$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft File: EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json) Hash identifier: JDrTqvFpsDfI6L+9e5fHcycy9gPY40vBJts6Pfnt718= Subject key identifier: A6:82:6F:51:18:B7:5A:0A:A6:D4:AE:4F:B8:C1:B1:D1:72:00:83:23 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019D25F1DA6228CBB2A1D4BE0DE9129AA1B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft Manifest number: 0B40 Signing time: Wed 25 Mar 2026 17:01:40 +0000 Manifest this update: Wed 25 Mar 2026 17:01:40 +0000 Manifest next update: Thu 26 Mar 2026 17:01:40 +0000 Files and hashes: 1: 0E3xILl8WVZPEgrYoNWZoMVkTpg.roa (hash: vQCOMzQ12V3c85FGpIjN0usTjxM0EfMLxP/m3PtHPDI=) 2: 4GFqVoHAvDJGSMikiQZjE6m3ycA.roa (hash: 3KzMwiSXOiNOWFGVkqOkBvCJJti1SV8n9AZF2X4+w0A=) 3: 89u9unREIWHzHaE6spWcBTF1lJo.roa (hash: 8xhdQpe85q4z4HC4KzOm7n7h5SGt2CLfQ4BpETrnUNI=) 4: A7H1tgL8F0JNM-wT3DtOlJr42CQ.roa (hash: +lATpBJei82aRdaABJ/OsdQoCTQWkmUoS+oR2diqRMc=) 5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: oGXT3cmXiR3VGehhh7T5GIkvL5jIAZYcmDLRCC3U5xQ=) 6: FyMBoEGioj_dsmDJj-ikFJwt8rk.roa (hash: um7JctGs28pyaDiqpyjltt0/B/jCArUTgznU+S7I78U=) 7: GkQSlEUvi4fNNDdQ901XpFZgHGc.roa (hash: BPA4YpVmwzK85pZgbFRFxFl8S/GQjk30Xmm4tS0QUjA=) 8: Iq9lD_A_wVuXIGB9_YCE7m3U36k.roa (hash: st8orOWixkeCqgnnv2s4K71CFl64bN16idijAh1uNRg=) 9: SJ5lDIB3IGqaDmQaI30m-Ngpckk.roa (hash: utGuqYI8PGSeG8YzzGcnX5WML/j07lId3Gwa7KppOww=) 10: baD6BNxvBtAZt2bomqpQxEMkpqQ.roa (hash: FsrOSFA/yaAmgb8veo0ogll2yJD1vN0y0H3JklgTWeg=) 11: nvxQJqPj5xCQW67tgi211cFPXTQ.roa (hash: xfa8KDdjeEdqxYcvOvQdbP9fHGnZD3QGyADGsxwOr6I=) 12: oQ_KE9PwO8rtARvYNMIq29bG_kw.roa (hash: fD+hSNE7/TxZ3JitmRrU2Ab6kP20foK2b96iquwU1Z8=) 13: v_z54US9Vmz52vw7_c20ggObm9I.roa (hash: tUdF74bDSAZc0TUS9t0KZ7bOC/c/n0wIxweAiJZQRqw=) 14: wROyQ7eCk4vKyt_qosbSZQbCg6Q.roa (hash: msFAqkGBHCct32VvHQhjNj/X2yHNxatrSYDVfKZEtiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:da:62:28:cb:b2:a1:d4:be:0d:e9:12:9a:a1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Mar 25 17:01:40 2026 GMT Not After : Mar 26 17:01:40 2026 GMT Subject: CN=a6826f5118b75a0aa6d4ae4fb8c1b1d172008323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:87:c2:f8:7b:50:a7:0a:f7:4e:2a:97:d0:79: 13:b8:0c:39:6e:fb:a1:25:cd:5d:1f:bb:40:2f:22: bb:34:dd:41:9a:c2:e9:85:94:92:c0:36:a7:c6:ed: bb:3a:ff:51:71:10:aa:35:f2:ab:cb:bd:f1:f1:72: 3b:fb:d4:88:5d:21:40:dc:12:d9:d4:2e:1d:29:bf: 5a:07:a5:35:c8:7a:cf:5b:09:f5:63:ee:53:3b:3d: 2d:27:99:4d:76:bf:aa:a3:52:de:04:52:16:04:27: 1f:45:36:74:9f:98:b7:69:1f:2b:9f:b9:fd:5c:40: