$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json) Hash identifier: Nfx3rOUUCdnuRc3LBu/eIf0pECUHHnSAEsEgi9DppvM= Subject key identifier: 67:50:1A:BA:D3:B2:95:99:BC:86:4F:E2:E1:DB:58:C7:5E:D7:AF:8F Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Certificate serial: 019D27DF62462D9D0AFCB448458AC8AB08D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft Manifest number: 18D8 Signing time: Thu 26 Mar 2026 02:00:44 +0000 Manifest this update: Thu 26 Mar 2026 02:00:44 +0000 Manifest next update: Fri 27 Mar 2026 02:00:44 +0000 Files and hashes: 1: 29Rv_UEl6-ilxixgPbwouEBeR9I.roa (hash: NqpV6epyV/V/BxqmnDQYUJhls660HR8Q3Pqa7VupQfg=) 2: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: HNlKZJGoD7FNPGgiM6CuoC2xPIBQ30q3WCiMtDxgrjQ=) 3: AAWvDfwb2jQSUWa9BYHOOcjPqc8.roa (hash: TG2n+ec91o1/npZ11uH5oNK4E3sR3ZKcNMfWgBS+6WU=) 4: Ahsz-tNL3LF_YjxGflfsbWY2EXY.roa (hash: IDB823/zK/udBkADZfcrEWPlrqEtUTwrSKR6Szbuvag=) 5: B6KVvgx5TM8VN3l8pwcEtXd1Zv0.roa (hash: 8nF8dktPdwqwoKApiZ3hvMdTDPbdz2wRKZCsJzWa0NI=) 6: BOOJwgifZtRIWDuJkBxvnWoyiJ0.roa (hash: V/G6nvIlcZvYbQSr2QvCL0JgCDmAS2PVZl2IojBI82Y=) 7: JqRZJ3yZS2NGw3E4q9F77DlBVPU.roa (hash: UPvHDY+QZmptAo1aMBQZCt3JHBBqlqPm63jjsEBEq9k=) 8: JrXLq8dLFnu6GeVno_RRWYa64r4.roa (hash: aZ5Me39yyOoLOgsUEQmTWYq2HY2d0HAc5EBlhh5nYEo=) 9: PBQ-z6lWkll5_xzrR2WCQOr2Qzk.roa (hash: /tL6eTwfwCwpcz2/AVK6n7Lt7RJFOtU3gDEp7Zh35Cs=) 10: Ucca3RaZdjMWnn67R04BLea-ttU.roa (hash: CzJfRjlyJl7P43rMU8tIstGzfSxyVareresLUP4UMaU=) 11: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=) 12: aMYCwmkdSXX4ZfDKhC1rWAMOjYI.roa (hash: nmzakxTfwrDVurY8/As0jECtOIx0LqRTcRnAOJxRKNk=) 13: b5PQ0LP3dQvaroi8uqIK4qRY8fE.roa (hash: XUgOw13/DeGWuBII7wDdMVowQZGJyVYWSAsGuDpvOtw=) 14: fBTFHnUcRAtyGAdRJfnv6GUqyj8.roa (hash: auv9a0uJJR7wurJYNrtnpCQbXoxt1QEVkQ8kZNtsP2o=) 15: hpLmsb9Hy7pZmhXeDib_2XTyO1Q.roa (hash: QSWqVZZknAznYtnkjAMR6wQOMbu0S23SFjRWErscdcQ=) 16: vGXTEVlZEvvy_OO65LppPnLWzds.roa (hash: qVUACJdOYqZMXJXhZVtMk9bckrNCEf6pmzMIUiKZwR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:df:62:46:2d:9d:0a:fc:b4:48:45:8a:c8:ab:08:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Validity Not Before: Mar 26 02:00:44 2026 GMT Not After : Mar 27 02:00:44 2026 GMT Subject: CN=67501abad3b29599bc864fe2e1db58c75ed7af8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d6:7d:f6:d8:0e:60:09:19:77:57:66:e3:67: bc:9e:bd:79:2c:c8:e2:a3:32:5f:5a:76:f5:5f:09: c0:c4:d5:82:49:66:96:38:9d:12:0a:2a:0a:87:29: bd:af:38:71:f7:28:14:00:de:db:69:40:96:c5:ef: aa:90:b2:70:5e:4d:b4:18:a1:3c:32:72:22:2e:3e: 1b:a3:6a:72:bd:e7:d4:f9:25:0a:50:36:67:0d:b8: 4c:1b:28:60:d7:85:8c:ec:aa:14:86:76:97:1c:58: 6c:a4:dc:ad:e0:36:a7:53:f0:75:b2:1f:90:83:aa: 53:c0:70:a9:17:df:50:90:97:a2:25:69:da:f9:bf: 