$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft File: rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft (raw, json) Hash identifier: J1vbWu21RVA7VKPPn8JU+EPt6M93xfMEQuYDcLko9Yc= Subject key identifier: 5A:A8:C1:46:32:48:66:87:F1:97:51:DF:AA:34:1E:A2:B8:19:A8:58 Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019D24DE831EE8A772249DB1CF8A8CC357B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft Manifest number: 18B8 Signing time: Wed 25 Mar 2026 12:00:55 +0000 Manifest this update: Wed 25 Mar 2026 12:00:55 +0000 Manifest next update: Thu 26 Mar 2026 12:00:55 +0000 Files and hashes: 1: 1fb9CDkZzrVWpqYURt-GyXCNGQs.roa (hash: Bwfpkj2M7jenrF7i16afJKl5QhL9sTNZVH0tBuZWKCk=) 2: 2cmX08_0V60RWF0NslF7i3pXlAo.roa (hash: nfPNJ+jZk0+vBMF+SJPszNxsUeIOP8xR0alKK3Fgjiw=) 3: 2gkwwMuVvfJRFfWXMXZVOw9C7I0.roa (hash: zKEb8T3b/d6Ct0G1vwdk9qlfmlRr8HLuip+ohtf+Qsk=) 4: 406RC8D2DJu0o6VbgI1vHFu-IVw.roa (hash: 2sejJdJUpwBumLvcfygQ1h4lSJtYePkBXA4zfQtqtr0=) 5: 6qGUPCLSi43UStT-BJ4g4tZDV9M.roa (hash: HDKK+4SxJUjTqGYrMjwsdWSR0sAb33j+TagY0rttyN4=) 6: BRd1dnMvqyeu6Iqyp48WqiI3PX8.roa (hash: 9SGTzq6aQaLeMxjfPr7d/v/RRLlk3wUeJ/FIxW4XjoM=) 7: DDngBeugBflz2Y90QC-zDicHQ24.roa (hash: m0YvcO7ROlX6F4MB7yRaAW8MqkEMP4GHYTq9pzb6NPA=) 8: Ha5ls7-s4ydFIqi1cIfxEQYIJ3s.roa (hash: QNUSDeQ5+vKisVWLIDdycMdXbuXxERVUMifDeFc9EHI=) 9: Moj_-YvrOAMwbOuqx4MX_xnDLlQ.roa (hash: KloQv1gF+UcRJd2ui7rVIOG0L8tLzI7R/55riXXC3yM=) 10: Tkz8m1Jr8tfaMAIELG4VoMxret4.roa (hash: Ikgnpsjpj4CM2/661QF1/WXQiwV1IznX5MRWsNLxq68=) 11: VL6J3vZTbL-0KSQOloFM2AVjSZg.roa (hash: JU3p/Bn/swCU2DbrwcUBDJmSoERheb3FgweaOuNm7FA=) 12: bfGP5wDGs8mut0cXRDEC84CTDeM.asa (hash: 8+qCFKSvCD04vmJQcLwz8ThkiIUKqoFrthzvpdwRvKQ=) 13: gu5b-m8ugFunN8Q9-cNGJdqzJLI.roa (hash: ut3xBLBfogSAsAXWFcukuvCAHPYuDpvnWIxYB0vUERI=) 14: pSkX1aYvpV_dMUNcdVmcgt_RWLc.roa (hash: RU574/zI5Cc9m5YzsYmknlaHbPU4tmMSrGJBMMiXggA=) 15: qyB9u_3J_RVeVDkMwpKRWS3V5cg.roa (hash: PkKzlFF97/fV6zQLm2s5vsmD97htFdAYzjNYK4JSses=) 16: rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl (hash: uifdmSnBNq8TzKKaJS985Zno4K4+HcuFSYAEdQgVGiE=) 17: sRud-O0GgcMtbgli7v3Ms1IG0T0.roa (hash: 7IhaNuqMqxLZK4Y/tiaIu29EU9zivSv+n2cnQWClRj0=) 18: v2IhDQ8dMh0vSfLTkTNdx07j3Do.roa (hash: q5Y57O7PdAe9bYY9H4RfsF6Bk+AQ07ZKzaQosqJ2ejw=) 19: vSrmDlVPvcbpa4TNpFRUv-deUg4.roa (hash: U/6f8DveHrGmVToTuErk3OHAoU1lj5DpDvJ+urB/cfA=) 20: vc-5zxPl_h0J3-E2FqTyI34ouTk.roa (hash: r0WzC1+rOz+2zshpJb+lYhTTCmdr77e5h4FMp5b729w=) 21: xTW0DPaVYb9sRjbA1xPoIcJ45SI.roa (hash: sYB2IEkgUGOL+h/ZFWDk7EQNgA4/WiCGNEohg5WxWc4=) 22: yBViHYVahUcqkxCbQgO3u53uelw.roa (hash: iqnkuX/SgFu+mpzTSY/56VX3U3Hwj11167koCnRuDwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:24:de:83:1e:e8:a7:72:24:9d:b1:cf:8a:8c:c3:57:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Mar 25 12:00:55 2026 GMT Not After : Mar 26 12:00:55 2026 GMT Subject: CN=5aa8c14632486687f19751dfaa341ea2b819a858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:ad:55:60:3e:b2:83:92:3d:98:74:2f:a0: 