$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: 711EZJafMP/rMwPsxA2fq3QCGwDtYdkhJfDFW3mCpng= Subject key identifier: C7:C8:5A:72:0C:09:A6:51:C9:4F:8F:E4:06:E4:00:6D:33:B8:35:FF Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019D2884D1C15788C3C4029CAD26D8FE27B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 109F Signing time: Thu 26 Mar 2026 05:01:26 +0000 Manifest this update: Thu 26 Mar 2026 05:01:26 +0000 Manifest next update: Fri 27 Mar 2026 05:01:26 +0000 Files and hashes: 1: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=) 2: C4GFPQJi7p8x697vDEqdYSForok.roa (hash: x37lAGnggrFkEEQihLvJsXhXtDeedMO3diP0XULMgKY=) 3: F0yBqDMqCNM0pe9rWG8uj3CbYkc.roa (hash: XCZ0JTvoTGZ62Q11PauRxwPTiRMvREV2N/LHqEFLe2w=) 4: FXRjYZvbpR4kI47t-xbWMZKIpXs.roa (hash: f82R7m8nlKkGC17z2MB1wjV2cD02/YvewqP02lzhH/g=) 5: GyehNP3GNMAkeXlLJEWyWCcQtzU.roa (hash: IpYqqZa4sTN+dmYx8FkURhFjGrU2UAuArFl+utDihPQ=) 6: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=) 7: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: 6+H9yU6D3zTdc1bKKuNyAtxKzMCOq72pG8mrNcX8gew=) 8: eoCcRd3DQ06osUmaj6wTPXbyx3M.roa (hash: Bag32wKiY/ZwSFfm1YHrZ2XH/ziquJ1Nmz4VoaY0zzY=) 9: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=) 10: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=) 11: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:84:d1:c1:57:88:c3:c4:02:9c:ad:26:d8:fe:27:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Mar 26 05:01:26 2026 GMT Not After : Mar 27 05:01:26 2026 GMT Subject: CN=c7c85a720c09a651c94f8fe406e4006d33b835ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d1:dc:ba:74:a7:74:37:be:f4:4f:39:2a:6c: 94:50:77:33:4d:4e:ee:cf:95:df:aa:f1:a5:57:1b: bb:ea:fb:27:f4:e0:ef:e8:5b:45:40:50:8c:7d:b8: 47:7b:40:4c:f2:92:d8:7a:63:6a:6d:f5:d8:aa:4c: d4:70:57:31:3e:ab:52:2e:7a:98:9a:87:cb:51:95: 38:48:48:81:a1:cf:a9:50:77:dc:c2:e5:3a:67:a4: cf:db:b7:94:00:c7:4b:eb:99:04:13:54:7a:e8:d9: 36:8c:28:7f:61:78:64:04:c9:ad:99:e2:11:1a:d2: c8:5e:1d:ed:13:e3:c8:29:ca:66:f4:ae:32:6c:7e: 7d:96:b1:c4:3a:73:69:43:b1:76:8c:dd:2e:54:62: e1:2e:b7:e5:36:19:61:0f:ae:e4:c1:fb:3e:e6:ab: 83:5b:ff:cd:00:d4:ee:d1:20:87:93:0d:a8:f9:62: dd:7d:61:3a:8f:d8:13:c5:06:ef:31:b4:a9:58:f7: ea:9f:be:52:8e:8e:e9:bf:72:9d:84:07:d4:e4:9d: f2:89:a9:74:98:74:c1:5b:21:f9:d4:97:3a:8b:92: a1:0b:08:23:4d:91:66:6e:94:cb:b7:51:80:b8:b6: e2:9c:25:bc:0e:54:b4:55:ad:d3:1b:02:f9:f4:f3: 41:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C8:5A:72:0C:09:A6:51:C9:4F:8F:E4:06:E4:00:6D:33:B8:35:FF X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bc:a3:de:e9:a0:9a:15:0c:fe:4a:48:4a:4f:b7:e3:b0:1e: 27:dc:67:37:f8:36:73:15:b2:5e:e4:d8:1f:3d:ca:57:9a:e3: d8:8a:e5:5f:28:76:83:2e:6d:bc:25:2a:08:6a:9a:27:39:6f: 15:a2:44:94:7e:61:03:5c:06:6c:a2:89:e6:21:6f:4d:87:23: ec:b9:28:94:e5:18:6d:13:27:da:46:40:5b:76:f3:4f:08:1b: 4e:b0:ae:0c:7f:a9:30:ec:ed:8a:84:7b:b4:5e:e9:c0:60:28: aa:d7:7a:22:38:37:7a:e9:60:29:33:60:0a:36:0a:12:60:6d: 2a:f9:38:0f:6f:43:7b:dc:6f:d1:fe:0b:27:fe:ee:99:88:08: bc:58:f2:52:5e:ac:25:a0:81:cd:ec:45:e3:23:b4:6b:eb:91: 35:e4:16:6f:6a:46:55:67:95:54:f1:91:1f:41:16:8a:89:c6: 99:7d:83:b0:dc:32:c4:63:d8:e1:50:74:f1:7d:ae:63:49:44: a2:47:f5:2a:62:4f:fe:4c:10:79:08:e8:61:76:f9:e4:7c:ee: eb:66:58:a9:73:45:da:86:24:7c:e2:4b:8e:05:2b:7a:25:91: 3e:f1:7d:63:83:b2:07:3f:1e:37:7d:08:ec:26:cf:0c:1b:e6: 03:36:82:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ohNHBV4jDxAKcrSbY/ie4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwMzI2MDUwMTI2WhcNMjYwMzI3MDUwMTI2WjAzMTEwLwYDVQQD EyhjN2M4NWE3MjBjMDlhNjUxYzk0ZjhmZTQwNmU0MDA2ZDMzYjgzNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dHcunSndDe+9E85KmyUUHczTU7u z5XfqvGlVxu76vsn9ODv6FtFQFCMfbhHe0BM8pLYemNqbfXYqkzUcFcxPqtSLnqY mofLUZU4SEiBoc+pUHfcwuU6Z6TP27eUAMdL65kEE1R66Nk2jCh/YXhkBMmtmeIR GtLIXh3tE+PIKcpm9K4ybH59lrHEOnNpQ7F2jN0uVGLhLrflNhlhD67kwfs+5quD W//NANTu0SCHkw2o+WLdfWE6j9gTxQbvMbSpWPfqn75Sjo7pv3KdhAfU5J3yial0 mHTBWyH51Jc6i5KhCwgjTZFmbpTLt1GAuLbinCW8DlS0Va3TGwL59PNBiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfIWnIMCaZRyU+P5AbkAG0zuDX/MB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7yj3umg mhUM/kpISk+347AeJ9xnN/g2cxWyXuTYHz3KV5rj2IrlXyh2gy5tvCUqCGqaJzlv FaJElH5hA1wGbKKJ5iFvTYcj7LkolOUYbRMn2kZAW3bzTwgbTrCuDH+pMOztioR7 tF7pwGAoqtd6Ijg3eulgKTNgCjYKEmBtKvk4D29De9xv0f4LJ/7umYgIvFjyUl6s JaCBzexF4yO0a+uRNeQWb2pGVWeVVPGRH0EWionGmX2DsNwyxGPY4VB08X2uY0lE okf1KmJP/kwQeQjoYXb55Hzu62ZYqXNF2oYkfOJLjgUreiWRPvF9Y4OyBz8eN30I 7CbPDBvmAzaCLg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:53:31 2026 by rpki-client