$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: wGTgMLNQcRC1iSO2wTwTvIzJK8GO9SP4UGbdInPDdbg= Subject key identifier: EB:96:30:59:B6:5F:AE:B1:29:C0:EC:D5:F1:B9:3B:FF:B2:A9:C8:BB Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 019D27A93925C0EDACFF37CF9128E42D4696 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 1941 Signing time: Thu 26 Mar 2026 01:01:34 +0000 Manifest this update: Thu 26 Mar 2026 01:01:34 +0000 Manifest next update: Fri 27 Mar 2026 01:01:34 +0000 Files and hashes: 1: 096oU7e0E8HrowP4gJPAu4Yvq7w.roa (hash: h6GJyY7se9YHyBgaTMbTYiFCIPloa8qIM1tvJFasblQ=) 2: 7urEzTsKBLxb5onYBj-aFpyop_U.roa (hash: gb459gbapFxHlbK0J2K7Bvt5uguuHwVrigvvlQxP67E=) 3: MKYrJvGzvZyRvU-YTMKw33sMjbA.roa (hash: zitB1QIdSvuwxE4jXL1s8PUZB8yK6i+xpiMCf2djBrI=) 4: MxcZV9q1XM_oLFPhwS7xTgduXcs.roa (hash: lUq9YnS1Sc7e3dppUauYyDheGtMUtzY+2WuoDWvRh1k=) 5: PF5StOvcjBtJpPkWMQC42y_-7lw.roa (hash: +5ZUq1SbcccJBEuKBRND5IHUBd0bwJSPmUEVlNBAa5I=) 6: Pk0nYBXMibYGfeTa8KuAnDZqEJA.roa (hash: hjjTFQRkGi+Q5QO7W0JHJgrLPllKcASVVsrIkHritU0=) 7: ZJLt7POKZb1uMo9kyCZ6eG8ici4.roa (hash: AgrxkrjW/vgoXia62oCp0Iw4X5ZMm2I6pPHuq3Oszqo=) 8: nAG5lZSxj6V-wheZnmYE_Q6WWfU.roa (hash: tMCGq6CAVBv6m8gzjuzDgfNy/wvlZB8HIzsnhiNlqsg=) 9: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: wZqeN6Xak/bl3na4C4BhAGRF14uGul5aMgfPL14MxbQ=) 10: y4_D6Qio_R6p7o2KXWCnWybEys0.roa (hash: mUX1ZbSigKnFsHWLnR+/SQCMcTKlzqfR36hp2kv3WSg=) 11: zoz2o6V8v-pZ3rm_TVWUy2Mtt38.roa (hash: /e9GDLeuGl688HzU36fMz9iRnDyyAkt0kfM3UnT5a8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:a9:39:25:c0:ed:ac:ff:37:cf:91:28:e4:2d:46:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Mar 26 01:01:34 2026 GMT Not After : Mar 27 01:01:34 2026 GMT Subject: CN=eb963059b65faeb129c0ecd5f1b93bffb2a9c8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:30:1b:86:68:81:e1:b5:90:af:c4:1b:b0:a2: 31:13:a5:e3:02:9c:03:a0:0e:5c:8b:b3:e5:b1:9e: a3:0c:eb:85:d4:23:a7:b4:f4:dd:ed:e1:1b:22:2c: 74:ea:20:15:c2:0b:04:7b:ea:08:37:14:a3:45:7f: a7:d0:ff:2c:09:cd:d3:02:93:83:72:d2:64:bc:10: 64:7e:b0:df:80:32:6b:d7:88:07:b9:a2:51:e8:3f: a6:5e:4d:21:33:a2:8b:cc:f8:1b:1c:6d:2d:3e:69: eb:24:6f:6d:4f:46:48:57:00:35:39:30:3b:72:72: 4f:32:a6:0f:a2:62:77:94:27:ec:60:5a:e3:80:99: 3b:4b:06:d9:e7:08:0f:a9:f1:c2:79:65:cf:85:49: c3:c0:c4:cc:fd:4c:a8:95:57:6e:bf:b6:8f:63:c3: 75:9b:39:5a:be:7c:78:f8:ac:50:cc:07:13:30:08: 