$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json) Hash identifier: uBZufcgQJkvaqkKqc2PfrUiRGi6M83Baq6t0NTo/sCo= Subject key identifier: 95:0C:4C:FA:88:36:52:10:3B:A7:D5:9D:15:D3:92:34:64:E1:9B:88 Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Certificate serial: 019D2583726A24A2B964D58B25F97065432E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft Manifest number: 0490 Signing time: Wed 25 Mar 2026 15:01:04 +0000 Manifest this update: Wed 25 Mar 2026 15:01:04 +0000 Manifest next update: Thu 26 Mar 2026 15:01:04 +0000 Files and hashes: 1: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: 0mht92f/AOi9/0k77SCYHHbui0vNXOGLN/ryfdo8DZM=) 2: 22x8PN_1LTHR6l66GpUqyti_zA0.roa (hash: CSv7c1XejVckeMl+4KVZ0R5JwTwo6hy/rgUnKWrc8iE=) 3: JsDV0JgNIJsN-ibYdgtSHoMxIvw.roa (hash: cHo9xyUEk2HyEiBCUp1r4usf+4Crk42MuHgQ//gFieE=) 4: MN6U3VW42sb0OVdqBMcLBJ2g2zU.roa (hash: PPnAC3azWQhKiDxnnjOYt4M14J8iF87kO3d2yUA8Kfw=) 5: YbKvoesrYXHEmFEjcVByq5eynzo.roa (hash: +DYa+fe9egpPIsRsJIXZUMAsEnq8jTNkWLMhIYMd4Q8=) 6: byQ1yszhOcZFFPh_Y5AKBXMFwMw.roa (hash: b7qP0sl3+othoRFTec+oydZ8N3Jq1XUmt+VOT3v3hnY=) 7: gC5ojAbS6z97a05sXClJSkkJk3w.roa (hash: laV5VTUScUMrKJ3a9qdAMd2Oli3d8tpx9cRZCqQwMls=) 8: kHP0M6fVan_dV2bdSXbsBdJ27pU.roa (hash: z5ajzgWdArm34wD+Vi31zXSHcWy5YvyidurL0SZHcbU=) 9: snHZlA_rMzA-GJtkANTKKKsjJms.roa (hash: wWUHeupDm38JL23SWCuEwKVQP7+CZz4/f+h6ttaySF4=) 10: tIWBDaq4vNzJLG3YFrMngR6UjEI.roa (hash: 4zzhkvUoZZB4cgAYHJR/34Gu96Vut755O0lj9l2/tWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:83:72:6a:24:a2:b9:64:d5:8b:25:f9:70:65:43:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Validity Not Before: Mar 25 15:01:04 2026 GMT Not After : Mar 26 15:01:04 2026 GMT Subject: CN=950c4cfa883652103ba7d59d15d3923464e19b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:f2:d9:ec:78:ba:1a:43:bb:1c:4e:7d:c3: e3:b0:7e:7b:38:2d:00:37:0f:53:7e:f1:be:d9:2c: 7c:33:33:a0:4c:12:f9:d8:16:b3:3a:4d:84:0e:11: 9c:3c:17:c8:b2:32:56:67:92:6e:c3:9f:c7:04:73: a4:2e:3a:21:73:ab:84:de:b4:30:ad:55:a7:b5:77: 8c:0e:09:e9:12:95:55:19:2b:25:95:89:bf:65:ef: 88:34:fe:ab:2a:40:6a:6a:5e:b2:83:0b:5a:bf:b3: 25:e6:2e:6f:25:50:59:94:6b:4e:d8:84:50:e1:0a: 9f:9b:a6:69:e6:55:7f:a8:6e:a9:32:1a:31:30:7a: d5:3e:a3:a2:51:b1:e1:61:1c:03:86:49:2b:6d:98: 74:f6:b6:27:17:2f:dc:86:25:16:d5:c8:64:dc:e5: b5:40:99:b9:c2:63:f2:a6:34:9f:9f:3c:a7:1a:f3: 58:6f:c0:e1:f2:fa:b4:b8:29:b5:c2:07:1b:03:98: f2:49:cf:ad:78:bb:5c:ac:9a:a2:a5:32:cc:66:da: 56:15:09:c2:65:f4:1b:c0:34:9a:dc:1e:5b:5d:d8: 