$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft File: RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft (raw, json) Hash identifier: o6mmKlTX4n+ozm/A6WLJlijGvhAl9hs2hhlEXhSVy0c= Subject key identifier: 58:1B:E9:43:89:98:9A:2B:21:0A:F4:D1:76:F5:12:16:D4:8B:EC:75 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019D2A72A894029008FD458616F9DA1993CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft Manifest number: 196E Signing time: Thu 26 Mar 2026 14:00:50 +0000 Manifest this update: Thu 26 Mar 2026 14:00:50 +0000 Manifest next update: Fri 27 Mar 2026 14:00:50 +0000 Files and hashes: 1: 2K2LRFKVS5G4UBpi02aIHEwaYbo.roa (hash: vp6Q5byh4sOxsLn6+xnbICkzt50Gu7I9DJlz9grAs68=) 2: 4EHQchkmRvw4hrIZwKVmoTVrXcE.roa (hash: KpqMiHj1SwCn1wHf9cbF+sIlJ2SNrDY7ghIe8T7leBk=) 3: 60n7OcQD1rVkRE8LPW3kEfdX9gw.roa (hash: N0mQsLvGMMdhDPTL/se4j6fwbJ89Tgbu/0d6LhVYRLs=) 4: 7wjZdZfOK--9J0iW5gkpY4jz3Vs.roa (hash: wQ+RvHew1IVetOV7JWzo86gEVS8H0+zXRGq3DJBrmWc=) 5: 9iM7YuqWIbTP1jDWJnvJ3Bq7Q0Q.roa (hash: fsZlnOQR9nRVkMGwqtj0xSg8Xg6dl3hOvSIpUTk2D6w=) 6: Ca0jUIwklC0eyPP5hzRAn17FR80.roa (hash: fAEP7LfFj7fDAZrrdBBsvg+Mn25B+1e7F/BBuqO131w=) 7: FN70esTZXn5X2vP3ZcEnYIks9AM.roa (hash: 1ow9uwWZ1DORgXwnTVw8JvTT23AJVzQa+9quYRVEN6M=) 8: Ku0mjmxusSrMXfgvlmL_Kh5j0kI.roa (hash: zSTvo+JocKBb5Nbg9XIvSqJL+1z6V1E34a4hrkcK8t0=) 9: PNU5dT-FRZhCGuEDnFsX7GuO8MU.roa (hash: 5nuXPVsdc9izSwCCuB+1KPJnkougYuwEFE0ABa/v1lw=) 10: RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl (hash: NAyqjKkyH7evQTTc0viYRb0Qat6rvmz1VIjUXR2m5eE=) 11: S7h5Fby9bbpxdXYmDtza_SDSYtg.roa (hash: IOxFJnKliiuzpHTvfCVgOBtXgnXsZ5cTLcWr06Mhmmg=) 12: ShGZf2KqimtbKzToWYg54Tsrrwo.roa (hash: I51c/DNMfjZlsvQm5k/7jwF4EguCQj/kTUTXhZ80zs8=) 13: UGZ3vMnUVhnMHprA-js3vspKmwo.roa (hash: n4uZoakF4GvbWWZaqJL1srzglcS0eKby+fyHBjJ5GXk=) 14: WIe_yXnGz2qxmkA-Jl4unhtVXd8.roa (hash: JDWlYllOoFXRzwvexL0+Z+xQJXmvy5W2gSffNKHemAA=) 15: WL6q68-uoJAeV1AkxAgPdtwWoyc.roa (hash: f7/E+EUbjnh6BcH/3q+PZzjcsDtZuhmuT+6PSPvWfAM=) 16: Wy81KMy0DL_6tpJOi6ANUYyTUv4.roa (hash: d27KgsDg+KuUKh7rpBYfZ/yBm4hBx4SDfoftiDo2y/8=) 17: XMvIwzGddWBUba0mwiNnnHTZWm4.roa (hash: UWvDZc48OJ09VWHD0leBJU7x8wfw++aUQp2Q26I26MM=) 18: _UKP5-Iy6wpN2oirm5XR4t6xTqQ.roa (hash: Ut2T9vsFgp66XEHsrOrD4d48x54qapDTxxF4xsDolDw=) 19: af2hi8V_6XBfDLcR66UImjT0iRs.roa (hash: kN5giEt8lpaRlzktqhTZf2jIXA6thsWMrbPgPzbcxSc=) 