$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft File: 6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json) Hash identifier: lWlWszAm0Kp+e87cyjugC+pamUHBn8y/XNrPXytzuCY= Subject key identifier: 73:FF:0A:8E:98:CC:9D:68:52:3E:D1:FD:AD:FE:10:D4:15:A5:AB:1A Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 019D27A9263EB08BF5385CE33866E19A429F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft Manifest number: 18AE Signing time: Thu 26 Mar 2026 01:01:29 +0000 Manifest this update: Thu 26 Mar 2026 01:01:29 +0000 Manifest next update: Fri 27 Mar 2026 01:01:29 +0000 Files and hashes: 1: 1-V2f5BIvAjoxWtMfXiOEdpxut6E.roa (hash: D7oyZz1oHRszroBqObV23g+p70gyyYzI6HwkfnsCOpU=) 2: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: wu66B/jNzMih4ZhlvlAW8RLq4dnCPe4Z7e2rBqkK8WE=) 3: 7hi7Ah4iY_QQeOlVJayptAGSNSQ.roa (hash: 91eReMLkF+2CXAAIZp2KhXfLlZYAztOnwmcmPnVUzXo=) 4: 9R90z_RXFkZAiwMA8btLrqNKc5k.roa (hash: qB3OSrsx3CWWt5hbnFdtOpLb0xWqshoihPM7A2OR0ZI=) 5: 9cn7oO0iiJOK2Jrlawx7PDY1feo.roa (hash: j5TG1qDIuGwfkqIJMBOyK7GFpL9NpA8P1Hsl6lon4S8=) 6: HWkZUGuQFUtSfIxMZ9ShbmYb-Uw.roa (hash: /p3RuOQH8ff2EFGkQBf64zKFuTokj0i4cJmKRGRkgiU=) 7: JDTZDW6AYWQ-yj7N5Zoenz19vXY.roa (hash: aJ6VAzk0xVWZ+1DH33f1NLSDcnI/7+vJFB3jbl7CnPc=) 8: QaR40Du4QHojtPoMdpOj--q01WU.roa (hash: eIGnLm0U97IrEJBoUThT3XNpPhCvMXo7GasLn6DQpoQ=) 9: _iw4-UbxRcpMoWsfFn6G2aiGN-s.roa (hash: 2naXiACb6/BywUEITZo6HGPyiSxLs5Zs4g1/62TMQcU=) 10: burJ78lKaBi9GwpclBHxJ1tt3J8.roa (hash: 7zKgA0U3yskpNhBj2DmX/6y6Luj79ABkwPUXMuxefqU=) 11: h2gp67O50OZSa1oqQZXjN2SNpx4.roa (hash: Pa+pjoEKIMF2XBf3tbxUYkCZYzHfL5nJuwgyvpsFLdw=) 12: mtubXUlBQXjcnE7fuf616NzQiL8.roa (hash: ZPi+7TMbUx5kPi5sDdlZQektqLQyg5jCkWs9e2Cya6g=) 13: tEVXcAqmFhkbtGLmUdbLn_80yig.roa (hash: 9MErMfs8Nn0borG1HaQK08aY1yTDK65zdP9huz/FJ9g=) 14: wFIC1mkSpA0e2UovbVVh_Scnn38.roa (hash: gvnZu9oBw0R11C5ZwnQeTQrVmEIlj6ltv4xIOtBZ5cQ=) 15: wbkCFCpGOAFv3gQa4dX5dSBrtR8.roa (hash: nYzqM3na5q/wwfaIOmk+FxvcOctc4P9IAUI7PFRpl7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:a9:26:3e:b0:8b:f5:38:5c:e3:38:66:e1:9a:42:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Mar 26 01:01:29 2026 GMT Not After : Mar 27 01:01:29 2026 GMT Subject: CN=73ff0a8e98cc9d68523ed1fdadfe10d415a5ab1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:f0:2e:27:0a:ae:a0:21:8d:c1:f1:48:dc: 24:28:6c:cf:08:c4:fd:2b:64:ba:ea:55:51:e7:53: 9f:21:c5:dd:b9:7d:c2:cc:22:8b:a1:37:fc:35:0d: 27:10:d7:f9:29:99:f7:d5:ed:58:8c:16:7a:26:aa: d1:1a:de:0c:6c:90:6f:b3:be:4d:4d:44:06:76:c2: fb:ff:66:c3:33:a5:3f:84:ae:b7:c6:54:d1:a5:20: 07:db:83:67:a6:61:58:1b:7d:79:93:cd:38:f7:30: 