$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft File: 6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json) Hash identifier: HmbrSDxx/t+eKtYMCGmQvv+S24rVsnFarq70LFXWOso= Subject key identifier: 36:C1:54:B5:1D:E1:96:A7:85:E7:56:4A:BE:B1:5F:AC:3D:80:A3:F5 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019D27A92427ECE21C1FA1F5746A04EC9E97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft Manifest number: 1891 Signing time: Thu 26 Mar 2026 01:01:29 +0000 Manifest this update: Thu 26 Mar 2026 01:01:29 +0000 Manifest next update: Fri 27 Mar 2026 01:01:29 +0000 Files and hashes: 1: 1sZcd1tzDnfBO7H0zC0MHfPctz8.roa (hash: QGxYJT3nkBpWjK3CNe4elV7r+TMzHWhmpzIEj94vs3c=) 2: 54sLosdN-3E7M3xXYL9Sj8R-JFA.roa (hash: YOEtT3WDb6q1KIYxMWD9C0mL5TEs7xv26wN9VzwyZz0=) 3: 6Gtxp8Qdby2A47LT_KYiakuDrtE.roa (hash: BA8nh9grEBQ7UWUuUef5NazdmOCM03HbfFpXWfVVGx8=) 4: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: 2gpVf1aeHN/16xEArRapB5/IN8/akvyIw+3Onvhkew8=) 5: 95I5kKDngJoeemazNmLfxx-xsMc.roa (hash: 065L1fud09uTnT5KcltoPCtY3EeXJM9Wrb5i9Pok3ps=) 6: Dv0Vw0VROLNm1BcBtDyYsL1OWew.roa (hash: 01fMcqnBkdQNXIGFfqpx1E0l1qguhB0pAhcOj3jJeNI=) 7: F02EU11_7xVfFjx-pCbSkWfBrg8.roa (hash: DUZIPK/4jtz1rxvakhmYqy+xcU6jj18QDH1Ql1+dRcs=) 8: F9dyWb4kMnrKgNjaaV2af3tnF7Y.roa (hash: n0E0JoegNTDFrRD6xDuHJFvI1HNuGNwn2VnWlNNc7R8=) 9: JolCrPCyt6FQAjQdkxeUkG5hr_c.roa (hash: tR07fd6qiP9t7/rCVkFLRiRbNcRHO1l6JwkPDCkWrQw=) 10: NPH-fpbfT4l7tqIfzpWpmBL612E.roa (hash: usDB/lMLbqs1qEd8MJSCM8v9kpKJXr8T1CUNQ60yINA=) 11: SrRwCgzFOC1drONrVTaISNVrqgA.roa (hash: HK/1AO6XtRFFu0tl8QX3gVgCZfrsH1GVM2AzeVHcMns=) 12: dCf1-4ZtnEs1hhS0WpTGObxa7Ng.roa (hash: 6OBl94EqhunP39tyGGpYvE0DCjwIvRqo82T/Ck00I4Y=) 13: hKABsk9R3ual0SAgA_RoQAJK-Ss.roa (hash: LPGqLFiU6Q6gycTMXFmkeg9Hl/W1u11tyU44+pVVPT0=) 14: k7j6q1-pw3Iaxb9nrG2BMp2wduU.roa (hash: xqHAe/RA0XRCRSuPeTv3PfTrsCgVTADjTCxtxlrYH9c=) 15: tLZAPbek2ouyTp4yevQZizAET8s.roa (hash: tADyVnGgx5bMdr4dmJRvuG7KHkNYQR4uWTbCCyaMg+Y=) 16: uX8Zs5ulhqDalBSN3K4xPZW9tXY.roa (hash: 6HcSVHLDdw2ylb62hc/7yVqnNyshgu1qSWPjdsbZqqY=) 17: wGWva6DlhR1xhUCt4j4w0NB931w.roa (hash: GSuxwm3owrdlcnA22w3R59fDYZXJvPJoNhLNbwJTGD8=) 18: yd640iyO5e1rxw39pTARVi4BhTo.roa (hash: amnrnRntcrBttX4vOm5cGFFnnGSWzHrsdN8eo5YqUec=) 19: zeEPpitSOzyXHndgpLbTNYerulw.roa (hash: oTCVEfUpyQEEQ/RQUBU/rrU5tazeZweEU7eMxBkYLIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:a9:24:27:ec:e2:1c:1f:a1:f5:74:6a:04:ec:9e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Mar 26 01:01:29 2026 GMT Not After : Mar 27 01:01:29 2026 GMT Subject: CN=36c154b51de196a785e7564abeb15fac3d80a3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:56:44:c9:06:98:f7:c5:63:92:12:a5:ca:c9: 89:0f:86:38:82:a0:a8:fe:cc:b1:71:0b:ab:7c:87: e9:c4:0c:bb:fb:a2:1a:18:ce:1a:24:3c:c0:ad:f8: 