$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json) Hash identifier: F7g2Ne9jvCNt1b8g4NiVS1UKs9GVVrPGXxc81FfAIRY= Subject key identifier: 82:F1:37:D2:AA:69:BB:55:49:79:CA:58:39:8E:1F:4C:A0:D6:B7:76 Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019D270472E109B471F1C409333CE61A6412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft Manifest number: 1894 Signing time: Wed 25 Mar 2026 22:01:35 +0000 Manifest this update: Wed 25 Mar 2026 22:01:35 +0000 Manifest next update: Thu 26 Mar 2026 22:01:35 +0000 Files and hashes: 1: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: YlBH9iRytPTystux9K43mOZCT6l8vtL508m4mHshx34=) 2: B2_FH3MtZlTaOE61buYvXBJKW2E.roa (hash: 55aVAj571Q8/h0HvcQ8YQch6oVhSxMht9hvb0pWG9xs=) 3: EEeXG249QHXtZie6S6hEWpfPs0c.roa (hash: j08Df977nprNp/2GNZ8F6Ri2LTHGQNefm3+Va3aCg1U=) 4: MGuxpogPtwMAFTldHDnEUIBskKY.roa (hash: aRVSa83OdI8eRXcO3WQLPs6YeURGIYliffVNH5moLlY=) 5: OKgmTupzmnhPk0hOIeK3giJ9QaM.roa (hash: vJ5CbfHEFcPbyEC4jXFH5FpTTJogOrELHCnjQEMwhv0=) 6: UuScKKPZU-rxDshW6inBZKRJIH0.roa (hash: oIb88lrmIIDaodPcRGV8PcCWp69cVR7+uTDhUXF8D0A=) 7: ZW_uWUofk0PVk5ZvUH4CXwMQf9k.roa (hash: nMPGS72S0ymOk8yKU1XMgfQYFC4FprUwCeSnvYRogMM=) 8: g_sMt-IMPWFoRArZv0JnssQdxVE.roa (hash: i/F8rrQv+RNHw3Z6W9+3AF4oOHslAP0uqvWz8gg4Un0=) 9: tNc2jSWdykqlG-PkB4v9MVhio4k.roa (hash: k9a+KYr8wPbQKXd8Zqw2THkgTe3lauXtnm8eqnhZ3Nk=) 10: yn0AIXSmQUy2ZdVLfREbNPEMx98.roa (hash: 0/gDR8MJ30pXw1A6bmuJms9g1333tYlKxF2lIJS3jtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:72:e1:09:b4:71:f1:c4:09:33:3c:e6:1a:64:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Mar 25 22:01:35 2026 GMT Not After : Mar 26 22:01:35 2026 GMT Subject: CN=82f137d2aa69bb554979ca58398e1f4ca0d6b776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:8c:c7:ea:ab:85:f8:3a:d1:b3:f0:56:32: b1:69:a2:a8:75:f3:9b:6f:c1:9f:f5:ac:07:08:b1: 0c:e0:44:35:e6:14:72:e4:56:42:a3:58:f4:8f:9c: d9:22:81:1c:2c:d9:af:4b:27:79:86:3d:1b:3d:d9: 17:2b:5d:73:ce:3f:d8:e5:3b:34:af:7c:0b:c4:e5: 4f:46:c1:85:f0:86:13:6e:70:d5:a7:5a:df:25:4e: fa:14:1a:a0:f2:fc:73:33:f2:3d:5e:a7:3e:40:d3: 9a:a6:2d:bd:88:0e:15:97:7e:9c:3b:ac:a3:7c:f0: 00:8a:aa:d5:c8:ef:0c:36:d9:8e:e2:48:d5:d6:81: 4d:c2:e1:1b:87:45:5f:fa:3c:b9:0b:c2:4b:0d:29: 2f:3c:f0:e3:41:04:c9:b1:64:e0:20:da:d4:48:d5: 02:89:14:84:11:8d:75:26:74:90:b7:53:71:d7:b7: 5b:2f:51:28:5c:ff:d7:cc:9f:93:62:a1:b9:dd:89: b3:1a:3c:65:e1:1d:a4:c7:a4:e1:b4:5b:0c:19:b5: 81:d4:17:3b:97:7d:3f:65:81:61:fd:e4:3d:1f:2c: d2:2a:18:83:ea:f9:17:36:df:8a:f1:0c:3c:c6:db: c8:4a:11:9b:37:0d:cd:09:4d:cb:74:1b:1c:f0:e0: d5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F1:37:D2:AA:69:BB:55:49:79:CA:58:39:8E:1F:4C:A0:D6:B7:76 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:de:36:9f:30:6d:12:f4:2e:17:bf:da:8b:79:64:23:eb:4c: a8:e1:c8:90:88:ba:66:3d:e1:b9:2b:27:ed:43:49:e3:50:9b: c9:cf:2a:d5:35:fb:52:f4:53:c4:06:16:0b:8a:b0:be:0e:29: 32:57:20:56:2a:79:a7:b6:ad:a3:55:23:f1:0c:28:c8:1d:e2: 33:49:b7:8c:9d:34:d8:6a:4c:35:b9:65:a2:85:e3:fa:cb:52: a2:50:bb:34:fd:33:57:13:e0:09:26:19:4c:e0:10:64:28:86: fd:05:e0:47:71:a4:c9:81:ce:32:15:08:91:72:fd:77:57:42: ec:06:79:34:ec:3d:99:4a:99:18:11:11:79:0c:e2:95:39:cb: f5:eb:2a:10:c9:bf:91:46:f9:0e:d3:f9:91:19:25:59:c2:2c: 76:60:e0:11:61:34:4e:bc:56:89:88:ae:89:49:08:af:fa:4f: 2a:86:59:d1:30:c9:9a:09:5e:c7:4a:fd:21:5c:f0:5c:76:dc: 34:6a:d8:c6:bb:2c:25:e0:8f:1b:62:13:9d:70:93:91:1b:31: f9:af:30:43:01:1a:a7:47:b6:77:61:7d:29:c7:10:8f:12:f8: e7:ae:2a:50:43:b3:f8:6f:5d:1b:43:d7:91:3a:5d:a7:68:ee: fc:e0:36:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBHLhCbRx8cQJMzzmGmQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjYwMzI1MjIwMTM1WhcNMjYwMzI2MjIwMTM1WjAzMTEwLwYDVQQD Eyg4MmYxMzdkMmFhNjliYjU1NDk3OWNhNTgzOThlMWY0Y2EwZDZiNzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyOMx+qrhfg60bPwVjKxaaKodfOb b8Gf9awHCLEM4EQ15hRy5FZCo1j0j5zZIoEcLNmvSyd5hj0bPdkXK11zzj/Y5Ts0 r3wLxOVPRsGF8IYTbnDVp1rfJU76FBqg8vxzM/I9Xqc+QNOapi29iA4Vl36cO6yj fPAAiqrVyO8MNtmO4kjV1oFNwuEbh0Vf+jy5C8JLDSkvPPDjQQTJsWTgINrUSNUC iRSEEY11JnSQt1Nx17dbL1EoXP/XzJ+TYqG53YmzGjxl4R2kx6ThtFsMGbWB1Bc7 l30/ZYFh/eQ9HyzSKhiD6vkXNt+K8Qw8xtvIShGbNw3NCU3LdBsc8ODVnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILxN9KqabtVSXnKWDmOH0yg1rd2MB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm942nzBt EvQuF7/ai3lkI+tMqOHIkIi6Zj3huSsn7UNJ41Cbyc8q1TX7UvRTxAYWC4qwvg4p MlcgVip5p7ato1Uj8QwoyB3iM0m3jJ002GpMNbllooXj+stSolC7NP0zVxPgCSYZ TOAQZCiG/QXgR3GkyYHOMhUIkXL9d1dC7AZ5NOw9mUqZGBEReQzilTnL9esqEMm/ kUb5DtP5kRklWcIsdmDgEWE0TrxWiYiuiUkIr/pPKoZZ0TDJmglex0r9IVzwXHbc NGrYxrssJeCPG2ITnXCTkRsx+a8wQwEap0e2d2F9KccQjxL4564qUEOz+G9dG0PX kTpdp2ju/OA2sg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:23:41 2026 by rpki-client