$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft File: J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json) Hash identifier: lyyshaXMnXCH3bi8jJJlLrfv3qrSFBWfVcOODQao1sE= Subject key identifier: 74:A7:F6:DF:7D:EE:56:AB:3C:F5:F9:BA:D0:94:5D:7B:76:39:F2:90 Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Certificate serial: 019D28BBA4D330C7D4FCE56EF1AFFAE3679E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft Manifest number: 0DEA Signing time: Thu 26 Mar 2026 06:01:19 +0000 Manifest this update: Thu 26 Mar 2026 06:01:19 +0000 Manifest next update: Fri 27 Mar 2026 06:01:19 +0000 Files and hashes: 1: GVQM2fhWiAA1vaxgASrTGcM3NXg.roa (hash: qmify2cyOKHa4dPo1mFD43WN2hWzTZnDzaDfO9d6xj0=) 2: ILvL_afGBYqG8JBvyBOjNle1meU.roa (hash: FpoDCBUDymC1x5/mCiLH7CBZidOwMMBt/UJmW1vuU7I=) 3: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: Nk2auNZS5RJr56kOzbyWVzNLxQi2BO+sq53pr0YrRG0=) 4: MPe538bYpU8guVH5-86a4aQXXWo.roa (hash: r21A8jzF/GtpSrRHEgbvnBNm4NeKTp/0Wc3vPf+aR0s=) 5: MuaQsZpK85YLuwzSbgYhrnef72s.roa (hash: bdvuUkwflnueXXPnGyW7DncDokUJqOrDxizqAK6rLFQ=) 6: OIf5o3TuUaTGCWR1GyZJ8zyr1DU.roa (hash: Id91w3MsfuN+1fBJYgr9h61G7NpSD3kW83pc4b6qwCg=) 7: _jP7HoE6xSVGQtiue_1k6La3slE.roa (hash: lNbPgbdDGD01z1JbLvmrn22+TQAyCpvm6Vuj52vD43Q=) 8: c_so8ZAo99s903KgX6q1bd_ayQY.roa (hash: qk06hv+tknoEnl/WncFnILZI0t8DHr6k+PuJJrOlT6s=) 9: l-al53GTn2U3_oux5KceKXfKkVM.roa (hash: VwmHIGN92Mm8C6FgCJrZ5LFSIkTya2qnm7OsmBE8eyE=) 10: nI8D-AwVuUhZS_gQCeDbQORZ77k.roa (hash: zi3GVIgGpTx+NCwINdJlKP5OnWevf0ir3DqN9LIx3e8=) 11: zsjg_uNpmMmffhFlupWb75dFOf8.roa (hash: HE/uSl70PUzAoBt7ot8n4K8Er2xcIutkfXUuzgDxPFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:bb:a4:d3:30:c7:d4:fc:e5:6e:f1:af:fa:e3:67:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Validity Not Before: Mar 26 06:01:19 2026 GMT Not After : Mar 27 06:01:19 2026 GMT Subject: CN=74a7f6df7dee56ab3cf5f9bad0945d7b7639f290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:d0:25:e5:1f:78:54:85:7c:e1:c1:09:45: e9:f7:e5:bd:06:52:94:5c:ff:05:b0:e0:6d:c2:8f: f1:7f:b7:69:2f:2e:c3:f4:f6:f7:78:7d:4d:e7:db: 37:9b:5a:97:1a:e8:fc:da:b7:d6:5a:ce:dd:d6:eb: c2:60:4d:51:98:61:a3:04:4a:bb:64:0c:6e:23:9b: e3:99:53:36:8f:c5:c8:df:a0:f6:e0:fe:57:b6:39: 4a:30:6e:96:83:4b:78:74:d2:58:8b:3f:67:e2:ab: 41:f2:36:d0:f5:f1:0d:6a:bf:05:ec:82:12:01:9c: ba:87:54:20:c1:77:ef:52:55:a0:52:7b:b1:a7:24: 31:ff:53:49:46:68:4f:15:bc:c5:f0:5d:e6:c2:4e: 6e:b6:75:5f:5a:2f:c7:fb:86:e1:05:cb:65:6f:08: cc:1a:34:c1:d7:23:d7:ae:53:14:e4:d6:06:0c:db: c8:bb:cd:7c:81:d4:24:78:fe:52:b3:85:6b:ee:2d: 08:1a:c1:54:87:ac:77:75:c9:1c:83:d4:72:82:f2: 73:af:95:c3:d7:d3:a2:16:84:7f:2d:90:5a:56:b7: d1:58:c7:46:84:87:78:58:00:f8:e8:fb:d9:e4:44: 03:ca:3d:7b:be:f4:d2:de:24:0d:6d:ab:6d:fd:0d: 99:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A7:F6:DF:7D:EE:56:AB:3C:F5:F9:BA:D0:94:5D:7B:76:39:F2:90 X509v3 Authority Key Identifier: keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:67:8e:3e:b1:0c:eb:96:a4:a2:2e:0f:37:ba:fb:d7:b7:32: bc:2a:fa:88:36:2f:46:03:6b:d0:19:17:2b:17:1f:f5:94:86: 15:09:e8:46:3e:71:3d:aa:0f:00:af:59:4f:6f:41:16:a4:c5: 68:d9:e9:71:e6:3b:55:de:7b:4e:52:0d:9c:45:dc:54:f2:f4: 43:48:99:df:14:4c:dc:6e:54:2d:39:8b:d6:a5:4c:3e:04:aa: e0:d7:05:c0:61:b6:ca:a9:e3:2e:0b:c4:47:aa:7f:66:37:6b: 65:78:45:b9:50:39:67:08:0b:0b:73:eb:f5:d8:78:1c:3c:76: 4d:f4:54:54:76:52:ed:33:c2:f2:04:a0:70:27:20:80:76:7a: 88:06:c8:ab:25:21:75:64:82:a5:39:51:31:b6:3d:6c:0a:f8: 6d:39:8b:41:b0:a8:cf:93:44:2b:bb:41:95:85:e3:33:41:2d: b6:7a:60:5e:4b:13:e4:f0:73:f8:0e:b7:b9:a1:13:fb:25:02: df:07:59:7e:0e:00:9e:41:5c:a8:8e:6f:10:37:c2:fe:bd:04: 65:8c:db:c6:be:70:73:b8:2e:02:17:93:ca:f6:86:4f:25:9d: ce:1e:6b:fb:b7:74:fe:51:fd:95:70:b7:d6:a4:b1:74:eb:cb: 1a:b2:eb:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ou6TTMMfU/OVu8a/642eeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5 ZmMyYzkwHhcNMjYwMzI2MDYwMTE5WhcNMjYwMzI3MDYwMTE5WjAzMTEwLwYDVQQD Eyg3NGE3ZjZkZjdkZWU1NmFiM2NmNWY5YmFkMDk0NWQ3Yjc2MzlmMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/PQJeUfeFSFfOHBCUXp9+W9BlKU XP8FsOBtwo/xf7dpLy7D9Pb3eH1N59s3m1qXGuj82rfWWs7d1uvCYE1RmGGjBEq7 ZAxuI5vjmVM2j8XI36D24P5XtjlKMG6Wg0t4dNJYiz9n4qtB8jbQ9fENar8F7IIS AZy6h1QgwXfvUlWgUnuxpyQx/1NJRmhPFbzF8F3mwk5utnVfWi/H+4bhBctlbwjM GjTB1yPXrlMU5NYGDNvIu818gdQkeP5Ss4Vr7i0IGsFUh6x3dckcg9RygvJzr5XD 19OiFoR/LZBaVrfRWMdGhId4WAD46PvZ5EQDyj17vvTS3iQNbatt/Q2ZbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSn9t997larPPX5utCUXXt2OfKQMB8GA1UdIwQY MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct MWM2ZWU0NGUxMWFkLzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWeOPrEM 65akoi4PN7r717cyvCr6iDYvRgNr0BkXKxcf9ZSGFQnoRj5xPaoPAK9ZT29BFqTF aNnpceY7Vd57TlINnEXcVPL0Q0iZ3xRM3G5ULTmL1qVMPgSq4NcFwGG2yqnjLgvE R6p/ZjdrZXhFuVA5ZwgLC3Pr9dh4HDx2TfRUVHZS7TPC8gSgcCcggHZ6iAbIqyUh dWSCpTlRMbY9bAr4bTmLQbCoz5NEK7tBlYXjM0EttnpgXksT5PBz+A63uaET+yUC 3wdZfg4AnkFcqI5vEDfC/r0EZYzbxr5wc7guAheTyvaGTyWdzh5r+7d0/lH9lXC3 1qSxdOvLGrLrNg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:24 2026 by rpki-client