$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft File: 7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json) Hash identifier: FIsMrFLBA+M663YdP0Lr/dPEGepoqNUMfHmtahob5/U= Subject key identifier: 9B:59:23:B3:1D:1B:AB:11:C0:D3:73:FC:26:11:05:C7:F2:36:FB:6E Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019D254CD1FAF0AAAA1A893AF290C6018B43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft Manifest number: 189B Signing time: Wed 25 Mar 2026 14:01:24 +0000 Manifest this update: Wed 25 Mar 2026 14:01:24 +0000 Manifest next update: Thu 26 Mar 2026 14:01:24 +0000 Files and hashes: 1: 03adZJbb-O1p_CXcQ_4M0jgNEFw.roa (hash: ew9gGSBHBbQPEdarHkUHaR6ktGIwejsj7yNx1KPoThQ=) 2: 1-AaYw2BfaY3XhYhRX7k0ikSXO9w.roa (hash: WyNldQk+XZoMO0b/C5jIYmrjIYQhy0dv0+KOkKWcQSE=) 3: 1P4VHJbsu8-KA_CDbuA3mLdiyQo.roa (hash: QETOSgaKr5YFSXBkowwoHjS2zVlXL1HHWJzh0UPdErQ=) 4: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: EvbfdQOYTZ+YiPRTpXOR8ct9gMVUFLr6BRcHsJIdIW8=) 5: Fx8cnnhYnA6BH8cJUcV9Vz-n8OM.roa (hash: nBn8KMz1/qrlmEp5tnjRaNg0XQIu3L/8mlSSo9e/i1U=) 6: HsnhtW3Vo1ScMXDm_04rDrcrO8A.roa (hash: 5+GIeXFw3kg0H6nKxy1DPIUv8/Ly7H/qd2V/EdogjOk=) 7: JHDYQiALesWvByATRJ3bFGKf440.roa (hash: 4qi7uVDpfuqHxI2PwRXSylbhTlTDmB3nFH/RQRca9I4=) 8: M-xhOdJhOt1IVpAo6jVDD6VitCU.roa (hash: waOg7nDr7fSZGGvzIuGjBg6JCLXByvSxzjfTgEkG9Iw=) 9: RMbFoCYqNcmYffu8B7XKQZOpe9g.roa (hash: Bc8GrrG0ePgUPfQVi+zdsUsnCNOP4l8CwIx91Qrbgs8=) 10: RkJgzEGbgGQVpYMhyuLt_ciEWs0.roa (hash: s24XvC1lX1fQ9pY/tvq7aXzmmQIz7/1F7PGbhhoCpbM=) 11: XDRix6QDR_Gjs6-Cgo-LajMwjLo.roa (hash: D5tYwaAg7BrfpT0g1cIaNhjKGBys4m2pxD23SmcuiB0=) 12: YUZAH4o6lSlfa8V06bR-tRKZeJY.roa (hash: RWEnsTCPJnS0wvgpBfvSOdsOCDY+GRhBVGGh8MqvS3c=) 13: bKHn0qb-Jdo8C-QdUH0EoddC6R0.roa (hash: t7W3AEy6SZzLhzfSNb31m9y8L46P7EJQYuCD/DSTk0I=) 14: eidiHBPgQKzRSZT9OwGu9tKmDIg.roa (hash: wDu3wVyoIZQVKXQBVdzTm8+ss6XGOx6VqYvXUN2hobg=) 15: hO16bUk7sgMxRq4iY5R-8zAg_pw.roa (hash: muh9Cwq/x+krpQXeGbq5yotjMWT1VH8PKPWrvuCsuXA=) 16: k6jLYVH6C0z0KMYaezVQiNE4EPU.roa (hash: 7jskiw03SWhNj59VRgx4kkxZFbjnSw3URxMXrNwyUt0=) 17: x_JLnp-gge30umPx_RvTQbE6gPs.roa (hash: Ia9WGZIGIJ1OoZ2Ke+mCm85FUNL3XOpDFSZD7R/PX0c=) 18: ygT4_ge1ohdgPGNfdC3uMhbevTo.roa (hash: QzMQwc/7YDt82Fn8x4yXez6Z6w0QENNYIpCBlAJaBv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 14:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:4c:d1:fa:f0:aa:aa:1a:89:3a:f2:90:c6:01:8b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Mar 25 14:01:24 2026 GMT Not After : Mar 26 14:01:24 2026 GMT Subject: CN=9b5923b31d1bab11c0d373fc261105c7f236fb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:60:a9:cd:68:81:42:41:9a:72:7f:0e:a6:0d: a6:44:14:03:46:b0:8a:65:c6:83:11:98:8c:6b:10: 77:d7:8b:c1:70:82:a4:0e:29:22:0e:5c:1b:26:1c: 11:f5:53:b9:9c:1a:db:11:73:e0:51:53:08:82:db: 