$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json) Hash identifier: i2qdqdj0vIcRmq5PS/68bCh4iHE3gYvy8FbqDNUPsEk= Subject key identifier: CE:38:4A:B7:39:23:13:B0:71:04:FE:B4:A9:20:25:71:05:14:3E:A1 Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Certificate serial: 019D27039AF7D4BFA77457463E1DB62B056C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft Manifest number: 1909 Signing time: Wed 25 Mar 2026 22:00:40 +0000 Manifest this update: Wed 25 Mar 2026 22:00:40 +0000 Manifest next update: Thu 26 Mar 2026 22:00:40 +0000 Files and hashes: 1: 5OGPGzofiEFa09GnFOAn5hhvk48.roa (hash: h2LTT9rBOO/bxXO9EO5NFwg/fB9HG26CM4uymezMPKI=) 2: HzkOKarS86MDQLlSBspsfYKZtUY.roa (hash: dF5VOyKP9r0Ab/BEFUBb+lquv8b+vxHoc9l8zjdlwMM=) 3: IPMiCKDGg-4bycZ4wSrvvc3HolI.roa (hash: Up0dPWNya84ceqWIOnzBSjlOj2l1pRl6VXrPutXxbZ4=) 4: OyXa5XHUgsJSBsdbc3Qrhq4QU1Y.roa (hash: Gyfd0tsIEQsaZgvjHA4zwq5b2ZqvTwYd6Np55tiRmHQ=) 5: P_IQf465IziNUba5nDDuA9mYb2E.roa (hash: NtF/MIHSktYf3HQG++BY9SW33um7HsSxglhUDmVhaCg=) 6: THhHEbJLNflyjg0CGgDKLOWHmNw.roa (hash: hE5im+TYFFs2d+KHjtsfg9PpKV6WFy0Jtd49aeuY6Po=) 7: e7Lvz7EuGDsmNFIhRbwvynj9xTY.asa (hash: ns2I70ZkX4z8+mK5f+FUnkH52JTj0mfI9C5qd0rPQ1g=) 8: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: o7kLb5tVc266ORzkezMiDQN26yITNz/ThXpqiULcwM4=) 9: vREpqPygKpqEUBRK1WP9YRnHT1U.roa (hash: aIOz9LGkgfShAFeGoLvJK3zSpzEcpe5gJpmAOuZIS1I=) 10: xbEhOdTGtK79EP0Hua6zp2g53GY.roa (hash: UhufiohNKNchaGiqQq0NBGvPLk1S1fa3tNlXBIgXEyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:03:9a:f7:d4:bf:a7:74:57:46:3e:1d:b6:2b:05:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Validity Not Before: Mar 25 22:00:40 2026 GMT Not After : Mar 26 22:00:40 2026 GMT Subject: CN=ce384ab7392313b07104feb4a920257105143ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:68:ad:88:05:97:e7:f6:38:c0:53:60:61: bf:33:8b:f7:9e:fd:8c:59:56:05:89:34:cc:2a:6c: 8d:4a:08:72:6a:a2:38:84:3f:7e:44:34:6b:2d:35: 11:ef:be:d3:02:28:88:a7:b4:73:92:20:7d:79:e3: 95:57:08:54:6d:aa:22:ac:c1:cf:af:eb:bc:7a:39: 56:18:96:1b:b1:9e:9d:d8:68:f2:42:7f:51:aa:f6: cc:d5:e7:c4:7e:91:4f:58:4f:53:b2:94:9c:ea:31: f6:3d:46:ad:13:73:5d:12:87:21:f2:90:80:d7:d2: 16:c6:39:8b:68:fe:62:41:a7:b6:ce:bd:5d:c0:8d: f8:bb:17:66:c6:99:1e:15:a6:24:2d:bb:9e:db:57: b6:ec:9b:eb:db:82:8f:f8:a5:f5:05:d4:32:c9:bf: f6:cd:43:a1:9c:d8:46:0b:01:c1:98:84:a4:aa:6e: 4f:56:90:dc:81:42:df:60:74:be:5b:bf:97:5e:b9: 36:3a:61:40:7c:2c:ff:3c:05:1d:6e:17:df:eb:81: 