$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft File: gfpI9AvIRUDEa9I76bkIl6oYT00.mft (raw, json) Hash identifier: hHiRjQbXupr9egXWYtsNkUSzfjNmhTkS9TMKCYjeG24= Subject key identifier: B1:91:A0:12:51:F5:6C:F7:90:09:2A:A2:2A:7B:86:C6:50:FE:86:10 Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 019D25F118DC24CA17A0B60E95247BEAF862 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft Manifest number: 178A Signing time: Wed 25 Mar 2026 17:00:50 +0000 Manifest this update: Wed 25 Mar 2026 17:00:50 +0000 Manifest next update: Thu 26 Mar 2026 17:00:50 +0000 Files and hashes: 1: 1-vE35X7cA95yo4co5xI4LRsygqE.roa (hash: GArZfb9HlabGHSj6lQqBP09tmUxt9yZTyafscM2AVng=) 2: 8F-O76TUkmlsiOgCnmM_6nJTd4g.roa (hash: Jg+vMGJ/IvxZ8SnVP3JTyVdc1ply2v1uAg9EFIKmJK4=) 3: FTIPS48Za-3OrX5WFeE1aDhy1I0.roa (hash: JfooxlcoS4oq09eFTznhIKolKx+OEbrJm7ESIobakUg=) 4: Fh-Fpr_uHjcMFD06n24XprpSG1M.roa (hash: FmZcmk95+iBFV9lKN3BmY/9kElMyaU+AZ6vmkOB1orM=) 5: H_-983GgKYxhkkt3nnpQcnHg30Y.roa (hash: Vd3cVl32ciW8wDwlKvX6dteoTksKbjaVlUmvnCCj7EU=) 6: KQlwkPmpk1DLGUyeI2rVK9lNE7E.roa (hash: bwKf8d6A05QgLcfG48aYiSBWbkKSxoVtSdwZtCZpE+U=) 7: Oqt--JM-bQkAEwluYF_VbCJNXBk.roa (hash: qgtHHT2LrCzQJdNXo2JdjcQzzNmHNGHV0c6PUoEL78k=) 8: bCNLowmF60GtTgq9MrPewL3-uQM.roa (hash: 6XTgGY9inLGGmIYKO2xERVTl3h4QMDusQwowddy15I8=) 9: ejTvaV2blN9QenSFLNnrpBZq49g.roa (hash: Y7jff0ticwpNpSgfsyRoCcnLBtZbRBWqW7cbBoyiVCM=) 10: gfpI9AvIRUDEa9I76bkIl6oYT00.crl (hash: Ps4kY6iE3qc6wijD5tvfv0bOwOkG3czqRMQLjTlPbvk=) 11: nq6pDF5PCk2N9cPjSjfM50wXO9w.roa (hash: G1Ywhcu+WSXWGvbw/G0u1TXbTpmgtQzLkStG8DNuRus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:18:dc:24:ca:17:a0:b6:0e:95:24:7b:ea:f8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: Mar 25 17:00:50 2026 GMT Not After : Mar 26 17:00:50 2026 GMT Subject: CN=b191a01251f56cf790092aa22a7b86c650fe8610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:15:f3:a2:d1:98:7d:87:82:7b:d5:11:bb:25: 46:b4:51:ad:86:ec:18:cb:04:6d:93:ff:cb:c5:80: 5c:0c:7a:67:03:41:b9:7d:e4:9b:f7:a7:b8:a5:24: 2e:f7:dc:1c:fb:22:05:ec:dc:59:a1:e3:70:19:cb: 21:65:8a:d8:d0:fc:7a:d6:da:2b:38:85:44:d8:03: 8f:95:d4:27:92:6a:53:4d:1a:f7:39:3a:82:80:aa: 8f:ad:3e:2b:87:48:bd:ef:53:63:10:5d:d8:97:9c: 9d:53:d2:e4:dd:68:66:02:0f:0c:52:19:c6:cd:93: c2:eb:c8:a2:05:6e:ab:92:32:cc:19:0c:3d:99:98: f6:4f:95:0b:bf:be:06:cf:26:5e:0d:57:93:49:d1: 7e:5a:56:52:54:34:c0:7d:6c:d7:3e:69:a8:6a:ab: 