$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: hK1ySrkMSdKxbsmvXMIqUQfEIEU1+77KpkLjMS8hzEI= Subject key identifier: 99:98:28:FF:9F:9E:1F:7F:CA:16:77:C8:A1:9F:FE:53:C7:8E:ED:70 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019D2703B1FA3521CA1014618CE38DFAAF65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 1901 Signing time: Wed 25 Mar 2026 22:00:46 +0000 Manifest this update: Wed 25 Mar 2026 22:00:46 +0000 Manifest next update: Thu 26 Mar 2026 22:00:46 +0000 Files and hashes: 1: 0i_tJFCQkW4BL4d6bXm4WAypJS8.roa (hash: 61MZ18IZL5EgLoB9w4TH7mfQX+7U0VC5x9A0388yn8A=) 2: 0mDShmyQKUp4YdL7Ak2fOwf_ln4.roa (hash: cmEc3xEggewJFYU5aqtKVs0Q4v5k0w3JZFkx4qlV9Wc=) 3: 1-JP0PPtCDIK_UNysSaQZClIqsZk.roa (hash: sfCZXINYiH/YUUcCfwXIvxbn90PofsIEnjQBdiFjFFQ=) 4: 37FmBErOCRsxKQZqtKw_TpsXPeg.roa (hash: dk2f7f5Kg/P6nbGtUsTcUoKtykQN93quUzHoHrPlbUA=) 5: 4rdTxE4U8SWi3axBDMycJ1e2dVc.roa (hash: Xdko31FAcZqa8CKzUmvaPLbn8FzZeXlJr3Mz2L3FEGY=) 6: 59Sth-R3BuV9Hjri6g95SVuIU_8.roa (hash: rE2f8KGpsTiN9qUjtXDjk/27rrXTQHhiM7ABCMeYpTI=) 7: 9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa (hash: GdwVnVj0Er6zQr8pOtzRgza7jVJzxa5V5nFDEZ8imc8=) 8: CA3XMZSRf-G3ODjblICPF-EIxj8.roa (hash: VyF40sc+pRDppM7qNwDKdKVxboVcpPNc0TqHKAIYGnE=) 9: DlbWkC5JlObpaQbh5pYrcOuhUDo.roa (hash: 5ZY0b/IjheGn0WGAGieSGsGNwfBNcd9Ekci2Iu3Ck4M=) 10: LKaOQokfTIgkWBs2UdoqCTA22vc.roa (hash: cUUhEOlVftW9+j+XpaAsAph0Rp9J2xVMMProgn5lBRE=) 11: LNX9e0qM1FUUPu7JPg66r69yK3k.roa (hash: 4hdxVQWJPFAuhVTEnkZxRAKzt32xutYmv7LRrS+WM4M=) 12: LXHUHSO9WQWL1yjZx_1oGkRxSgI.roa (hash: HOm4ChKdSMnn++SpgwP+q1pIqlQSDcmq1lnjp8gr6/k=) 13: P4odDKYu1lCKx-0-6xh-2d3gFVU.roa (hash: pJx8PCnMcEoTQpCvLj2jXwglNIUY3fH2OwKcEuhWXsg=) 14: QGcED9nMBFNEcLIYKfsWpbPgFeo.roa (hash: ZoZ5qhejcJ2eD+U6g8CGcswJ1q+2gIH8nSKoh9/Kbps=) 15: T0yNiTnMr7rQj6L4yFcQz5luZuc.roa (hash: qkIXR7MhpFqaBJh+vVhJ5yECXOO2wVNGqePTqIktFFM=) 16: WtbHisRdncnw4HB-C-Q2nOatpCk.roa (hash: 3wmWRlMXTcqOjL6bnR/KTtOAF4ruJh0llk95iowxjzE=) 17: Yu_uuzMGePwC0icaYNERVoH0Cfk.roa (hash: PATzSiQXd51zhFdnNpl0DeghvMrZihxoQe+PXsEdhqA=) 18: Z4tsMasr475PZDRWvm4ex7ESXO8.roa (hash: x1q/+0sH/c43tTyBJa6b3wh2hl1q14JnzKQuZGqEr1I=) 19: Z5QikMa7UwGfn8uO2JzMrRFXYnY.roa (hash: U7DHGYIkh2PVaJpwB3Rs6rnlNqHm+IBWFv5Y36W7frQ=) 20: _Z4F7M-QmFI0Z18UQdlG6FBfQ7o.roa (hash: qJW2rDHAQqCfDrhYBEnMSMAxF6KCHBOPVWkKVY8Nuv8=) 21: b9yPzny7g7NzZoMSg-I0-4xYJRQ.roa (hash: oex26xfzNOy0QvV3r0CTF5Po3sMUSsRDc+0RGORVsd4=) 22: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: OzRjvq81CiVsWkXj9jQpUcHdY0vcFO60KTjWcye+M6s=) 23: doMjCvh-T_oVkJKD3Y7qOZoudQA.roa (hash: O0rnzXZPufM0mBq+veKdhSLIRnUWNnJekiSLuJW+WPg=) 24: f8cXMfB8GmIppgsZFcI-OCvQxNk.roa (hash: C/qkMAbaZbD1CDux6NhG+NBRCWcc4xbDi8mJQpA9u78=) 25: fW59nKWFAAcX3FkGdJCNC4LY0lU.roa (hash: QrZ99mG5ipIB8lihFmB86+BQ62v5THWSecfMtXAd/Vk=) 26: hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa (hash: /DoibVc0zt1dXzmqKhW2/HUrHirpTFgRWlWufv4zCoY=) 27: iTv_taBhSWWSwucljCvdm_j4RW8.roa (hash: GE2aWALIL/q/9QPvVk6yJa+XbND+dNPP+iVv+vbA798=) 28: iqkz-oFIpTUAukJ-q0KYzZGnhbY.roa (hash: 4JwiIgby6A2ltqK6a4PhfhVkPMKWfaYDYeB6aMX/De4=) 29: jxE-bqQIw7U79IbBizQW2pIQJjM.roa (hash: s23hU/sL0N2hE6GCP2WlFxNdJxuwnkbuT42NWpGSIOw=) 30: kepdZXENoY0lFOiOd2VYC5Jt8PU.roa (hash: bBmIVbb4z4z4JQQlPc3j4zkDZyWk/Dmtse596NYk1Vs=) 31: mz3LKflSaCjzbLbt50UYZRI14QU.roa (hash: R+3MLAMskLr07qEIftdxyai6y/lFHGIWJS1jtU8VQFw=) 32: q4er2ti9h_W7MKRTNBtj0R5wg8I.roa (hash: Y7raLSBcr0F4VthCcXXBIhwj7MwB/MaClEuc9miqnEI=) 33: rTAcqrsLjdQzWLiPeTE0J8tFjHs.roa (hash: kpmFc9kxITW5Y/O6sK7eQ8xr12ovnarFA8jerArDTmw=) 34: sLY3G1xdCHy9saTyO6qv4H647-I.roa (hash: /DGNJIVWB/YvwBgoQBpym5udAedp+k63mdUlTFq/BSw=) 35: sa0irmG5fTuP-s-e7ehVBplCJx4.roa (hash: 7SZESPqbjMHr+1YpDP1XwHSl42AkB6k/wkqvHyEDf5U=) 36: wA9ChWaX9aTjQjNN5mYeaC542Nc.roa (hash: uwS9DbntInTGgRyBcScvO12ZNTWYbWh0ii3LNRApI90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:03:b1:fa:35:21:ca:10:14:61:8c:e3:8d:fa:af:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Mar 25 22:00:46 2026 GMT Not After : Mar 26 22:00:46 2026 GMT Subject: CN=999828ff9f9e1f7fca1677c8a19ffe53c78eed70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:d5:a9:50:ca:ec:16:a8:bf:5c:35:59:87: 8e:cb:ab:09:e7:0c:0e:f0:e2:15:af:7a:58:48:40: 20:d4:00:24:3c:8a:d1:06:4a:c3:2d:db:27:1b:b2: db:02:53:05:23:1e:e5:29:37:7b:db:ba:c7:0c:e3: ee:c3:e8:4b:64:a3:f9:49:87:f9:a7:4b:d3:78:18: e0:3b:74:2b:e0:64:af:dc:70:32:c5:4a:dd:eb:d0: 3a:14:58:a5:82:d0:9b:ab:8c:3e:03:f1:20:fa:b1: 13:50:c1:52:2f:bd:4a:35:3f:2b:99:26:e9:15:8a: f4:0c:56:54:92:af:ee:3a:ca:71:6e:71:a1:f9:4d: e1:9b:57:b6:cc:c9:72:34:41:e1:f7:d5:dd:91:df: 83:bc:15:09:d3:49:51:e2:63:54:d7:4e:81:02:dd: 34:08:30:81:a3:c9:2b:8a:fe:73:74:8f:ee:60:ac: d0:4d:c3:cd:db:b2:03:86:71:27:09:57:5c:ed:f0: 