$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft File: dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json) Hash identifier: RSOYo8I7zNKKxan4tn2nLMLxaR3k+1PEDy1ns7nKpWY= Subject key identifier: 28:ED:A8:8E:36:14:FE:9F:5F:B8:CF:5B:AA:A6:D0:12:5D:D0:0B:BB Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019D3375A6EC7E28A6959338844F110220C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft Manifest number: 1611 Signing time: Sat 28 Mar 2026 08:00:41 +0000 Manifest this update: Sat 28 Mar 2026 08:00:41 +0000 Manifest next update: Sun 29 Mar 2026 08:00:41 +0000 Files and hashes: 1: 3UvEih8-gDgZZkcxbDbZU_-xI6E.roa (hash: VuzKrkhER2kIA+fzK85yXqMS//LI0xMOk1j2vnId0Ds=) 2: 5lLrPkobYapeH_YEkj_cgVZiTl4.roa (hash: LA0ccb3eiNozv6xRtPbB9Y5+Y/meBI91YyWfOeIXed4=) 3: 8ReEJPFMNr7qTteX6qv8unFvcBU.roa (hash: cnOyPdf7KV5827HwqHxHTqoHFSaE73rzQ8nd7uy59YE=) 4: 8Zfz2__LOu7ePxal8cv-bKS2h6U.roa (hash: +2tAS/WTUahrAWaXWLGbsm0bJFPNFA2k1sshJOthojY=) 5: EGT7w7ccRY_aHsT2waQrmkTQOg0.roa (hash: G3orlxt1QVzhu0rMV7kl3OzYV++O6Mm3e1uJ14Jtm3Q=) 6: JUsZAIzpUGjx6jJRW74wD5KYdxw.roa (hash: ubfqsLxf7jUqaeE1zzMD7BbyJ0T6FgVrCwi7fEcPsdA=) 7: NSXspG9pQJvmWYLKS70532E0Tr8.roa (hash: MrTONSRvxrXJDrrYRMbIis/UbxqsqX2KcYYn/ZlA2eI=) 8: NpjviyQAS6_HknYxw1olcKmnvXI.roa (hash: VIzxjlCiF2jjE0tWzV91pKiUApwrcpjktcqi5cnltaI=) 9: QovdBxZFYO8Le-cS-a1JwRjgfQk.roa (hash: XGPaVXCFvuqE5pmLKAAz2EcSfvcufVPb2RTZtwJD+x4=) 10: _Okbnr80Rq7ww8R4v3_ggcisub4.roa (hash: /xX2WGNlLNgbJPvCfzjtPTr4JvfPghmXqeSRioLiEAY=) 11: cDJOpXY5IOe_jLTdJ-OS8qr6SvE.roa (hash: 6iAur4FsqXDOBKEZajqm+YOOYdc6UHHVGhnROwWKxXk=) 12: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: 0huNOv6DeCtN5kG2OpD8OXVH23jtMtVUSehy+vU2F6E=) 13: jvySsCRwHf663AnOlH_eMm3p3NI.roa (hash: n02tS4DDej55ND22Di+pvAtCvghqR/XXwEjDXngg374=) 14: qOuuE7ncVWyhAoaRCylJZLvt_Qs.roa (hash: 9Ei/7J8FyQdTzS+N+w6NNcYG9fQPW4NA4XNB1+d11Aw=) 15: tK4p7XOY-9eMCfT41rNfDvMz8ZQ.roa (hash: +PzSpSLby2pKNdEalpx88bV8TrjpZ7AoJpGeiQ6ta/I=) 16: yGCnvxgCyXwx49hD9VXIdTQinr4.roa (hash: R0GWLFctuLdH9pM10rtgW4/R6oZFjcxyRhEiFyXt+X0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:33:75:a6:ec:7e:28:a6:95:93:38:84:4f:11:02:20:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Mar 28 08:00:41 2026 GMT Not After : Mar 29 08:00:41 2026 GMT Subject: CN=28eda88e3614fe9f5fb8cf5baaa6d0125dd00bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5b:46:c8:72:26:84:c9:8d:70:d2:1f:65:26: 02:1d:11:c9:ac:51:d0:54:18:8a:72:78:64:20:1c: 1a:07:dc:e0:c1:87:b9:26:56:c4:d8:7c:2f:6e:ed: 45:cb:61:15:09:c3:80:21:86:05:cf:a5:df:96:52: 2f:a3:b0:ec:c1:1f:2c:68:48:eb:47:11:b8:dc:43: 03:df:c1:da:e6:3d:14:d4:d8:cd:e1:04:a2:5b:69: 