$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: SGcQjT95srBcHo2hzuhiEBYU4h77rlCWfMKN1qLU72U= Subject key identifier: 33:BB:0E:88:66:08:9A:2C:DB:66:8D:4C:E8:A3:08:AF:43:37:AA:6A Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019D27A934E0B230521F6EE4D431BE30D51C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 188E Signing time: Thu 26 Mar 2026 01:01:33 +0000 Manifest this update: Thu 26 Mar 2026 01:01:33 +0000 Manifest next update: Fri 27 Mar 2026 01:01:33 +0000 Files and hashes: 1: 1-ccn--iq_ToEq-Oamkl9Luwspkc.roa (hash: +u0oyCBAW71aNY4BwmQ52QOilFQebxXv8bzootxTVNU=) 2: 5MS9Zy98YuF3Bcrl6mc6yIWJ4-M.roa (hash: b+PbHQ1e20uIzoz27PMH3G/dgeCEzPhT1xUbwe84ub8=) 3: 863a8A9lI1u9XrhUEHNCbgA_EM4.roa (hash: s8aH9qc4ALlhdIevLKorthvT27qew3YZnY2zui2yIks=) 4: 95n53MPAl62Bp8gdAx6GUcBNH6s.roa (hash: SFJj356Hap+M3guGi+p9KYnj5vkCtgLdD7PsVKZ7QL0=) 5: Adh10SfAMsK7XIENnMUTzkYMUd0.roa (hash: s24oidV66DuvBTW7O6p2t70lzMwu9lbI3jK2mIwlhKs=) 6: JiUg0kU1PSuNHKsUA2KSNScv8s8.roa (hash: 3ZAQiyyrgoPYw51cxNpeaspKkodxmry7TXFI3ERIuNE=) 7: QviPBhLr-CXgt9EbTIrGj_yt3o0.roa (hash: A2iZoqo4X/JrmbpOlsLJJidbfz0mL9O7JboFIKE1auY=) 8: n2rh1sLNAvS8TApOyLLtUmfkJtk.roa (hash: YnymBYUK6ZS+GcYBXKPIPAN5Vh2ciMW3IvH4r+uuS68=) 9: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: +fYkDeVO3iPpItgikg12gJ/Exo4KYxOKuHLfrmNagW0=) 10: qC9TRPDEBU4tH34KGCdE-GtaQVo.roa (hash: x+3EdF/VTAf945Szb8jBK7kDYlIbSVdzVeYTbe6GNVk=) 11: vyNX_G3sd7VABBUb1_l_0mQ1seo.roa (hash: MzK7zdnu+4qWNgnGDp5G7j7MAy7ijjxyFcd9B9ucLvU=) 12: wKCBiDDf1e8BicVavixrgdQZibE.roa (hash: MHYVnslYQOZS9IPfWLJkmMuhLwMjuzTKosW1ejMPRAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:a9:34:e0:b2:30:52:1f:6e:e4:d4:31:be:30:d5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Mar 26 01:01:33 2026 GMT Not After : Mar 27 01:01:33 2026 GMT Subject: CN=33bb0e8866089a2cdb668d4ce8a308af4337aa6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:37:db:1e:ce:5a:a8:92:21:50:ca:c9:28: 8a:11:51:94:60:8e:7f:b8:6f:6c:c2:98:3b:95:1f: ac:84:62:ee:39:b6:b5:e9:53:22:74:51:0e:97:47: b5:72:cb:13:66:f1:47:fd:11:16:f4:ce:e1:6b:35: 53:58:4c:2d:15:8b:d8:e9:4b:a7:d1:a6:e1:e4:74: 33:00:82:1c:de:93:f9:cc:dc:69:31:58:cf:d6:31: a7:c4:78:94:23:97:4b:71:45:03:8c:14:59:a2:bf: 7d:e8:86:e9:1d:9c:08:e2:89:71:ae:b2:c6:de:72: 41:26:e5:dc:55:1c:eb:d0:bc:7a:13:3f:a9:1a:6b: cb:51:ae:fe:3c:1f:d2:60:d0:88:bd:f0:0f:e0:67: 2b:87:73:90:a5:a3:8b:0e:13:7d:0c:39:79:6b:99: 