$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: GWQizkr3agTR1nBbnoP28onqG/SSRSiuFp8Cl9x9bbU= Subject key identifier: F5:10:25:32:CA:94:C7:D7:30:34:C6:BB:84:F3:DC:22:94:E3:69:0F Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019D28BB695D83B24E5F66D6837C5C0168CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 1563 Signing time: Thu 26 Mar 2026 06:01:03 +0000 Manifest this update: Thu 26 Mar 2026 06:01:03 +0000 Manifest next update: Fri 27 Mar 2026 06:01:03 +0000 Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=) 2: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=) 3: 7mvF9myTKlEKYunZpLTQD5KEFrY.roa (hash: 1UIT2TzCE1FlQDr/AW6XvHwVdir3xpnco3QCOUshSZI=) 4: F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa (hash: jxUQ0KKcc1cvSdaRZ9vh81k1iQSpuyreVGWce3iIfz4=) 5: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=) 6: O1GW4ziuKGxF3aTFCKn2xqIz0NE.roa (hash: ScOFNBiJmWWMmbvpEIy/O/H23s5tvByR/NPpUmMp9Tg=) 7: Z3nS0nqVZ-vslxx54klnYbz02l8.roa (hash: dO6OHSX+aPL7qnM4VP6WsbVvNbzWQqrh27kk5gBnp4w=) 8: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=) 9: aBJGwoNtwjYYCfL_vY3KC-5KRiw.roa (hash: qe/bdX+L1Ag/Xhut7yjVu6KrdVE0BnulRsPIthNL1pg=) 10: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=) 11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: ZSeqCcOeLplt9RDgzUqC/bJbKDcmd/FV5EGweXqstUs=) 12: roVhJvLE3W-3AVNXrvbfZb_XPPo.roa (hash: 6LQ91r1uUm0MXEXzntSjw9cSGp9nmQGmFVNHFHmb1Zw=) 13: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=) 14: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:bb:69:5d:83:b2:4e:5f:66:d6:83:7c:5c:01:68:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Mar 26 06:01:03 2026 GMT Not After : Mar 27 06:01:03 2026 GMT Subject: CN=f5102532ca94c7d73034c6bb84f3dc2294e3690f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:32:28:b6:f4:70:6d:c3:df:4f:84:35:f4: 24:49:b7:43:ba:38:39:35:a6:88:4a:95:9b:97:80: a2:48:99:23:e0:f2:cb:0d:fe:98:14:bf:2f:85:94: ed:3f:77:d0:02:8b:e9:f0:a2:e3:f1:21:48:3c:a3: a6:ea:37:cf:22:14:b8:ba:b1:bd:79:7c:a9:bf:31: fa:44:9c:51:4c:5b:61:43:eb:cc:29:50:b4:d2:07: ec:1c:7d:be:29:89:0c:93:0a:7a:7b:43:ab:8c:26: 80:a4:92:d8:5e:0f:15:00:48:7c:e0:c9:70:51:4e: 0c:d2:a7:7c:46:93:4d:13:64:1b:84:70:eb:a8:c6: a8:f9:d5:c1:21:b1:b3:73:4c:c7:d0:08:9b:38:90: cb:e3:c3:dd:d5:90:c0:27:35:5b:91:7e:d5:6f:ad: 01:6d:ae:03:dd:95:92:68:20:cb:e6:26:7e:25:50: f9:e7:32:cb:ad:e1:27:28:11:06:0a:09:3d:ec:df: ab:f7:42:6c:b7:99:c2:32:52:03:bd:c1:d6:16:83: 5c:8f:a5:09:4c:34:cd:0c:c8:dc:96:39:4d:de:fe: 7a:a7:db:b8:b1:13:fb:82:01:10:66:3b:6d:60:1b: 5b:1c:00:a3:cd:8a:19:f2:46:2a:52:84:7a:8d:a2: ed:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:10:25:32:CA:94:C7:D7:30:34:C6:BB:84:F3:DC:22:94:E3:69:0F X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:49:34:af:54:2e:09:72:b9:a8:a3:b8:b9:76:72:48:c9:1c: 3b:d1:0a:e5:60:af:b7:ac:5d:24:ba:f2:2d:3e:fe:b3:0a:b4: 90:eb:87:1f:31:08:a6:01:8b:42:e4:c5:16:da:c1:5e:b2:9a: 11:c4:66:3d:14:3b:13:04:4b:ec:9c:a4:8c:26:ad:d7:a7:7b: da:fe:79:20:7c:2d:d1:21:0c:05:55:70:df:63:8e:c7:82:7c: 81:a2:7d:53:d8:a2:f8:89:a7:1e:20:29:73:96:8d:3d:4d:a0: ab:11:58:ab:a4:3e:9a:84:14:12:02:66:fc:dc:36:93:39:da: ae:7c:33:97:a1:00:45:15:fe:8b:ab:ed:7a:99:0b:16:40:f6: 8f:e8:6f:cb:3b:cf:0a:e1:74:86:90:58:12:14:25:ff:90:b3: d1:64:ac:f1:0e:d3:6e:5a:c7:41:77:d6:46:63:f0:77:c3:2c: e4:cd:d9:1b:d6:f6:7c:8d:6d:f9:6e:03:45:57:a3:ee:cb:be: 6d:51:36:9c:dc:64:97:3b:13:97:e0:ae:c2:9b:8e:a6:20:1d: b6:16:1b:8d:cc:95:29:6a:60:f1:e4:58:88:06:06:e5:25:37: 86:c6:ec:6d:cd:c6:95:16:b0:f4:26:69:ff:d4:dd:d6:8f:82: 4b:50:28:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ou2ldg7JOX2bWg3xcAWjMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMzI2MDYwMTAzWhcNMjYwMzI3MDYwMTAzWjAzMTEwLwYDVQQD EyhmNTEwMjUzMmNhOTRjN2Q3MzAzNGM2YmI4NGYzZGMyMjk0ZTM2OTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweAyKLb0cG3D30+ENfQkSbdDujg5 NaaISpWbl4CiSJkj4PLLDf6YFL8vhZTtP3fQAovp8KLj8SFIPKOm6jfPIhS4urG9 eXypvzH6RJxRTFthQ+vMKVC00gfsHH2+KYkMkwp6e0OrjCaApJLYXg8VAEh84Mlw UU4M0qd8RpNNE2QbhHDrqMao+dXBIbGzc0zH0AibOJDL48Pd1ZDAJzVbkX7Vb60B ba4D3ZWSaCDL5iZ+JVD55zLLreEnKBEGCgk97N+r90Jst5nCMlIDvcHWFoNcj6UJ TDTNDMjcljlN3v56p9u4sRP7ggEQZjttYBtbHACjzYoZ8kYqUoR6jaLtwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUQJTLKlMfXMDTGu4Tz3CKU42kPMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUk0r1Qu CXK5qKO4uXZySMkcO9EK5WCvt6xdJLryLT7+swq0kOuHHzEIpgGLQuTFFtrBXrKa EcRmPRQ7EwRL7JykjCat16d72v55IHwt0SEMBVVw32OOx4J8gaJ9U9ii+ImnHiAp c5aNPU2gqxFYq6Q+moQUEgJm/Nw2kznarnwzl6EARRX+i6vtepkLFkD2j+hvyzvP CuF0hpBYEhQl/5Cz0WSs8Q7TblrHQXfWRmPwd8Ms5M3ZG9b2fI1t+W4DRVej7su+ bVE2nNxklzsTl+CuwpuOpiAdthYbjcyVKWpg8eRYiAYG5SU3hsbsbc3GlRaw9CZp /9Td1o+CS1AolA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:39:10 2026 by rpki-client