69:86:08:0b:a7:ce:fb:95:7d:08:d2:60:e0:5c:78: da:de:8f:98:e1:82:7b:dd:4d:3f:a7:46:d5:7f:c2: 2a:65:ab:5a:5a:4b:6a:52:11:ea:b9:89:ad:0c:21: fe:82:8e:a5:00:53:bd:3f:a4:a7:d8:6c:30:47:3e: 96:98:29:8b:9b:3c:42:f7:d9:5d:0d:79:b8:dc:47: d9:5a:ad:69:30:79:20:07:fe:cb:08:dc:7c:db:ea: 6b:4b:f3:59:a7:ff:3e:b4:7e:ae:91:40:5e:86:5a: 8f:de:23:8c:d1:ed:10:e0:dd:c0:86:15:e8:86:da: 1c:4b:98:2f:57:cc:1e:17:dd:ac:86:df:db:43:6b: 31:00:da:29:74:6c:6e:73:a5:fc:f6:55:4f:de:d2: 1d:c8:71:8d:7f:6b:9b:17:55:e0:b8:ed:50:68:3b: 6b:ac:9c:58:36:e2:0f:93:38:7e:72:b2:92:e8:b3: 03:db:a4:36:1a:7a:46:f0:58:1c:f9:11:f9:83:08: c4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:59:23:B3:1D:1B:AB:11:C0:D3:73:FC:26:11:05:C7:F2:36:FB:6E X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:13:9e:ec:f6:bf:52:d4:a3:8d:a5:b8:06:20:cb:c3:5c:f5: d3:12:7b:98:eb:ba:9c:e3:20:26:2f:b4:3e:32:84:c0:d7:63: 9a:ad:4d:31:d2:4b:74:f5:91:d1:91:a4:86:d7:ab:1d:bc:11: 6a:65:e8:91:a6:21:17:27:a3:f7:98:ca:0d:07:69:b4:77:58: 86:7f:3a:8f:58:60:77:f2:e0:4c:74:8b:0b:4a:d5:b6:36:22: f9:2a:19:61:a7:a0:8a:13:1c:dc:fc:39:a4:e8:bf:bd:b8:30: 58:2e:b5:69:7d:3e:b5:48:63:36:cd:9a:0d:8a:ff:39:ab:f9: 86:8c:44:18:18:3c:69:f8:9c:f2:ad:a6:4d:11:ee:e9:9a:9c: ec:ec:0a:7e:eb:fb:cc:f4:79:6d:c3:ab:d1:4d:d9:93:85:51: 2c:26:5d:1e:2e:e3:5f:15:67:89:19:93:a9:d0:26:d2:ea:00: 49:6f:a7:15:f8:de:9d:83:12:1b:3a:72:1c:72:ec:0d:4c:4d: e1:10:f4:7f:3e:45:91:f8:db:8a:71:f7:97:32:90:65:d1:dc: 12:31:39:22:12:0d:af:88:98:d6:f7:10:63:e0:76:07:e6:33: 4e:03:a3:ba:2b:3f:8d:14:66:51:69:53:f3:aa:93:ce:24:5f: 71:f7:ed:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lTNH68KqqGok68pDGAYtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjYwMzI1MTQwMTI0WhcNMjYwMzI2MTQwMTI0WjAzMTEwLwYDVQQD Eyg5YjU5MjNiMzFkMWJhYjExYzBkMzczZmMyNjExMDVjN2YyMzZmYjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+mCpzWiBQkGacn8Opg2mRBQDRrCK ZcaDEZiMaxB314vBcIKkDikiDlwbJhwR9VO5nBrbEXPgUVMIgttphggLp877lX0I 0mDgXHja3o+Y4YJ73U0/p0bVf8IqZataWktqUhHquYmtDCH+go6lAFO9P6Sn2Gww Rz6WmCmLmzxC99ldDXm43EfZWq1pMHkgB/7LCNx82+prS/NZp/8+tH6ukUBehlqP 3iOM0e0Q4N3AhhXohtocS5gvV8weF92sht/bQ2sxANopdGxuc6X89lVP3tIdyHGN f2ubF1XguO1QaDtrrJxYNuIPkzh+crKS6LMD26Q2GnpG8Fgc+RH5gwjEuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtZI7MdG6sRwNNz/CYRBcfyNvtuMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwBOe7Pa/ UtSjjaW4BiDLw1z10xJ7mOu6nOMgJi+0PjKEwNdjmq1NMdJLdPWR0ZGkhterHbwR amXokaYhFyej95jKDQdptHdYhn86j1hgd/LgTHSLC0rVtjYi+SoZYaegihMc3Pw5 pOi/vbgwWC61aX0+tUhjNs2aDYr/Oav5hoxEGBg8afic8q2mTRHu6Zqc7OwKfuv7 zPR5bcOr0U3Zk4VRLCZdHi7jXxVniRmTqdAm0uoASW+nFfjenYMSGzpyHHLsDUxN 4RD0fz5FkfjbinH3lzKQZdHcEjE5IhINr4iY1vcQY+B2B+YzTgOjuis/jRRmUWlT 86qTziRfcfftiw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:07:37 2026 by rpki-client