$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: AdlZO1nc9Cdo01508js5CixdZvrkSecHmM4schtcUn4= Subject key identifier: 9D:CB:14:F2:55:CB:E2:51:09:EB:4C:28:23:10:C7:5A:2E:E6:AE:2E Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 019D28168C657D9DFB50487DB0E82C47CBE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 188C Signing time: Thu 26 Mar 2026 03:00:59 +0000 Manifest this update: Thu 26 Mar 2026 03:00:59 +0000 Manifest next update: Fri 27 Mar 2026 03:00:59 +0000 Files and hashes: 1: 1ms-U7GStIQWyhBvk39Pmz4mWvA.roa (hash: lEZsZW9Tv4rbrMsSytyM2px+I6/78sknyWxeRiHKwJM=) 2: 465Kcfdz-gCkfuGZh8doO_u-oWc.roa (hash: +omro3YFQE2sJ1eByZhKP6jW3x+UZ2ptJKtI+7UVFM8=) 3: FudhY_GW4msTOukhgnBFXzVYoiM.roa (hash: 7UgC+06y5UTQvkQ9UgPJMOjARzvFFXEio5n7Jvg4z+k=) 4: HK6BNNsWSLGubaZl3upPyutswvU.roa (hash: WzFjY3CdZWeDvACOL+XKBEMBzEj0lVc25php/SCslcU=) 5: IBvfpHlo0nhBmzHxQLjSRpI2BSY.roa (hash: DAVNHApbGflPu1pSl2KrRTguzWmq2zUGW0dSw+3gnZ8=) 6: LTfWXRthcASup-DyG7vEDraK0EY.roa (hash: whp6f+y/ya/1LAvlaxCVtUimjkVrV3wXO989ASjx2UI=) 7: RfF_v-9FmIipQG47sMLeSIwsCwA.roa (hash: CvFjyOB2OKSAf0EIN8oLCwNbtih0Yd+Yc2x40ZJ9uxE=) 8: XZ_A9oOFh615-GWf-jG9mLRl_BA.roa (hash: IjFd4KfJkkTKhVMOqjReLPHCLFxiAiN7OyTxurp0L6k=) 9: cqQ13TfAA2f3o1iYd5u_zHjR1og.roa (hash: PPVmtCcOrF5jhwXK7aADjsl4uaCgfyEm1Gbo+31zhCo=) 10: kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa (hash: S9J7ulFMDCXhT6uUyj2J+Qhp8QQOqTeuNdKWWsuYDSA=) 11: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: XYefSqm/k4xXO7QREZcbG5808aXzPzJEOIv5aEEgN2Q=) 12: rEIw8icF5JeHNJs8hiRgw1rRnR0.roa (hash: ZktjBhuI012cqumaMif+o0oMdONZdwewIFYAJ7bf8FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:16:8c:65:7d:9d:fb:50:48:7d:b0:e8:2c:47:cb:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Mar 26 03:00:59 2026 GMT Not After : Mar 27 03:00:59 2026 GMT Subject: CN=9dcb14f255cbe25109eb4c282310c75a2ee6ae2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a1:b3:f5:5b:03:e5:f7:0a:83:4a:48:ad:7e: bd:18:53:4c:a9:df:2c:c4:57:31:17:b4:c3:a8:3c: fe:7d:47:94:0e:d7:f8:1f:30:d4:67:e0:bd:2c:1a: 4c:68:f9:08:80:d8:2e:ac:5f:33:ea:92:68:d1:2b: 5a:92:5b:10:a6:30:c4:f6:64:9d:03:9b:69:42:a0: b9:e8:bf:d9:b1:22:10:e8:25:79:14:9e:6c:e0:44: 01:60:59:b3:10:ea:ca:7f:b0:68:43:1f:1b:c3:0a: 3f:a9:67:01:77:50:78:a7:f0:ea:1f:1d:2a:2b:5c: fd:8c:c5:98:0a:1e:63:ef:01:ec:aa:86:71:9a:5a: 26:62:0e:ac:c7:e0:ce:b5:de:e5:a6:3b:65:0b:24: d2:3d:fc:71:56:e8:34:d7:c9:01:da:47:38:ca:f0: c4:b7:0f:8b:d9:82:f5:fd:06:8f:ec:12:12:39:92: 56:69:66:e3:ef:80:ce:3b:ae:ba:d9:13:aa:af:3e: e6:ab:14:b7:a1:c2:8d:b4:a1:dc:25:f5:bd:af:33: 8c:18:3f:1e:d7:a6:5c:6d:ca:0a:99:5d:17:14:ae: 88:ac:a4:31:4a:72:f4:65:7d:12:6a:6c:69:74:a5: 54:89:6c:14:35:f3:4c:2b:9f:2a:34:73:2d:3b:f4: 88:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CB:14:F2:55:CB:E2:51:09:EB:4C:28:23:10:C7:5A:2E:E6:AE:2E X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ee:a0:e9:12:e5:05:96:3a:d8:68:0e:ec:ad:a8:51:69:57: 0a:f3:ae:58:30:bf:3e:f9:0f:c1:96:f6:89:33:3c:43:62:ba: 09:4e:3a:0b:8d:0a:94:8c:e0:db:bc:78:2a:7d:4e:b5:94:e2: 32:64:54:ae:3b:fe:14:f4:3c:6a:5f:49:90:e1:de:38:62:aa: 29:76:e9:76:ce:05:4c:d1:3f:66:42:91:ae:a2:4c:30:72:52: 18:dc:4b:71:f6:41:8f:e5:cc:30:6a:88:94:0a:86:f4:04:d5: 1f:ae:13:57:18:bb:82:fe:9f:33:7c:51:80:a0:5b:5b:1e:b7: 5f:70:af:3d:aa:a3:07:24:b1:19:76:f6:f6:17:f8:50:53:b3: 8b:34:2f:53:52:a2:1c:aa:58:c9:1a:d3:9c:20:e0:c0:75:88: 9c:4f:2e:60:a6:07:ca:ed:33:48:1f:e5:b1:ad:03:54:3e:3e: f6:2a:e4:e4:10:28:1e:49:24:85:b5:5b:35:08:d9:76:b5:d1: 66:b9:15:b5:88:3d:eb:fb:86:05:50:24:25:9d:b1:46:0f:13: 28:86:d8:a7:98:22:16:87:04:78:50:31:70:33:b4:32:f2:ca: 7b:4d:a5:17:d6:5e:7e:d6:d4:d4:22:9e:ab:08:4d:ed:e4:5c: 5e:88:b5:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFoxlfZ37UEh9sOgsR8vmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYwMzI2MDMwMDU5WhcNMjYwMzI3MDMwMDU5WjAzMTEwLwYDVQQD Eyg5ZGNiMTRmMjU1Y2JlMjUxMDllYjRjMjgyMzEwYzc1YTJlZTZhZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aGz9VsD5fcKg0pIrX69GFNMqd8s xFcxF7TDqDz+fUeUDtf4HzDUZ+C9LBpMaPkIgNgurF8z6pJo0StaklsQpjDE9mSd A5tpQqC56L/ZsSIQ6CV5FJ5s4EQBYFmzEOrKf7BoQx8bwwo/qWcBd1B4p/DqHx0q K1z9jMWYCh5j7wHsqoZxmlomYg6sx+DOtd7lpjtlCyTSPfxxVug018kB2kc4yvDE tw+L2YL1/QaP7BISOZJWaWbj74DOO6662ROqrz7mqxS3ocKNtKHcJfW9rzOMGD8e 16ZcbcoKmV0XFK6IrKQxSnL0ZX0SamxpdKVUiWwUNfNMK58qNHMtO/SI+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3LFPJVy+JRCetMKCMQx1ou5q4uMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADO6g6RLl BZY62GgO7K2oUWlXCvOuWDC/PvkPwZb2iTM8Q2K6CU46C40KlIzg27x4Kn1OtZTi MmRUrjv+FPQ8al9JkOHeOGKqKXbpds4FTNE/ZkKRrqJMMHJSGNxLcfZBj+XMMGqI lAqG9ATVH64TVxi7gv6fM3xRgKBbWx63X3CvPaqjBySxGXb29hf4UFOzizQvU1Ki HKpYyRrTnCDgwHWInE8uYKYHyu0zSB/lsa0DVD4+9irk5BAoHkkkhbVbNQjZdrXR ZrkVtYg96/uGBVAkJZ2xRg8TKIbYp5giFocEeFAxcDO0MvLKe02lF9ZeftbU1CKe qwhN7eRcXoi1nA== -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:44 2026 by rpki-client