$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: xvYFNQpiqITzxoSCsNxH1kboq2M6JPRicyVdR/s51mY= Subject key identifier: 53:A0:58:85:98:5E:27:DF:C9:06:E8:13:6A:03:80:5B:B3:33:CA:5D Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019D2703D0A0B315132AE5EBE584DDBF36FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 073E Signing time: Wed 25 Mar 2026 22:00:54 +0000 Manifest this update: Wed 25 Mar 2026 22:00:54 +0000 Manifest next update: Thu 26 Mar 2026 22:00:54 +0000 Files and hashes: 1: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=) 2: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: bdKqdR4VGNUnxaTIr08IIQp1uTR5y2NfHWFP62MCIpY=) 3: AuuFpGckEdWDmpSli6J4EvnBEFA.roa (hash: UWwZYirMViLQ4FhWk6naRNb3lf/S07gxbtcPGiaea3M=) 4: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=) 5: JRpzznWelvDGpNctUx-9YeQj91I.roa (hash: UWpK2mc+BRq0WDsXbRZApCIJ/yZuMuk8WsuIDijlk30=) 6: N8T1T4yzeC_svV7N6clN6YYuhS0.roa (hash: Zjsphs8xxbX+E2wFNgFNlo+S/FNhRonrcNCUdPBKUgo=) 7: VJhfwBMpKYGf6ops4QG8W2D9K5Y.roa (hash: BYsR2fxa81FQHh1Dxyok1UJdkjHu0vH5dq3diC+m0iI=) 8: XCau4ffd9wRsX7TYXIogzR2WqO4.roa (hash: ftqkiMajJgdI8EjDHWxMovMT410S0p0no+51o9gTIa8=) 9: YARBLfUZ9k_hQNuqCW-GW04WaQI.roa (hash: YYeeEXSa0og2pjEcv4jU32lCZBeHpaJXhmkA+TmvUbg=) 10: YfhOPAWRkHzsFNKQodjoA2IhLKM.roa (hash: 9/L6hUhQcrkiGTuXjLMFbE6LlWLBn2NBCH2Dr2RZSJA=) 11: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=) 12: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=) 13: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=) 14: aHuFfSOUYXmTmBwxHlPwh-EVryM.roa (hash: 4h0lpb8Jw+MnXWrJAhTnOT+WFcvU+QMAmEsFwZdu5/k=) 15: egsOE6bZvfKQiaDurlHql4l7FQo.roa (hash: BP8wlsBgKB6wKVje/kb04PbZKDtzqCLIojy+BbhlXD4=) 16: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (hash: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM=) 17: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (hash: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:03:d0:a0:b3:15:13:2a:e5:eb:e5:84:dd:bf:36:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Mar 25 22:00:54 2026 GMT Not After : Mar 26 22:00:54 2026 GMT Subject: CN=53a05885985e27dfc906e8136a03805bb333ca5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:57:ce:42:e6:b5:76:30:7d:60:6d:65:b7: 9d:b9:b1:92:6a:63:5d:ab:5c:cd:d7:22:16:fa:b1: 84:05:ab:b6:fa:f4:8c:ce:7b:39:18:96:03:4c:87: b5:c6:5e:0c:8b:af:bb:d9:09:a7:2a:94:98:61:55: 53:a0:80:32:8f:47:5f:2a:86:79:ae:89:29:46:c9: e4:77:eb:a6:77:49:9e:16:0c:9b:03:e5:12:a8:aa: cf:39:80:77:75:b2:9a:84:dc:13:8f:a4:b0:ec:c9: 36:3c:57:af:a1:78:c8:89:93:8b:2a:57:a2:0d:2f: 