$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: 3+Dsj0hCfzetSugmefo1CMC8GMMOSboqHA49hJJRcIU= Subject key identifier: 8A:41:6E:87:62:01:20:F8:26:00:02:BF:4E:AD:CF:0A:34:45:89:7C Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019D27048C09D8FA0059AC7D7C0A760F11EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 1896 Signing time: Wed 25 Mar 2026 22:01:42 +0000 Manifest this update: Wed 25 Mar 2026 22:01:42 +0000 Manifest next update: Thu 26 Mar 2026 22:01:42 +0000 Files and hashes: 1: 1-bX4q69pD6P9iDL_MBjXApDUUoA.roa (hash: Kde578ne8/gKQezBhfcD4rTCARaf5d1vuhecNygX/Nk=) 2: 7rv6k5uVuhGjktrsjUOGcYvC-9k.roa (hash: s1LhNqbDkaJJk+ypgLty0IbjHOS1lXZfumV3rSK/rSs=) 3: 8k0J8ZawZ0QaVbmwbqXyjkHdbp0.roa (hash: qjo2XQhlUpcTFQYk1pT4XcjJ3LBYMkU4WLGqBPqO4mU=) 4: A1Mk8aLvUIYkXCPbeSuDU3Hli4Y.roa (hash: 6HTRUzOZM9L9Wg/uHA0I0KF3U5ylm2c/kJX/463Szd4=) 5: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: DfOnPyjG2TozKBiKVoH0VRVP7Fe+4Edt37vDVWzSk/A=) 6: HgbYfqgWEgBTtHpfnCWuHLmWfdc.roa (hash: HMoC4HbqEHwkb4dO3/C2FUOmIHSy3Jpy2ww8Kfj1GLQ=) 7: JTLXgLzRLUbBBSRVTWms-KrY030.roa (hash: Zz6+CVIeJzHTwZbXpV9f3Jk2ToknnGjWiBUQP/bGQYw=) 8: MPfZa80zx8JD19B0YvKo1B-KyMs.roa (hash: hWxzkpQob8nqa1qn5tGNwr5NCD7Lovv8X8P0foxw+GY=) 9: aB0CFj7HhZYpp4ebpVhWCAyE-Zo.roa (hash: FE2nN2ZVDrPMPN1fblBP/Z17brnB7Kwxa7lfUoyA7Ak=) 10: lHfae3UMrtkbZl9pwmHCG7QPKCs.roa (hash: uTooVNNQdT2Xp41rPldHjXa4GM+toHNemDQJjp4UhfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:8c:09:d8:fa:00:59:ac:7d:7c:0a:76:0f:11:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Mar 25 22:01:42 2026 GMT Not After : Mar 26 22:01:42 2026 GMT Subject: CN=8a416e87620120f8260002bf4eadcf0a3445897c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:92:a8:25:49:87:c7:25:ff:96:88:6e:45:91: d0:44:7c:d6:a2:1e:55:46:fc:cb:39:74:00:46:80: f5:eb:b7:2f:26:4f:a5:70:74:9c:b8:a2:bd:c5:64: d9:e4:bb:64:51:e9:2c:fe:2e:a6:29:56:e9:4d:5a: 9a:76:a4:cf:a1:2c:3e:92:47:a1:81:33:c8:26:62: 83:3f:9c:1b:cf:09:87:8c:9a:c3:ab:28:8b:06:81: 74:2b:6a:e6:68:26:18:cf:d0:d2:d0:bd:97:83:8c: 96:ee:e0:04:f9:ef:12:c1:67:e4:af:82:f4:5f:64: 18:5b:6d:4c:f7:75:24:70:31:21:4d:68:6b:e7:69: 5d:31:d5:10:e4:c1:f5:bf:16:6d:4b:f9:54:ce:ad: 09:e7:93:5a:82:3b:e6:e9:65:76:2e:af:b3:9f:86: 6b:f7:4b:72:ee:d7:f0:9b:02:ca:fd:ae:d1:09:4d: de:51:31:e3:de:ba:b8:6e:dd:85:82:e9:d6:16:2a: dc:ff:50:37:68:12:62:56:53:91:d7:9a:bd:46:4e: 61:89:ec:43:c8:24:8d:c4:9a:d8:34:20:a4:e6:82: 42:13:2b:a1:f4:c6:3c:6b:70:fa:11:26:f3:c6:5b: a2:e2:01:d2:d8:fb:07:7d:bd:da:7f:b5:42:d9:84: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:41:6E:87:62:01:20:F8:26:00:02:BF:4E:AD:CF:0A:34:45:89:7C X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a6:d5:54:16:10:23:94:f5:54:99:85:21:67:8e:c9:f5:81: b3:48:b6:45:f3:dd:89:32:82:f3:2b:e6:04:95:ba:c5:9c:48: 8b:db:2f:f4:ca:4b:99:bc:a8:d5:34:10:5e:a9:3b:c0:0b:09: 6a:2b:09:60:80:c2:4f:78:f5:67:20:b0:fb:31:28:86:c1:06: 9e:1d:05:e4:7a:87:71:9d:8e:7d:5c:52:80:63:2d:37:08:81: 66:fb:26:06:51:ae:7a:39:00:06:3f:dd:e9:45:a7:c9:70:18: 5b:20:11:bb:37:cb:2b:31:6f:b2:0a:f8:c1:fe:51:61:6e:0c: 16:01:91:62:e0:2e:5e:3c:77:11:04:0f:4b:a1:39:c5:71:a7: 85:bc:53:5a:ad:05:8b:4e:86:63:4a:8e:c4:7f:e5:21:89:a0: ad:c3:e8:1e:c6:08:08:e9:1b:ae:d3:29:19:58:ec:35:31:26: 72:17:86:01:80:dd:b2:f1:31:1c:01:ac:21:6f:37:05:11:a7: 15:c0:10:72:ad:88:08:12:f9:13:8d:97:b2:c4:3a:53:d2:c6: 13:d4:d4:7e:48:e5:5b:63:f6:0d:81:e2:0b:8b:2e:f0:94:c5: a0:cf:64:a1:bc:28:75:ba:24:3e:55:3e:c8:13:60:b6:ea:64: d7:49:75:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBIwJ2PoAWax9fAp2DxHuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwMzI1MjIwMTQyWhcNMjYwMzI2MjIwMTQyWjAzMTEwLwYDVQQD Eyg4YTQxNmU4NzYyMDEyMGY4MjYwMDAyYmY0ZWFkY2YwYTM0NDU4OTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZKoJUmHxyX/lohuRZHQRHzWoh5V RvzLOXQARoD167cvJk+lcHScuKK9xWTZ5LtkUeks/i6mKVbpTVqadqTPoSw+kkeh gTPIJmKDP5wbzwmHjJrDqyiLBoF0K2rmaCYYz9DS0L2Xg4yW7uAE+e8SwWfkr4L0 X2QYW21M93UkcDEhTWhr52ldMdUQ5MH1vxZtS/lUzq0J55Nagjvm6WV2Lq+zn4Zr 90ty7tfwmwLK/a7RCU3eUTHj3rq4bt2FgunWFirc/1A3aBJiVlOR15q9Rk5hiexD yCSNxJrYNCCk5oJCEyuh9MY8a3D6ESbzxlui4gHS2PsHfb3af7VC2YTHxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpBbodiASD4JgACv06tzwo0RYl8MB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKbVVBYQ I5T1VJmFIWeOyfWBs0i2RfPdiTKC8yvmBJW6xZxIi9sv9MpLmbyo1TQQXqk7wAsJ aisJYIDCT3j1ZyCw+zEohsEGnh0F5HqHcZ2OfVxSgGMtNwiBZvsmBlGuejkABj/d 6UWnyXAYWyARuzfLKzFvsgr4wf5RYW4MFgGRYuAuXjx3EQQPS6E5xXGnhbxTWq0F i06GY0qOxH/lIYmgrcPoHsYICOkbrtMpGVjsNTEmcheGAYDdsvExHAGsIW83BRGn FcAQcq2ICBL5E42XssQ6U9LGE9TUfkjlW2P2DYHiC4su8JTFoM9kobwodbokPlU+ yBNgtupk10l1fA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:23:21 2026 by rpki-client