$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: ASe+X0PNs3gsgE6exbeVhyYsnA+ppL0lkVw+lPFd+cA= Subject key identifier: A4:2A:D2:28:D7:9C:16:10:2F:E3:78:B2:E8:B0:C5:97:06:46:CE:5C Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019D2816C3A00B9B4F343EAD1F8016B3E890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 1892 Signing time: Thu 26 Mar 2026 03:01:13 +0000 Manifest this update: Thu 26 Mar 2026 03:01:13 +0000 Manifest next update: Fri 27 Mar 2026 03:01:13 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: f1HROhmd5+jlHYnWAjFQQeUowcbuXc6nE/DiJJ28q0M=) 2: 6mvUdK2sJwETz4cqi4djiQKdMUQ.roa (hash: buR6ykljG7LAqYhxUka9PO0/x3h8cTppZNDgptnhgrU=) 3: GAkBUkP8O44HfA6UaUDucppg-zQ.roa (hash: H7w0TIFmG05ogbUF44/87E8bKqO7AppZ4RVUKMn1LjM=) 4: TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa (hash: gXAZNWfcjeZpPsYrp9FhwN0x/FJK/I6F7O8+Py5tCqI=) 5: cYgMOmj6u6TwRZVxPY0GRuR_57c.roa (hash: PFEwcIm0GvfowU+QS3ePDAQm79limgzxJJZAQhsXoQM=) 6: gq-wS1-FKcHhFx26F3VsD_Kp72Y.roa (hash: TF4H2aT6JRXNsprJBLWhkIJdEFblvAAuKU3lRYmbao8=) 7: n8m0xVPUJ7sSm50Su5RRDOcBypY.roa (hash: gyRmAMA/LaYNtHFV0LdlYDTpgJV5V6CTCcVfo5PwA40=) 8: vdMRJ5aeJMjPnWdXFF9CeJUbNPU.roa (hash: MD01V65vyHAdTu6f2/Lr5HRyugzVDjKE7/qB7jMnsR4=) 9: zkxMCcGoaYzw6MrkLQogXuC04_I.roa (hash: 7Y4R/zBLEg3xanLWgu8jUnFDOXWl73uX33xCHdArZKE=) 10: zt_YvrwgG8U0qs9ZxDXsKeZ9EVw.roa (hash: t0BRGsA3yMu+tS9ODb23oVtqY4JggUZywQTE6WaROKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:16:c3:a0:0b:9b:4f:34:3e:ad:1f:80:16:b3:e8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Mar 26 03:01:13 2026 GMT Not After : Mar 27 03:01:13 2026 GMT Subject: CN=a42ad228d79c16102fe378b2e8b0c5970646ce5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:e8:d1:b2:92:29:09:d7:50:2a:67:2e:d3: d3:7d:da:7b:c8:4c:3c:94:65:65:61:ae:58:34:15: 1a:af:90:99:cf:81:fe:de:57:51:f8:96:fa:da:82: 94:66:5c:71:36:3e:84:51:42:46:72:6f:b9:62:e8: ee:0a:4f:36:5f:f1:da:d9:fc:f8:be:d8:46:b0:ff: 3c:fe:84:c5:6c:b8:32:78:df:ce:b8:1f:f9:03:f9: fb:59:33:5f:55:a4:d0:53:60:a0:2e:96:d4:88:5e: 7a:07:ac:7d:20:8c:1e:ff:ee:81:41:7f:6a:81:c6: b2:ef:66:d0:0a:0b:f4:1c:da:23:22:8c:6f:29:e0: 57:6f:aa:99:86:17:d0:83:0b:03:8b:e4:93:75:77: 72:87:21:68:4f:20:2d:51:3e:bf:48:36:e5:11:ba: df:23:07:94:2b:8e:c9:10:1c:a8:9b:02:7e:e0:33: f7:c7:99:51:c7:d6:d6:4b:3e:66:be:dd:b9:80:95: 