$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft File: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft (raw, json) Hash identifier: iPiJjP/d/jBgA2tFqlCEcYpaem5GqbDmXmpvDtZnh1c= Subject key identifier: EE:B6:64:67:39:5A:B3:42:B4:24:20:62:07:39:AE:A0:E7:2C:D4:DB Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888 Certificate serial: 019D26965BE386CF1DC677113003E39875C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft Manifest number: 188C Signing time: Wed 25 Mar 2026 20:01:21 +0000 Manifest this update: Wed 25 Mar 2026 20:01:21 +0000 Manifest next update: Thu 26 Mar 2026 20:01:21 +0000 Files and hashes: 1: 2MINrSF-904_xnWHt9aLmREzfgM.roa (hash: 2JlxQCyPp6ZuyhE6H5mjVo5s7oH/wwZoUZTFvN2689w=) 2: 5ofwE8fWcu41y5nE1W98Xt08B9U.roa (hash: vBHKAReKnkwdzg96lnBkzkJIhU9wk+NEk4UwhyvZN8M=) 3: 6D7xnslgrR1jYkhOQFOsCCy_Ilo.roa (hash: vZ6+RacR9VxPA5+UlqTbSm8U/9rgsp0IuJGD6MdbbQo=) 4: DXimx1XY9etEzx_enIQDGBa9bm4.roa (hash: PZFvhgHYjMFhesaC5VQQRMgpbART5/jL2VnPsqgnMoo=) 5: EjSfBXDPzGKN3Lwo90Ms5wxR44Y.asa (hash: ddQowQPmie3DVjEYs43w+vPw+AlFBFESP3uzFCnSZqY=) 6: J1cLQGWUhIVSfZKk_j_qK7xfNRk.roa (hash: txu0I6tcoeoOCvYRp5YDtz869JeJI1kFO2/j3Mpeh2A=) 7: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl (hash: N8rAE965e4ZzujyZRl6NzBVVLuwJVNUaSxgzcFnivuY=) 8: RaBtyxecnxUersUBhALBrHJqngg.asa (hash: hWuOGOpao0RpkpqzT09Hg+If/mRW1iIthnljd/iQUV4=) 9: WzKCG2YANYwDiCPMEDnF3wWEIL4.asa (hash: j0Le2/fYLgItT8RcFxl99L6MkmGjdvtEmpaCnBgE1Nw=) 10: h7z0dcjyEiQrTlWfLJHvO8mytLk.asa (hash: wvs5YngkGWwMTiaT1xG6NC51mWPXd//9JXNAJ/RSeS4=) 11: plJfEMZK_3OVbjoem1dHc_BUNhk.asa (hash: HwYQCfV6/M/tEXH6ftYFw3kFr2igI1B8i/7KmHjgsdM=) 12: taTHP1eAZV5DFgScGmkLmOoYJTk.roa (hash: w4zToqhdyScOj4eQSJZgMvLZqXoAq5qiIOEJ0CUK/zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:96:5b:e3:86:cf:1d:c6:77:11:30:03:e3:98:75:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888 Validity Not Before: Mar 25 20:01:21 2026 GMT Not After : Mar 26 20:01:21 2026 GMT Subject: CN=eeb66467395ab342b42420620739aea0e72cd4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:80:9e:59:11:b5:dc:30:a0:cb:a1:f4:f5: dd:7f:31:12:4f:ec:cc:63:8a:d2:77:dd:43:3a:c9: b8:de:ac:36:4e:3d:f5:c9:80:ce:6a:1c:eb:92:0e: 83:9a:9d:13:3a:37:a2:ec:8a:48:c1:15:f7:d2:db: 2c:41:b4:dd:d7:a4:15:e8:96:a2:f4:99:ad:9c:e5: 71:4c:e9:ad:03:48:63:69:fc:ae:87:83:cc:58:93: 9b:e6:85:c1:3d:65:8b:90:04:47:8e:bb:33:10:b4: 8f:bf:eb:5a:dd:f4:8e:c1:75:b0:9f:4b:41:5b:dc: a9:b3:05:0d:d2:1c:ab:e8:05:b6:62:c6:08:79:fe: 92:60:09:2a:3c:22:e1:2e:fe:b6:e9:67:cd:0d:cc: 47:7c:38:1b:26:6c:dc:2e:65:a6:31:51:53:c4:5c: 16:f8:ff:35:33:4d:b8:c6:7a:70:3a:91:d1:3c:5c: 19:ff:75:17:aa:a3:a8:46:bf:88:e9:d8:b2:27:e9: 