$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft File: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json) Hash identifier: MjqPt/8R+q+Q1KM8ylphBrSzFQW2zdp/9fn8xIDp9rQ= Subject key identifier: B5:DA:01:AB:FA:4A:47:DF:B2:1C:4E:BD:C3:45:D1:25:FB:D9:4F:23 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 019D25BAD360969532132CDC6F6AD3B5187F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft Manifest number: 16A9 Signing time: Wed 25 Mar 2026 16:01:33 +0000 Manifest this update: Wed 25 Mar 2026 16:01:33 +0000 Manifest next update: Thu 26 Mar 2026 16:01:33 +0000 Files and hashes: 1: 1-EpdTZcgyqg15W_cyrCFCimUM2s.roa (hash: 3ggX8CDeha3eMOJDB5Rp4Hv8cN64vc8l+znCoOUe8oo=) 2: 3JAtxwaL9PZhHZwQTT5YiNh22Fw.roa (hash: CWRHx3TZjefSlBd9NDpJRO/t7H8jBiSewFf17t/Njyw=) 3: 5W-ZX3IxFpIpaIWr1YY2VTBb_EY.roa (hash: 2efYScJuCptEcI5fIi4ZYl4A4CptVWRcO5Oh2QmuuOk=) 4: 8clp5oorAoBsYchPl6cs1_-_yQQ.roa (hash: aGkbot2FyDEKH3zE5peM5m5OBxwq4qCPpi/iz6/R4Ek=) 5: Cawe25tqfGGJs6n4gKI57FsVYWg.roa (hash: NB+MRtNZHu4vvSgnR8KFr0cA3CZnUgip7ZoVVLCCGZM=) 6: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: 1KvlNEHDcz5WFeDBB9ZugOy5+ILNGsXjl94Aj2AoU1Y=) 7: LmdwKZRWfXdK7c7PpRAajoFemeI.roa (hash: pCVDMmfgoYfxtRFG9Zvv9u/mHeDd1bj8Hanh8zzdQcs=) 8: Tn3PJSMlMlIzmmP-FZ5TPbh397w.roa (hash: G7E+P3kn4Uq0XN1nP2CmPH/f6877A5TCeW8erfewEzk=) 9: a3_aA8o-Hdj3p1zSlS7CIv-PMNA.roa (hash: d3XqhyCeJJcJXCDGdv5KzGLONzJ74f2hEc/ZEGAlyf0=) 10: fr-QZrPazBBhZoKl5RxUHW_lsyI.roa (hash: baaneFSMPOisaKzNlkgXnvlbeimO3h1V4sE4AAlv6Y8=) 11: gcItYV1e-J4dmkDnznqDmxsYmQk.roa (hash: CqSPJ8JBYKngu+rxorbWDUNYiEfBWAGX/fu3mmNz+QI=) 12: nHgifZHPBcIw6s06tGKLHCI4zgw.roa (hash: c7ejrTFJgQw1yik3Spq12DDz0GK+Gtiw+nh8SdakP2I=) 13: uHg-cH9ennO64ElVgCmI2bwJP-0.roa (hash: sdH/Xm7EhGzZk8Lhrr17Nk8BaYS/NVM29QCKCeqwjbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:d3:60:96:95:32:13:2c:dc:6f:6a:d3:b5:18:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Mar 25 16:01:33 2026 GMT Not After : Mar 26 16:01:33 2026 GMT Subject: CN=b5da01abfa4a47dfb21c4ebdc345d125fbd94f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:bd:1b:3a:de:09:b7:3f:a7:38:7a:a3:b3: d3:f3:12:e5:08:7f:e5:83:57:ae:7f:d8:d1:34:0c: e1:91:ee:27:d7:6b:10:ca:cb:9c:31:87:90:24:ec: e9:e0:a8:28:a4:2b:53:b5:ea:8c:1b:bf:04:08:1a: 75:7d:51:84:6d:65:d3:31:fe:51:80:26:39:be:bf: e8:6e:7b:c0:fc:f4:70:6c:e5:60:a1:b7:cc:3d:01: af:b2:fe:06:5f:7c:30:89:81:62:f5:09:af:9c:e2: 38:48:6c:fa:97:d8:a0:ec:de:c8:7a:78:58:1d:3a: 92:27:cf:41:9a:63:b1:72:4e:47:d1:63:2b:47:9c: b8:fa:5c:5e:81:33:29:f0:25:22:61:5d:4b:1d:8e: e6:92:44:34:ac:cf:60:dd:00:8f:20:68:a8:50:f1: d4:0d:1f:d5:c3:41:1a:8c:02:b8:e5:df:93:99:7a: b7:d8:d4:8b:54:bb:4b:23:75:fb:a2:f6:49:24:44: c3:e3:7a:39:27:01:d7:4b:53:13:1e:19:b1:59:5a: 0a:6d:f9:64:d6:48:cf:f6:40:5e:f5:22:ac:30:59: 76:91:df:12:cf:c9:8a:e3:f3:c5:77:28:93:cd:79: 8a:aa:42:cd:d9:01:e1:fd:b5:c1:cb:df:57:99:78: 52:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DA:01:AB:FA:4A:47:DF:B2:1C:4E:BD:C3:45:D1:25:FB:D9:4F:23 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ed:b1:45:70:fa:87:67:93:68:b4:52:3d:db:da:54:83:1a: f6:f8:21:1b:8c:a8:59:58:11:f7:76:69:0e:b7:c2:43:c4:ff: 3c:a6:c6:8e:29:62:b6:1a:78:da:1a:5e:eb:39:9a:ad:94:38: 7c:c7:39:0b:7a:3a:1a:10:2f:7f:a1:1a:7b:e6:8b:39:4c:5b: 48:84:ee:6e:78:0e:bb:ac:96:0d:06:54:8a:00:31:48:e8:ee: 57:fb:12:76:50:9d:0f:80:80:26:05:cc:0f:75:bb:e0:07:69: 12:c8:ec:5a:b6:d6:50:99:dd:45:20:be:7a:06:ec:d2:a2:45: 3e:fa:3e:ee:d4:de:4b:ce:d9:c6:07:bb:07:b0:ed:0a:f1:ee: aa:31:f9:8c:d0:bd:56:96:64:56:d7:74:df:44:41:cf:32:f0: 40:6e:c6:a9:76:5c:82:ce:93:6e:46:19:28:36:bf:c9:8d:d3: e5:db:f5:fc:1a:d3:8c:45:aa:3f:ae:d9:2a:4d:14:f9:94:3e: 81:2d:9f:9a:4b:bf:75:01:5e:57:9b:1a:43:0d:7e:e3:e1:eb: aa:07:80:bc:a4:bd:9b:e0:27:9b:95:53:81:c0:47:50:be:fd: 45:b5:82:d8:77:4e:82:18:3a:5a:78:9d:ee:8d:8d:78:af:a0: 77:9c:56:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lutNglpUyEyzcb2rTtRh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjYwMzI1MTYwMTMzWhcNMjYwMzI2MTYwMTMzWjAzMTEwLwYDVQQD EyhiNWRhMDFhYmZhNGE0N2RmYjIxYzRlYmRjMzQ1ZDEyNWZiZDk0ZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0e9GzreCbc/pzh6o7PT8xLlCH/l g1euf9jRNAzhke4n12sQysucMYeQJOzp4KgopCtTteqMG78ECBp1fVGEbWXTMf5R gCY5vr/obnvA/PRwbOVgobfMPQGvsv4GX3wwiYFi9QmvnOI4SGz6l9ig7N7IenhY HTqSJ89BmmOxck5H0WMrR5y4+lxegTMp8CUiYV1LHY7mkkQ0rM9g3QCPIGioUPHU DR/Vw0EajAK45d+TmXq32NSLVLtLI3X7ovZJJETD43o5JwHXS1MTHhmxWVoKbflk 1kjP9kBe9SKsMFl2kd8Sz8mK4/PFdyiTzXmKqkLN2QHh/bXBy99XmXhSOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXaAav6SkffshxOvcNF0SX72U8jMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsu2xRXD6 h2eTaLRSPdvaVIMa9vghG4yoWVgR93ZpDrfCQ8T/PKbGjilithp42hpe6zmarZQ4 fMc5C3o6GhAvf6Eae+aLOUxbSITubngOu6yWDQZUigAxSOjuV/sSdlCdD4CAJgXM D3W74AdpEsjsWrbWUJndRSC+egbs0qJFPvo+7tTeS87Zxge7B7DtCvHuqjH5jNC9 VpZkVtd030RBzzLwQG7GqXZcgs6TbkYZKDa/yY3T5dv1/BrTjEWqP67ZKk0U+ZQ+ gS2fmku/dQFeV5saQw1+4+HrqgeAvKS9m+Anm5VTgcBHUL79RbWC2HdOghg6Wnid 7o2NeK+gd5xWfw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:11:24 2026 by rpki-client