53:27:d8:41:1d:8a:a4:de:85:cc:52:34:06:53:a5: 71:36:0f:84:03:f9:89:bd:81:36:ad:c2:cf:9b:d0: ad:fe:dc:2c:07:f5:59:9e:75:e4:de:9b:77:dc:bd: 8b:5c:c0:a3:39:1a:ec:ef:56:51:fb:72:a9:0e:6c: b6:f8:70:95:c2:30:fc:8d:65:bf:f2:bd:66:56:8b: f2:81:30:14:2f:81:e2:96:85:d4:a6:5d:f0:9a:2b: 0c:60:48:51:b4:04:93:8b:69:09:b7:39:eb:21:9b: 37:2a:51:30:05:9b:13:bf:5d:b4:dd:53:59:03:82: 8c:67:46:e4:2d:1d:96:a0:5d:98:bd:32:a1:b6:87: 48:b4:93:1b:0f:00:ab:12:a5:d2:f1:e9:9e:58:3b: d4:64:65:33:04:7c:a9:3f:24:49:5f:d5:5b:04:94: a0:d4:b0:9a:b9:c3:da:7d:c7:94:28:84:c8:68:f0: c7:b8:a4:24:58:64:d5:b9:f1:b3:29:ca:a6:41:cc: 5e:72:1c:d3:fd:6a:c4:65:b8:6e:35:e4:02:c4:c2: be:a7:9e:32:4b:77:27:26:6e:3e:9c:1a:5e:11:e9: 88:a1:d8:93:2f:74:fd:1d:f5:8a:60:e3:9a:39:66: 75:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A8:C1:46:32:48:66:87:F1:97:51:DF:AA:34:1E:A2:B8:19:A8:58 X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e7:19:54:fa:ab:26:48:6f:68:7c:55:37:27:de:8d:38:1b: 37:53:b0:b6:7a:fa:18:9c:a8:d7:36:4c:41:2b:ba:c7:c1:ee: fa:b1:c7:6f:33:65:ad:49:25:48:71:a1:d4:c9:53:21:74:47: 21:98:26:6d:c9:d8:f9:8c:d5:a0:26:20:5b:42:68:0e:19:c8: 5d:cb:1b:fe:57:21:c4:26:ae:49:33:7c:b7:e9:21:70:0a:6d: bb:81:59:2b:5a:5b:f1:1e:52:45:16:3e:bf:55:47:ca:64:78: 5c:5a:3b:e5:62:a9:65:83:4a:52:d0:d7:d0:ac:31:40:62:99: 44:31:17:db:c3:9d:cb:6c:71:2d:32:ec:84:ec:f7:c2:33:fb: a1:4d:84:e0:1c:cc:55:11:90:45:e0:27:b2:14:7b:a0:27:35: 19:9a:11:ef:3b:29:c5:a6:1a:b8:43:cf:36:ce:23:59:e3:21: fc:53:0b:16:de:41:31:4f:05:80:5b:c1:a5:81:40:8a:2a:28: 99:f1:1f:31:a9:ce:7b:a2:fe:71:07:91:55:33:17:bd:43:2f: e1:6a:fa:3d:bc:18:2e:21:12:fe:ef:72:37:59:aa:44:a7:0e: 83:2e:8d:a1:10:d1:ad:d9:47:ac:bf:f3:a8:43:5e:4c:6c:af: 6f:e7:cf:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0k3oMe6KdyJJ2xz4qMw1exMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjYwMzI1MTIwMDU1WhcNMjYwMzI2MTIwMDU1WjAzMTEwLwYDVQQD Eyg1YWE4YzE0NjMyNDg2Njg3ZjE5NzUxZGZhYTM0MWVhMmI4MTlhODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw2tVWA+soOSPZh0L6BTJ9hBHYqk 3oXMUjQGU6VxNg+EA/mJvYE2rcLPm9Ct/twsB/VZnnXk3pt33L2LXMCjORrs71ZR +3KpDmy2+HCVwjD8jWW/8r1mVovygTAUL4HiloXUpl3wmisMYEhRtASTi2kJtznr IZs3KlEwBZsTv1203VNZA4KMZ0bkLR2WoF2YvTKhtodItJMbDwCrEqXS8emeWDvU ZGUzBHypPyRJX9VbBJSg1LCaucPafceUKITIaPDHuKQkWGTVufGzKcqmQcxechzT /WrEZbhuNeQCxMK+p54yS3cnJm4+nBpeEemIodiTL3T9HfWKYOOaOWZ13wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqowUYySGaH8ZdR36o0HqK4GahYMB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiucZVPqr JkhvaHxVNyfejTgbN1Owtnr6GJyo1zZMQSu6x8Hu+rHHbzNlrUklSHGh1MlTIXRH IZgmbcnY+YzVoCYgW0JoDhnIXcsb/lchxCauSTN8t+khcAptu4FZK1pb8R5SRRY+ v1VHymR4XFo75WKpZYNKUtDX0KwxQGKZRDEX28Ody2xxLTLshOz3wjP7oU2E4BzM VRGQReAnshR7oCc1GZoR7zspxaYauEPPNs4jWeMh/FMLFt5BMU8FgFvBpYFAiioo mfEfManOe6L+cQeRVTMXvUMv4Wr6PbwYLiES/u9yN1mqRKcOgy6NoRDRrdlHrL/z qENeTGyvb+fPxQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:20:41 2026 by rpki-client