$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft File: 1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft (raw, json) Hash identifier: hNfEBT7xMDPU00DnPhfhXf/xAUofIqbdeDGT3YecDNU= Subject key identifier: 0F:3C:07:52:EF:CC:5E:C8:34:EC:08:C8:64:78:0F:EB:6E:14:8C:32 Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 019D2928F8B154A4354FC0F73293F39D0DCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft Manifest number: 132D Signing time: Thu 26 Mar 2026 08:00:44 +0000 Manifest this update: Thu 26 Mar 2026 08:00:44 +0000 Manifest next update: Fri 27 Mar 2026 08:00:44 +0000 Files and hashes: 1: 00t4JlUtr46G1pEHPfG8CoCTEhg.roa (hash: SZsJbSiNkf6okAugBnwQT5cRtnNGeqe0R2EQOpPuW0s=) 2: 1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl (hash: IHkEXz+3mVwIHOWA/4vwQsLn61q69IAMxV5126mSeEY=) 3: 3YsQgb27UWqMlN954jmMKOEu_SM.roa (hash: MOWqK6cBdBGpbj92O0t42kX8k4E9W9yvyK9I1uW+++c=) 4: 3uJWZaSr28voCvJ3XvOZzVY97r8.roa (hash: JNQEcpLZ9GfOEBDsZ7o828ABuFDs9+kz0Q3kqrQJnzg=) 5: 5MG4H3ROi9Z_HuioIyFr8Hj8fII.roa (hash: Jk2exfePI/3H4jUbDZxVTlT7rkhDIkBPxTi1KyoHO34=) 6: DIgN1jFrT88h190mujGA-W_sLY8.roa (hash: dfAJ//9tqClZ6VrDShQWOByAfjbSoRaRLYUETj8i2rw=) 7: DwVnWS_n3oFRFU2iD-hTgfl9EFE.roa (hash: lKO0GSwPIB0MYiJPwXvuOUNFB8HjB0kL1GRgNk8PV/A=) 8: TlN565d74PyB9p0JXHH7JnDEmvE.roa (hash: r8GHTarKkex0XwFiQfJSY3kfdErHywHcCGk3qR2Tjec=) 9: U5rSDmrf4PlzCLlDWaskjjffVr0.roa (hash: vcOPT76+F+1LBT6UYH+sea2r4OZXBrlNwePW6nY/XiU=) 10: WO53TAvChGXXDpLngdjuE9kLPCg.roa (hash: t9C7935SqoAWtIKVzerLbCGooEBtDnGcFQNhviM2cFg=) 11: ZGJ8WhVJsv6_DZVx2zsNEqurhws.roa (hash: zsRDtxw8BLOr18CsA2qPwGsKzxSNIYKS0wdlcoLLn2Q=) 12: _vECo6V0OqVHvuSazkWJ0dvewy0.roa (hash: sG5pX1vWAXrVaFYMr9ZTJOYbhxs6iotv8DZ3G9v31xc=) 13: evA5C43jooCU-0KGVkbsaB2BBbU.roa (hash: eEukmHvEX3OYIrpleqcpAoYMp79go82LKu/wPivXwew=) 14: jM5XETy6HbMPiBgpmp_jnc2RKQo.roa (hash: xe+9tC5oSUg+0FmVWKdIx8uyl8eVmH5n2rzdeJX6xZI=) 15: jXBLpOdrpSK1mQdwZkoyJdJEfVI.roa (hash: qJzUahRGOfAEVZDxyvqsA7Ss9HiymeHgWnFp8HMjVVs=) 16: kvM6A0dHjKkllZQlI3CjetRcLH0.roa (hash: 5V7o5lSXn+7yqZx8dMRj6FHd+QV+Yb+1dqEPxXIYP34=) 17: nRBwQ2Y-9OgZ7RpCVcKZAJy4sZk.roa (hash: vJGnJ09KsNCLqUU0mMe45rZ6HVT1LYGlujB5Bsrl4iE=) 18: qmM745JG5d8A72hNRLQ9llmN77k.roa (hash: oG4zT6yCNtdrlBl0ys4LHmnKeKqhudHo7676jRW7Np0=) 19: r7r1Y-kSqsjCkN5g73HGn7i1zrM.roa (hash: MQaOsov42k9jc1VrZgl0fzxtEHOrx0ZX3W8NqjTVdN0=) 20: ukQY1BD04k-4MUx-U0jvExGFr_8.roa (hash: HuqS4CCgoqnj6fxM4PKH7DEP94I/EN45blM+J9stnFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:28:f8:b1:54:a4:35:4f:c0:f7:32:93:f3:9d:0d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Mar 26 08:00:44 2026 GMT Not After : Mar 27 08:00:44 2026 GMT Subject: CN=0f3c0752efcc5ec834ec08c864780feb6e148c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a3:03:10:2b:90:d6:88:cc:b9:6d:fc:74:45: 36:4d:e6:01:90:85:4b:14:f4:c6:39:9f:d7:32:88: e8:c2:96:c0:f9:91:c0:40:8b:7a:94:ed:76:46:79: e3:01:08:55:e0:db:71:8b:6a:43:e3:ea:42:2d:a3: 