a6:36:a1:8b:ca:00:3e:0b:b3:da:f3:3b:28:54:0c: 59:f8:29:9e:c6:70:25:fd:6b:d9:b1:ab:7c:d2:3c: c0:0e:e6:45:a9:10:71:f0:0d:3e:57:90:e1:eb:62: 4f:ec:ba:c5:c4:99:c4:28:76:55:84:d7:d3:a5:f6: 91:53:c3:bc:87:6e:5f:d6:10:8e:fb:66:71:fc:fc: 29:fe:f1:b4:98:3c:98:e2:be:94:3e:26:7a:9a:e3: a6:b5:93:a2:0a:b6:27:41:b1:61:5f:66:05:be:56: 73:45:75:d7:6c:92:da:e8:04:11:99:ce:a0:f5:f5: 85:a4:08:8d:f2:6f:a5:3b:6c:05:82:5d:ba:64:db: e2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:82:6F:51:18:B7:5A:0A:A6:D4:AE:4F:B8:C1:B1:D1:72:00:83:23 X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:04:04:31:b3:56:d8:36:9b:80:3f:5f:be:15:99:b6:3a:2d: c1:63:f3:cf:3a:38:97:4a:ec:bf:af:0a:43:ef:93:6e:36:5c: bf:ce:ef:f3:c2:de:12:7e:d1:0c:e5:ea:58:ab:db:a8:0c:2f: e1:4a:53:76:cc:ed:b9:46:76:8e:e5:36:5b:7d:fd:77:62:ab: 6e:44:71:f8:47:c0:1d:c0:a5:90:db:9e:0f:bc:89:c7:aa:11: 1c:e1:72:01:31:e3:eb:33:85:ea:4c:0f:05:f9:13:d4:eb:af: d7:5e:d1:ab:b7:ff:43:ef:9b:dd:59:2e:77:8e:49:7b:f6:34: e0:58:cc:65:a0:5b:0b:6c:33:23:79:1a:c9:cf:7e:65:a2:aa: dd:07:b7:96:df:f9:d0:a7:f1:3c:c9:81:c8:46:b1:c0:3e:2d: 79:31:ad:b2:48:1a:2a:e5:b5:96:d3:36:05:d5:15:23:d1:56: 6e:e9:67:48:5f:78:73:17:e9:96:9c:7f:0e:9a:55:c4:c3:01: d5:f2:aa:5b:be:3b:c8:74:70:ee:30:c2:ab:46:c8:88:29:db: 97:32:4a:7d:17:27:ca:0b:19:5b:bc:b6:8f:af:a1:24:2c:a8: ac:4c:55:61:54:32:a3:4c:b7:4a:21:ee:f9:58:af:04:0b:44: 70:58:36:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8dpiKMuyodS+DekSmqG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjYwMzI1MTcwMTQwWhcNMjYwMzI2MTcwMTQwWjAzMTEwLwYDVQQD EyhhNjgyNmY1MTE4Yjc1YTBhYTZkNGFlNGZiOGMxYjFkMTcyMDA4MzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIfC+HtQpwr3TiqX0HkTuAw5bvuh Jc1dH7tALyK7NN1BmsLphZSSwDanxu27Ov9RcRCqNfKry73x8XI7+9SIXSFA3BLZ 1C4dKb9aB6U1yHrPWwn1Y+5TOz0tJ5lNdr+qo1LeBFIWBCcfRTZ0n5i3aR8rn7n9 XECmNqGLygA+C7Pa8zsoVAxZ+CmexnAl/WvZsat80jzADuZFqRBx8A0+V5Dh62JP 7LrFxJnEKHZVhNfTpfaRU8O8h25f1hCO+2Zx/Pwp/vG0mDyY4r6UPiZ6muOmtZOi CrYnQbFhX2YFvlZzRXXXbJLa6AQRmc6g9fWFpAiN8m+lO2wFgl26ZNviTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaCb1EYt1oKptSuT7jBsdFyAIMjMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAQEMbNW 2DabgD9fvhWZtjotwWPzzzo4l0rsv68KQ++TbjZcv87v88LeEn7RDOXqWKvbqAwv 4UpTdsztuUZ2juU2W339d2KrbkRx+EfAHcClkNueD7yJx6oRHOFyATHj6zOF6kwP BfkT1Ouv117Rq7f/Q++b3Vkud45Je/Y04FjMZaBbC2wzI3kayc9+ZaKq3Qe3lt/5 0KfxPMmByEaxwD4teTGtskgaKuW1ltM2BdUVI9FWbulnSF94cxfplpx/DppVxMMB 1fKqW747yHRw7jDCq0bIiCnblzJKfRcnygsZW7y2j6+hJCyorExVYVQyo0y3SiHu +VivBAtEcFg2GA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:12:31 2026 by rpki-client