20:7e:a7:98:33:0f:6d:6f:49:f1:5d:d5:51:89:ec: ed:63:a9:5f:42:cb:d3:ae:33:64:c5:7d:83:63:22: c3:79:8a:fe:16:8a:0a:78:fd:c5:ca:e1:e6:b2:48: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:38:4A:B7:39:23:13:B0:71:04:FE:B4:A9:20:25:71:05:14:3E:A1 X509v3 Authority Key Identifier: keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f1:e8:09:0d:0e:10:61:7f:d7:10:51:32:d7:30:c2:ca:70: 13:2e:00:3f:d3:0a:df:5b:f8:5f:43:57:18:58:c5:28:cb:b0: 04:21:e4:66:57:f3:52:4f:df:8e:d8:e9:4f:ae:6b:da:33:e5: 1a:51:6b:b4:96:e4:91:4b:c3:9a:7f:28:4b:36:68:4c:a8:34: a8:b9:0d:64:65:c7:1b:17:8c:12:c2:2b:90:ed:3b:e5:7e:0b: cd:1d:9a:b6:41:ac:0e:2c:ff:01:ed:46:84:2e:ad:d6:ad:f8: 44:bc:8b:15:71:19:0a:9b:0b:4c:a1:8c:be:86:a0:f7:e7:7b: f2:e4:ee:eb:dc:c2:03:40:96:d3:f3:b5:fa:e6:9c:b7:62:07: d9:e3:e0:2f:cc:62:64:77:dd:5a:39:93:5b:8d:40:96:e9:52: 06:50:0e:0d:35:c5:7b:ee:13:a6:ff:61:b2:93:63:d1:f9:b6: 85:34:85:d1:ec:20:c7:eb:8a:07:49:84:ad:64:1f:ad:7f:7b: 18:9f:a9:31:77:45:9c:fd:99:a9:07:15:e6:e1:20:37:a9:f6: 0b:fd:b0:73:64:3b:78:ff:01:1b:cd:d5:be:6a:79:1a:07:75: 00:99:be:fa:8f:61:20:10:a1:bb:b8:75:8e:6a:4e:e0:d1:f2: 35:79:88:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nA5r31L+ndFdGPh22KwVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5 N2I5ZDAwHhcNMjYwMzI1MjIwMDQwWhcNMjYwMzI2MjIwMDQwWjAzMTEwLwYDVQQD EyhjZTM4NGFiNzM5MjMxM2IwNzEwNGZlYjRhOTIwMjU3MTA1MTQzZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWBorYgFl+f2OMBTYGG/M4v3nv2M WVYFiTTMKmyNSghyaqI4hD9+RDRrLTUR777TAiiIp7RzkiB9eeOVVwhUbaoirMHP r+u8ejlWGJYbsZ6d2GjyQn9RqvbM1efEfpFPWE9TspSc6jH2PUatE3NdEoch8pCA 19IWxjmLaP5iQae2zr1dwI34uxdmxpkeFaYkLbue21e27Jvr24KP+KX1BdQyyb/2 zUOhnNhGCwHBmISkqm5PVpDcgULfYHS+W7+XXrk2OmFAfCz/PAUdbhff64EgfqeY Mw9tb0nxXdVRieztY6lfQsvTrjNkxX2DYyLDeYr+FooKeP3FyuHmskitywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM44Src5IxOwcQT+tKkgJXEFFD6hMB8GA1UdIwQY MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt NzU1MTgwOWNiNzMxLzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPHoCQ0O EGF/1xBRMtcwwspwEy4AP9MK31v4X0NXGFjFKMuwBCHkZlfzUk/fjtjpT65r2jPl GlFrtJbkkUvDmn8oSzZoTKg0qLkNZGXHGxeMEsIrkO075X4LzR2atkGsDiz/Ae1G hC6t1q34RLyLFXEZCpsLTKGMvoag9+d78uTu69zCA0CW0/O1+uact2IH2ePgL8xi ZHfdWjmTW41AlulSBlAODTXFe+4Tpv9hspNj0fm2hTSF0ewgx+uKB0mErWQfrX97 GJ+pMXdFnP2ZqQcV5uEgN6n2C/2wc2Q7eP8BG83Vvmp5Ggd1AJm++o9hIBChu7h1 jmpO4NHyNXmIqA== -----END CERTIFICATE-----Generated at Thu Mar 26 03:47:45 2026 by rpki-client