$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json) Hash identifier: 6dFXL/8R8FDX7ukBK2SUWeM7CK5KQgprJEqwTc8JDNQ= Subject key identifier: A7:8A:BD:02:E6:15:74:17:63:57:CC:02:89:2B:92:77:5D:5D:24:55 Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Certificate serial: 019D251606FB89BAA112139F66FEF247C1F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft Manifest number: 1908 Signing time: Wed 25 Mar 2026 13:01:33 +0000 Manifest this update: Wed 25 Mar 2026 13:01:33 +0000 Manifest next update: Thu 26 Mar 2026 13:01:33 +0000 Files and hashes: 1: 5OGPGzofiEFa09GnFOAn5hhvk48.roa (hash: h2LTT9rBOO/bxXO9EO5NFwg/fB9HG26CM4uymezMPKI=) 2: HzkOKarS86MDQLlSBspsfYKZtUY.roa (hash: dF5VOyKP9r0Ab/BEFUBb+lquv8b+vxHoc9l8zjdlwMM=) 3: IPMiCKDGg-4bycZ4wSrvvc3HolI.roa (hash: Up0dPWNya84ceqWIOnzBSjlOj2l1pRl6VXrPutXxbZ4=) 4: OyXa5XHUgsJSBsdbc3Qrhq4QU1Y.roa (hash: Gyfd0tsIEQsaZgvjHA4zwq5b2ZqvTwYd6Np55tiRmHQ=) 5: P_IQf465IziNUba5nDDuA9mYb2E.roa (hash: NtF/MIHSktYf3HQG++BY9SW33um7HsSxglhUDmVhaCg=) 6: THhHEbJLNflyjg0CGgDKLOWHmNw.roa (hash: hE5im+TYFFs2d+KHjtsfg9PpKV6WFy0Jtd49aeuY6Po=) 7: e7Lvz7EuGDsmNFIhRbwvynj9xTY.asa (hash: ns2I70ZkX4z8+mK5f+FUnkH52JTj0mfI9C5qd0rPQ1g=) 8: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: xMgJQT4CDg4/B9dUTh6cM1NXV7rhpLTw0CAqnDEHezs=) 9: vREpqPygKpqEUBRK1WP9YRnHT1U.roa (hash: aIOz9LGkgfShAFeGoLvJK3zSpzEcpe5gJpmAOuZIS1I=) 10: xbEhOdTGtK79EP0Hua6zp2g53GY.roa (hash: UhufiohNKNchaGiqQq0NBGvPLk1S1fa3tNlXBIgXEyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 13:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:16:06:fb:89:ba:a1:12:13:9f:66:fe:f2:47:c1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Validity Not Before: Mar 25 13:01:33 2026 GMT Not After : Mar 26 13:01:33 2026 GMT Subject: CN=a78abd02e61574176357cc02892b92775d5d2455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:87:f5:de:1b:40:23:3f:71:6e:76:a6:35:54: 03:3f:3c:5f:cf:5a:19:23:d9:e6:0c:cf:80:d9:90: fe:16:5e:bd:f3:2e:09:fb:fe:19:9c:11:b1:a0:af: 4c:1c:4a:c8:6e:bf:42:8e:b3:fb:9e:c5:a2:dd:d4: 29:fd:db:80:f1:67:2b:4c:93:2b:63:8f:3b:31:28: c6:bd:93:c6:0f:ee:db:45:88:a9:a1:0e:de:5a:f4: a1:ba:1c:d8:d7:1a:5e:9f:9f:d4:4d:23:3e:62:e0: dc:0a:f1:c2:c0:58:9f:7d:f7:3a:d3:4a:c2:ad:e9: 0b:e6:69:5c:db:68:bb:76:cf:bc:4d:36:47:bc:8f: 3b:ae:04:9a:35:8e:30:4a:ea:29:87:41:68:50:64: 30:95:f1:7a:63:3b:c0:57:ea:52:8b:a6:26:90:41: e0:92:02:3a:a3:d7:65:6b:d1:a9:ad:1a:21:58:c4: 92:a4:8f:18:bf:97:09:d4:42:a2:44:5d:19:aa:ae: e6:3a:9b:0a:eb:f9:bd:db:e5:6d:13:06:69:37:15: 86:de:55:d1:4f:22:a3:b8:9d:1f:b8:5e:e0:6f:ef: 7e:0c:b5:e1:25:93:80:0c:cd:c1:3c:50:5d:f8:6b: 67:6b:2f:1e:8a:16:54:96:38:bb:af:4f:ec:24:23: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8A:BD:02:E6:15:74:17:63:57:CC:02:89:2B:92:77:5D:5D:24:55 X509v3 Authority Key Identifier: keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:be:3a:13:60:d2:ea:05:4c:70:b1:6d:fd:f6:03:bb:9d:1b: 61:77:15:99:11:44:69:bc:83:c3:c2:a9:04:43:e9:58:00:3b: ca:46:fa:d3:73:3a:5b:cc:6c:da:56:fd:ee:3e:ae:5f:89:cb: 30:0e:8e:a8:e1:10:96:8f:1c:47:d2:2f:c5:9a:76:9a:8d:16: 5b:7f:c5:3c:c2:e1:1b:13:9e:a4:44:54:90:1e:0a:df:7b:9b: 5e:9d:5e:68:cc:85:62:71:d0:1f:d4:21:8d:5e:d8:5c:59:a8: 28:8a:21:8e:7c:b1:f8:a5:66:41:d5:bc:60:c6:09:e0:fc:36: b9:02:bb:17:32:20:47:7b:83:cb:3c:82:15:ae:d8:06:6c:18: d9:73:b3:51:5d:dc:b5:62:81:db:8c:5b:1d:51:c5:5c:9b:c5: 00:9e:69:39:b7:39:54:dd:45:c0:e4:76:f6:44:f3:22:2b:7f: 4d:5e:50:35:93:c0:87:82:b9:8d:36:58:6c:74:d9:3f:2c:32: 8d:06:a2:d3:1e:1f:31:28:7e:2c:97:49:8f:c1:3d:60:61:4a: 79:6d:85:cf:76:56:8c:a5:95:95:f3:94:fd:83:31:4d:4b:a7: 75:ee:c8:c0:ec:d6:c5:30:f9:68:b3:cd:a9:98:e6:c6:4c:59: 13:08:7b:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lFgb7ibqhEhOfZv7yR8HwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5 N2I5ZDAwHhcNMjYwMzI1MTMwMTMzWhcNMjYwMzI2MTMwMTMzWjAzMTEwLwYDVQQD EyhhNzhhYmQwMmU2MTU3NDE3NjM1N2NjMDI4OTJiOTI3NzVkNWQyNDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4f13htAIz9xbnamNVQDPzxfz1oZ I9nmDM+A2ZD+Fl698y4J+/4ZnBGxoK9MHErIbr9CjrP7nsWi3dQp/duA8WcrTJMr Y487MSjGvZPGD+7bRYipoQ7eWvShuhzY1xpen5/UTSM+YuDcCvHCwFifffc600rC rekL5mlc22i7ds+8TTZHvI87rgSaNY4wSuoph0FoUGQwlfF6YzvAV+pSi6YmkEHg kgI6o9dla9GprRohWMSSpI8Yv5cJ1EKiRF0Zqq7mOpsK6/m92+VtEwZpNxWG3lXR TyKjuJ0fuF7gb+9+DLXhJZOADM3BPFBd+Gtnay8eihZUlji7r0/sJCPSpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeKvQLmFXQXY1fMAokrknddXSRVMB8GA1UdIwQY MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt NzU1MTgwOWNiNzMxLzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADb46E2DS 6gVMcLFt/fYDu50bYXcVmRFEabyDw8KpBEPpWAA7ykb603M6W8xs2lb97j6uX4nL MA6OqOEQlo8cR9IvxZp2mo0WW3/FPMLhGxOepERUkB4K33ubXp1eaMyFYnHQH9Qh jV7YXFmoKIohjnyx+KVmQdW8YMYJ4Pw2uQK7FzIgR3uDyzyCFa7YBmwY2XOzUV3c tWKB24xbHVHFXJvFAJ5pObc5VN1FwOR29kTzIit/TV5QNZPAh4K5jTZYbHTZPywy jQai0x4fMSh+LJdJj8E9YGFKeW2Fz3ZWjKWVlfOU/YMxTUunde7IwOzWxTD5aLPN qZjmxkxZEwh7gA== -----END CERTIFICATE-----Generated at Wed Mar 25 22:42:10 2026 by rpki-client