7d:00:7a:4f:44:fa:20:34:a6:0a:74:7c:eb:3c:5b: 54:4e:93:b5:69:d9:4b:f7:56:6e:a8:ea:5f:5d:45: 1f:8f:86:c8:e4:78:c6:a2:40:51:c3:43:76:79:5b: 30:94:9b:ec:3a:cc:89:d1:98:bc:67:7f:57:78:07: d9:70:0d:5b:97:90:6f:d6:b3:a0:6d:51:64:a8:f9: 27:8f:72:07:76:68:99:cc:db:51:ae:dd:e9:0d:70: dd:ed:2c:2e:6e:18:32:b3:17:08:b8:da:f8:77:3a: 2b:24:61:46:36:97:25:6a:2d:39:8c:0c:05:fc:d1: be:fb:31:ff:63:4c:01:8f:bb:1f:1d:69:45:e3:ff: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A0:58:85:98:5E:27:DF:C9:06:E8:13:6A:03:80:5B:B3:33:CA:5D X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2f:de:86:9e:5b:15:a4:dc:09:d7:59:44:69:f1:52:f9:d8: b1:4f:cf:23:97:c5:fb:fb:ec:26:c6:5a:64:49:e4:55:c8:3f: 3a:62:6f:8a:ec:4a:66:8a:23:fe:c1:f3:72:12:73:40:95:4d: 6a:3b:50:cb:f4:94:45:05:bd:50:9d:00:b5:3f:6f:2d:fd:44: cf:c6:6d:81:96:f2:4e:fc:53:e4:14:f3:c5:53:8e:9e:d0:43: 07:ab:0a:0e:3a:f2:8a:00:a5:be:07:fc:29:f9:d7:f7:a9:22: d2:03:73:fe:cd:c3:55:f8:1f:53:ee:8f:42:46:94:8f:a6:0d: e7:32:fc:13:a4:50:11:aa:af:c2:9c:07:77:fb:dc:8c:f7:8b: c1:8d:99:97:0c:98:8c:c5:60:59:1f:1c:8f:8f:71:78:f5:7d: ef:97:a8:9c:12:21:cd:93:cc:fb:2f:d7:04:0a:25:d9:59:3f: e4:72:c9:a1:20:14:6f:70:c3:73:57:8c:1d:9b:be:71:e8:26: 4c:de:41:87:93:c4:45:58:13:88:de:ac:d9:8b:dd:f1:55:1b: f1:60:3d:56:bf:52:4c:c1:a2:24:99:b0:9e:d2:3e:04:31:c5: 64:cb:fc:c3:7c:20:09:bd:d3:fa:19:86:f5:49:06:69:8c:da: ea:3c:f6:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nA9CgsxUTKuXr5YTdvzb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMzI1MjIwMDU0WhcNMjYwMzI2MjIwMDU0WjAzMTEwLwYDVQQD Eyg1M2EwNTg4NTk4NWUyN2RmYzkwNmU4MTM2YTAzODA1YmIzMzNjYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAublXzkLmtXYwfWBtZbedubGSamNd q1zN1yIW+rGEBau2+vSMzns5GJYDTIe1xl4Mi6+72QmnKpSYYVVToIAyj0dfKoZ5 rokpRsnkd+umd0meFgybA+USqKrPOYB3dbKahNwTj6Sw7Mk2PFevoXjIiZOLKlei DS99AHpPRPogNKYKdHzrPFtUTpO1adlL91ZuqOpfXUUfj4bI5HjGokBRw0N2eVsw lJvsOsyJ0Zi8Z39XeAfZcA1bl5Bv1rOgbVFkqPknj3IHdmiZzNtRrt3pDXDd7Swu bhgysxcIuNr4dzorJGFGNpclai05jAwF/NG++zH/Y0wBj7sfHWlF4/+t4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOgWIWYXiffyQboE2oDgFuzM8pdMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPS/ehp5b FaTcCddZRGnxUvnYsU/PI5fF+/vsJsZaZEnkVcg/OmJviuxKZooj/sHzchJzQJVN ajtQy/SURQW9UJ0AtT9vLf1Ez8ZtgZbyTvxT5BTzxVOOntBDB6sKDjryigClvgf8 KfnX96ki0gNz/s3DVfgfU+6PQkaUj6YN5zL8E6RQEaqvwpwHd/vcjPeLwY2ZlwyY jMVgWR8cj49xePV975eonBIhzZPM+y/XBAol2Vk/5HLJoSAUb3DDc1eMHZu+cegm TN5Bh5PERVgTiN6s2Yvd8VUb8WA9Vr9STMGiJJmwntI+BDHFZMv8w3wgCb3T+hmG 9UkGaYza6jz22Q== -----END CERTIFICATE-----Generated at Thu Mar 26 02:10:58 2026 by rpki-client