$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: 8A3MMEY3vttqtq8ZRGWLDtxct3+NrxZqvYE4HAemEWs= Subject key identifier: 3C:07:D1:2C:6F:B7:ED:4F:AE:AA:E3:C0:A5:4C:4A:70:27:7E:0F:7D Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019D27DFB54E6E7FBAB2319BDBF34A8D0042 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 1A94 Signing time: Thu 26 Mar 2026 02:01:05 +0000 Manifest this update: Thu 26 Mar 2026 02:01:05 +0000 Manifest next update: Fri 27 Mar 2026 02:01:05 +0000 Files and hashes: 1: 75dR-cehxGPRjcfL78Gkb98ifxM.roa (hash: bnepiSdPwXX7m3LncvOOLQdp+VDPBt7lfnKaKeAzVyQ=) 2: 95yHmKNzNlaPkfhztjEjNjbClRE.roa (hash: BQKtvkdp6u39o4nJJYhl6XsDP1w1yD+LKlufqt8njhI=) 3: BAW400X5Cp3GNyjjsyWRzyNaFgg.roa (hash: GB/H4O93w5LLUQkpbn36ChcZqhyQGrlT9Iz0jJ/HcgQ=) 4: Qcy7H8pptHALc_HRlSPBrAjHQFk.roa (hash: c34mSfwg8wGcF0HxnO7HpnD3dUE7IsUJP/VVpFraSK8=) 5: Qtf5F9ucUa9WlYqI7LvBuxEYnRs.roa (hash: OXjlkamXcYzF43Cud75tu/YjQHgZmklUqcJzwAF1XGM=) 6: R4_SJs76nKZn0cSBV0Fo8ieHskA.roa (hash: c/IdymIEHuxEUxv3cqvY3uKO7Hvs1Km9DwMMsG6LoKE=) 7: YXmTCTbpKSFbSlq06tikXeR5yjM.roa (hash: bTeAPWMnuRlE1iuV8G+ltD+aKezdlcucu0xXk0jbOXQ=) 8: a6Erf_tnT8pMndq3WnrW7H4B990.roa (hash: 9x4c63CxJ5UoigQePJxkpntm40rkErQOAY2jQ4vUfMc=) 9: bsp6BDSIWkrxR6u3xicw9RBKbtM.roa (hash: KBNbBNVVMKDz24iMEiDHeH6Ud37u/sKie2hM0HuZtdo=) 10: flbEyQC4Je2o45JHPaZs38scw3M.roa (hash: C5EnxoY1f75kHw5DfJypo3Zs8chAySL0y9StdKnIiY8=) 11: gCJ11xRpXYuuTIBFGGCZMoDz4zU.roa (hash: 2ejthbbSiGWzvnDRD4RyBPTLsVVX1AibHnvI5hPXIK0=) 12: knLrELnamRbYKI_hmZ4VPtqQHec.roa (hash: KpZhnOp+uvDR1vqjA12HnP6hCAQUJOuMRCA2L33u3s8=) 13: qFHjepGd1W1NeOB2M_HnT_9NnkI.roa (hash: qeCuA+kLoBoYh5DPSa7sfbtMwdjrN2PNoIXoYyFRFww=) 14: rPTkfN1rgRyIfayPkg0QiFD8BqY.roa (hash: z1iu4KCEExKtTbmnPgeoKnKyyRCZUHHcWmuMUjgjDto=) 15: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: BM4SSoqvgffjSATPkuJtFw7xbY74KdXjwD1whhAW3Dw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:df:b5:4e:6e:7f:ba:b2:31:9b:db:f3:4a:8d:00:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Mar 26 02:01:05 2026 GMT Not After : Mar 27 02:01:05 2026 GMT Subject: CN=3c07d12c6fb7ed4faeaae3c0a54c4a70277e0f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:09:ae:90:5d:ed:12:3e:3a:0f:e0:5e:34: 3b:b1:f5:03:43:84:ad:21:bf:53:66:40:ff:f0:5c: 83:69:81:bd:fa:84:9b:8d:8f:cd:61:1c:96:dd:27: 1e:3a:c3:54:cb:39:a0:ad:6f:c8:0a:42:46:04:ef: fc:e9:55:9a:e9:41:fb:c3:ef:72:6d:13:83:ad:04: 8b:a2:44:43:73:66:74:f2:73:49:29:85:e7:34:8e: b6:99:6a:df:ab:66:75:91:f2:10:72:16:ed:c0:0c: 2b:d8:cb:25:48:c8:7a:d9:d3:bc:8d:b6:f3:5e:21: 