$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: ORdIy9QVeJXAJnweHjCltCuv942McI6fkl/inS6Ubn0= Subject key identifier: 3C:BF:D0:E0:61:9A:01:CF:EE:15:83:40:4E:45:A0:2D:0A:E9:08:BD Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019D2BBCBEBD808EABD5F76AD90B198D329E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1631 Signing time: Thu 26 Mar 2026 20:01:22 +0000 Manifest this update: Thu 26 Mar 2026 20:01:22 +0000 Manifest next update: Fri 27 Mar 2026 20:01:22 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 4LTSiiIXCY2aVQheO-OK2Ks1zVc.roa (hash: /HUlN5mU4nQlfn3Lbzxe64CdVsxaFWp5WmzIr3dsQ+U=) 3: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 4: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 5: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 6: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 7: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 8: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 9: KiLA-XCCVQ3hp6NK0nSvvdBkVaA.roa (hash: Wrbvgs04+OV9y9FcYP+1OM/PeyM8B8+/OgsBO82HfPE=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 12: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 13: cOMhRxduLw18TIe2EJANKourNbc.roa (hash: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=) 14: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: DjPV4kqrzRwKiSx6JnXDH2MjAsqYjYYa6DyaxDnZcl0=) 15: dZo66_L9wh2qbij7G3JOKCs449k.roa (hash: EcfgXVOvSMiIqr4XDNVO8j7tZpRnQKNduJAQlIX28Ko=) 16: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 17: vNdkeRwM5csqt2VdDCeWXV5Lqcg.roa (hash: 8fLuiRSXi1wlRLB5+uM6MoQhKZD4VrD7fYAS5Z6UVgU=) 18: vR9E1xSnliRW9Usue4V0ADKHiho.roa (hash: S5rMh/OoVyLOT3VDLY9zfWdq9jorvnICYEBPJuWsM0s=) 19: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 20: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 16:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2b:bc:be:bd:80:8e:ab:d5:f7:6a:d9:0b:19:8d:32:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Mar 26 20:01:22 2026 GMT Not After : Mar 27 20:01:22 2026 GMT Subject: CN=3cbfd0e0619a01cfee1583404e45a02d0ae908bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:9d:ba:9d:7c:37:2d:3b:d8:96:1c:ca:9c: 34:59:ba:53:d1:d4:fc:ca:86:d0:d9:67:ab:bf:b9: 16:47:24:9d:e5:9e:8e:34:db:fe:d2:f4:d5:f6:1d: 45:a6:17:51:30:39:58:fa:88:ec:6b:93:28:0d:ad: d8:f3:fb:bd:46:62:2d:3c:1f:21:26:26:32:98:94: 75:42:be:51:bd:2e:85:f7:cb:ee:80:83:22:24:ea: a2:f7:9d:a7:99:5b:be:3d:82:31:2c:b1:d4:b8:b0: c5:cd:af:38:de:21:95:73:65:12:f2:f2:9b:cd:dd: e3:f8:ca:98:81:1b:7b:ab:d3:b5:a5:a2:a0:f8:0b: 