$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft File: _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json) Hash identifier: g6Sar9JxlqFv+h1r3XEN8y0bS+C+iF7/M92tBQLgIeI= Subject key identifier: 64:C2:B1:4D:B0:23:67:D2:84:C9:B0:8E:75:48:9E:9C:56:20:B8:BA Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 019D27A9012D70D61137BC2758E7FAB4190D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft Manifest number: 189C Signing time: Thu 26 Mar 2026 01:01:20 +0000 Manifest this update: Thu 26 Mar 2026 01:01:20 +0000 Manifest next update: Fri 27 Mar 2026 01:01:20 +0000 Files and hashes: 1: 06pvda0HGfo4YEYPGpGmXC6pc6Y.roa (hash: EHWs8d7V2Xw60HILi+lG9QLvqYdWqwG17JXDByqVTf4=) 2: 0qb9sAGkBvYUU1loJseXlz25OJ8.roa (hash: m0/HWEMnf/XDbGuQAyqai3DBn5WtxpMTkpZaFwmohUU=) 3: 1CTEFp3Jvu1F6k0C2ZBodYWIJDs.roa (hash: QqXzCs08vUdvWpceemZhSOwsQeTszW8Ksi9FXrp8nQE=) 4: 8PB8h-ISSr84nGZyoSJpxK03xZI.roa (hash: Cew3GhEYpI4Z/2ax+94ohovUkb4oKZoSCX7ODBgVNmM=) 5: IvkQusFVMgz0ZI6M1X5qqmaNPyw.roa (hash: ZoLWMz91Ei85Q0Gy+4SDhp1FLqI4f9bOpK4hh8GaK/8=) 6: NNRjD7YhPe6-EjPeFBa4lVzPKw8.roa (hash: xUYG1EGs/Kb2jGbZ4wzN7JCg3UzLO4J02OnlyyP+rbI=) 7: QiTXesEnDUMy1VzzXBZ1a1EV7ao.roa (hash: AmaLGYuWMfv3G3fabRyFwE+8Jn7gj+JYPPZU6wIdzfM=) 8: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: 4o5SRCbEzIJ7XcIKFFlq6376VxzLUKUnWkKqzo7OPLw=) 9: cIdkjRc0JvHWTaaO3mTRRgEBkoU.roa (hash: ptn5S1Yuf3bTojyRJRd81I1o+BdvHo6hZHXrG2ciiWg=) 10: eRFPbbhCM3fQeuHtAy-_UUJuBNg.roa (hash: 3nMJ/JSGaAPLFOCeRvG2BF5qk6+epYjQPD3rGjOwh4Q=) 11: iRG6zhI_HArOTibBs1JV2QE0L_s.roa (hash: 8mVwvZAIQVh0/wtwoWgJ8lPinuzQ8kyjmM21PvKhN0s=) 12: jJ7bTrKqTB9Ie-vB0SBJ5-Gx8Sg.roa (hash: o7j7tuDcWPE6XNy+iCXCizaUbQy3SeVO+VUusUMlj2g=) 13: o4kcznAm2T0ASiz1k23GlpFApQo.roa (hash: 0h+QZjz610NJvNnLCynCQNNnIrDvurMXfFwfYmM8IOM=) 14: wgPfSToKC9FTCAvt-lOgja8J3iY.roa (hash: PycEQ97+AB+dOAuBHC6DWVd/AycBCpoV++Dya2/jh+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:a9:01:2d:70:d6:11:37:bc:27:58:e7:fa:b4:19:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: Mar 26 01:01:20 2026 GMT Not After : Mar 27 01:01:20 2026 GMT Subject: CN=64c2b14db02367d284c9b08e75489e9c5620b8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e5:06:0d:5b:b5:ae:19:0c:fa:03:a5:8a:5f: 42:6a:f3:64:57:87:a9:04:f0:8e:c7:7e:6a:33:86: c7:fe:6d:6c:0e:d7:a2:77:67:9c:9e:2b:07:54:ec: ea:be:66:45:6e:f6:b7:8a:c6:e9:6a:69:6f:fe:a5: e9:6d:e0:1e:19:b4:ad:75:00:82:d9:a0:41:e7:1f: 28:16:2a:bb:d8:53:e1:8e:08:25:8c:8d:68:78:46: 98:a8:b0:3f:b2:83:fe:a6:00:8f:ff:bb:f5:35:16: 6b:65:19:5b:57:23:c6:c1:a6:04:8d:8a:de:de:d7: 