04:cc:23:40:8d:00:c2:4e:49:6e:ad:ab:28:76:f3: ed:13:0a:bf:3c:f8:b8:41:9f:1f:81:d9:22:12:ea: 63:72:1f:57:c3:f9:0f:83:c6:57:98:cf:b2:70:4e: ba:da:d6:f4:5a:de:55:d3:19:b0:c9:5f:cc:92:db: 1b:c1:4a:e2:25:e8:c3:81:c0:d4:4f:b3:18:7c:30: d7:b9:bc:a0:ac:23:d7:af:87:b6:77:f3:4e:6c:60: 63:f0:91:5e:50:a4:99:2b:42:9b:c6:72:ae:c1:a0: 4c:5e:df:11:62:7b:a3:a9:a8:b1:2f:b4:4b:68:da: a2:d5:77:2b:ad:63:8b:07:54:2b:ce:a0:01:8c:1a: 6b:aa:58:c7:06:d3:dc:2b:c8:b3:f9:5e:bc:cf:28: ff:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FF:0A:8E:98:CC:9D:68:52:3E:D1:FD:AD:FE:10:D4:15:A5:AB:1A X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:54:a0:52:42:e8:7a:77:18:43:4b:eb:f7:68:87:bb:b3:88: 21:d8:1b:c3:53:8f:cb:6a:1f:e4:f8:97:00:6b:0f:ad:2a:b2: da:c1:5c:03:8f:86:dc:0f:11:31:0f:39:2a:aa:0c:62:0e:1a: 77:c4:bc:e0:25:47:c1:8b:d9:16:be:35:f6:4c:42:15:d7:b4: 5f:46:a0:05:87:84:04:6e:cf:dc:cf:9b:7f:af:fd:70:c3:2a: bb:a8:16:e7:c3:40:3e:1c:a5:66:f6:74:13:88:de:44:9f:0e: a4:4c:7b:fa:8a:36:26:1d:fa:84:e1:0f:fb:7a:bd:4e:5f:16: 1b:9e:c3:72:b4:16:e5:4c:0a:2c:e7:93:c6:1a:98:6c:d5:c0: 17:d5:ce:02:ef:77:9f:5b:21:cb:5a:f0:04:74:cd:d4:42:d9: 05:19:84:b0:ed:77:fa:f5:81:70:cb:c0:fe:f9:e5:b1:a9:ea: a0:ca:49:e5:7d:0c:e2:c4:ae:37:e4:05:d5:41:f5:41:57:e3: bb:d4:47:ed:54:23:56:ef:25:30:bf:e5:15:44:d1:60:a8:3b: 87:c2:7e:0a:c5:08:76:50:41:15:ff:ee:00:6b:1f:36:aa:25: da:02:e2:c3:7c:8e:0c:55:e2:02:b9:1a:56:91:f1:cf:23:b8: 45:1f:a7:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nqSY+sIv1OFzjOGbhmkKfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjYwMzI2MDEwMTI5WhcNMjYwMzI3MDEwMTI5WjAzMTEwLwYDVQQD Eyg3M2ZmMGE4ZTk4Y2M5ZDY4NTIzZWQxZmRhZGZlMTBkNDE1YTVhYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ/wLicKrqAhjcHxSNwkKGzPCMT9 K2S66lVR51OfIcXduX3CzCKLoTf8NQ0nENf5KZn31e1YjBZ6JqrRGt4MbJBvs75N TUQGdsL7/2bDM6U/hK63xlTRpSAH24NnpmFYG315k8049zAEzCNAjQDCTkluraso dvPtEwq/PPi4QZ8fgdkiEupjch9Xw/kPg8ZXmM+ycE662tb0Wt5V0xmwyV/Mktsb wUriJejDgcDUT7MYfDDXubygrCPXr4e2d/NObGBj8JFeUKSZK0KbxnKuwaBMXt8R YnujqaixL7RLaNqi1XcrrWOLB1QrzqABjBprqljHBtPcK8iz+V68zyj/SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHP/Co6YzJ1oUj7R/a3+ENQVpasaMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVSgUkLo encYQ0vr92iHu7OIIdgbw1OPy2of5PiXAGsPrSqy2sFcA4+G3A8RMQ85KqoMYg4a d8S84CVHwYvZFr419kxCFde0X0agBYeEBG7P3M+bf6/9cMMqu6gW58NAPhylZvZ0 E4jeRJ8OpEx7+oo2Jh36hOEP+3q9Tl8WG57DcrQW5UwKLOeTxhqYbNXAF9XOAu93 n1shy1rwBHTN1ELZBRmEsO13+vWBcMvA/vnlsanqoMpJ5X0M4sSuN+QF1UH1QVfj u9RH7VQjVu8lML/lFUTRYKg7h8J+CsUIdlBBFf/uAGsfNqol2gLiw3yODFXiArka VpHxzyO4RR+nog== -----END CERTIFICATE-----Generated at Thu Mar 26 10:10:37 2026 by rpki-client