$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: luV6gS2FJrLss/xUPA+sqKMUvEnk/bchZLcMt2IMRJ0= Subject key identifier: F4:71:2A:D5:5E:89:D0:51:CD:1E:A2:20:C4:5B:45:34:60:69:A0:FE Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019D2816CD86A5EE7708152FF397B85BC035 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0CA4 Signing time: Thu 26 Mar 2026 03:01:16 +0000 Manifest this update: Thu 26 Mar 2026 03:01:16 +0000 Manifest next update: Fri 27 Mar 2026 03:01:16 +0000 Files and hashes: 1: 1-SOCJvMJXIRmSmOPl6NPphF6_WM.roa (hash: vXugVxE98o8Z5wA/8D/Y9pi3M5AMGKyN8v2Sry/3Otg=) 2: 2j-9yNtktHt5v3A9Kl3uT69XxUQ.roa (hash: kN6K0JrXyJLwNWerB4QQmyVz1nrq+uVY4rleX2HuK30=) 3: 3thexKCs9mTJ-g3YYgHPDfOYcIc.roa (hash: Tadv/Gad986b9FjzLOZ4GUKa4pADLYS5J1VXhc5Jv3A=) 4: 5OcaW_u-IVVVs4vVhK7WkBglTgU.roa (hash: OGfPTP+KfzJ3exJYRBgK9TdIK/XRuaNfOoDR836pTHM=) 5: CxN6ZiBsNYNvAwSV2r1-B7b9BZA.roa (hash: omyqw+bz7nV39lBVXP33JrADRI4H4vosedUdoUfqv5Y=) 6: KcpEeJ8nphqsMHAWxtLdQf-SPD8.roa (hash: 6dGG4UMu3+4l5GE0LXyb/M9jtsTpoowfhHp1qayn3yo=) 7: NiGyen5sRKPPy9T8u3ygDrmXuQo.roa (hash: 8KqO2nLQjwwDARGlN3phFNsy1np9TqX6quA7+00LgFU=) 8: PnMPikrtO33Vh6NkdCxq2k4w26M.roa (hash: YMF2rN1VGNaxWyBvf9HrWuFu9uMYn/avu3bG9vwb7sc=) 9: RY-mbVhA4I89kNcmBsI8h8uXhiw.roa (hash: qgJoxMHmlU8CHkmRyFqNaxEYeU5S0JCmLUfKTUPCXsE=) 10: SUphdQJw-Hg0tkCTHAxdssxM7WU.roa (hash: K6sCasus5CCnYwQblrVqAaOdSMRGrcdNZpoyM5tiQkY=) 11: VMv0dRf33W1wrs_OpoB6KztNOWI.roa (hash: aWZFboenFph6+NpGEetbi88BDQtRIqEXfVrgP4t3tHI=) 12: VXPnJamYnp-2hfTErEBbK3WjJ8w.roa (hash: qfiGUULcvtQTBu8EUEep+iCfwW6E13oKl3US/kmkUJY=) 13: Wx-AiUKi8vXh2kBe3_SdHFDF1mg.roa (hash: LeeoUYduefs5gVVp9SgvEfhcjETEvrL0skum1dKRrfw=) 14: _7KTUyvraj0jLcJwWnYx49GI_Ws.roa (hash: uTbeQlp1sTHWF8RgjB3gPB+04hQuOuoqkYdDsifDeDQ=) 15: aXDclZHDVbTyfTZN939aF-svW60.roa (hash: /lQRpMwNPjkJnTsNV0aDEnWjG52zU26fI7Sp7mQlgUw=) 16: eta-cr0KHPJdXK1igAnSrrgYgKo.roa (hash: 46b7pv6tWdNF77DVmTz4RmmApLLdlfpeLeUB6iPbMJ8=) 17: jgrnqFUINh9yQSbIH4pj0x-gEk0.roa (hash: OpDUk5IpNIdyhSv3cFKH41Wn9xn35YaFqaFD71SLY3I=) 18: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: 3cYjb9CxG65GK27DVErnoJ84d147OH6TcZBdDkDc2gc=) 19: pxkX6Yph9uy4iGqYcnxkhKdhohQ.roa (hash: bifJOe/IS/0GcT2Z9iDNC5IwmSgJXexqKx52FOV+q98=) 20: tMgRfPFkf85axNNxn8QEdnO-WoY.roa (hash: HZTvV0+hdxoPX0EpNO2j0lRcXYZHcQUwXhCQeH87SF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:16:cd:86:a5:ee:77:08:15:2f:f3:97:b8:5b:c0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Mar 26 03:01:16 2026 GMT Not After : Mar 27 03:01:16 2026 GMT Subject: CN=f4712ad55e89d051cd1ea220c45b45346069a0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:0f:4d:86:11:d5:7f:e4:a4:02:42:c0:fc: c9:99:5d:5f:b3:1d:39:32:b4:ba:f5:75:74:6d:10: 70:9d:94:2d:fe:f0:8b:bb:37:3d:41:39:0f:33:c6: 