56:37:6e:b0:99:49:ee:0d:04:0a:01:2d:82:eb:1c: 05:ba:12:18:a5:24:5f:ab:dc:7b:23:62:b4:f5:e6: 35:1f:af:cf:74:df:2f:b4:2d:7e:ad:ce:25:4d:53: 69:46:0f:67:33:7b:80:40:37:89:18:86:71:40:a4: f3:b4:40:ca:d7:f2:e3:af:75:bf:dc:5f:e7:e5:1c: 23:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:96:30:59:B6:5F:AE:B1:29:C0:EC:D5:F1:B9:3B:FF:B2:A9:C8:BB X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:83:23:76:94:fe:ae:bf:33:92:5a:d9:cc:7a:db:33:46:0c: cd:ee:5f:5f:0a:f6:f5:2c:43:a9:b9:6f:f3:fe:73:a0:77:cc: 40:e1:a8:ed:16:e1:c7:78:44:fb:6e:ec:00:51:cc:3d:99:5b: 13:64:22:ec:08:96:0a:59:b4:af:64:59:ac:68:89:da:77:0c: da:1f:25:eb:b1:56:ae:2d:91:43:d9:9a:9d:8a:8e:63:4b:36: 33:25:b2:29:d1:40:f1:8d:25:91:e2:d2:b1:dd:55:c3:e3:59: b1:1f:9e:be:05:28:d9:10:d4:8a:28:90:8d:69:8f:fa:67:e2: 7c:b5:74:13:da:49:20:08:7a:73:fb:a7:b1:61:f3:25:8b:ae: 48:cd:8d:20:b8:58:00:eb:2d:47:47:40:2b:71:aa:c0:56:33: 8e:0a:e1:93:82:a7:3c:bd:df:e6:05:1d:6d:95:08:60:f6:b9: 94:45:55:14:3b:0d:66:dc:2f:4b:23:89:08:12:bc:6d:67:25: 6c:06:5a:2e:a2:c8:ae:ca:38:89:ee:9f:81:f7:3c:ae:ce:08: fc:aa:23:99:70:0a:9e:19:f3:41:ad:50:5b:15:aa:8f:df:99: ee:b3:e5:3c:a6:51:af:2a:2a:7f:20:3d:93:8b:b4:31:a4:f6: be:a5:a7:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nqTklwO2s/zfPkSjkLUaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjYwMzI2MDEwMTM0WhcNMjYwMzI3MDEwMTM0WjAzMTEwLwYDVQQD EyhlYjk2MzA1OWI2NWZhZWIxMjljMGVjZDVmMWI5M2JmZmIyYTljOGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTAbhmiB4bWQr8QbsKIxE6XjApwD oA5ci7PlsZ6jDOuF1COntPTd7eEbIix06iAVwgsEe+oINxSjRX+n0P8sCc3TApOD ctJkvBBkfrDfgDJr14gHuaJR6D+mXk0hM6KLzPgbHG0tPmnrJG9tT0ZIVwA1OTA7 cnJPMqYPomJ3lCfsYFrjgJk7SwbZ5wgPqfHCeWXPhUnDwMTM/UyolVduv7aPY8N1 mzlavnx4+KxQzAcTMAhWN26wmUnuDQQKAS2C6xwFuhIYpSRfq9x7I2K09eY1H6/P dN8vtC1+rc4lTVNpRg9nM3uAQDeJGIZxQKTztEDK1/Ljr3W/3F/n5RwjwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuWMFm2X66xKcDs1fG5O/+yqci7MB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYMjdpT+ rr8zklrZzHrbM0YMze5fXwr29SxDqblv8/5zoHfMQOGo7Rbhx3hE+27sAFHMPZlb E2Qi7AiWClm0r2RZrGiJ2ncM2h8l67FWri2RQ9manYqOY0s2MyWyKdFA8Y0lkeLS sd1Vw+NZsR+evgUo2RDUiiiQjWmP+mfifLV0E9pJIAh6c/unsWHzJYuuSM2NILhY AOstR0dAK3GqwFYzjgrhk4KnPL3f5gUdbZUIYPa5lEVVFDsNZtwvSyOJCBK8bWcl bAZaLqLIrso4ie6fgfc8rs4I/KojmXAKnhnzQa1QWxWqj9+Z7rPlPKZRryoqfyA9 k4u0MaT2vqWnlg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:30:45 2026 by rpki-client