$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: 9NbgjsmSiMkQUy0S8ik91pPUl/Wfe7zUm3n6nZZ6PCE= Subject key identifier: FD:4E:F0:03:7C:D9:BA:31:8B:FA:82:7D:FD:AC:A2:57:1F:59:32:3C Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019D28BBB2FA7F6CC5F15F7F6FD5135920D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 1255 Signing time: Thu 26 Mar 2026 06:01:22 +0000 Manifest this update: Thu 26 Mar 2026 06:01:22 +0000 Manifest next update: Fri 27 Mar 2026 06:01:22 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: vVdE3nP7sIa7S4Pxr1+DkYjn+xiE3qgFG6ygx0gFXyE=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:bb:b2:fa:7f:6c:c5:f1:5f:7f:6f:d5:13:59:20:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Mar 26 06:01:22 2026 GMT Not After : Mar 27 06:01:22 2026 GMT Subject: CN=fd4ef0037cd9ba318bfa827dfdaca2571f59323c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:8e:71:a6:b3:92:7d:4f:a6:98:7b:0d:6f: ac:b8:cc:c5:8f:d3:b6:b5:c9:07:79:db:59:a0:db: a8:43:04:7a:2a:5e:ea:69:69:86:5c:63:b9:dc:9e: 18:f3:4d:73:c2:d0:d2:b2:7c:54:c2:13:a1:94:54: 5b:12:d0:96:d2:37:b4:c0:65:0a:ec:60:8e:84:a9: 97:76:c7:f5:63:a4:db:19:93:eb:3f:fb:f6:82:b2: 79:d6:b9:73:8a:f3:11:bd:28:e6:61:d8:ad:ea:24: 89:d0:a5:fb:35:92:13:5a:bf:53:bb:94:72:2f:36: fe:bc:4d:c3:fd:20:8b:6d:2f:72:6f:df:93:61:3f: c8:33:e0:c9:72:8f:27:fa:f9:a7:c2:9a:14:ee:bb: 81:9a:c5:7d:a9:4f:0c:be:eb:d5:e6:a5:be:70:b8: ba:cc:c6:f1:d0:6e:9f:21:fa:85:91:69:61:37:67: d6:f4:f3:7f:19:ad:0e:68:0e:14:2d:40:70:e9:e2: 8d:8d:f4:63:e1:02:7f:57:61:e7:22:7a:61:37:b6: 3a:c1:5c:7d:9e:20:60:89:86:f1:31:e6:b8:7f:ff: ae:7c:a3:4f:fd:75:2a:ba:56:69:89:17:66:48:08: 1e:9b:6d:a9:5d:3e:a2:55:d6:5b:3b:c7:ec:ca:ac: fe:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4E:F0:03:7C:D9:BA:31:8B:FA:82:7D:FD:AC:A2:57:1F:59:32:3C X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:db:d9:06:be:cb:92:60:d0:87:fa:1b:0c:a0:5d:ae:81:a4: 1f:ef:07:d4:3e:e0:56:60:19:10:89:0f:9e:0b:58:9a:94:3f: 36:f1:6a:e7:54:83:e6:25:2e:14:75:31:0e:02:be:0a:34:ea: e0:7d:5d:66:65:e9:1d:0e:c3:e5:6c:94:90:27:b9:e0:20:ce: 20:ca:2a:3d:26:55:d8:d1:59:7d:ab:85:2f:a3:6c:54:76:c5: d5:f9:ac:55:94:a3:62:58:b0:ec:7b:ca:dc:9b:0e:71:1f:cf: ad:9e:da:77:b2:de:27:50:fe:51:42:59:36:c3:15:a0:f0:9d: d6:97:d4:77:86:7e:1a:b9:fc:f2:47:8d:76:90:30:37:