8c:f9:4f:f7:9b:40:bb:e1:fa:38:f9:8b:d7:54:4a: 78:30:f6:c4:1e:71:8b:1e:43:9f:eb:b3:9e:b8:f1: 80:a1:4b:c3:fc:52:b6:1a:7d:ad:3c:97:a7:7c:82: d1:a0:c1:0d:a4:50:a1:99:74:81:87:ef:15:fa:cc: 07:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B6:64:67:39:5A:B3:42:B4:24:20:62:07:39:AE:A0:E7:2C:D4:DB X509v3 Authority Key Identifier: keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:25:de:9f:88:2a:10:ae:d0:b0:e6:03:67:5b:a7:f1:23:62: 49:50:a2:37:84:4f:b6:a4:22:7c:5c:5b:85:3b:40:40:08:fa: 4b:0a:b5:86:d1:6a:29:e3:da:80:2c:b3:cf:e5:ce:16:ab:91: 90:07:1b:05:d9:ca:39:a0:ed:83:0a:67:54:eb:0c:41:b9:da: f7:e3:37:71:86:37:2b:77:49:04:d5:23:dc:98:1f:25:06:01: a2:66:fe:fa:35:e8:13:ea:d2:0c:2b:21:03:97:77:a2:29:c3: de:0d:64:11:68:8c:fe:87:a5:3d:63:7c:9f:5b:4e:26:01:12: 7c:b8:5a:8e:45:f2:63:5d:91:c2:e8:f6:7f:11:35:63:cc:1d: a0:fc:a5:00:c5:56:e3:ce:d1:29:d0:32:50:ec:12:5d:88:db: 4b:42:97:cd:b6:1a:1a:9d:2b:9a:3f:9b:87:73:f4:66:42:3f: 13:c5:f5:cb:0c:10:98:4a:32:04:a3:e2:25:d6:76:b7:69:8c: 40:85:97:51:0a:23:61:cb:96:16:43:f8:e4:32:69:2c:1b:36: 0c:05:df:6f:75:bc:f9:ca:b5:fd:81:1c:75:e3:e7:5a:36:d1: 0e:c6:4d:bc:b6:88:a0:4a:99:c0:ca:46:bf:64:21:32:e1:a3: f0:9d:24:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mllvjhs8dxncRMAPjmHXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjE3ODhmZTIyMGU0NjQzNDY5MmQxY2M0MzcwNzJkNzky ZDc4ODgwHhcNMjYwMzI1MjAwMTIxWhcNMjYwMzI2MjAwMTIxWjAzMTEwLwYDVQQD EyhlZWI2NjQ2NzM5NWFiMzQyYjQyNDIwNjIwNzM5YWVhMGU3MmNkNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLuAnlkRtdwwoMuh9PXdfzEST+zM Y4rSd91DOsm43qw2Tj31yYDOahzrkg6Dmp0TOjei7IpIwRX30tssQbTd16QV6Jai 9JmtnOVxTOmtA0hjafyuh4PMWJOb5oXBPWWLkARHjrszELSPv+ta3fSOwXWwn0tB W9ypswUN0hyr6AW2YsYIef6SYAkqPCLhLv626WfNDcxHfDgbJmzcLmWmMVFTxFwW +P81M024xnpwOpHRPFwZ/3UXqqOoRr+I6diyJ+mM+U/3m0C74fo4+YvXVEp4MPbE HnGLHkOf67OeuPGAoUvD/FK2Gn2tPJenfILRoMENpFChmXSBh+8V+swHvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO62ZGc5WrNCtCQgYgc5rqDnLNTbMB8GA1UdIwQY MBaAFD6xeI/iIORkNGktHMQ3By15LXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAt ZDk1MDk0NzMwNzJjLzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAtZDk1MDk0NzMwNzJj LzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiXen4gq EK7QsOYDZ1un8SNiSVCiN4RPtqQifFxbhTtAQAj6Swq1htFqKePagCyzz+XOFquR kAcbBdnKOaDtgwpnVOsMQbna9+M3cYY3K3dJBNUj3JgfJQYBomb++jXoE+rSDCsh A5d3oinD3g1kEWiM/oelPWN8n1tOJgESfLhajkXyY12Rwuj2fxE1Y8wdoPylAMVW 487RKdAyUOwSXYjbS0KXzbYaGp0rmj+bh3P0ZkI/E8X1ywwQmEoyBKPiJdZ2t2mM QIWXUQojYcuWFkP45DJpLBs2DAXfb3W8+cq1/YEcdePnWjbRDsZNvLaIoEqZwMpG v2QhMuGj8J0k1w== -----END CERTIFICATE-----Generated at Wed Mar 25 23:25:57 2026 by rpki-client