$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: kiAH2Th5cnZyUogkPJUI2ll3VrAv9dYL5kMrdccv7DY= Subject key identifier: 77:98:ED:19:5C:0C:76:E5:D7:7E:DB:09:C2:9B:68:26:FA:B8:24:A0 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019D277297ECB10D59F0BCF0891C9A6B2E55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0ABA Signing time: Thu 26 Mar 2026 00:01:54 +0000 Manifest this update: Thu 26 Mar 2026 00:01:54 +0000 Manifest next update: Fri 27 Mar 2026 00:01:54 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: RcNBISbCfA41GD/mxiuTIVPXBpFDK46vAM1E5I07BWU=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: LZ_m2waZIs7_F9DFpQeDZwKSqaI.roa (hash: AswbWRxQk3rPm90PMBMeMwOGoat0R8hOqCGqrGPRnek=) 8: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 9: P12Bd5VdoMxJk2YYVATcG1-aLsk.roa (hash: tMed7m101KjSKZGY84e4m62zANDxSX8qjIVWkfIG7SI=) 10: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 11: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 12: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 13: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 14: k4m5uF6d86bKxXryYJZgXjvW8I0.roa (hash: H2jNyKD+HmfBkpz7JaRABFyLsbIlNp19F4CUBAdQu10=) 15: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 19: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:97:ec:b1:0d:59:f0:bc:f0:89:1c:9a:6b:2e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Mar 26 00:01:54 2026 GMT Not After : Mar 27 00:01:54 2026 GMT Subject: CN=7798ed195c0c76e5d77edb09c29b6826fab824a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fc:50:b7:a5:e6:b8:8a:fa:43:e9:10:ee:4d: 78:91:7e:98:56:b3:83:31:fd:c7:d3:d6:93:0b:88: 39:9b:46:b1:45:3a:9e:ee:a4:83:bb:ef:60:da:72: 48:1b:82:9b:16:c8:01:2c:67:fe:64:c5:36:61:ad: 77:0d:f9:e4:2c:f4:ec:a8:18:dc:8e:70:7e:de:45: 4f:3f:14:be:c8:16:8e:53:16:22:df:72:20:77:2e: a2:ad:4e:32:81:87:ba:a6:78:f5:9d:ba:17:64:b7: f7:bc:fe:54:b3:cf:12:8f:2b:07:5c:a0:f8:4c:1f: 06:ea:02:95:e0:a4:a0:c2:d7:04:de:73:a5:fd:4f: 3f:77:c8:cd:7c:b2:9b:80:cc:81:e6:2c:68:d8:88: b8:ce:26:1e:a4:c2:a7:eb:01:fe:29:8f:d3:ff:40: 61:8f:59:fc:16:d2:22:69:e0:72:5a:63:4b:1d:32: 01:1e:5a:c7:86:75:b4:4e:18:cd:3f:ee:db:98:b3: 20:14:50:df:5b:af:1a:e4:5b:4e:6a:07:8d:73:a7: 37:1d:fe:0d:25:12:7c:f5:f1:dd:ee:f4:6a:ae:7a: b7:dd:a8:90:f3:5b:ce:1d:00:0e:83:a5:6e:8e:f0: 78:ef:38:7a:91:ca:65:31:b6:74:30:bd:8b:61:49: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:98:ED:19:5C:0C:76:E5:D7:7E:DB:09:C2:9B:68:26:FA:B8:24:A0 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:dd:cd:70:08:0f:6c:4f:e1:52:d1:04:3c:04:e3:80:54:38: 48:74:4c:3d:ee:90:2f:54:7b:5a:74:04:05:b3:af:a3:d8:3a: d5:51:0e:ac:e8:bc:07:46:d0:72:a3:00:a9:68:56:a9:12:d2: 23:8f:52:76:c1:8b:f8:c8:2f:7d:b6:2d:ac:ef:20:1f:a2:a8: de:d1:2f:49:f6:68:c3:0a:38:94:30:dd:6b:35:f0:2d:99:47: 69:4f:30:13:17:4a:12:55:c1:70:6e:fc:2e:a7:75:0d:dd:0c: 19:7e:55:f8:f7:05:38:22:d3:38:54:17:73:98:1f:31:1b:ce: 0c:af:7e:5d:6f:5f:d6:49:e5:df:0d:a6:4b:4e:d4:bc:a0:e5: d8:07:6b:ec:fe:ca:56:d1:e5:1e:9b:8b:54:f1:f1:a2:ae:02: f3:12:7b:61:6d:e7:42:25:fd:fc:89:28:18:c9:2c:c5:05:64: 47:bd:20:d7:43:68:8c:f7:7f:44:4c:42:12:f7:b2:26:24:b3: f5:4e:a2:61:cb:3c:f1:b5:44:ab:c6:b8:cf:bc:04:1a:bd:b1: 87:6e:44:b3:3f:03:53:37:7e:3b:e8:b5:52:33:79:23:2b:70: 1e:8e:dd:7f:58:d5:9d:45:76:ac:12:b6:d6:6c:78:8b:52:29: a3:b4:ed:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncpfssQ1Z8LzwiRyaay5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMzI2MDAwMTU0WhcNMjYwMzI3MDAwMTU0WjAzMTEwLwYDVQQD Eyg3Nzk4ZWQxOTVjMGM3NmU1ZDc3ZWRiMDljMjliNjgyNmZhYjgyNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fxQt6XmuIr6Q+kQ7k14kX6YVrOD Mf3H09aTC4g5m0axRTqe7qSDu+9g2nJIG4KbFsgBLGf+ZMU2Ya13DfnkLPTsqBjc jnB+3kVPPxS+yBaOUxYi33Igdy6irU4ygYe6pnj1nboXZLf3vP5Us88SjysHXKD4 TB8G6gKV4KSgwtcE3nOl/U8/d8jNfLKbgMyB5ixo2Ii4ziYepMKn6wH+KY/T/0Bh j1n8FtIiaeByWmNLHTIBHlrHhnW0ThjNP+7bmLMgFFDfW68a5FtOageNc6c3Hf4N JRJ89fHd7vRqrnq33aiQ81vOHQAOg6VujvB47zh6kcplMbZ0ML2LYUmV7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeY7RlcDHbl137bCcKbaCb6uCSgMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANd3NcAgP bE/hUtEEPATjgFQ4SHRMPe6QL1R7WnQEBbOvo9g61VEOrOi8B0bQcqMAqWhWqRLS I49SdsGL+MgvfbYtrO8gH6Ko3tEvSfZowwo4lDDdazXwLZlHaU8wExdKElXBcG78 Lqd1Dd0MGX5V+PcFOCLTOFQXc5gfMRvODK9+XW9f1knl3w2mS07UvKDl2Adr7P7K VtHlHpuLVPHxoq4C8xJ7YW3nQiX9/IkoGMksxQVkR70g10NojPd/RExCEveyJiSz 9U6iYcs88bVEq8a4z7wEGr2xh25Esz8DUzd+O+i1UjN5IytwHo7df1jVnUV2rBK2 1mx4i1Ipo7Ttgw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:05:09 2026 by rpki-client