74:94:a0:da:cf:94:82:09:27:8a:59:1f:18:ea:75: 56:23:0a:6f:3a:2b:d6:88:19:ec:84:82:01:3f:75: 65:ae:5f:b6:3a:61:a2:ed:67:22:6c:f4:71:0d:b5: 10:bc:68:cb:c2:66:42:97:2d:70:a6:43:9a:5a:16: 7d:09:a3:e3:03:8d:eb:2b:93:f4:22:b4:8d:ff:7c: d1:a2:03:94:24:d8:b4:e7:70:5a:9c:8d:6f:b4:5c: d6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BB:0E:88:66:08:9A:2C:DB:66:8D:4C:E8:A3:08:AF:43:37:AA:6A X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c6:b2:f7:2f:7b:52:67:76:74:c6:3d:10:78:af:84:1c:17: eb:cb:53:36:3a:70:fa:90:10:bd:4a:65:e9:97:e1:25:8f:87: 8a:f0:e4:8a:eb:23:3b:e8:7f:43:31:4f:f0:e5:99:34:89:f9: 06:83:fd:e1:89:e6:54:ef:5a:af:fa:68:e6:3e:d2:c1:75:86: 52:1c:f7:ec:66:26:64:1b:f3:70:d9:3b:01:81:4e:83:53:95: 0b:4f:30:88:8c:47:ca:97:55:31:5b:56:32:22:2b:d8:d7:35: cf:60:09:7d:ff:03:18:af:e8:f0:be:83:52:ee:4d:17:5b:ba: 3f:ab:18:89:c7:28:5c:27:5d:93:2a:6c:d5:af:0f:67:e5:51: eb:64:d9:7c:90:71:2f:c7:0f:77:31:c6:9e:00:29:7e:bf:c0: bd:d8:21:61:a0:b9:cc:3c:bf:88:62:a4:dc:c1:ef:df:8f:fc: 2b:ac:0d:a6:b2:e1:b8:99:ee:13:14:e6:18:56:ac:d7:ab:01: 39:76:e1:60:17:a4:57:67:52:67:dc:7e:fe:db:90:ac:32:93: bc:90:a6:00:db:bc:2a:3d:51:5a:83:a4:b3:9d:da:09:ad:52: cf:48:e0:e3:ff:7a:33:8f:c5:46:76:c4:3f:7a:0c:fb:c6:93: 19:57:55:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nqTTgsjBSH27k1DG+MNUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjYwMzI2MDEwMTMzWhcNMjYwMzI3MDEwMTMzWjAzMTEwLwYDVQQD EygzM2JiMGU4ODY2MDg5YTJjZGI2NjhkNGNlOGEzMDhhZjQzMzdhYTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY832x7OWqiSIVDKySiKEVGUYI5/ uG9swpg7lR+shGLuOba16VMidFEOl0e1cssTZvFH/REW9M7hazVTWEwtFYvY6Uun 0abh5HQzAIIc3pP5zNxpMVjP1jGnxHiUI5dLcUUDjBRZor996IbpHZwI4olxrrLG 3nJBJuXcVRzr0Lx6Ez+pGmvLUa7+PB/SYNCIvfAP4Gcrh3OQpaOLDhN9DDl5a5l0 lKDaz5SCCSeKWR8Y6nVWIwpvOivWiBnshIIBP3Vlrl+2OmGi7WcibPRxDbUQvGjL wmZCly1wpkOaWhZ9CaPjA43rK5P0IrSN/3zRogOUJNi053BanI1vtFzW1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDO7DohmCJos22aNTOijCK9DN6pqMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8ay9y97 Umd2dMY9EHivhBwX68tTNjpw+pAQvUpl6ZfhJY+HivDkiusjO+h/QzFP8OWZNIn5 BoP94YnmVO9ar/po5j7SwXWGUhz37GYmZBvzcNk7AYFOg1OVC08wiIxHypdVMVtW MiIr2Nc1z2AJff8DGK/o8L6DUu5NF1u6P6sYiccoXCddkyps1a8PZ+VR62TZfJBx L8cPdzHGngApfr/AvdghYaC5zDy/iGKk3MHv34/8K6wNprLhuJnuExTmGFas16sB OXbhYBekV2dSZ9x+/tuQrDKTvJCmANu8Kj1RWoOks53aCa1Sz0jg4/96M4/FRnbE P3oM+8aTGVdVOw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:07 2026 by rpki-client