$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft File: 1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json) Hash identifier: 4KfmhVZhH6MyfffliRLeW0/TcpFATlVIod8Wr9XEEOo= Subject key identifier: A8:94:3A:B4:7D:37:49:A7:FB:BA:FB:29:24:78:00:07:16:0F:19:DD Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019D26CD55084C1A7E308A1D9F68077048F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft Manifest number: 1890 Signing time: Wed 25 Mar 2026 21:01:23 +0000 Manifest this update: Wed 25 Mar 2026 21:01:23 +0000 Manifest next update: Thu 26 Mar 2026 21:01:23 +0000 Files and hashes: 1: 1-_yOHxDowuUEcsMT-tBSHJNawJY.roa (hash: OkEE2PY+HxH7AS4Wef2NDEm88il1r3tB4z1trxdzMcY=) 2: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: ZhxdExciXtRJ79BivMdxmNOg/KfCZtZ1JVNALxdJaoA=) 3: 1vy2Zod5icTuhsQoU0EnDjOvBUw.roa (hash: lJYkGyyhIavQAOFGfkLnoEQo2R64Z5o6AfYNpKGslCE=) 4: 3J_CxMgmJXuVSnvK_SwiuKDZQUc.roa (hash: e33I6eVGoqxWrHvmScm9q4ErMPJHZ8jH0FBrEufjZp8=) 5: 6sT_2wW3QFQmWTC2CM0vH6Hbq7E.roa (hash: TDLoh7DszsOvKZFOmyvLjh7bfnLG215xsT9A8ZTykgo=) 6: 8gJt_vKgY7RalSb-2BGe533Itg8.roa (hash: SlU8QzhG9LmIVc3LENP/NU0v6qpC64nU8O2T4x7X/MA=) 7: ASvKzZxweZT7xHuni0eKcHpcjqU.roa (hash: 4YMxscW7TktQGLKn19P50CYxgYAoxEYLDNh2Yo+uAZs=) 8: BXsYcbjTxRZ5Rq9pCsvx7EKXBXE.roa (hash: fDsxTkNxo0dsPCuB6RQRrUNQrvhghUZtv/5lAhqvN8s=) 9: FgdvpoQS9eNGBCF7vb9OQ805L4w.roa (hash: qPGoYa/8WfjiLv4BgmlM7xbw8t368ZlcAuc0Wqq0xog=) 10: Gsh7wu04p9ODvC2NV_A1Roh2Qd8.roa (hash: kD9fJwgoxSXQISK6GThZF24PkPBOrX99sD40C0cTkOU=) 11: IxwIjHVYTFyVPPJeuiO1JpcCvzM.roa (hash: uGsI2smQZDACq5TGrMadh8kVvnRLPaTcj/HGRS+HaPA=) 12: LXOlrFf8_l83rpmn17vhLFJbiZM.roa (hash: sNb9fSP4DWs/c7lN80M3XZoZwHMjGq02DY0II5j0Qyw=) 13: OfWV2U6d2G66IUWsrNxQqrV7mss.roa (hash: gASQVd+Sh51sow2h+7M1wSuBugvFozeRnIy6awd7pEU=) 14: SAtVAePJhWqo0wutfiUY2R4nPhI.roa (hash: 0H4+3p93lCzGpK1JwDK4bkQfPmCv/xN0G8ejzBatka4=) 15: UhjMuilgxrHuJbG_v5PNxnq08SY.roa (hash: Xd2IZu005wTJgMzbjP6ZPuNUygMnfEV45FJoAZWWctE=) 16: _RlUaty7XFL7Cg1Bd_uBGGhGjOQ.roa (hash: qwy34usdJCqXP9Il0XAoY9RGd5uIHfbG7rpjrxu69io=) 17: hHFL6YvmkxeC88wNUSyE--wEbwg.roa (hash: oRWVW/Ew2m5MAblBqbb+qw5rCChK2C1xyIO8/seBpWQ=) 18: jX6P-bHofIqjGsTJnOwPDX7xdQE.roa (hash: a9lEvQ6DaP+YBlQpn96SMBqrqZvPXdiisAwCLDojp1s=) 19: kIwcjzINW8dxv0n9475H5UAlv-o.roa (hash: z7kthu14PX9eFygYlQs12XpkisLRPxXCnKfsTXiY9WE=) 20: qKKybqkrLx3Ya1--kbP2_lmbPEk.roa (hash: uTZzIjPiBF1BZfJxXa4Io6x8P1a8OROcC2WIKx0Gejk=) 21: svBR3bGWVaZYfi0KyiWyrD9Uw4k.roa (hash: mBYHUbx1m9DpD1cLPkr3K0AOJjiELWaZ7tIIWQo2etY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:55:08:4c:1a:7e:30:8a:1d:9f:68:07:70:48:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Mar 25 21:01:23 2026 GMT Not After : Mar 26 21:01:23 2026 GMT Subject: CN=a8943ab47d3749a7fbbafb2924780007160f19dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:24:76:30:1d:f8:ea:5e:f3:13:11:da:0f: ab:86:8b:b7:be:f9:e3:aa:9d:08:1f:09:be:a0:04: e8:4f:40:a0:62:85:08:f8:ef:1f:73:80:bb:9f:8a: 0a:77:35:78:20:da:1d:48:f1:07:da:98:d3:ee:68: 59:ee:0f:e3:45:37:f9:4c:52:65:c3:df:50:78:cf: ab:0a:a8:cc:8a:51:4d:7c:a2:c9:d3:28:3e:52:d1: 02:c0:89:ca:79:5f:b0:36:70:57:73:3a:43:00:84: 17:e0:f8:84:8a:10:93:9c:ff:36:73:e7:95:10:a3: 85:84:cc:06:f7:ad:93:9f:17:87:57:31:47:af:57: 5e:5f:f5:22:77:2d:54:76:9d:02:fc:52:46:78:ac: e0:05:ac:41:45:38:9e:c0:d4:3f:f0:f6:9f:88:fe: b1:28:ad:ab:7d:bc:01:6e:9b:3c:8d:5f:96:95:9b: 38:32:fd:0c:23:23:e0:b4:6b:08:05:f7:0c:52:de: 49:ad:d2:e3:1e:c4:65:69:34:cd:7f:15:4a:10:26: 2e:35:1b:0c:1b:1b:fa:68:80:5f:81:45:20:d6:85: 04:65:65:d6:5a:c8:85:ff:02:3b:bb:80:26:e8:f1: 93:49:12:2d:3a:14:83:84:d9:1e:26:58:73:c7:a8: a5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:94:3A:B4:7D:37:49:A7:FB:BA:FB:29:24:78:00:07:16:0F:19:DD X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:cb:f5:91:c0:35:26:29:58:08:7b:65:11:df:e3:ba:b5:79: f5:60:af:69:0f:32:f7:63:e6:1f:9c:c2:c1:50:48:bf:b7:2c: ef:c7:1f:f7:69:6a:7f:28:aa:8c:cb:3b:d4:91:65:e1:46:1f: 1b:60:b4:82:33:95:80:41:db:a6:a6:f9:b0:1f:03:b0:24:e5: bb:5e:4c:ef:f6:98:99:cb:83:48:76:4a:8d:6f:04:35:45:5b: cb:0a:1a:dd:17:bd:1c:65:1b:35:86:7f:d7:e9:98:9a:f3:5f: 0c:5e:a2:03:82:9b:6d:3b:fa:a4:6f:31:f3:2a:09:d7:e4:ad: a5:ab:04:ef:c6:26:56:b3:e2:d5:f4:f3:f1:45:c3:d7:20:6e: 05:1e:55:69:f8:f6:a2:fe:80:3e:be:e2:d4:9d:ff:bf:46:9b: 0d:ac:6c:7e:f4:1f:87:b8:f7:77:d7:31:6f:97:35:26:13:c3: f9:c8:1b:f2:ec:a2:0d:7f:9c:a7:ab:44:d6:65:94:95:48:ab: 90:f1:bf:61:d5:08:1e:83:e1:a2:52:b5:d9:ab:00:24:dc:45: 90:1e:0b:a2:c6:81:50:e6:2c:12:59:d0:7c:c2:cd:cd:c2:1e: 30:69:27:9a:0b:03:75:67:e3:92:55:8b:96:1e:85:c2:ac:b7: 7e:6b:8f:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzVUITBp+MIodn2gHcEjwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYwMzI1MjEwMTIzWhcNMjYwMzI2MjEwMTIzWjAzMTEwLwYDVQQD EyhhODk0M2FiNDdkMzc0OWE3ZmJiYWZiMjkyNDc4MDAwNzE2MGYxOWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyMkdjAd+Ope8xMR2g+rhou3vvnj qp0IHwm+oAToT0CgYoUI+O8fc4C7n4oKdzV4INodSPEH2pjT7mhZ7g/jRTf5TFJl w99QeM+rCqjMilFNfKLJ0yg+UtECwInKeV+wNnBXczpDAIQX4PiEihCTnP82c+eV EKOFhMwG962TnxeHVzFHr1deX/Uidy1Udp0C/FJGeKzgBaxBRTiewNQ/8PafiP6x KK2rfbwBbps8jV+WlZs4Mv0MIyPgtGsIBfcMUt5JrdLjHsRlaTTNfxVKECYuNRsM Gxv6aIBfgUUg1oUEZWXWWsiF/wI7u4Am6PGTSRItOhSDhNkeJlhzx6ilawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiUOrR9N0mn+7r7KSR4AAcWDxndMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMv1kcA1 JilYCHtlEd/jurV59WCvaQ8y92PmH5zCwVBIv7cs78cf92lqfyiqjMs71JFl4UYf G2C0gjOVgEHbpqb5sB8DsCTlu15M7/aYmcuDSHZKjW8ENUVbywoa3Re9HGUbNYZ/ 1+mYmvNfDF6iA4KbbTv6pG8x8yoJ1+StpasE78YmVrPi1fTz8UXD1yBuBR5Vafj2 ov6APr7i1J3/v0abDaxsfvQfh7j3d9cxb5c1JhPD+cgb8uyiDX+cp6tE1mWUlUir kPG/YdUIHoPholK12asAJNxFkB4LosaBUOYsElnQfMLNzcIeMGknmgsDdWfjklWL lh6Fwqy3fmuPeQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:25:43 2026 by rpki-client