4f:11:58:19:93:24:5a:04:0b:ab:fd:bd:87:fd:4f: 11:c9:2c:dd:67:54:0d:05:39:89:33:bd:1c:2b:cc: bb:ac:4b:bb:b8:df:51:e9:4f:f9:9f:ba:6d:16:44: c4:b5:ce:73:0c:1f:fc:8a:0c:ea:0c:0a:6b:4d:d3: de:4e:3d:05:71:f6:d6:69:5c:67:a0:92:d6:2a:d8: 77:73:eb:f1:9b:92:d2:db:31:e6:a3:01:a0:fa:e8: 4f:62:1d:d2:27:98:e6:e4:60:9a:f7:13:ab:4e:80: 8c:46:ee:3f:f1:c6:23:2f:54:c6:98:e9:8f:52:61: 27:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BF:D0:E0:61:9A:01:CF:EE:15:83:40:4E:45:A0:2D:0A:E9:08:BD X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ee:c8:15:ad:70:2a:28:8a:17:d7:05:58:5e:2b:bf:37:c4: b6:ee:00:8d:11:a5:22:af:ec:5e:f1:91:ac:3a:01:82:a2:dc: 4e:47:fa:ed:9b:f5:d1:34:93:40:c7:95:4b:d7:28:ba:7d:82: aa:1e:2d:41:fc:bb:fe:1c:86:a4:59:e8:0f:f6:29:e2:52:fb: dc:aa:65:a0:d7:ad:4d:bb:72:b9:54:99:dd:a6:6f:42:0f:3f: 4e:03:b9:4c:9f:aa:61:fb:4c:9a:62:79:a1:eb:a2:71:91:d8: d2:bb:c5:bc:0e:57:90:b8:08:fa:d8:ec:77:1d:9e:8c:7a:80: 36:ff:06:5a:14:49:9d:05:0f:a9:8a:8e:e3:59:5e:97:bf:17: e2:69:2e:99:df:29:9c:6e:73:54:b5:47:4d:d9:9e:8a:1d:f9: 3f:5b:a1:13:e3:31:27:18:4f:08:1a:61:8f:2d:7f:9d:62:34: df:38:8d:30:80:ad:33:d3:12:f0:f5:a5:d7:82:47:cc:72:ac: 31:e1:81:89:07:5c:b6:78:bc:f4:ba:49:af:ba:33:0d:18:85: e5:72:f3:7b:ff:c9:b9:88:a3:de:3a:ae:a4:e3:a9:c0:88:4b: d0:b4:86:6e:46:6a:35:30:76:a0:3f:77:fc:2d:94:11:70:2b: 1e:b7:f9:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0rvL69gI6r1fdq2QsZjTKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMzI2MjAwMTIyWhcNMjYwMzI3MjAwMTIyWjAzMTEwLwYDVQQD EygzY2JmZDBlMDYxOWEwMWNmZWUxNTgzNDA0ZTQ1YTAyZDBhZTkwOGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs6dup18Ny072JYcypw0WbpT0dT8 yobQ2Werv7kWRySd5Z6ONNv+0vTV9h1FphdRMDlY+ojsa5MoDa3Y8/u9RmItPB8h JiYymJR1Qr5RvS6F98vugIMiJOqi952nmVu+PYIxLLHUuLDFza843iGVc2US8vKb zd3j+MqYgRt7q9O1paKg+AtPEVgZkyRaBAur/b2H/U8RySzdZ1QNBTmJM70cK8y7 rEu7uN9R6U/5n7ptFkTEtc5zDB/8igzqDAprTdPeTj0FcfbWaVxnoJLWKth3c+vx m5LS2zHmowGg+uhPYh3SJ5jm5GCa9xOrToCMRu4/8cYjL1TGmOmPUmEniwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDy/0OBhmgHP7hWDQE5FoC0K6Qi9MB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuO7IFa1w KiiKF9cFWF4rvzfEtu4AjRGlIq/sXvGRrDoBgqLcTkf67Zv10TSTQMeVS9coun2C qh4tQfy7/hyGpFnoD/Yp4lL73KploNetTbtyuVSZ3aZvQg8/TgO5TJ+qYftMmmJ5 oeuicZHY0rvFvA5XkLgI+tjsdx2ejHqANv8GWhRJnQUPqYqO41lel78X4mkumd8p nG5zVLVHTdmeih35P1uhE+MxJxhPCBphjy1/nWI03ziNMICtM9MS8PWl14JHzHKs MeGBiQdctni89LpJr7ozDRiF5XLze//JuYij3jqupOOpwIhL0LSGbkZqNTB2oD93 /C2UEXArHrf5lw== -----END CERTIFICATE-----Generated at Fri Mar 27 01:55:46 2026 by rpki-client