$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: fnpvXfzv6LVJS1JtFxDgV+Bb6mF9MtU+hU9ZawHqNVY= Subject key identifier: 09:65:DC:72:C5:65:A1:88:62:F1:1E:17:BD:39:85:FC:BE:8D:9D:11 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019D284DE127163CAFA0D9745F882A4E1538 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 189C Signing time: Thu 26 Mar 2026 04:01:25 +0000 Manifest this update: Thu 26 Mar 2026 04:01:25 +0000 Manifest next update: Fri 27 Mar 2026 04:01:25 +0000 Files and hashes: 1: 9Z9moOZMdjY1r0zisn1yG40T_Cs.roa (hash: 4qv97AavysG7gQ9zDpXhKGyy5MypOYdpddszCCL6JGA=) 2: Ax8-r-En_jV12HWCMP3xAmC-QDo.roa (hash: DTlvOtpcsab+lqdAbmVznR+Ar32K7k6eVkxqJFUVOG0=) 3: ChgBgVFuABIzwh66-TkKdZEX1iA.roa (hash: SVqR9Q8a5Hcp/asmqFGw5DEUG2TomIZWg2fteQrE3uY=) 4: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: SOZ/AkeXO/v6x+kIlWPzxORhlYIrFLcwMYTnSeOsLS4=) 5: M4VIxAsjnWUbH6wj5hZONC0aLhc.roa (hash: gupzBjiIjp4MhIgh1kYK1O3xRS4nwuhoT78Vii8+xOk=) 6: M4YwzZnQpTpEIjJJQTa20n-PbwA.roa (hash: X4daXjz6hYdjbJNKtkZTJmDcLRTv0QGjJCHi4DW4ijk=) 7: NaxJ_NtLLDPENMvIhnNYLJraogc.roa (hash: 9owN2kSmqV6nvpiOXXWT2m/HU07KMLcW8IIUJ10ZKd0=) 8: YPx2c3RYrM8Uay8p-Jhbf6qFkfY.roa (hash: jPgFrnzK9XdaahAH17/G4k3SsWjfA1hQSptv2wqHEDM=) 9: f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa (hash: EgTfusTv2nkLjwq0TfPSW/EGFdZmepXuwghsp1RK2Ig=) 10: fF_JColRqe6k3b-dBUqfmSs3itY.roa (hash: QBb4ezm0BlO8dOz2Yfe88q5rYV5TSLEjJ01d5h6AZcw=) 11: hJODD-xae4GPfgCvm7u_1biBHW8.roa (hash: bwel4sYC9ovxgVCjU95RSPer2KsFebCbfOZutFD0aHE=) 12: ls2jvaZs7k_InUrbbNoPbvZ36vk.roa (hash: fIXofnEy1iYP/NYn3TCqqqwLir6u1PH+g1WJfBcU9ns=) 13: qPCjKFrGlCNUHjx_vor1JA3jHb8.roa (hash: l+K/oYAVSbzs8nUlzmSSgb/G/fJy3yi4irQ8IvElAgY=) 14: s7oo8h_lGdHA5B183SrGieJU08Y.roa (hash: jWktarjEvs1eZ/T6K2gwxO8ZGGgdn9UvYfnH2e8sE8Q=) 15: uJw0ADc8Jn_tUrRAslqVcsOv5r4.roa (hash: tvo4GlgyFEqW+8NWX03vTaovLhf5PDKLye47pitknWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4d:e1:27:16:3c:af:a0:d9:74:5f:88:2a:4e:15:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Mar 26 04:01:25 2026 GMT Not After : Mar 27 04:01:25 2026 GMT Subject: CN=0965dc72c565a18862f11e17bd3985fcbe8d9d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e6:c6:75:4b:71:32:e1:c7:ff:ee:c9:8b:44: 03:2b:6f:7d:a6:15:09:5a:1a:85:d3:4c:69:79:82: 8d:27:4d:5e:d4:bc:ad:ea:d1:8f:4d:5f:c4:ca:af: d7:a5:5a:56:ff:b4:b3:11:d3:d5:c6:ac:d2:0b:9f: aa:a8:61:40:c3:6f:94:97:d1:c9:b2:72:bd:6b:41: 0a:49:93:e2:24:68:24:ea:f9:bb:cc:2c:d7:04:19: a7:6f:35:7d:08:f7:28:39:05:b5:b2:e2:ac:b1:b5: db:4e:56:db:05:5b:a7:71:41:1f:06:7b:24:d2:d5: cb:bd:63:62:76:54:82:44:82:80:d0:f0:69:ce:8f: 81:2b:3a:f5:8b:66:b8:3c:f6:6c:a9:c6:8f:a4:ae: c2:0a:05:54:16:c1:f6:68:59:19:de:1b:7b:e1:5b: 7f:a0:87:67:f1:07:ef:b4:74:35:30:b7:3e:41:76: 38:32:c9:ae:06:7c:b2:56:c7:fa:fc:c0:f3:60:cd: 0d:a9:1a:68:6c:7b:f4:b5:49:dc:c2:82:9a:9d:84: ed:0a:8a:8a:a1:fc:4e:97:41:91:34:64:e0:d3:6e: ee:14:dc:78:e2:30:ad:41:2b:4a:c2:f1:b0:2f:7c: 65:d0:72:10:c3:38:93:d2:81:ae:5f:a8:20:6f:48: af:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:65:DC:72:C5:65:A1:88:62:F1:1E:17:BD:39:85:FC:BE:8D:9D:11 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:47:14:fc:93:51:2d:42:ef:79:e7:de:20:fb:c8:0b:4c:3e: 2b:1f:37:93:a7:83:1b:e4:e6:31:46:f2:f9:48:ae:14:c8:ea: f2:14:0d:87:4f:64:56:70:49:86:6f:fa:4d:25:fe:58:8e:4a: 4e:b2:77:cd:b2:ab:ec:f1:f0:95:5e:3c:d5:bc:c7:0d:8a:b7: a7:ef:4b:9a:76:0e:63:29:32:93:e5:58:8e:b3:b6:a6:0e:6d: 96:b3:6d:9a:a4:9b:12:b6:22:55:3e:df:2e:c7:20:97:2a:d6: bc:b8:a0:9d:e2:19:61:ef:e1:15:45:c6:b2:69:62:31:31:7c: ee:2d:dc:b5:3c:25:12:fe:95:b4:79:47:2d:61:f0:a1:2a:de: 66:d6:7c:ad:52:bf:c7:02:c4:df:86:22:a0:ab:2c:56:a3:71: 9e:0b:a0:4a:dc:3b:52:ee:0c:3c:a4:38:c3:66:b9:3b:56:83: d1:58:51:90:61:cc:35:51:0c:6a:f1:30:16:fe:cf:61:4d:f6: f8:00:f5:d7:ca:8d:a8:0f:86:63:d5:e1:e3:8f:24:91:89:18: db:86:56:b8:6c:ee:35:26:fa:fb:b0:d7:83:67:dc:6c:d0:43: 68:8b:d1:03:74:2e:8c:49:05:af:fe:4a:3e:31:6f:f2:b9:8d: da:b3:f3:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTeEnFjyvoNl0X4gqThU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwMzI2MDQwMTI1WhcNMjYwMzI3MDQwMTI1WjAzMTEwLwYDVQQD EygwOTY1ZGM3MmM1NjVhMTg4NjJmMTFlMTdiZDM5ODVmY2JlOGQ5ZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+bGdUtxMuHH/+7Ji0QDK299phUJ WhqF00xpeYKNJ01e1Lyt6tGPTV/Eyq/XpVpW/7SzEdPVxqzSC5+qqGFAw2+Ul9HJ snK9a0EKSZPiJGgk6vm7zCzXBBmnbzV9CPcoOQW1suKssbXbTlbbBVuncUEfBnsk 0tXLvWNidlSCRIKA0PBpzo+BKzr1i2a4PPZsqcaPpK7CCgVUFsH2aFkZ3ht74Vt/ oIdn8QfvtHQ1MLc+QXY4MsmuBnyyVsf6/MDzYM0NqRpobHv0tUncwoKanYTtCoqK ofxOl0GRNGTg027uFNx44jCtQStKwvGwL3xl0HIQwziT0oGuX6ggb0ivCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAll3HLFZaGIYvEeF705hfy+jZ0RMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0cU/JNR LULveefeIPvIC0w+Kx83k6eDG+TmMUby+UiuFMjq8hQNh09kVnBJhm/6TSX+WI5K TrJ3zbKr7PHwlV481bzHDYq3p+9LmnYOYykyk+VYjrO2pg5tlrNtmqSbErYiVT7f LscglyrWvLigneIZYe/hFUXGsmliMTF87i3ctTwlEv6VtHlHLWHwoSreZtZ8rVK/ xwLE34YioKssVqNxngugStw7Uu4MPKQ4w2a5O1aD0VhRkGHMNVEMavEwFv7PYU32 +AD118qNqA+GY9Xh448kkYkY24ZWuGzuNSb6+7DXg2fcbNBDaIvRA3QujEkFr/5K PjFv8rmN2rPzHg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:09:44 2026 by rpki-client