$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: 2FkNBDqPV9HwZnb3Jtu8ImdYVNMUQCA40y/A2zKgoTI= Subject key identifier: 86:3C:24:A8:F7:FA:65:B6:1A:7B:79:B9:2D:46:B9:06:81:8A:9C:0A Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019D2704B7013773C8E929838B189960A41A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 18A0 Signing time: Wed 25 Mar 2026 22:01:53 +0000 Manifest this update: Wed 25 Mar 2026 22:01:53 +0000 Manifest next update: Thu 26 Mar 2026 22:01:53 +0000 Files and hashes: 1: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: JRjLD2r3xugo8wX4ZXdjSvptU8Ncc7UlK0oYgh//Bew=) 2: GiXGWF3XbNUka_6eZbMkF4lwUUU.roa (hash: Ghc0ZSrMNmrLcxpN1ogM8Bq5yh44DA/gg5TX6sTsGwk=) 3: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (hash: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E=) 4: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (hash: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g=) 5: Ow_kueRJVip82pUj00XLQYjimrs.roa (hash: 85eWZxYsHFwXWd/YsiQWTMazT60hSpQui9cmEWNnT5M=) 6: R3e8EP6U572NIEwLXcwI5IO-_Gc.roa (hash: IMUABkpJVknPlYeXsWWkw4ZBUgDiuzIM8ni8AxR0Udc=) 7: T9-vW3KXUqDV-hHkYIlU0h63B7k.roa (hash: GVI+BtriLywrqwYg8b8nOqyUDiKVbNRN2/cPik19wB8=) 8: ZrXDV17uXjinizgfrrPqhQ0dhJM.roa (hash: GN0pZ4GDE0j/JncpGXJQ21uu5AQ3wwUlO2eU3eTfsns=) 9: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (hash: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc=) 10: fT61awwkD08cT0v6ICZahtW3HFI.roa (hash: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE=) 11: gndzUxO1CNccN-YEVyYR7nMztTA.roa (hash: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc=) 12: quYwTy2Sx7ur2wpLvrH2k8ViBR0.roa (hash: CanNYtzvyyEfG5PGl0aRHd7fPV6d8E0XKcJaLB/U+p8=) 13: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (hash: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:b7:01:37:73:c8:e9:29:83:8b:18:99:60:a4:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Mar 25 22:01:53 2026 GMT Not After : Mar 26 22:01:53 2026 GMT Subject: CN=863c24a8f7fa65b61a7b79b92d46b906818a9c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:92:be:38:7f:b0:17:54:52:0c:a8:ca:e3:e0: 8e:33:48:31:67:37:9e:76:6e:76:2e:43:f5:70:16: 56:8d:01:5f:2a:84:12:71:7b:e4:77:e2:b7:92:63: 3a:7a:6d:05:d4:48:b3:b3:3f:aa:49:1e:bb:f2:a5: eb:fa:b8:84:27:ca:18:8a:71:35:ec:69:d4:7c:d5: ac:03:70:a4:44:f3:c3:7b:96:c2:7c:2d:c7:3d:88: b0:c7:e5:23:fd:37:e2:c5:98:68:a2:af:0a:be:dd: 67:ee:93:49:bf:38:0e:f8:2f:37:4f:2e:a4:d1:fe: 3f:d0:dc:d5:66:6a:39:5b:1f:e8:94:d2:8c:f5:04: c3:66:d8:03:8a:1f:ba:ad:c9:5b:be:a5:6c:65:48: c3:30:da:97:cc:e9:e7:51:fc:b4:b9:71:0b:8a:db: 06:52:a8:95:53:00:df:c5:3d:37:26:0f:be:73:81: 1a:00:02:96:ea:cc:45:ea:b3:b0:e2:cd:89:aa:bb: 3a:94:be:8c:05:2f:48:4e:ed:98:a1:ea:82:f3:c7: 75:05:19:e6:2e:fd:4b:a4:9b:0b:af:90:2b:5e:d5: 62:6b:42:bd:7a:74:24:1c:45:4d:8f:8b:4e:08:70: 30:6a:bb:14:3f:65:df:ad:24:97:43:d6:07:4a:52: c7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3C:24:A8:F7:FA:65:B6:1A:7B:79:B9:2D:46:B9:06:81:8A:9C:0A X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a3:c6:31:30:34:f2:6e:2f:3d:0d:34:bd:fb:95:15:1a:19: 5b:a5:f8:6f:d6:fa:74:73:39:a2:20:bf:16:62:fe:bd:9b:46: 50:20:d4:6b:ce:d7:f0:83:fa:d3:d3:86:6c:2e:c2:68:86:8f: 9c:fd:c3:44:ce:9d:c4:aa:37:84:7a:de:d0:ad:de:bb:7b:2e: 22:a6:61:24:3e:7c:ee:a8:e7:0c:85:d7:7f:db:ea:66:4a:8a: 5c:2c:c6:26:09:05:07:27:2a:c7:e1:e5:44:db:f5:73:b4:87: 84:23:86:18:5b:86:06:32:45:b7:1a:d6:76:a4:34:14:3e:a1: da:a5:f8:46:c9:6f:e3:89:c1:bd:e6:77:ec:80:69:ad:03:71: f1:ef:f0:b4:51:58:a0:c0:b3:99:9f:46:b0:78:12:92:5a:4f: f4:44:fb:9a:09:f1:46:e4:0e:3e:67:d5:6b:2e:98:a6:3a:ec: 14:c4:08:a6:3d:94:92:22:2c:6c:31:9a:74:29:8f:6d:03:9b: df:04:e7:f5:8c:d5:e1:4f:c5:41:bc:68:da:a6:3d:6d:e8:19: c4:7e:72:fa:d6:fa:34:f3:dd:01:16:da:71:62:0f:63:d8:a1: 56:39:b0:f3:09:f3:92:b7:54:c7:05:1a:e3:1b:a2:33:24:36: 42:dc:df:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBLcBN3PI6SmDixiZYKQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwMzI1MjIwMTUzWhcNMjYwMzI2MjIwMTUzWjAzMTEwLwYDVQQD Eyg4NjNjMjRhOGY3ZmE2NWI2MWE3Yjc5YjkyZDQ2YjkwNjgxOGE5YzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpK+OH+wF1RSDKjK4+COM0gxZzee dm52LkP1cBZWjQFfKoQScXvkd+K3kmM6em0F1Eizsz+qSR678qXr+riEJ8oYinE1 7GnUfNWsA3CkRPPDe5bCfC3HPYiwx+Uj/TfixZhooq8Kvt1n7pNJvzgO+C83Ty6k 0f4/0NzVZmo5Wx/olNKM9QTDZtgDih+6rclbvqVsZUjDMNqXzOnnUfy0uXELitsG UqiVUwDfxT03Jg++c4EaAAKW6sxF6rOw4s2Jqrs6lL6MBS9ITu2YoeqC88d1BRnm Lv1LpJsLr5ArXtVia0K9enQkHEVNj4tOCHAwarsUP2XfrSSXQ9YHSlLHuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIY8JKj3+mW2Gnt5uS1GuQaBipwKMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqPGMTA0 8m4vPQ00vfuVFRoZW6X4b9b6dHM5oiC/FmL+vZtGUCDUa87X8IP609OGbC7CaIaP nP3DRM6dxKo3hHre0K3eu3suIqZhJD587qjnDIXXf9vqZkqKXCzGJgkFBycqx+Hl RNv1c7SHhCOGGFuGBjJFtxrWdqQ0FD6h2qX4Rslv44nBveZ37IBprQNx8e/wtFFY oMCzmZ9GsHgSklpP9ET7mgnxRuQOPmfVay6YpjrsFMQIpj2UkiIsbDGadCmPbQOb 3wTn9YzV4U/FQbxo2qY9begZxH5y+tb6NPPdARbacWIPY9ihVjmw8wnzkrdUxwUa 4xuiMyQ2Qtzffw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:38:07 2026 by rpki-client