15:7b:28:17:b8:8e:4e:be:e9:bb:f9:fc:c4:76:d0: 73:39:0f:c1:65:7e:4e:e1:28:44:b3:9a:9b:b4:f6: 5b:66:6f:93:57:6d:be:45:67:60:cb:f3:fc:60:9e: 50:1e:24:d9:d9:09:bf:2f:ad:92:2f:df:6d:b3:dd: d0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2A:D2:28:D7:9C:16:10:2F:E3:78:B2:E8:B0:C5:97:06:46:CE:5C X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:9e:7d:4f:cd:6b:16:98:cb:38:91:77:a1:e8:9d:fe:a9:94: a5:2f:88:e4:a8:ed:44:98:18:16:8e:11:db:2f:0f:4d:d6:74: 68:ab:af:de:6f:62:dc:b8:90:c3:06:b0:e0:1e:28:a7:f3:4c: f1:ca:c0:c8:a6:27:ef:b8:9d:cb:8b:b3:c9:8d:81:bb:d0:42: 65:ed:d1:b1:f7:b2:eb:5d:d6:7a:54:f5:32:49:8d:06:76:d1: b2:b1:37:6b:a4:2f:57:8d:30:4c:d4:78:3b:59:a6:79:25:7d: 4c:d3:1e:60:e6:9c:9a:ea:c1:f9:cd:48:d5:d1:73:5d:57:9d: de:f0:be:b8:04:7e:c2:19:a9:fc:44:a5:46:20:14:c4:fb:1e: c6:4f:20:c7:e5:b6:d0:19:ab:29:01:29:d6:df:2a:96:37:57: 85:40:30:df:ea:bf:5b:de:cf:a0:8e:42:2f:ee:28:19:b0:48: c8:0f:21:52:a9:f7:d7:3f:9b:b0:b6:07:a8:af:e4:3f:f1:60: 18:12:c2:0e:fc:7d:3d:f4:89:bd:83:b4:ea:7a:b4:d5:64:a4: f3:b7:a8:79:30:b1:7a:0b:17:9e:37:1a:dc:e6:ca:09:56:68: cd:32:a6:5b:fd:93:c7:50:c2:8c:21:80:5a:a9:3b:9b:0a:b2: 0b:ed:92:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFsOgC5tPND6tH4AWs+iQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjYwMzI2MDMwMTEzWhcNMjYwMzI3MDMwMTEzWjAzMTEwLwYDVQQD EyhhNDJhZDIyOGQ3OWMxNjEwMmZlMzc4YjJlOGIwYzU5NzA2NDZjZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulPo0bKSKQnXUCpnLtPTfdp7yEw8 lGVlYa5YNBUar5CZz4H+3ldR+Jb62oKUZlxxNj6EUUJGcm+5YujuCk82X/Ha2fz4 vthGsP88/oTFbLgyeN/OuB/5A/n7WTNfVaTQU2CgLpbUiF56B6x9IIwe/+6BQX9q gcay72bQCgv0HNojIoxvKeBXb6qZhhfQgwsDi+STdXdyhyFoTyAtUT6/SDblEbrf IweUK47JEByomwJ+4DP3x5lRx9bWSz5mvt25gJUVeygXuI5Ovum7+fzEdtBzOQ/B ZX5O4ShEs5qbtPZbZm+TV22+RWdgy/P8YJ5QHiTZ2Qm/L62SL99ts93Q6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQq0ijXnBYQL+N4suiwxZcGRs5cMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZ59T81r FpjLOJF3oeid/qmUpS+I5KjtRJgYFo4R2y8PTdZ0aKuv3m9i3LiQwwaw4B4op/NM 8crAyKYn77idy4uzyY2Bu9BCZe3Rsfey613WelT1MkmNBnbRsrE3a6QvV40wTNR4 O1mmeSV9TNMeYOacmurB+c1I1dFzXVed3vC+uAR+whmp/ESlRiAUxPsexk8gx+W2 0BmrKQEp1t8qljdXhUAw3+q/W97PoI5CL+4oGbBIyA8hUqn31z+bsLYHqK/kP/Fg GBLCDvx9PfSJvYO06nq01WSk87eoeTCxegsXnjca3ObKCVZozTKmW/2Tx1DCjCGA Wqk7mwqyC+2Stw== -----END CERTIFICATE-----Generated at Thu Mar 26 06:45:32 2026 by rpki-client