20: ah0jiQnxjyeZK5he6RdTUE-ipnY.roa (hash: JJj18HJFbOb1f81VJKQKUC1al7turx0OrE/9nAccLK8=) 21: ewMk8U-CtYsjt6E6j_tG33Bkeds.roa (hash: ilAg19RjRWMFfvWl4ecpGWCs1APQudEqMJ6oIH0eDTA=) 22: fyOBmQELZ84jim02chSzhLTUiJg.roa (hash: PVKToPWaEblMOyx0ZJiyuzsLGWJGXRtAynoGPK7HeM8=) 23: h1AkFWiuF4C5x1jcp2idszcxtwU.roa (hash: RmjmZFo+6GsCEI0vzQijS30wCaveF6IUR5KU8O6+YJY=) 24: i4hte45akIRNL2vHKGJ9-NUNnqQ.roa (hash: 8LR1YPRoTVoRZsbGgXKnK5UISLltqPFobCnS2GQcoBU=) 25: jXJPIagQB7xJy4c-VYsshQQ5ZU8.roa (hash: LZ2zXEnHEosFY9V/e5cqBzDV0kKFDDyZWuhh0GN0XAw=) 26: lcM9VBsMX8XlCXtWIYOwxsgyfcs.roa (hash: 5oIPhkO6h+85iz0pQDQy9IOXsl5pzQuFQs9T8Q+5gKM=) 27: m3rFClN8OrN1kUgzbffmVeYXm_g.roa (hash: gTzP3qQCo24jaH53JEi/3E2xk77hA7ta7BJO9SMqoTE=) 28: oyIqohxC2y3rvRg6QPCsx91o03U.roa (hash: ZmO9aPa5rKIwE8XElV0NF7ALbzeZA2ZqKUS5cy7JHt8=) 29: ruijiG2c7OWNAbZg1DzBzUw2h9A.roa (hash: gl727KrmeoI8zfQ+pdZJ+FzEFZTT7EufSZa415R+/6E=) 30: tbsvSqRGQpNtqvMQHjLN-1rwMVw.roa (hash: ZfNnOp2DuU6V3IEVKKLuwN6szaSXJ8fTG6lTql9z+bY=) 31: ti7bPeHvjZr74P5AX8xhgt4EPEQ.roa (hash: eVY7BIMaC5K37OTehz4aGSdkgJfotwmNYaS0DnArTLM=) 32: wRvPE_LWNx2kIT2wAO2XbZUAglY.roa (hash: MxpajBbFFulzyH8dwfNbDFeDhL15/nETBO2IKZQO1kU=) 33: xFV6naJ395ubjh_EqiAHvE__j48.roa (hash: dsSN+lLUWUY5SoV96p6VvWfy7nH7ZF5X9LmWDzJivP0=) 34: yuafb_GLP5geRNFsOXeHzGpXUtw.roa (hash: rNqK+URhLKI6w5EH1rntR8Xc3oY7jxanp2xGnYspLAY=) 35: z5afGA7OaWu712VRFeG9Gp0k7GU.roa (hash: V5K2iL/FYfaNf2E5t5hua1uBnZXWpXH1Eus7Qaw8bpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:72:a8:94:02:90:08:fd:45:86:16:f9:da:19:93:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Mar 26 14:00:50 2026 GMT Not After : Mar 27 14:00:50 2026 GMT Subject: CN=581be94389989a2b210af4d176f51216d48bec75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:91:83:27:af:ef:7b:0d:57:f8:c7:51:26: 5c:49:9e:30:e9:a1:d6:dc:ec:34:28:3d:ad:3e:b0: bd:da:d8:a6:12:04:e5:7e:67:b9:2d:84:6f:28:c4: e1:b1:f7:00:f0:2f:0e:68:54:b5:02:81:d7:48:29: 04:92:3c:f5:9a:49:d5:26:4b:71:74:38:cf:98:a4: 1b:ac:37:99:ea:4d:95:c5:e8:e0:b8:33:0f:23:0e: 7e:cd:f2:f7:d1:9b:95:eb:5f:c1:0a:2b:13:33:c1: 46:6d:69:76:19:69:0a:5f:a0:bb:e4:37:a9:9f:92: 5a:87:ba:22:ab:37:d2:16:5f:10:47:85:77:49:d7: df:fa:17:b8:89:7b:4f:e0:04:b8:c2:50:6e:70:de: b4:33:72:3a:63:61:8b:33:1b:b4:f8:75:1f:e8:78: 1c:cf:93:73:91:5a:bb:bc:83:31:e2:d8:75:57:bc: 86:c3:cd:8e:2a:73:83:8f:12:23:5e:17:2b:2d:08: 