$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: Ic+HEfrsmopyvIlZ9SvXgwV480EK63OlFpN64tyQvP8= Subject key identifier: C4:EB:B0:0F:4D:0B:78:99:AC:48:EE:B7:B3:0E:D7:B7:7A:57:A9:0A Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019D26CD1D5F8037218A7328137EB0A61924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 18A9 Signing time: Wed 25 Mar 2026 21:01:09 +0000 Manifest this update: Wed 25 Mar 2026 21:01:09 +0000 Manifest next update: Thu 26 Mar 2026 21:01:09 +0000 Files and hashes: 1: 6gnkz6OkX6AmjbUFly1wXQMc5Hc.roa (hash: m39tlNEbvl+KvzNcowhejD0YaetaJPWZmQdZ2mQ/k74=) 2: 9mLGCobs8b6fmlZ1T_zH5qZCHLA.roa (hash: xIWAnWYQk4WbKTNaRD60lnYQAHj9+bf9KBsYFY72scI=) 3: EQZgk_3J5Fyc0bcuLI3Yx--EMu8.roa (hash: aY4YMscFsgJkzrPMKTCHKvSIl1+/sZmyY9rhoC43z2o=) 4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: SG/LtO7YbpJOJCdPkWtP9RvOifMEvuZnW47zFwzhQoU=) 5: FKnKoarmmi6ha7YNrynCE7-GlPM.roa (hash: oKaYSJE4mcvvEbQGIWsb5jJI9dhGriaheyAzBdZoE4M=) 6: NOfTkKQFl3ruOsCGzSg45VC6KLA.roa (hash: WoHHZtSZ2RRzNCMrx4Mo4OnnRJ/xg4jH+vJaSGSMeKQ=) 7: OYOS-7oCt8qB-IolnQtbLO6mNJs.roa (hash: chuIv7V7D8ZTIYroROKzsMh/sfUH1MBxL7TmjhgmwAY=) 8: U0jBWIMSXFd0rjWu9nHmYpEjlxY.roa (hash: 8pB3kCXDYDvqkBMxSrDg6IY/CrYSzIC1l2BK7MAfP6k=) 9: gbXhR2uRK-RKCAkCyIxBQwTU87w.roa (hash: XhuCXdBrzSTullx7dBLgYNOs79sf2A0V1FhHe7MzJH8=) 10: hvYamUzrt8l5XxKg3jQF1nquOy8.roa (hash: xNuK7FrZEwKLbPgJUKdky1f1LSPyUxxPzAOoMN9Fs90=) 11: i6gcioIk1jIxZGNq2Keg8xOkBWg.roa (hash: EYNfjU+Znmdq/oFfOoZVDk/plRE4M9DNa/cL2woqZVo=) 12: kZ63SuCSKudhTtGH6_pJGkWdSXM.roa (hash: OQrqf7NPIuBzSyIJdM7aU9Y2d/U+DEvBIbGAvAZyp2o=) 13: nQVtLPwM7Gp6ZCLT9srWcE_wr_U.roa (hash: cKQn/pyHXQYWuoLIUTT0+l/rc5/mbfiSHrwT1Q5Iikw=) 14: t-oE4oy_z3AHnCC0k6oEiP8UMXs.roa (hash: 3g70luAd5CMmu8cTIqcXY5Mx4qPSObAMdcIqmAZokIg=) 15: vCblwnfnVDcB7QAInr9wO3fWjIk.roa (hash: d2afxpid86oKujS9MPLVfD/AYLN6Tg4NNXIDg5DemP0=) 16: wYpMc3njcI8aYZhP5Vx0YCvhxuE.roa (hash: VGQsQDGB5RifV/TxzkNx5BkHOcVUKguaU5IZPPqP/2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:1d:5f:80:37:21:8a:73:28:13:7e:b0:a6:19:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Mar 25 21:01:09 2026 GMT Not After : Mar 26 21:01:09 2026 GMT Subject: CN=c4ebb00f4d0b7899ac48eeb7b30ed7b77a57a90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e1:4a:e3:87:a6:db:58:03:4b:18:0f:29:2d: 7c:1d:95:d1:b7:31:9a:7f:f2:7d:58:80:ec:c7:4f: 22:57:03:23:82:f8:e4:9c:0c:2c:a9:2d:3d:f7:3b: f7:cc:4f:87:c1:fb:f0:3d:bf:8b:26:06:57:f5:61: 6a:0d:91:9f:8d:10:ac:56:3c:28:db:52:6e:fd:e0: 6f:c1:df:e8:c6:87:93:1c:77:4e:3f:20:e2:64:97: 64:2d:3b:57:23:81:33:f7:09:f7:d8:65:2d:a7:0d: 