$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: Tx5sW9/G2q0gt+easu1QXCpQqASKecxQYLWAIho9ASQ= Subject key identifier: 7A:55:B7:F9:D6:1E:46:BD:F5:7D:81:84:65:AA:B1:47:14:A3:B7:C3 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 019D284D6AFFF3948A94CB45746183F77558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 18B0 Signing time: Thu 26 Mar 2026 04:00:55 +0000 Manifest this update: Thu 26 Mar 2026 04:00:55 +0000 Manifest next update: Fri 27 Mar 2026 04:00:55 +0000 Files and hashes: 1: 1-Mv_wvDIJH6b39D7zFwGgmQByl8.roa (hash: w5/COnwlw5ye1DaZjZ7hXRbFTAAUSFBl9a5cKLHfrqk=) 2: 8p-xzHN8JAfETL-eHdKs1LrBttU.roa (hash: ZS9tFLaAf2uUJA0HUuxCsxMlG+fGwN15fW3OEhTI1U4=) 3: E2yjjcIin_7jg0Go72UPY9AyT6A.roa (hash: n+/VXl3KasYnTbVQIWwF07TnFCAY/4EQuPzsBC6ENFY=) 4: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: B3k2+e076PyGucC2eo3xKx3JwOt4weAk0ENo5mdl0vU=) 5: cSTi1Lxehq5jDWakpB6HYzAw5R0.roa (hash: wqKpE+uRvges7Z2ELy3oIP2gt4HmPD2pP3WgFoILY2s=) 6: d6qcKW1msPvrkPap_anNs3nncIc.roa (hash: MeURyRJbadIj4RLZ7K71M6LgbnCBWIKCvay4NBmiSn0=) 7: djFhla4MWW9UnKS5DInUiltefD4.roa (hash: Sc+M7cslOJJhBlkRWcw8NFHW0xg8Q1EBy7lXg6dtAzg=) 8: gsUHTOql6ra3NCra3-O-Pk8H1G4.roa (hash: 8Ghx6DBEFtgP9usvPFW08DYezACf4VPCL0A1biqsI44=) 9: h8tYcFJRiwCP-N9lJk7eDpWjBZo.roa (hash: Posoe4h9QxCnSfxoiia3nysdUx7K23dYEEIkgUc7lgM=) 10: qQkZ0fBNkjQxEBuz0kI59N7djKc.roa (hash: NFmLHMfKCgRpayRK/IC4kjzItXsX/Ql3tfEI1LLkiYo=) 11: stQaCo3UL43SwnixN1ipSeirKCk.roa (hash: AZoB1tHMtqzegT5eVvjC9FzP5F5Y0HtR0M4S42Eh7/c=) 12: vNzE5xMsU5yzGRSukoH_ztpCjao.roa (hash: HE3gn3vVBI6nPgvGdME4ssEZYBlEN8YwsdsyEiKntAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4d:6a:ff:f3:94:8a:94:cb:45:74:61:83:f7:75:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Mar 26 04:00:55 2026 GMT Not After : Mar 27 04:00:55 2026 GMT Subject: CN=7a55b7f9d61e46bdf57d818465aab14714a3b7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:d0:f5:1f:8b:28:95:78:7c:42:74:83:57: b4:fb:1f:f1:33:e7:f6:10:4b:a6:69:f4:0a:73:d9: 9c:3d:32:a1:fd:05:99:07:42:6e:8a:44:37:b3:a9: e6:45:22:8e:fe:f9:00:7e:42:81:25:06:11:e2:71: a8:28:f3:67:d3:43:89:4c:90:e4:e2:a1:8a:52:26: 1e:5c:86:e8:4e:a9:d2:10:bf:3b:71:de:f0:08:02: cc:f4:26:4b:49:50:88:26:cf:d2:0d:16:5d:24:23: 1b:96:1b:99:10:ad:ea:d4:59:cf:ee:d7:ff:aa:0b: 36:06:e0:fd:f6:e0:75:a5:57:14:11:3f:4e:a7:81: 70:55:68:4e:e3:a5:c4:2b:e9:65:10:1c:1f:61:2f: 1b:29:80:31:e8:94:83:89:ba:ed:d9:cd:1a:2e:b4: fb:28:ae:e4:20:27:59:87:98:bb:3c:49:54:2b:95: ad:14:19:ff:ac:26:10:6b:31:4c:43:09:06:c4:9a: 35:71:4b:d9:32:e2:fa:3c:c2:22:8b:7f:99:4b:54: 66:0f:b1:70:96:e9:91:fd:86:52:a5:23:67:dd:a8: 6e:9c:2b:02:e4:1c:cf:d2:b0:fa:a6:a0:fb:e9:1a: bf:9a:bd:84:46:f6:7b:52:7e:e5:a8:c4:2e:c8:33: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:55:B7:F9:D6:1E:46:BD:F5:7D:81:84:65:AA:B1:47:14:A3:B7:C3 X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:13:57:5c:56:ad:06:80:5d:79:d4:31:9a:0d:b2:24:d8:32: 01:a6:07:ef:d7:75:aa:10:83:92:3e:9d:6d:9b:43:9d:8d:be: 0d:2a:91:98:63:02:04:f3:3f:b9:78:a4:0d:46:0a:64:6f:5b: 92:4e:8e:9f:a2:cc:33:47:d1:3c:b4:8c:c0:7a:1c:4b:18:8a: 9c:95:ba:fa:f5:f8:2a:7a:13:88:f8:4e:e5:3a:c6:53:3b:52: a0:c6:72:65:b0:fd:1b:9d:93:24:cb:3a:0e:d3:58:16:de:2b: 28:0f:18:0c:b0:71:f1:b7:f1:a8:3f:a7:b4:6d:d1:93:82:f0: 7c:66:ba:c9:c5:8b:91:49:53:da:86:dd:7f:8a:81:d0:61:4c: f3:81:71:a8:95:4b:71:28:de:83:3b:f1:e3:4a:a6:7c:2c:c9: c4:a3:f3:49:82:24:ae:a8:a8:ec:b3:59:7e:11:fb:61:e7:f2: a5:59:cf:73:14:00:6d:63:49:a4:17:21:f7:67:6f:e3:1b:dd: ab:93:d8:f3:42:77:6f:0f:f8:1c:ea:4e:5c:8c:d0:fa:47:9c: 4c:5e:51:f1:f9:bc:48:cb:bd:41:65:7f:7f:03:ec:97:7d:f4: e4:24:19:b5:e5:91:e0:04:bf:17:b1:83:7c:c7:ae:9c:13:b8: 2f:23:cf:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTWr/85SKlMtFdGGD93VYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjYwMzI2MDQwMDU1WhcNMjYwMzI3MDQwMDU1WjAzMTEwLwYDVQQD Eyg3YTU1YjdmOWQ2MWU0NmJkZjU3ZDgxODQ2NWFhYjE0NzE0YTNiN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5nQ9R+LKJV4fEJ0g1e0+x/xM+f2 EEumafQKc9mcPTKh/QWZB0JuikQ3s6nmRSKO/vkAfkKBJQYR4nGoKPNn00OJTJDk 4qGKUiYeXIboTqnSEL87cd7wCALM9CZLSVCIJs/SDRZdJCMblhuZEK3q1FnP7tf/ qgs2BuD99uB1pVcUET9Op4FwVWhO46XEK+llEBwfYS8bKYAx6JSDibrt2c0aLrT7 KK7kICdZh5i7PElUK5WtFBn/rCYQazFMQwkGxJo1cUvZMuL6PMIii3+ZS1RmD7Fw lumR/YZSpSNn3ahunCsC5BzP0rD6pqD76Rq/mr2ERvZ7Un7lqMQuyDOLBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpVt/nWHka99X2BhGWqsUcUo7fDMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBNXXFat BoBdedQxmg2yJNgyAaYH79d1qhCDkj6dbZtDnY2+DSqRmGMCBPM/uXikDUYKZG9b kk6On6LMM0fRPLSMwHocSxiKnJW6+vX4KnoTiPhO5TrGUztSoMZyZbD9G52TJMs6 DtNYFt4rKA8YDLBx8bfxqD+ntG3Rk4LwfGa6ycWLkUlT2obdf4qB0GFM84FxqJVL cSjegzvx40qmfCzJxKPzSYIkrqio7LNZfhH7YefypVnPcxQAbWNJpBch92dv4xvd q5PY80J3bw/4HOpOXIzQ+kecTF5R8fm8SMu9QWV/fwPsl3305CQZteWR4AS/F7GD fMeunBO4LyPPMA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:09 2026 by rpki-client