68:df:b5:4b:b2:93:42:8a:e3:71:04:93:f2:26:04: 94:b7:70:ab:5e:3d:e9:e5:b5:4f:fe:cd:ec:9e:ad: 27:c5:8e:20:29:be:76:81:b9:0b:a2:a0:46:44:ea: ba:2c:37:de:b3:68:1a:22:bd:29:84:aa:84:ff:e9: 66:34:72:16:76:ef:29:c3:4c:b1:2d:a2:0f:b2:4b: c7:a1:82:46:94:fd:c1:ca:b4:49:90:2f:6a:19:c9: c0:b5:35:67:10:e1:98:d7:0c:45:3f:4e:92:05:9b: 00:5d:5d:de:40:91:49:2b:2e:7a:23:de:12:2d:2f: 5e:ea:b4:ad:54:4c:45:ec:dd:99:ed:36:16:7d:7e: 52:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C2:B1:4D:B0:23:67:D2:84:C9:B0:8E:75:48:9E:9C:56:20:B8:BA X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:53:f8:d5:65:e9:f3:63:90:1a:81:9c:12:a9:89:fa:fe:e2: 3b:65:d2:05:26:74:99:0a:91:86:ca:ac:02:1f:5b:17:54:76: 2f:39:33:c9:d2:48:a3:a3:f9:c0:a2:06:7a:44:1c:e2:05:9c: 12:71:a9:6f:45:2c:34:1a:94:5f:0b:83:13:c2:df:60:a1:26: 58:4a:83:ed:be:28:8f:a8:14:eb:c0:20:ad:de:71:56:0a:55: a7:68:43:3b:ce:68:74:2b:f1:a9:05:74:4a:9d:be:50:81:d9: 3a:9c:ca:27:da:6b:c6:08:3b:a2:83:93:f1:09:ca:f7:fe:94: 03:10:2b:15:3d:70:45:20:6a:ad:9e:3a:c7:9d:b6:df:fd:2b: 4b:8c:13:38:38:0d:fa:c0:83:9a:ae:5c:84:09:ee:c0:cf:f1: 65:c3:16:cc:7a:0c:70:4d:22:a2:36:7c:31:74:9b:fb:90:94: 8d:68:db:d4:21:69:06:15:34:10:7f:00:1c:2c:ea:1a:2b:ef: 3c:5d:83:9f:80:00:6d:75:9f:a6:e7:00:33:85:be:40:c7:0b: a4:cd:1c:6f:ee:ba:0e:81:63:81:45:75:52:72:e7:28:f2:40: d0:4b:dd:0f:55:13:3e:02:dd:94:59:ea:dd:44:74:b6:9c:fe: b3:9d:8e:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nqQEtcNYRN7wnWOf6tBkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjYwMzI2MDEwMTIwWhcNMjYwMzI3MDEwMTIwWjAzMTEwLwYDVQQD Eyg2NGMyYjE0ZGIwMjM2N2QyODRjOWIwOGU3NTQ4OWU5YzU2MjBiOGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OUGDVu1rhkM+gOlil9CavNkV4ep BPCOx35qM4bH/m1sDteid2ecnisHVOzqvmZFbva3isbpamlv/qXpbeAeGbStdQCC 2aBB5x8oFiq72FPhjggljI1oeEaYqLA/soP+pgCP/7v1NRZrZRlbVyPGwaYEjYre 3tdo37VLspNCiuNxBJPyJgSUt3CrXj3p5bVP/s3snq0nxY4gKb52gbkLoqBGROq6 LDfes2gaIr0phKqE/+lmNHIWdu8pw0yxLaIPskvHoYJGlP3ByrRJkC9qGcnAtTVn EOGY1wxFP06SBZsAXV3eQJFJKy56I94SLS9e6rStVExF7N2Z7TYWfX5SwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTCsU2wI2fShMmwjnVInpxWILi6MB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1lP41WXp 82OQGoGcEqmJ+v7iO2XSBSZ0mQqRhsqsAh9bF1R2LzkzydJIo6P5wKIGekQc4gWc EnGpb0UsNBqUXwuDE8LfYKEmWEqD7b4oj6gU68Agrd5xVgpVp2hDO85odCvxqQV0 Sp2+UIHZOpzKJ9prxgg7ooOT8QnK9/6UAxArFT1wRSBqrZ46x5223/0rS4wTODgN +sCDmq5chAnuwM/xZcMWzHoMcE0iojZ8MXSb+5CUjWjb1CFpBhU0EH8AHCzqGivv PF2Dn4AAbXWfpucAM4W+QMcLpM0cb+66DoFjgUV1UnLnKPJA0EvdD1UTPgLdlFnq 3UR0tpz+s52OVQ== -----END CERTIFICATE-----Generated at Thu Mar 26 10:38:35 2026 by rpki-client