25:bd:ed:19:a2:45:8d:a1:12:98:e9:40:17:c4:6f: 2b:76:69:52:27:f7:de:27:bc:7c:ec:e4:d6:fd:01: ea:85:9f:68:4d:d5:60:11:96:8e:64:fc:08:8e:02: 94:b5:ee:24:82:5c:d2:2e:ac:8d:11:2c:48:39:92: 05:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:98:28:FF:9F:9E:1F:7F:CA:16:77:C8:A1:9F:FE:53:C7:8E:ED:70 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:27:cd:0f:fa:9a:7c:0a:a4:64:62:48:87:bf:33:42:37:da: b7:3b:9a:c0:6f:c7:b4:52:f1:e2:f6:0f:bd:5f:27:d1:b0:73: 0a:3f:a3:27:27:7f:cb:26:60:50:b1:68:dd:a6:c5:98:64:c8: 30:91:59:54:13:d0:46:1b:e1:b5:fd:1e:96:3d:70:4c:18:30: 9f:4a:dd:af:f4:1e:b4:b2:e4:c3:92:76:d2:ea:53:85:4b:21: 64:d4:e4:10:fa:8a:f3:50:86:8c:db:b5:31:48:b1:18:ba:1b: 14:3c:9c:33:a0:c8:19:7d:af:05:71:0b:93:bd:e5:eb:fd:ab: 5d:de:24:94:94:9a:d1:8d:b2:74:fe:eb:05:bb:ce:65:e0:89: 8b:71:2b:23:aa:3c:2d:a2:8f:56:f0:78:28:6c:b8:57:9a:8c: 82:7c:19:b0:d4:4b:c3:07:78:42:0f:52:09:26:df:47:c1:3a: e7:cf:1b:a2:79:1d:ab:ef:9c:a7:7d:0d:eb:12:26:b6:a6:61: 90:99:5f:e3:d6:a5:70:43:13:9f:fc:9c:98:df:b3:66:92:d7: f8:32:96:a0:19:ea:96:59:79:78:d5:7d:60:8b:81:88:07:be: 08:67:96:a5:21:53:86:2e:9a:14:18:ae:7c:d2:8e:50:90:d1: 2a:80:73:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nA7H6NSHKEBRhjOON+q9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMzI1MjIwMDQ2WhcNMjYwMzI2MjIwMDQ2WjAzMTEwLwYDVQQD Eyg5OTk4MjhmZjlmOWUxZjdmY2ExNjc3YzhhMTlmZmU1M2M3OGVlZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15bVqVDK7Baov1w1WYeOy6sJ5wwO 8OIVr3pYSEAg1AAkPIrRBkrDLdsnG7LbAlMFIx7lKTd727rHDOPuw+hLZKP5SYf5 p0vTeBjgO3Qr4GSv3HAyxUrd69A6FFilgtCbq4w+A/Eg+rETUMFSL71KNT8rmSbp FYr0DFZUkq/uOspxbnGh+U3hm1e2zMlyNEHh99Xdkd+DvBUJ00lR4mNU106BAt00 CDCBo8kriv5zdI/uYKzQTcPN27IDhnEnCVdc7fAlve0ZokWNoRKY6UAXxG8rdmlS J/feJ7x87OTW/QHqhZ9oTdVgEZaOZPwIjgKUte4kglzSLqyNESxIOZIF3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmYKP+fnh9/yhZ3yKGf/lPHju1wMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuifND/qa fAqkZGJIh78zQjfatzuawG/HtFLx4vYPvV8n0bBzCj+jJyd/yyZgULFo3abFmGTI MJFZVBPQRhvhtf0elj1wTBgwn0rdr/QetLLkw5J20upThUshZNTkEPqK81CGjNu1 MUixGLobFDycM6DIGX2vBXELk73l6/2rXd4klJSa0Y2ydP7rBbvOZeCJi3ErI6o8 LaKPVvB4KGy4V5qMgnwZsNRLwwd4Qg9SCSbfR8E6588bonkdq++cp30N6xImtqZh kJlf49alcEMTn/ycmN+zZpLX+DKWoBnqlll5eNV9YIuBiAe+CGeWpSFThi6aFBiu fNKOUJDRKoBzyA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:35:00 2026 by rpki-client