74:5e:99:be:b6:0c:58:d5:b5:27:24:01:01:33:89: 2b:08:e1:79:ce:4c:8e:d6:53:4e:12:5c:09:01:34: bd:8f:d0:2b:76:f6:07:3d:fe:d9:c6:84:f6:e1:2d: 9c:b1:87:fa:21:2e:b3:66:5c:a0:36:b4:66:3a:25: d4:26:e6:f6:63:b7:ea:b6:b4:ed:63:6e:92:d3:80: fb:11:d5:8c:67:d6:82:a7:ad:e6:c5:b7:81:35:76: 96:e2:d8:5f:c5:35:87:85:f6:11:c6:ab:26:41:4c: 09:d5:59:11:0d:93:59:aa:e2:fe:80:20:f0:ca:63: c9:ad:4f:c1:6c:61:19:cc:ff:34:8b:de:de:bd:27: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:07:D1:2C:6F:B7:ED:4F:AE:AA:E3:C0:A5:4C:4A:70:27:7E:0F:7D X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:5f:6c:db:82:6f:54:4b:c6:8e:1e:3f:95:9b:98:4b:1a:73: cd:10:b6:e5:8e:83:c0:b0:fd:be:24:72:cc:26:19:fd:01:3b: ab:72:aa:61:eb:33:31:17:78:14:ac:8f:27:dd:2a:2a:0a:1a: fe:cd:dd:e2:d6:71:e6:2c:7c:54:33:2e:21:c1:b8:26:26:17: 85:98:8c:b4:2d:d0:98:55:3d:3f:d6:e3:a6:a1:61:7f:e9:71: a7:54:8a:a5:9f:d4:af:34:30:20:cd:e0:5a:a9:4c:06:ef:f2: 8f:c9:b0:a6:bf:b8:1b:08:a3:02:41:69:7a:52:26:ca:61:d0: 9b:a7:49:f6:11:0e:7a:55:41:52:87:ae:dc:b9:28:cb:42:38: 10:7e:ae:04:c5:11:54:02:bc:d3:ea:bd:db:9e:94:22:93:6d: bf:ad:16:36:e8:14:6c:bf:7e:26:cb:dd:3a:e9:c6:89:2b:1b: 18:89:cf:07:56:af:76:af:51:00:e5:0e:b4:9b:89:ce:b0:45: 1c:a9:d6:f2:85:06:d2:63:39:3d:ea:b7:07:58:fd:45:49:23: 89:6c:74:b8:86:2a:85:b2:3e:b1:ef:4c:0c:a3:ff:75:e0:a8: 35:c3:88:1a:cc:1b:82:a1:a3:26:11:b3:9e:c5:77:14:4d:b5: ef:ae:fb:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n37VObn+6sjGb2/NKjQBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwMzI2MDIwMTA1WhcNMjYwMzI3MDIwMTA1WjAzMTEwLwYDVQQD EygzYzA3ZDEyYzZmYjdlZDRmYWVhYWUzYzBhNTRjNGE3MDI3N2UwZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5sJrpBd7RI+Og/gXjQ7sfUDQ4St Ib9TZkD/8FyDaYG9+oSbjY/NYRyW3SceOsNUyzmgrW/ICkJGBO/86VWa6UH7w+9y bRODrQSLokRDc2Z08nNJKYXnNI62mWrfq2Z1kfIQchbtwAwr2MslSMh62dO8jbbz XiF0Xpm+tgxY1bUnJAEBM4krCOF5zkyO1lNOElwJATS9j9ArdvYHPf7ZxoT24S2c sYf6IS6zZlygNrRmOiXUJub2Y7fqtrTtY26S04D7EdWMZ9aCp63mxbeBNXaW4thf xTWHhfYRxqsmQUwJ1VkRDZNZquL+gCDwymPJrU/BbGEZzP80i97evSdL9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwH0Sxvt+1PrqrjwKVMSnAnfg99MB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdV9s24Jv VEvGjh4/lZuYSxpzzRC25Y6DwLD9viRyzCYZ/QE7q3KqYeszMRd4FKyPJ90qKgoa /s3d4tZx5ix8VDMuIcG4JiYXhZiMtC3QmFU9P9bjpqFhf+lxp1SKpZ/UrzQwIM3g WqlMBu/yj8mwpr+4GwijAkFpelImymHQm6dJ9hEOelVBUoeu3Lkoy0I4EH6uBMUR VAK80+q9256UIpNtv60WNugUbL9+JsvdOunGiSsbGInPB1avdq9RAOUOtJuJzrBF HKnW8oUG0mM5Peq3B1j9RUkjiWx0uIYqhbI+se9MDKP/deCoNcOIGswbgqGjJhGz nsV3FE2176772g== -----END CERTIFICATE-----Generated at Thu Mar 26 11:59:45 2026 by rpki-client