86:55:5e:63:11:86:cd:32:a6:c0:53:01:a4:df:43: 07:b1:f2:eb:93:5a:e1:1a:c5:20:f9:8a:7a:8a:fb: f9:20:d7:6b:66:98:bd:64:e7:eb:b1:c7:2e:d3:d8: 15:77:b5:35:a1:76:16:28:dd:f5:32:5d:a6:fe:47: fa:4d:4b:cd:dc:2c:9b:3d:44:7c:a4:a6:2c:c7:8f: 85:ef:31:ec:4a:b2:cf:78:e0:05:ac:a3:4a:6d:ce: 21:fd:02:34:bb:e7:b8:c9:46:d7:de:4f:29:eb:7d: 18:49:3c:62:b2:a8:10:97:43:f8:f1:77:4d:fe:91: 7b:0c:22:8f:69:d2:a2:cf:91:5a:70:78:08:d2:38: d0:24:c9:c8:da:63:0c:68:40:6b:2a:02:0d:28:26: 2a:a8:d8:2a:7e:52:69:f1:dd:b5:60:60:a1:2b:15: 2a:2a:78:79:ef:6b:e0:a9:16:1c:ab:12:58:b0:71: d6:08:ba:42:82:d7:dd:1b:cb:a6:a5:c3:73:75:a1: 7b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3C:07:52:EF:CC:5E:C8:34:EC:08:C8:64:78:0F:EB:6E:14:8C:32 X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:30:d0:a7:30:20:3c:1f:05:cb:ee:44:a2:1f:84:ae:d0:6e: 29:ee:f7:08:b7:69:ef:f6:b3:81:7b:e3:65:47:8c:77:cf:37: 6e:b5:25:6c:b5:50:e1:53:02:70:49:72:c0:53:ec:7b:48:45: 7d:85:7a:f6:33:cd:c5:fa:83:a4:74:87:c3:92:03:ff:e4:7c: 1d:76:9a:ef:c1:5a:89:34:7b:63:43:a5:38:b7:e5:b3:4e:cd: 03:a8:20:6f:0c:6f:b3:13:76:89:33:2d:e4:e8:39:7d:fa:6d: cb:ff:4f:a2:8e:56:32:ab:91:6a:3d:21:bc:a0:5c:e5:c6:b3: 19:7d:0c:5f:fa:2b:ae:f4:b2:a1:9f:cb:99:d0:bc:59:39:dc: 16:46:45:dc:27:dc:1b:11:6e:3c:98:75:86:89:e4:4f:98:8d: d4:8d:43:91:16:0f:87:bc:5c:3f:d7:f5:ef:26:c2:1e:df:f4: 32:17:1d:c0:14:0d:ee:4b:d0:d0:e1:d3:75:a7:b9:5d:1f:60: e3:07:1a:3c:18:e3:dc:fa:bd:07:ed:30:71:3a:d3:91:a3:5c: 74:e5:05:92:31:8d:ec:2b:1a:fd:e1:cd:55:b8:ab:05:b4:d1: 79:36:35:50:e3:b5:13:91:b5:51:84:e6:11:3e:7f:72:c3:95: 4b:40:1f:9e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ0pKPixVKQ1T8D3MpPznQ3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjYwMzI2MDgwMDQ0WhcNMjYwMzI3MDgwMDQ0WjAzMTEwLwYDVQQD EygwZjNjMDc1MmVmY2M1ZWM4MzRlYzA4Yzg2NDc4MGZlYjZlMTQ4YzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36MDECuQ1ojMuW38dEU2TeYBkIVL FPTGOZ/XMojowpbA+ZHAQIt6lO12RnnjAQhV4Ntxi2pD4+pCLaOGVV5jEYbNMqbA UwGk30MHsfLrk1rhGsUg+Yp6ivv5INdrZpi9ZOfrsccu09gVd7U1oXYWKN31Ml2m /kf6TUvN3CybPUR8pKYsx4+F7zHsSrLPeOAFrKNKbc4h/QI0u+e4yUbX3k8p630Y STxisqgQl0P48XdN/pF7DCKPadKiz5FacHgI0jjQJMnI2mMMaEBrKgINKCYqqNgq flJp8d21YGChKxUqKnh572vgqRYcqxJYsHHWCLpCgtfdG8umpcNzdaF7PQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA88B1LvzF7INOwIyGR4D+tuFIwyMB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk4L2IwMzIxMy01ZTgwLTQ5MzEtODFjZS1mNzUyZDgxNjA1 ZmIvMS8xLVRyR3pTSkFKSnU2WUJjZkNHNlJBY3lIeWlRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTDQ pzAgPB8Fy+5Eoh+ErtBuKe73CLdp7/azgXvjZUeMd883brUlbLVQ4VMCcElywFPs e0hFfYV69jPNxfqDpHSHw5ID/+R8HXaa78FaiTR7Y0OlOLfls07NA6ggbwxvsxN2 iTMt5Og5ffpty/9Poo5WMquRaj0hvKBc5cazGX0MX/orrvSyoZ/LmdC8WTncFkZF 3CfcGxFuPJh1honkT5iN1I1DkRYPh7xcP9f17ybCHt/0MhcdwBQN7kvQ0OHTdae5 XR9g4wcaPBjj3Pq9B+0wcTrTkaNcdOUFkjGN7Csa/eHNVbirBbTReTY1UOO1E5G1 UYTmET5/csOVS0Afng== -----END CERTIFICATE-----Generated at Thu Mar 26 17:43:50 2026 by rpki-client