e:bb:c6:cc:3e:cf:7a:4c:47:4b:d4:09:27:c1:18: fb:4d:d7:b1:52:f2:04:c4:72:37:cb:cd:6a:78:0c: 30:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0C:A0:A8:41:EC:62:7E:8F:C5:DD:C2:F9:A1:70:DE:5D:1B:30:DE X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:75:b6:d8:60:ba:e5:46:0f:15:78:07:d7:db:93:bf:32:c2: 0e:00:78:b6:28:41:dc:8e:ce:d1:99:3d:e6:21:f8:5d:2a:7f: f3:ec:c5:89:fd:ce:47:76:81:8c:09:12:f8:85:ad:67:57:f4: 8a:8e:23:4b:4c:91:48:e0:8f:2e:26:c4:b0:d4:00:ac:90:72: 1b:76:64:ff:3a:6a:4d:47:27:e7:44:4a:b2:3b:ad:10:25:c3: 58:b8:fc:05:fe:91:82:56:94:3a:00:d2:e4:16:b6:94:0c:90: 67:62:2b:73:ac:2b:1e:10:72:41:3c:a4:71:4f:65:35:95:56: 94:00:95:67:5c:6a:65:20:28:a6:c3:ef:ee:b0:a7:26:87:21: 97:5c:a7:15:ec:95:9c:77:75:ce:c3:21:3c:15:ad:1a:9f:0b: 73:83:fb:02:54:0f:0a:83:65:53:1d:91:aa:7d:d6:dd:2c:88: c3:17:f1:4a:d9:f5:b0:7b:e9:7f:b3:ea:af:41:62:5f:6e:7f: c0:18:af:cb:02:69:41:30:6b:3d:95:16:c5:5d:a2:5b:e4:f7: 89:7d:c3:8b:8a:05:e9:5c:a4:06:18:eb:fb:af:bf:4f:15:e0: ad:7b:83:73:d6:55:05:18:c6:de:32:9c:dd:4f:e0:68:4c:ba: 65:40:74:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ou0Buki9tTXsbcKHWjCLXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwMzI2MDYwMDUzWhcNMjYwMzI3MDYwMDUzWjAzMTEwLwYDVQQD EyhjMTBjYTBhODQxZWM2MjdlOGZjNWRkYzJmOWExNzBkZTVkMWIzMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPJbdvD8Wuw+uxWuRr78gOIQcebl pj1aqWk7CK2nKmq1KvLWFeNYYbf8AEaZaS4KoUXhQLdxGF1zI+Pp6BljSmjz7Q2j dJOj0edPXNerYRRe6BTnfGN8ifEWWx0TUgpldD8Ti7xBh1xUh5/CsBwiRFZVStPE yW7qV0Wt3IoIa+X/RmYvJCvfTfLz7IEA9zVnPdRc61hbJRL9IV3TktGG6Pzsbt0d aGE7SLrxheLxOD9/hyad1BZAlNsXMNKT2xq83BoJLSFBoMhjcdvrVR+BjsSzSJo1 ny3YviTnS9t9tS1uu8bMPs96TEdL1AknwRj7TdexUvIExHI3y81qeAwwmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEMoKhB7GJ+j8XdwvmhcN5dGzDeMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnW22GC6 5UYPFXgH19uTvzLCDgB4tihB3I7O0Zk95iH4XSp/8+zFif3OR3aBjAkS+IWtZ1f0 io4jS0yRSOCPLibEsNQArJByG3Zk/zpqTUcn50RKsjutECXDWLj8Bf6RglaUOgDS 5Ba2lAyQZ2Irc6wrHhByQTykcU9lNZVWlACVZ1xqZSAopsPv7rCnJochl1ynFeyV nHd1zsMhPBWtGp8Lc4P7AlQPCoNlUx2Rqn3W3SyIwxfxStn1sHvpf7Pqr0FiX25/ wBivywJpQTBrPZUWxV2iW+T3iX3Di4oF6VykBhjr+6+/TxXgrXuDc9ZVBRjG3jKc 3U/gaEy6ZUB0sw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:27:03 2026 by rpki-client