58:82:28:50:00:09:c9:80:49:af:7d:5a:05:f9:5d: 7e:9f:5d:a0:7c:6a:32:c9:be:3e:75:a4:9c:57:90: 46:98:ae:53:f2:62:b3:d8:54:0f:05:f2:36:96:0b: ec:90:7b:01:3e:b3:49:95:b3:5f:b8:2a:1e:32:52: 12:8b:aa:ba:25:0d:56:b7:a6:f8:8c:44:d9:ff:f5: f9:4b:5a:3f:5b:62:3f:82:5c:88:1f:97:97:70:e3: 28:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:91:A0:12:51:F5:6C:F7:90:09:2A:A2:2A:7B:86:C6:50:FE:86:10 X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:3b:82:35:d2:3b:61:27:6d:c5:ac:72:3b:27:05:33:80:93: 9a:ca:9b:a7:5e:d3:cf:79:20:40:61:bf:78:59:24:2e:8b:1e: 40:c7:27:dd:04:b1:e2:36:c3:f8:8a:6b:fd:60:01:a0:28:46: fc:58:cf:a2:44:4d:1d:47:bf:17:ad:db:2b:20:35:02:ae:61: cc:3f:94:54:6d:ca:4c:a2:cb:76:2f:33:26:29:9e:07:4a:4c: 00:eb:6d:44:85:2d:ef:ea:c9:bf:c9:ac:eb:e3:a9:b4:92:48: 68:29:db:e4:3a:0e:91:12:6f:31:14:37:03:9b:43:1d:93:4e: 77:4c:97:46:16:09:82:11:07:ff:4e:3a:7a:1d:3b:91:6e:51: e0:9c:7b:7e:7c:50:db:11:b3:f4:ec:a9:68:b1:37:75:24:e3: ca:61:cd:c3:0d:1c:e9:17:8e:38:2a:36:59:8f:cc:16:cb:be: d6:45:23:ea:48:46:7e:fd:a3:03:c0:b0:4e:0c:41:a8:74:c9: f3:4f:55:5b:c3:22:9f:ec:22:5b:cd:77:0f:cc:f1:2b:6f:dd: 14:d0:da:cd:bf:61:a5:ca:c0:7e:87:67:19:52:35:eb:c1:9d: 64:da:67:08:00:ff:cb:c5:13:42:f5:59:58:1a:7c:79:6c:6c: a7:fd:5e:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8RjcJMoXoLYOlSR76vhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjYwMzI1MTcwMDUwWhcNMjYwMzI2MTcwMDUwWjAzMTEwLwYDVQQD EyhiMTkxYTAxMjUxZjU2Y2Y3OTAwOTJhYTIyYTdiODZjNjUwZmU4NjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BXzotGYfYeCe9URuyVGtFGthuwY ywRtk//LxYBcDHpnA0G5feSb96e4pSQu99wc+yIF7NxZoeNwGcshZYrY0Px61tor OIVE2AOPldQnkmpTTRr3OTqCgKqPrT4rh0i971NjEF3Yl5ydU9Lk3WhmAg8MUhnG zZPC68iiBW6rkjLMGQw9mZj2T5ULv74GzyZeDVeTSdF+WlZSVDTAfWzXPmmoaqtY gihQAAnJgEmvfVoF+V1+n12gfGoyyb4+daScV5BGmK5T8mKz2FQPBfI2lgvskHsB PrNJlbNfuCoeMlISi6q6JQ1Wt6b4jETZ//X5S1o/W2I/glyIH5eXcOMoMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGRoBJR9Wz3kAkqoip7hsZQ/oYQMB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzuCNdI7 YSdtxaxyOycFM4CTmsqbp17Tz3kgQGG/eFkkLoseQMcn3QSx4jbD+Ipr/WABoChG /FjPokRNHUe/F63bKyA1Aq5hzD+UVG3KTKLLdi8zJimeB0pMAOttRIUt7+rJv8ms 6+OptJJIaCnb5DoOkRJvMRQ3A5tDHZNOd0yXRhYJghEH/046eh07kW5R4Jx7fnxQ 2xGz9OypaLE3dSTjymHNww0c6ReOOCo2WY/MFsu+1kUj6khGfv2jA8CwTgxBqHTJ 809VW8Min+wiW813D8zxK2/dFNDazb9hpcrAfodnGVI168GdZNpnCAD/y8UTQvVZ WBp8eWxsp/1egA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:22:14 2026 by rpki-client