$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft File: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json) Hash identifier: PnRtwCQ8gaD0ztzbfEHtreVN9lMjP9ccI5BhSmL4+1U= Subject key identifier: 24:A7:D0:1F:4E:D3:D5:11:B0:37:21:E4:BF:14:51:6B:D2:A7:B1:CE Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019D26CCC0C64174F20C79467AFC9354A5A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft Manifest number: 18A0 Signing time: Wed 25 Mar 2026 21:00:46 +0000 Manifest this update: Wed 25 Mar 2026 21:00:46 +0000 Manifest next update: Thu 26 Mar 2026 21:00:46 +0000 Files and hashes: 1: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: VGaO1T0Cyu5C7yqlYkAZ6+J9Q2WjQa4lU49Hh3rVb/Q=) 2: 13XDGJYyNR2DoNt3I63wL8U0Jzs.roa (hash: I+JS8FII02pQo9N3kTh18PHz112YKE00khkm+cip7eA=) 3: 63yOiYKwU7JqEfSC9NxVJ01fCWk.roa (hash: K4Ob2YWWp3LxgFe3+6MIi9FKOa85HqimBOJiSHujQxY=) 4: 6nEB7u7VDBwJvvErhhk_sp8HgHM.roa (hash: SyBKloheaGBrGvFtFMvv0iZL+4Dv+JFkW0KebHTTw6E=) 5: 9H1b9QtJvvO5Q7tBMNvVVoE03o8.roa (hash: 8xeDQJquFgw+UoHUSmYV/m/pwUj8nT1iQkun0bxE7+Q=) 6: FzGpWZvbvQzmHwZ1mYWzl0OhA6A.roa (hash: V5FzneMXIFpEivxgGPkmTl20CGF3hlX/oPutyNatcaM=) 7: WS24_ZfdS-p841fXys78kKEcHFE.roa (hash: mdNWTDkBQ1LOAKpfMoKowipt1skh6RMzRxFFxzvaz1g=) 8: cohsG3SQlcWk1HwXz_9_V1W-DnM.roa (hash: Z0rTIgtHw2j6D7sRMbadoj6J39N2b5eJp5yHD6/XmPU=) 9: dIH6BysLhLi3YbgR32hD9CEC-Rc.roa (hash: EKTQSkYkTx/FLfYfj9JDL2Xp6XAMkpHk8crmyAFs8gY=) 10: dfv3LSNj2V7BvnxQDjPYXNhLTeY.roa (hash: +CS62sl2ChgX++5UXeYQ9A8BJy1JzvdoEucP6DULUqI=) 11: gjckOvmNiIbZmA-TT11ORA--iTU.roa (hash: TpmN78WgePeN399lIDAzsZi1InWuYIsnhRRV8YOoTWc=) 12: vF0VYWecbrRxbZK9c56uBdCo4ik.roa (hash: GSJ2HtyoNkdo5nkx3DTM8Av/uYVGzIaDwGAeMRt+F5E=) 13: xmMPaUT6o6zuoGJkONl9ukiVCBw.roa (hash: LEqoxiigz/XFOxjw1QTNnhB5q/85VzWFuwng23PfuYc=) 14: xrmNcJYM7IC02cwip42NZ9MYOJI.roa (hash: b6C56Rw+1/MSwcd/+Js8l5OXj80gDxqiFimnPx3BaLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cc:c0:c6:41:74:f2:0c:79:46:7a:fc:93:54:a5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Mar 25 21:00:46 2026 GMT Not After : Mar 26 21:00:46 2026 GMT Subject: CN=24a7d01f4ed3d511b03721e4bf14516bd2a7b1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:85:24:db:41:d4:d2:a5:9c:40:b4:bd:40:ef: 18:d6:f0:09:3a:10:6b:30:aa:86:92:b9:a5:7c:82: b6:86:80:9c:b5:e0:83:52:aa:16:45:d0:ca:3d:81: a1:48:43:90:38:f3:9b:37:a1:ba:74:4e:23:fa:72: 15:48:32:ad:0c:3b:10:15:d1:2b:68:35:da:0d:12: ac:2e:20:63:4f:f1:61:3a:91:fe:85:36:a7:07:fe: 24:a9:f9:df:f8:8e:d5:9a:76:33:af:de:7b:9d:82: e6:44:32:60:8d:15:af:1b:b1:dc:68:11:a6:70:b1: 14:1c:eb:57:5e:69:b0:db:07:ed:64:a2:a4:99:85: 3b:fb:3c:0a:3b:36:ed:17:1a:2c:ae:ce:0e:ee:9c: bb:bd:27:8f:6b:dd:82:f2:7c:64:02:18:1f:09:ce: af:fc:1b:0f:3d:32:ca:2f:92:ec:6d:66:64:85:51: b1:52:f3:0a:67:47:43:c9:8e:0a:15:06:0e:4b:00: e7:d4:38:ef:20:ab:da:72:3e:ec:41:d0:0c:72:94: 54:2a:f6:51:03:33:08:94:19:9f:05:ed:47:4b:b7: 78:92:02:91:e9:6d:1e:f7:82:2a:bf:3b:20:97:97: c5:cc:46:8a:87:c6:86:cb:a8:a0:10:70:14:06:41: a3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A7:D0:1F:4E:D3:D5:11:B0:37:21:E4:BF:14:51:6B:D2:A7:B1:CE X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:d4:63:1d:2a:22:55:5c:7e:f2:7a:a5:0e:d7:1f:ce:d5:c3: ac:61:a4:64:05:0e:9b:ed:7b:4b:cc:c8:58:cb:ce:f0:61:9c: 86:a1:cf:5a:0e:16:03:da:5b:6b:a5:83:aa:fa:3a:37:e4:72: 39:2c:34:51:b0:7a:af:2b:b5:b7:fa:98:65:a6:4a:d3:95:53: d3:87:2d:32:9b:db:04:64:1e:92:22:70:2a:2a:4c:0f:70:a6: 61:33:75:b4:d2:09:83:3a:8c:e8:4a:c2:96:cd:2c:de:66:3c: 8c:6d:cd:55:4e:50:85:9d:0d:bc:73:63:02:58:5c:c4:60:48: c6:31:53:03:f0:a7:c0:d1:4f:af:ee:4d:51:91:24:7a:b9:ab: 34:c4:a5:03:fd:9d:a0:1e:61:bf:3d:09:0e:5a:95:bf:5b:20: ea:5c:cd:fd:f7:5b:10:27:12:90:7b:c7:ae:1a:d1:f2:24:15: f4:27:ae:26:cf:aa:7e:e0:6a:7c:09:0b:6f:ab:5c:e3:7d:5c: e2:42:27:ac:a0:32:c4:c8:90:9b:48:0c:48:e1:4f:97:e5:fd: 7c:14:ae:36:f7:ca:19:01:aa:6d:ce:93:b2:87:de:28:2d:7f: f5:f2:92:0a:01:d4:a8:57:5e:e8:db:e1:7d:da:72:80:91:01: ec:5b:09:e9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ0mzMDGQXTyDHlGevyTVKWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjYwMzI1MjEwMDQ2WhcNMjYwMzI2MjEwMDQ2WjAzMTEwLwYDVQQD EygyNGE3ZDAxZjRlZDNkNTExYjAzNzIxZTRiZjE0NTE2YmQyYTdiMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4Uk20HU0qWcQLS9QO8Y1vAJOhBr MKqGkrmlfIK2hoCcteCDUqoWRdDKPYGhSEOQOPObN6G6dE4j+nIVSDKtDDsQFdEr aDXaDRKsLiBjT/FhOpH+hTanB/4kqfnf+I7VmnYzr957nYLmRDJgjRWvG7HcaBGm cLEUHOtXXmmw2wftZKKkmYU7+zwKOzbtFxosrs4O7py7vSePa92C8nxkAhgfCc6v /BsPPTLKL5LsbWZkhVGxUvMKZ0dDyY4KFQYOSwDn1DjvIKvacj7sQdAMcpRUKvZR AzMIlBmfBe1HS7d4kgKR6W0e94Iqvzsgl5fFzEaKh8aGy6igEHAUBkGjJQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCSn0B9O09URsDch5L8UUWvSp7HOMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzUzL2U4Y2I0NC1hOTU0LTQ2NzItYjlhNC1hNDllNWM2NjMz YmQvMS8xLXN5N2NxcVloS1dfalE1MWRBU2hmbDRqTWl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtRj HSoiVVx+8nqlDtcfztXDrGGkZAUOm+17S8zIWMvO8GGchqHPWg4WA9pba6WDqvo6 N+RyOSw0UbB6ryu1t/qYZaZK05VT04ctMpvbBGQekiJwKipMD3CmYTN1tNIJgzqM 6ErCls0s3mY8jG3NVU5QhZ0NvHNjAlhcxGBIxjFTA/CnwNFPr+5NUZEkermrNMSl A/2doB5hvz0JDlqVv1sg6lzN/fdbECcSkHvHrhrR8iQV9CeuJs+qfuBqfAkLb6tc 431c4kInrKAyxMiQm0gMSOFPl+X9fBSuNvfKGQGqbc6TsofeKC1/9fKSCgHUqFde 6NvhfdpygJEB7FsJ6Q== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:11 2026 by rpki-client