5c:41:7f:af:4d:a9:40:42:2e:ae:3f:a7:27:54:57: 13:b8:7d:fe:3d:3c:5e:ed:d8:24:05:3c:f5:ef:72: e6:11:03:7d:da:2b:2d:75:3e:78:b8:37:6d:dd:70: a6:ff:ac:33:23:de:8c:76:99:a5:0c:b3:b1:8f:17: 53:61:3a:05:cb:6a:06:99:14:eb:c3:68:a7:33:58: 4c:b0:ef:4a:30:b7:9c:1b:87:2f:88:8a:fb:93:05: 04:18:0c:f9:60:ff:36:65:b7:a5:b4:61:8f:11:e0: a4:cb:78:95:7d:62:b5:88:7f:60:f2:01:ba:2d:66: cb:56:4b:85:f3:90:d8:0b:fb:35:e8:79:c8:7d:6c: 54:d2:0d:a7:d0:c2:5f:65:5a:8b:0f:ec:92:86:28: d5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EB:B0:0F:4D:0B:78:99:AC:48:EE:B7:B3:0E:D7:B7:7A:57:A9:0A X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1f:e1:f7:8b:ee:1b:3a:c1:82:3e:3a:aa:c7:ba:9c:16:43: 71:87:55:38:5f:07:37:aa:36:2d:11:21:bc:b4:d3:66:19:b3: 6f:38:24:ec:5d:9c:c0:2d:9a:23:e5:5c:4f:12:0c:69:e1:15: 30:40:46:d4:da:42:7e:c1:fe:5b:bf:cc:cf:73:c3:ad:21:aa: 7c:fb:1c:b6:ba:24:9d:11:75:38:56:a8:7f:7b:ce:57:fd:aa: cb:87:e9:16:96:d1:ea:56:22:f4:52:d0:0d:f8:5e:0b:de:64: 94:d2:1a:ad:bf:b5:58:b8:ff:fb:d9:52:9b:ed:05:3b:02:31: 8c:db:05:4b:16:8c:79:f9:c8:d9:06:eb:e9:ca:5f:f2:ab:50: 4e:ef:69:55:33:e4:eb:f4:13:db:c4:a7:bb:fc:36:3b:f1:11: 63:18:2a:c3:b2:dc:46:f1:55:58:bb:ea:a7:c1:68:ed:49:07: eb:09:c1:29:91:3e:c9:77:ba:a2:28:81:f4:d6:7d:9c:a5:11: dc:1d:16:b6:90:9d:d7:aa:1e:f4:0d:31:59:f8:5d:53:56:eb: 26:65:28:be:4d:3b:66:1f:15:a2:bd:a4:95:d5:cc:99:25:ff: eb:54:88:ed:1a:30:24:9b:7c:d4:1d:50:29:db:a5:50:74:c4: 89:ac:0a:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzR1fgDchinMoE36wphkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwMzI1MjEwMTA5WhcNMjYwMzI2MjEwMTA5WjAzMTEwLwYDVQQD EyhjNGViYjAwZjRkMGI3ODk5YWM0OGVlYjdiMzBlZDdiNzdhNTdhOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OFK44em21gDSxgPKS18HZXRtzGa f/J9WIDsx08iVwMjgvjknAwsqS099zv3zE+HwfvwPb+LJgZX9WFqDZGfjRCsVjwo 21Ju/eBvwd/oxoeTHHdOPyDiZJdkLTtXI4Ez9wn32GUtpw1cQX+vTalAQi6uP6cn VFcTuH3+PTxe7dgkBTz173LmEQN92istdT54uDdt3XCm/6wzI96MdpmlDLOxjxdT YToFy2oGmRTrw2inM1hMsO9KMLecG4cviIr7kwUEGAz5YP82ZbeltGGPEeCky3iV fWK1iH9g8gG6LWbLVkuF85DYC/s16HnIfWxU0g2n0MJfZVqLD+yShijVeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTrsA9NC3iZrEjut7MO17d6V6kKMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnB/h94vu GzrBgj46qse6nBZDcYdVOF8HN6o2LREhvLTTZhmzbzgk7F2cwC2aI+VcTxIMaeEV MEBG1NpCfsH+W7/Mz3PDrSGqfPsctroknRF1OFaof3vOV/2qy4fpFpbR6lYi9FLQ DfheC95klNIarb+1WLj/+9lSm+0FOwIxjNsFSxaMefnI2Qbr6cpf8qtQTu9pVTPk 6/QT28Snu/w2O/ERYxgqw7LcRvFVWLvqp8Fo7UkH6wnBKZE+yXe6oiiB9NZ9nKUR 3B0WtpCd16oe9A0xWfhdU1brJmUovk07Zh8Vor2kldXMmSX/61SI7RowJJt81B1Q KdulUHTEiawKdQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:23:58 2026 by rpki-client