$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: QvuLPqfagmbRn/g9NjsjJQdw5Ybdv87fp32QiqsOkuk= Subject key identifier: AA:ED:FB:68:DC:98:02:C6:1E:02:A0:01:C3:12:0C:CD:10:FC:08:2D Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019D27E0883EA1BDC5778698CDE6A240E70C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 13B4 Signing time: Thu 26 Mar 2026 02:01:59 +0000 Manifest this update: Thu 26 Mar 2026 02:01:59 +0000 Manifest next update: Fri 27 Mar 2026 02:01:59 +0000 Files and hashes: 1: 604DVjW89FcTF-J3OlDY0xygtP0.roa (hash: DEfDKsdOogNIkUL8SOV8s+auFLI8n9dOB4Wep4bTTqg=) 2: 8Lu4DZzB_vxfnH6NwGiNXO689Ug.roa (hash: rEMwOO6lSnO1YlEyeJow58wL/2TfCKPn4IBjRuIkc0Y=) 3: 8lPmNR8kC5qE5Lxt_zKmkqCnA_M.roa (hash: Ik4QED5F6sI3OJklEdpUYZ0TKdybSr6g6ZurSavfP2U=) 4: EIJhIjJtEMnHVUQ212bTckjgB0I.roa (hash: EybXD780CwAqGIpHjiQwUZRlhbfLzk1+eybY/uGp/io=) 5: G25W8rWynHVqOw08BsNDQCX7r4k.roa (hash: lP+BuX9RXuXg15DfmgethXUeCq5zgrMORumyH2g7dwI=) 6: LDiAx4mH-l2McqHvkuEwEg3VQmo.roa (hash: hHjSOBQ7GK7UhrCnhltMggAjTsVyGTTWQh8ZK+1z/d8=) 7: RZ7OjE_uz9kQm_N05glcQaVKBCI.roa (hash: FZSwjKnEe/WNTvIFtlBH2t2jJQlqscx5RYqxrilnkJM=) 8: Wt9ypheec9GpOk_86DTL3w6D2tk.roa (hash: aRWLUqX5vTU61VSd9AOD3yJeqO5wgKqFkxtzxw3VLKA=) 9: b1C5tQPSDgyOYMEa2vtiHCVTu3w.roa (hash: m+CwEMaGPey4t5aVnMPNBJGIOj9PYMcxJas6I4mb38c=) 10: ci2RBJP7wBZT9607Ek93x3v-DJg.roa (hash: rQsPZOnMLyTQdUIKObokqHCmODTdjtz2irzXClA4KLY=) 11: ezjdknW8yKvW_oPzf0czr_SHPos.roa (hash: Ke5tCHtNlbJY4VFVoI0K+8QDexK6VL6V1j/4AYy554g=) 12: jU4Lr0RWqeKwbtj_mpkI_cSuuKQ.roa (hash: yPSwJ7BnVd6OtmjXkcMdWkJgliiWudINiSFU9FCJQiQ=) 13: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: GcGWD2++V7N7rN2HMRaKJNzk23fXpehEOkp3hu8VWVE=) 14: xeKu-YZxEc8ydQI0uzpgttKRF9s.roa (hash: OIvXQcQeayjejLI4847MVkofRUX3vV1PuAUvz7Z84Jc=) 15: yYo92JwdAK0Yb36h4od0SkR-8PQ.roa (hash: UkVRpXuv1yNCqqHU2bi8PbnwrwXCTcNm+/wk+zbOQNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:e0:88:3e:a1:bd:c5:77:86:98:cd:e6:a2:40:e7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Mar 26 02:01:59 2026 GMT Not After : Mar 27 02:01:59 2026 GMT Subject: CN=aaedfb68dc9802c61e02a001c3120ccd10fc082d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8d:f8:89:a4:d5:bb:06:d5:a1:75:a6:25:2a: ce:0d:2d:62:4c:72:18:9f:fb:3e:f9:4d:07:00:07: e7:cd:40:35:a5:f4:b2:73:7c:57:46:7a:a2:9d:06: 81:5f:1c:df:69:4f:a9:dc:ae:6d:22:9d:2b:60:10: ec:ab:dc:6e:c3:fe:c6:f6:30:e5:d0:14:da:d2:cf: c1:64:7a:19:a6:9e:c6:3c:2c:e7:bd:d2:09:ab:99: c6:26:ff:0f:08:ac:94:35:1b:0b:9f:f0:8e:18:0f: c0:5a:41:73:6b:db:d4:70:d7:4c:3f:79:b6:c6:2f: 