$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: h3yYecZtkDvkbUgLdhZ9YTAA1GaqK85w7+gpnEQsb5g= Subject key identifier: D4:DF:CD:1E:A3:B7:EC:E0:54:4D:1E:87:DF:14:14:48:47:40:57:57 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019D31F59EC80E43C33ACD177B0A3B9C22ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 0DED Signing time: Sat 28 Mar 2026 01:01:13 +0000 Manifest this update: Sat 28 Mar 2026 01:01:13 +0000 Manifest next update: Sun 29 Mar 2026 01:01:13 +0000 Files and hashes: 1: 8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa (hash: vmfPrDMZxv7M04Wo8WXPZw8AXlVkf20vtyHb5e8KwgU=) 2: 9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa (hash: 5gwGzTjze+ZsjYP/6JdA+Sy/zd3Nz2uvd4XnkQoXRfg=) 3: CiMQMlsaob6RUwchgCgnZuTjr8s.roa (hash: Ar1fgrhz+dRsI5kSs4y0oWEzM2iAvsmrTdXD/xtv77Y=) 4: E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa (hash: 7djPzKioQUY77MCLFItH4oWSHNi6vM51IHyM3Wgv2dk=) 5: My1lWafqU6ikUvtq4M-ub2MxD1I.roa (hash: UvpW6m+Ws53gXcKKs+IbQFznyrhTBzwk2z9Qv12jd1c=) 6: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: JAdVar/YIBwyI3Ph9H4ZWA6a+RT8FoH7srLI25uizWY=) 7: UVRNeFdK0MFmPktuaxuakdFBiyw.roa (hash: Qe3jYuCQSRz8rrbqzPjF4ta2+ILAQBCmo8wsXzpnbtM=) 8: YfIHk0vhXMsawbQpQSUx4NkqARo.roa (hash: jyjsv+8CT/zFqpfSyQvWtrC5fl6L+Qm0Q0VVf1vxxCM=) 9: f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa (hash: W/HCDixp3chA9F+ml8Y61wZheEIzzJOIG7tl8p8DNMs=) 10: g3ikyABmwYnsstzPEiwf1y3JZw4.roa (hash: iV6diY2/uvF2VPragiyPeS/YOKkeG7Rg1youKOMMysY=) 11: iRf_gs5n9xup496QtRtuInpoD-U.roa (hash: BDQw7Ot2/EiioII6Hz7qQJc1eJwtGMRxOvQFtmCg1xA=) 12: jteFQiK73wa6i4lrpiIPNofIe0U.roa (hash: G8t6kOJLv2x/ceaMNLBszGM9PcNzECaWuzPtlc+XAqM=) 13: lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa (hash: HTFvctpryJcVZOxTlZV4EEM5WCYV9Pw93rtuaN3DxLg=) 14: mjB_YwpdfbzEMOoCN657fTyMgX4.roa (hash: zKy3p/lM5a5D8i2Rw65iFKwlrzxpy3cP+UdwJk2L738=) 15: qJcccqDxWrdJegvnpo2s2Knlr7s.roa (hash: PcVnyenRgB6ckra0K+D+gtKFqypcoJpDoAUxyPbLxQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:31:f5:9e:c8:0e:43:c3:3a:cd:17:7b:0a:3b:9c:22:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Mar 28 01:01:13 2026 GMT Not After : Mar 29 01:01:13 2026 GMT Subject: CN=d4dfcd1ea3b7ece0544d1e87df14144847405757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:b8:c8:da:40:ca:d1:84:ef:32:bd:4c:1d: 09:92:fa:5a:ff:6c:ed:68:51:be:56:6b:12:bf:b0: be:3d:10:15:ec:70:56:04:bf:8c:28:66:8a:7b:22: 66:ca:a6:77:ba:7b:2d:26:69:2e:bb:52:b5:60:10: 66:10:37:dd:e3:53:b5:40:fa:85:aa:9b:0e:8a:de: 35:7d:d2:3d:fd:b6:36:68:88:2d:97:f9:79:b5:db: 57:e4:f0:7a:7c:69:dd:51:9c:eb:eb:a3:d4:ef:cd: d3:d1:85:5b:f6:72:c1:34:d2:88:a6:b1:0b:16:d0: be:60:64:27:d0:84:71:26:4e:ea:4c:7d:7e:bd:7d: f8:9d:bc:e0:e0:86:b8:d8:78:c8:3b:20:f3:ea:2f: 2d:fb:d9:af:f2:2a:1d:da:ef:a1:0f:d9:5b:a8:29: 55:bd:c9:4d:6a:31:10:01:4a:b2:ac:84:0d:b4:44: 1f:eb:7d:3e:cb:14:d4:83:2f:7a:e9:65:f8:bb:fe: dc:c7:47:8e:43:c9:f3:29:e9:40:d3:1d:a6:4c:ab: 98:d9:38:d4:ec:8b:0e:f7:57:86:3c:a9:eb:78:34: 12:6c:64:3c:c1:f1:ed:c8:70:36:88:30:bc:6a:12: b4:da:28:e6:cf:46:3f:29:0b:f8:1b:2c:6f:78:c4: 36:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DF:CD:1E:A3:B7:EC:E0:54:4D:1E:87:DF:14:14:48:47:40:57:57 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bb:b7:0d:08:bf:2f:ec:37:1e:7c:b0:39:86:b3:aa:12:ab: ed:73:38:63:3e:88:86:2e:81:d6:c1:64:7f:fc:a3:5a:4d:68: c0:67:04:3b:31:bb:d3:47:e6:0b:7d:af:92:31:62:e3:e5:d1: 96:74:d7:1d:da:94:d1:a4:5c:ae:3e:f7:0a:6d:8d:fb:11:b3: 89:1f:2c:2d:15:a2:29:89:ba:13:b7:b2:1d:76:ea:41:9d:2c: 18:b9:91:f0:b1:7a:a9:ab:93:3b:2c:f6:7f:ba:d1:a8:3f:3d: b2:70:6b:43:0c:f8:f5:5c:c6:bc:a8:f2:e4:d5:55:2d:0f:c8: 71:0f:cf:0c:90:0e:76:ae:f7:64:05:b2:64:45:8e:e4:3f:67: e9:ea:d2:fa:f3:cc:de:02:ff:56:56:ca:7f:3f:af:64:81:e7: 97:76:af:70:cc:53:25:20:85:e0:b2:1b:3b:55:14:ef:3f:83: 00:cc:57:77:b2:7e:5b:62:6a:97:fc:a5:51:f1:b7:fb:5d:c4: 3d:5c:e4:f9:a6:0a:49:30:b4:66:8c:11:5c:59:92:61:ed:61: ee:ae:cf:d8:24:85:7c:78:b8:2e:47:50:48:07:bc:60:62:2a: 11:00:40:b8:5d:37:86:40:18:92:c0:f8:9d:f5:33:f2:53:9b: 56:69:35:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0x9Z7IDkPDOs0Xewo7nCLtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMzI4MDEwMTEzWhcNMjYwMzI5MDEwMTEzWjAzMTEwLwYDVQQD EyhkNGRmY2QxZWEzYjdlY2UwNTQ0ZDFlODdkZjE0MTQ0ODQ3NDA1NzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ry4yNpAytGE7zK9TB0Jkvpa/2zt aFG+VmsSv7C+PRAV7HBWBL+MKGaKeyJmyqZ3unstJmkuu1K1YBBmEDfd41O1QPqF qpsOit41fdI9/bY2aIgtl/l5tdtX5PB6fGndUZzr66PU783T0YVb9nLBNNKIprEL FtC+YGQn0IRxJk7qTH1+vX34nbzg4Ia42HjIOyDz6i8t+9mv8iod2u+hD9lbqClV vclNajEQAUqyrIQNtEQf630+yxTUgy966WX4u/7cx0eOQ8nzKelA0x2mTKuY2TjU 7IsO91eGPKnreDQSbGQ8wfHtyHA2iDC8ahK02ijmz0Y/KQv4GyxveMQ26QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTfzR6jt+zgVE0eh98UFEhHQFdXMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbu3DQi/ L+w3HnywOYazqhKr7XM4Yz6Ihi6B1sFkf/yjWk1owGcEOzG700fmC32vkjFi4+XR lnTXHdqU0aRcrj73Cm2N+xGziR8sLRWiKYm6E7eyHXbqQZ0sGLmR8LF6qauTOyz2 f7rRqD89snBrQwz49VzGvKjy5NVVLQ/IcQ/PDJAOdq73ZAWyZEWO5D9n6erS+vPM 3gL/VlbKfz+vZIHnl3avcMxTJSCF4LIbO1UU7z+DAMxXd7J+W2Jql/ylUfG3+13E PVzk+aYKSTC0ZowRXFmSYe1h7q7P2CSFfHi4LkdQSAe8YGIqEQBAuF03hkAYksD4 nfUz8lObVmk12Q== -----END CERTIFICATE-----Generated at Sat Mar 28 10:13:19 2026 by rpki-client