00:39:d3:a0:75:03:d5:dc:df:9c:06:50:e3:c5:5d: 56:f4:30:c7:eb:eb:b1:ed:7a:94:0e:8a:63:14:a3: 18:91:f3:4b:5e:72:c4:e1:f4:44:6e:ca:65:42:33: cd:b5:e9:c6:f7:98:f2:87:e6:f5:5c:6d:3f:b6:fa: db:c4:dd:1d:1f:35:11:5c:1e:e6:73:1a:e0:08:2a: cc:fc:9a:7b:58:88:b8:a4:4b:f7:60:6c:bb:c8:6a: be:72:b6:08:53:99:61:cb:5d:ca:5a:0f:2a:b7:ff: 88:37:8f:75:60:24:03:0c:31:43:29:ec:f6:51:10: 38:bf:93:42:81:7c:95:db:79:77:02:36:1a:9a:fe: 05:a6:bf:65:3d:32:81:c8:c3:da:37:22:b6:57:b3: bf:70:c5:65:ad:8a:39:78:99:68:c0:a1:27:2d:0a: 1d:12:00:06:e6:a3:5d:50:b2:b2:d0:94:83:aa:11: 90:c2:ff:a0:ac:4c:e5:83:8f:dd:ee:a1:28:58:37: 75:42:ea:1f:89:8a:46:94:a1:b3:65:24:d2:99:15: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:71:2A:D5:5E:89:D0:51:CD:1E:A2:20:C4:5B:45:34:60:69:A0:FE X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1c:fb:b1:67:8d:02:c1:92:82:96:77:2b:18:b9:d6:6f:b8: 11:af:18:7f:ac:ab:1f:76:de:9d:37:66:35:98:9e:44:5e:1c: b0:ce:18:48:3b:2c:6c:d2:29:c7:2d:23:82:e3:34:a4:28:f2: ef:96:0c:2e:17:44:b8:9c:52:3b:d5:e2:a5:e5:d4:2a:90:2c: 4b:be:ba:78:4b:4d:00:b9:12:fb:ae:14:6d:26:da:f9:b4:21: aa:fd:6e:2b:83:78:33:53:68:90:06:60:2a:95:f2:85:24:03: c1:68:09:ed:05:f2:76:df:10:7a:94:c4:74:f7:a5:15:33:08: b4:f5:c3:01:78:4c:8d:8d:b8:07:47:d2:d2:ed:b2:d2:20:1e: 24:62:26:42:90:86:b9:1b:ed:9e:e3:fc:01:ee:cd:14:41:0a: 4a:04:3a:9d:13:7b:4a:be:0b:5b:bc:89:f6:e9:00:4f:77:34: cb:8b:47:fc:2a:5d:96:5e:8d:bb:1a:05:1c:fb:25:03:9c:45: 52:ff:a6:fb:9b:d5:71:1f:af:d4:eb:91:9e:68:59:63:e3:8e: f7:94:ea:21:9e:6b:c8:e4:5d:5f:4f:2b:ad:5d:b7:a6:b6:ce: 85:d3:71:a7:a4:7a:d4:48:9e:75:fc:aa:fe:8d:d2:21:a5:4b: d1:28:ef:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFs2Gpe53CBUv85e4W8A1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwMzI2MDMwMTE2WhcNMjYwMzI3MDMwMTE2WjAzMTEwLwYDVQQD EyhmNDcxMmFkNTVlODlkMDUxY2QxZWEyMjBjNDViNDUzNDYwNjlhMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuIPTYYR1X/kpAJCwPzJmV1fsx05 MrS69XV0bRBwnZQt/vCLuzc9QTkPM8YAOdOgdQPV3N+cBlDjxV1W9DDH6+ux7XqU DopjFKMYkfNLXnLE4fREbsplQjPNtenG95jyh+b1XG0/tvrbxN0dHzURXB7mcxrg CCrM/Jp7WIi4pEv3YGy7yGq+crYIU5lhy13KWg8qt/+IN491YCQDDDFDKez2URA4 v5NCgXyV23l3AjYamv4Fpr9lPTKByMPaNyK2V7O/cMVlrYo5eJlowKEnLQodEgAG 5qNdULKy0JSDqhGQwv+grEzlg4/d7qEoWDd1QuofiYpGlKGzZSTSmRW0/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRxKtVeidBRzR6iIMRbRTRgaaD+MB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBz7sWeN AsGSgpZ3Kxi51m+4Ea8Yf6yrH3benTdmNZieRF4csM4YSDssbNIpxy0jguM0pCjy 75YMLhdEuJxSO9XipeXUKpAsS766eEtNALkS+64UbSba+bQhqv1uK4N4M1NokAZg KpXyhSQDwWgJ7QXydt8QepTEdPelFTMItPXDAXhMjY24B0fS0u2y0iAeJGImQpCG uRvtnuP8Ae7NFEEKSgQ6nRN7Sr4LW7yJ9ukAT3c0y4tH/Cpdll6NuxoFHPslA5xF Uv+m+5vVcR+v1OuRnmhZY+OO95TqIZ5ryORdX08rrV23prbOhdNxp6R61Eiedfyq /o3SIaVL0SjvIg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:31:23 2026 by rpki-client