9a:95:3e:cc:5c:70:37:87:b8:1f:0c:b1:23:8b:72: a0:51:7e:0b:a3:d6:0f:57:62:de:18:23:b4:b7:b9: 8c:26:f9:4d:e3:53:7c:7d:0b:67:70:42:9e:49:82: c2:96:a0:02:d4:82:bd:09:b4:37:ab:21:da:6d:a3: b4:c4:1f:fc:0f:fc:15:a0:34:2c:a6:73:49:1e:5d: 95:8b:4a:2b:bf:32:cf:b0:9e:77:ec:a6:9f:00:34: 8b:5a:fe:49:b4:b3:7d:2c:82:81:ff:e3:2b:83:d3: 8b:d4:6c:f8:51:38:cf:9a:d9:0e:3c:91:c2:8e:1a: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:50:1A:BA:D3:B2:95:99:BC:86:4F:E2:E1:DB:58:C7:5E:D7:AF:8F X509v3 Authority Key Identifier: keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e3:e5:66:54:29:a4:18:1e:b3:42:7f:23:10:8c:83:25:0c: 87:9d:31:7e:5a:9f:77:67:bc:1c:83:61:90:07:46:c5:34:7a: 8a:7d:f3:5f:0f:53:86:39:d2:b2:f2:87:17:9f:29:8a:de:69: 3a:80:08:08:53:59:6d:16:30:52:6d:d4:55:9b:07:23:d6:8e: 08:10:d0:5b:c3:d3:41:c2:9b:97:5e:3c:69:47:40:0d:c2:12: f2:84:fb:02:64:7b:54:f0:10:36:47:7c:af:fa:84:26:e3:1b: 6b:5d:40:90:a7:e4:45:47:76:5c:13:b4:d4:1b:83:b7:b2:e4: 2a:cf:df:0f:eb:4d:1b:68:ec:4c:83:b4:b8:cb:2f:b8:1b:4f: 05:d6:72:99:e8:c5:15:53:a0:98:89:06:bc:68:40:2d:f0:96: 3c:96:fb:41:3d:8f:d3:19:a2:bf:74:c5:c9:23:fd:cf:b4:21: 83:c7:7b:6e:87:ae:e5:a1:f8:65:86:f5:e6:d1:b5:cb:84:f5: 2a:5a:73:9f:af:b0:75:fe:87:8f:39:b5:76:68:26:48:e9:1b: ef:85:e9:ef:10:83:81:0b:e6:79:49:1b:01:79:10:bd:86:fe: 3c:da:79:72:bb:b6:a1:4f:32:e5:96:82:71:e8:8d:bd:2b:c2: e8:b8:cc:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n32JGLZ0K/LRIRYrIqwjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz ZWRmNGIwHhcNMjYwMzI2MDIwMDQ0WhcNMjYwMzI3MDIwMDQ0WjAzMTEwLwYDVQQD Eyg2NzUwMWFiYWQzYjI5NTk5YmM4NjRmZTJlMWRiNThjNzVlZDdhZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdZ99tgOYAkZd1dm42e8nr15LMji ozJfWnb1XwnAxNWCSWaWOJ0SCioKhym9rzhx9ygUAN7baUCWxe+qkLJwXk20GKE8 MnIiLj4bo2pyvefU+SUKUDZnDbhMGyhg14WM7KoUhnaXHFhspNyt4DanU/B1sh+Q g6pTwHCpF99QkJeiJWna+b+alT7MXHA3h7gfDLEji3KgUX4Lo9YPV2LeGCO0t7mM JvlN41N8fQtncEKeSYLClqAC1IK9CbQ3qyHabaO0xB/8D/wVoDQspnNJHl2Vi0or vzLPsJ537KafADSLWv5JtLN9LIKB/+Mrg9OL1Gz4UTjPmtkOPJHCjhpriwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdQGrrTspWZvIZP4uHbWMde16+PMB8GA1UdIwQY MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt OTQ0OTk1N2ZkNWE1LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1 LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOPlZlQp pBges0J/IxCMgyUMh50xflqfd2e8HINhkAdGxTR6in3zXw9ThjnSsvKHF58pit5p OoAICFNZbRYwUm3UVZsHI9aOCBDQW8PTQcKbl148aUdADcIS8oT7AmR7VPAQNkd8 r/qEJuMba11AkKfkRUd2XBO01BuDt7LkKs/fD+tNG2jsTIO0uMsvuBtPBdZymejF FVOgmIkGvGhALfCWPJb7QT2P0xmiv3TFySP9z7Qhg8d7boeu5aH4ZYb15tG1y4T1 Klpzn6+wdf6Hjzm1dmgmSOkb74Xp7xCDgQvmeUkbAXkQvYb+PNp5cru2oU8y5ZaC ceiNvSvC6LjMPg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:33:43 2026 by rpki-client