5a:e6:92:93:78:af:65:d3:ba:6c:6e:22:d5:7e:31: 1a:b7:2f:c8:b5:36:b5:29:4f:6e:88:6a:9b:5c:e2: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0C:4C:FA:88:36:52:10:3B:A7:D5:9D:15:D3:92:34:64:E1:9B:88 X509v3 Authority Key Identifier: keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:23:b0:d5:08:11:1f:94:d7:1f:09:df:58:05:58:62:2c:20: d2:73:83:fb:a2:ed:fa:47:ab:40:9d:56:7f:e7:09:c5:cd:8e: db:e0:b1:33:0c:8c:c0:00:17:95:8c:01:97:1d:46:63:eb:d5: 18:44:ed:ad:d4:91:ee:7c:d9:0e:ce:3c:fe:0d:cc:ef:fe:39: 19:fb:5b:ab:23:af:1c:6e:9f:6c:24:78:5c:98:4c:51:60:5e: 2c:cb:6b:22:26:0a:b6:51:31:94:46:a4:67:7b:6c:3d:0d:8d: 87:e6:a3:0a:0c:e3:9a:e1:27:cc:c8:80:26:d2:76:b6:2a:26: 60:96:2f:86:32:e5:26:83:4c:5e:90:7c:3d:f7:39:a3:91:04: a4:25:d4:aa:bc:34:e3:b0:32:ce:6b:09:e1:98:1c:78:f7:29: 3b:91:ba:db:2b:f7:90:8b:cc:f2:c1:24:52:12:ee:9c:1e:3c: b3:86:e0:9d:c1:ec:24:ec:e5:60:19:30:03:2d:dd:42:97:7d: 6a:84:f5:16:73:25:d3:d3:4a:13:5f:e1:a4:62:65:41:a5:c6: 04:b5:de:18:b1:fb:7e:43:75:37:e5:62:e5:04:69:4e:83:80: b2:49:12:1b:29:98:45:f4:e6:97:a1:93:18:34:00:9a:af:64: 14:1b:ee:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lg3JqJKK5ZNWLJflwZUMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODgyMTJiZjVkYWNlMTA4MGRjNDVlMmM1NWI5MmZmODVj NmMxOTIwHhcNMjYwMzI1MTUwMTA0WhcNMjYwMzI2MTUwMTA0WjAzMTEwLwYDVQQD Eyg5NTBjNGNmYTg4MzY1MjEwM2JhN2Q1OWQxNWQzOTIzNDY0ZTE5Yjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBvy2ex4uhpDuxxOfcPjsH57OC0A Nw9TfvG+2Sx8MzOgTBL52BazOk2EDhGcPBfIsjJWZ5Juw5/HBHOkLjohc6uE3rQw rVWntXeMDgnpEpVVGSsllYm/Ze+INP6rKkBqal6ygwtav7Ml5i5vJVBZlGtO2IRQ 4Qqfm6Zp5lV/qG6pMhoxMHrVPqOiUbHhYRwDhkkrbZh09rYnFy/chiUW1chk3OW1 QJm5wmPypjSfnzynGvNYb8Dh8vq0uCm1wgcbA5jySc+teLtcrJqipTLMZtpWFQnC ZfQbwDSa3B5bXdha5pKTeK9l07psbiLVfjEaty/ItTa1KU9uiGqbXOKPCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUMTPqINlIQO6fVnRXTkjRk4ZuIMB8GA1UdIwQY MBaAFNWIISv12s4QgNxF4sVbkv+FxsGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMt MWIyYWMzNWMwOWFhLzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMtMWIyYWMzNWMwOWFh LzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyyOw1QgR H5TXHwnfWAVYYiwg0nOD+6Lt+kerQJ1Wf+cJxc2O2+CxMwyMwAAXlYwBlx1GY+vV GETtrdSR7nzZDs48/g3M7/45GftbqyOvHG6fbCR4XJhMUWBeLMtrIiYKtlExlEak Z3tsPQ2Nh+ajCgzjmuEnzMiAJtJ2tiomYJYvhjLlJoNMXpB8Pfc5o5EEpCXUqrw0 47AyzmsJ4ZgcePcpO5G62yv3kIvM8sEkUhLunB48s4bgncHsJOzlYBkwAy3dQpd9 aoT1FnMl09NKE1/hpGJlQaXGBLXeGLH7fkN1N+Vi5QRpToOAskkSGymYRfTml6GT GDQAmq9kFBvudw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:36:01 2026 by rpki-client