4f:4d:2b:42:1f:28:3c:90:cd:f3:1d:7a:07:fd:bc: a0:f6:56:ee:18:3c:43:91:97:51:4c:13:7d:a8:15: f2:a1:75:86:e6:4a:0e:b7:35:23:32:92:b3:7e:e8: 80:7b:e6:63:b3:64:21:1f:d8:08:a0:0b:d9:4e:7a: a8:65:9b:c1:5e:3a:04:c3:a0:99:6d:10:ff:fa:87: 34:9c:83:31:14:f2:b4:f5:9e:26:d5:b6:c6:b0:e2: 48:e0:d5:42:f3:67:d3:8a:c3:1a:77:9f:e0:55:a0: 51:c0:07:69:ef:0d:d6:ee:e7:a3:ad:d6:24:ba:0c: c8:8a:69:c0:b2:ee:b2:13:bf:ed:b1:a8:7b:2d:e7: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:FB:68:DC:98:02:C6:1E:02:A0:01:C3:12:0C:CD:10:FC:08:2D X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:46:81:ae:42:be:97:a9:9c:3b:63:bc:e0:4a:f8:e4:23:6c: 53:47:78:c2:54:73:7a:69:27:51:6f:7e:c9:78:b6:73:66:69: 7f:9c:9c:d8:16:61:18:bd:97:1f:66:51:a4:28:25:aa:1a:98: 4e:45:4d:06:66:3c:66:a2:1e:be:c9:1a:ba:26:56:87:1d:2f: 0e:75:48:e5:c2:e9:41:53:43:b1:b6:fe:a3:95:a7:41:13:07: 4f:03:0c:ac:18:8f:57:53:a9:d3:01:b9:bd:2b:69:e0:b1:08: 39:a6:7c:38:9b:c8:db:ed:8a:b2:c8:6d:a3:ac:bf:ea:5b:fe: 3e:f0:46:1c:53:70:c8:1c:c3:38:89:38:6d:75:47:fe:e2:4b: 6e:a5:46:86:d2:81:3e:f8:bb:28:69:5e:38:45:2e:46:69:d3: 65:f4:19:4b:19:67:b7:81:ee:35:ce:6f:f5:47:52:b0:38:a1: e6:6c:0f:e6:50:ce:a8:c1:c9:71:bb:51:43:1c:b7:17:74:06: 80:7b:d2:c4:ae:85:20:7f:8f:6c:1e:77:12:b6:ff:a0:56:44: 4f:4a:95:0f:ca:10:34:a2:ea:15:64:30:bf:f9:4c:d5:90:c7: d7:e4:be:8f:c8:c3:78:ec:e8:0a:fa:67:d4:9d:14:16:99:36: cf:15:07:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n4Ig+ob3Fd4aYzeaiQOcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjYwMzI2MDIwMTU5WhcNMjYwMzI3MDIwMTU5WjAzMTEwLwYDVQQD EyhhYWVkZmI2OGRjOTgwMmM2MWUwMmEwMDFjMzEyMGNjZDEwZmMwODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1434iaTVuwbVoXWmJSrODS1iTHIY n/s++U0HAAfnzUA1pfSyc3xXRnqinQaBXxzfaU+p3K5tIp0rYBDsq9xuw/7G9jDl 0BTa0s/BZHoZpp7GPCznvdIJq5nGJv8PCKyUNRsLn/COGA/AWkFza9vUcNdMP3m2 xi9PTStCHyg8kM3zHXoH/byg9lbuGDxDkZdRTBN9qBXyoXWG5koOtzUjMpKzfuiA e+Zjs2QhH9gIoAvZTnqoZZvBXjoEw6CZbRD/+oc0nIMxFPK09Z4m1bbGsOJI4NVC 82fTisMad5/gVaBRwAdp7w3W7uejrdYkugzIimnAsu6yE7/tsah7LeewqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrt+2jcmALGHgKgAcMSDM0Q/AgtMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkaBrkK+ l6mcO2O84Er45CNsU0d4wlRzemknUW9+yXi2c2Zpf5yc2BZhGL2XH2ZRpCglqhqY TkVNBmY8ZqIevskauiZWhx0vDnVI5cLpQVNDsbb+o5WnQRMHTwMMrBiPV1Op0wG5 vStp4LEIOaZ8OJvI2+2Ksshto6y/6lv+PvBGHFNwyBzDOIk4bXVH/uJLbqVGhtKB Pvi7KGleOEUuRmnTZfQZSxlnt4HuNc5v9UdSsDih5mwP5lDOqMHJcbtRQxy3F3QG gHvSxK6FIH+PbB53Erb/oFZET0qVD8oQNKLqFWQwv/lM1ZDH1+S+j8jDeOzoCvpn 1J0UFpk2zxUH0A== -----END CERTIFICATE-----Generated at Thu Mar 26 11:40:02 2026 by rpki-client