8b:d9:63:c0:9a:28:40:c9:a6:90:c1:a3:dc:16:85: 87:23:6e:36:c2:b5:62:0a:8f:e8:7a:e7:b4:7f:eb: 1a:3a:db:ee:7f:04:5a:e7:5c:4b:8c:5f:ce:ba:fc: 92:9a:f3:ca:9f:b7:f7:1e:cd:5a:16:36:a5:37:05: db:d2:ab:43:21:7d:44:9a:07:de:58:a9:32:ce:f5: 58:cf:13:82:1b:f8:43:7a:5f:2b:bf:eb:72:30:f1: b8:7c:d2:78:1f:08:ae:45:ab:87:37:0d:75:2e:27: 56:9d:25:e7:06:5a:7f:87:a8:6c:4a:56:77:71:ec: 82:b2:df:4c:08:dc:d5:40:ef:21:bc:6f:ec:7b:a0: 66:38:0f:b2:6f:eb:68:77:f9:dc:97:3b:b8:d8:2e: 1d:a9:3d:45:b7:c0:56:f9:44:55:ce:2b:0c:89:1e: 04:a5:b8:dd:94:ad:da:6f:b2:fb:9d:5d:7f:31:2d: 26:2b:ea:92:4f:3e:9d:15:cf:06:2f:5f:53:6f:a5: 00:06:e5:f7:b6:be:a3:ce:87:75:c8:8f:50:b4:88: 38:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C1:54:B5:1D:E1:96:A7:85:E7:56:4A:BE:B1:5F:AC:3D:80:A3:F5 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:91:bc:ed:f5:78:a2:0a:a6:f6:07:b2:ca:4d:af:94:d9:dd: 9a:cd:40:88:88:6e:db:6c:7d:01:9c:3d:3d:cb:ad:8a:7e:40: eb:4d:57:b6:1e:e5:37:82:ef:4f:8c:52:3b:05:2f:23:90:0d: f0:77:bb:b5:ae:22:b3:67:f3:cd:4c:7b:66:fd:8d:75:73:b2: 1a:fc:fa:38:7d:cc:42:3b:2a:a8:44:64:ac:41:e4:86:c5:e3: 50:57:de:3a:d3:20:37:84:70:2f:35:ef:0c:50:ff:49:25:16: e5:ff:b9:3e:fd:40:42:5c:41:b4:2d:62:17:65:58:90:49:e9: 20:97:68:3c:11:f1:0a:d7:54:66:9e:99:26:02:fc:d1:f0:6f: 0b:e4:57:8a:ef:ad:0b:85:33:f3:02:8a:70:45:6f:dc:2a:61: dd:95:44:2f:66:07:44:71:e4:5b:7a:12:98:8c:e6:19:22:ac: 8f:d8:b1:9a:87:f7:28:10:3e:1f:14:15:43:e5:eb:6a:ac:79: 9e:7d:c6:87:9b:42:87:a6:cf:00:c9:b1:df:ce:03:1f:57:52: 9f:5c:1e:3f:67:bb:80:62:b4:0d:98:b6:3c:07:76:55:78:58: 50:4c:de:eb:0e:1b:1d:a0:72:e8:29:ef:b5:e6:d5:0a:f4:45: 59:5e:24:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nqSQn7OIcH6H1dGoE7J6XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjYwMzI2MDEwMTI5WhcNMjYwMzI3MDEwMTI5WjAzMTEwLwYDVQQD EygzNmMxNTRiNTFkZTE5NmE3ODVlNzU2NGFiZWIxNWZhYzNkODBhM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FZEyQaY98VjkhKlysmJD4Y4gqCo /syxcQurfIfpxAy7+6IaGM4aJDzArfiL2WPAmihAyaaQwaPcFoWHI242wrViCo/o eue0f+saOtvufwRa51xLjF/OuvySmvPKn7f3Hs1aFjalNwXb0qtDIX1EmgfeWKky zvVYzxOCG/hDel8rv+tyMPG4fNJ4HwiuRauHNw11LidWnSXnBlp/h6hsSlZ3ceyC st9MCNzVQO8hvG/se6BmOA+yb+tod/nclzu42C4dqT1Ft8BW+URVzisMiR4Epbjd lK3ab7L7nV1/MS0mK+qSTz6dFc8GL19Tb6UABuX3tr6jzod1yI9QtIg44QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbBVLUd4ZanhedWSr6xX6w9gKP1MB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJG87fV4 ogqm9geyyk2vlNndms1AiIhu22x9AZw9Pcutin5A601Xth7lN4LvT4xSOwUvI5AN 8He7ta4is2fzzUx7Zv2NdXOyGvz6OH3MQjsqqERkrEHkhsXjUFfeOtMgN4RwLzXv DFD/SSUW5f+5Pv1AQlxBtC1iF2VYkEnpIJdoPBHxCtdUZp6ZJgL80fBvC+RXiu+t C4Uz8wKKcEVv3Cph3ZVEL2YHRHHkW3oSmIzmGSKsj9ixmof3KBA+HxQVQ+Xraqx5 nn3Gh5tCh6bPAMmx384DH1dSn1weP2e7gGK0DZi2PAd2VXhYUEze6w4bHaBy6Cnv tebVCvRFWV4kSg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:44:34 2026 by rpki-client