0d:9f:d3:3b:25:3f:ba:b5:7f:84:10:14:73:41:a8: 87:21:98:0e:90:07:e2:f8:f0:15:67:f8:7b:9f:b4: 0a:d2:ed:77:bf:7d:83:91:15:70:d2:b6:43:8a:88: 34:2b:e5:e8:00:50:5c:34:35:7a:db:46:dd:b7:20: 1d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1B:E9:43:89:98:9A:2B:21:0A:F4:D1:76:F5:12:16:D4:8B:EC:75 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:86:d7:a1:bd:37:a0:9d:be:6c:d0:f0:fd:a2:00:24:a7:71: 93:b2:cc:50:18:de:2c:b0:5d:8b:11:e4:80:1d:92:c2:1f:6b: e4:f2:f2:f9:d3:b7:9b:04:18:da:8a:11:cc:df:fb:35:99:40: 1b:05:ca:f9:d0:cd:e2:b1:8e:f1:f1:e5:20:6f:ea:ea:20:26: 4d:ef:97:c9:22:ce:77:5a:66:39:27:8a:bc:a7:b2:ee:aa:73: 9a:37:94:49:2f:d9:4f:dd:d3:fd:25:00:fb:9e:64:eb:88:6c: b9:77:84:f4:4d:41:5e:61:84:64:78:b3:5c:9e:1c:94:74:97: a1:40:22:a4:3d:54:ee:c5:44:5a:5b:c9:1d:c9:74:89:9d:6e: e1:48:5c:8c:59:89:bf:53:6c:e6:50:b5:a4:7c:8f:1c:1c:bb: 28:bd:f4:ea:19:c8:34:4d:f0:33:76:fe:fb:5c:12:37:8f:55: bf:81:18:2f:85:2c:9b:44:0e:1c:03:e5:6e:88:98:96:0d:a0: a4:e1:74:6d:1d:82:ef:b2:28:0d:02:ee:a2:4c:b6:e2:2c:cd: 51:f0:bf:6e:f2:68:f1:c2:c2:8d:c9:49:c7:f1:d0:43:e3:65: 28:25:5c:6d:f1:0f:48:7b:92:51:e9:ac:58:37:bf:6e:e7:22: ec:be:d8:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qcqiUApAI/UWGFvnaGZPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMzI2MTQwMDUwWhcNMjYwMzI3MTQwMDUwWjAzMTEwLwYDVQQD Eyg1ODFiZTk0Mzg5OTg5YTJiMjEwYWY0ZDE3NmY1MTIxNmQ0OGJlYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcmRgyev73sNV/jHUSZcSZ4w6aHW 3Ow0KD2tPrC92timEgTlfme5LYRvKMThsfcA8C8OaFS1AoHXSCkEkjz1mknVJktx dDjPmKQbrDeZ6k2VxejguDMPIw5+zfL30ZuV61/BCisTM8FGbWl2GWkKX6C75Dep n5Jah7oiqzfSFl8QR4V3Sdff+he4iXtP4AS4wlBucN60M3I6Y2GLMxu0+HUf6Hgc z5NzkVq7vIMx4th1V7yGw82OKnODjxIjXhcrLQgNn9M7JT+6tX+EEBRzQaiHIZgO kAfi+PAVZ/h7n7QK0u13v32DkRVw0rZDiog0K+XoAFBcNDV620bdtyAdCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgb6UOJmJorIQr00Xb1EhbUi+x1MB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIbXob03 oJ2+bNDw/aIAJKdxk7LMUBjeLLBdixHkgB2Swh9r5PLy+dO3mwQY2ooRzN/7NZlA GwXK+dDN4rGO8fHlIG/q6iAmTe+XySLOd1pmOSeKvKey7qpzmjeUSS/ZT93T/SUA +55k64hsuXeE9E1BXmGEZHizXJ4clHSXoUAipD1U7sVEWlvJHcl0iZ1u4UhcjFmJ v1Ns5lC1pHyPHBy7KL306hnINE3wM3b++1wSN49Vv4EYL4Usm0QOHAPlboiYlg2g pOF0bR2C77IoDQLuoky24izNUfC/bvJo8cLCjclJx/HQQ+NlKCVcbfEPSHuSUems WDe/buci7L7YoA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:37:10 2026 by rpki-client