69:b1:09:52:d1:3e:82:fb:57:4b:d6:7c:a9:18:6b: db:aa:9f:f3:a3:d1:d5:98:15:20:cf:22:3b:6e:74: 77:10:ce:3d:06:73:ac:25:54:f3:3c:23:f6:9a:83: 58:02:06:c0:e1:4f:7e:5c:bd:59:69:5c:9f:73:c1: 3e:d8:4f:79:95:ea:33:d2:5e:62:1d:f6:04:97:12: 04:22:77:6d:32:d3:66:05:b8:c2:60:96:34:2d:6e: 51:14:be:c0:b0:30:ce:44:37:34:da:7b:be:a3:23: 4e:63:7b:3a:ba:cf:2f:dc:d3:63:c8:41:de:ac:38: c4:3e:e1:3a:9e:bf:a5:54:c0:64:18:48:74:b5:2a: 02:46:53:82:ca:13:1c:c5:36:d1:a4:8e:d9:12:c7: 90:2b:ab:32:39:17:9a:e0:46:ef:22:4d:59:0e:17: 33:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:ED:A8:8E:36:14:FE:9F:5F:B8:CF:5B:AA:A6:D0:12:5D:D0:0B:BB X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9b:7c:f5:6a:43:f4:78:46:fd:2d:be:12:04:09:2e:c1:91: b9:93:9c:1b:e8:63:b4:52:f9:a7:e8:30:22:ed:48:f1:eb:39: 6f:f5:f3:48:c5:24:12:90:78:cb:64:e3:87:fc:6d:80:bd:41: a8:c3:17:ef:6b:4c:dc:a2:80:ea:5b:56:46:02:e1:e3:6d:ff: ac:2a:17:8c:c3:9e:bc:06:7b:d4:c6:4b:81:0c:c6:16:f7:a3: a5:f0:ce:75:11:90:76:86:d2:c9:2e:b7:a1:59:2f:e7:05:40: 35:80:ce:55:70:1d:39:4f:47:ef:7b:34:fc:bb:a8:c2:bf:78: 71:5f:3e:5b:f5:b8:46:77:9a:a1:e7:2a:b4:e3:6e:b0:2a:20: 7b:ec:0b:d8:9f:12:1f:0f:dd:37:69:39:cd:1d:39:24:97:af: 11:d2:06:41:1c:57:43:bd:d1:0b:9a:5f:ad:9f:18:cb:51:c1: f0:cc:2d:5e:0f:f5:bd:f8:6f:77:f9:06:98:fc:ac:e2:63:ca: 3a:fe:32:9d:2f:25:82:d5:3e:25:e5:dd:90:fd:b5:82:4b:14: 22:75:b6:84:07:63:12:93:41:eb:77:e6:9d:20:1f:7e:5c:b9: 2a:fe:ef:c1:f2:a3:1a:83:44:28:1e:0c:d0:5c:d9:48:86:7b: 46:ce:c8:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0zdabsfiimlZM4hE8RAiDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjYwMzI4MDgwMDQxWhcNMjYwMzI5MDgwMDQxWjAzMTEwLwYDVQQD EygyOGVkYTg4ZTM2MTRmZTlmNWZiOGNmNWJhYWE2ZDAxMjVkZDAwYmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFtGyHImhMmNcNIfZSYCHRHJrFHQ VBiKcnhkIBwaB9zgwYe5JlbE2Hwvbu1Fy2EVCcOAIYYFz6XfllIvo7DswR8saEjr RxG43EMD38Ha5j0U1NjN4QSiW2lpsQlS0T6C+1dL1nypGGvbqp/zo9HVmBUgzyI7 bnR3EM49BnOsJVTzPCP2moNYAgbA4U9+XL1ZaVyfc8E+2E95leoz0l5iHfYElxIE IndtMtNmBbjCYJY0LW5RFL7AsDDORDc02nu+oyNOY3s6us8v3NNjyEHerDjEPuE6 nr+lVMBkGEh0tSoCRlOCyhMcxTbRpI7ZEseQK6syORea4EbvIk1ZDhczswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjtqI42FP6fX7jPW6qm0BJd0Au7MB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5t89WpD 9HhG/S2+EgQJLsGRuZOcG+hjtFL5p+gwIu1I8es5b/XzSMUkEpB4y2Tjh/xtgL1B qMMX72tM3KKA6ltWRgLh423/rCoXjMOevAZ71MZLgQzGFvejpfDOdRGQdobSyS63 oVkv5wVANYDOVXAdOU9H73s0/Luowr94cV8+W/W4RneaoecqtONusCoge+wL2J8S Hw/dN2k5zR05JJevEdIGQRxXQ73RC5pfrZ8Yy1HB8MwtXg/1vfhvd/kGmPys4mPK Ov4ynS8lgtU+JeXdkP21gksUInW2hAdjEpNB63fmnSAffly5Kv7vwfKjGoNEKB4M 0FzZSIZ7Rs7IRA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:27 2026 by rpki-client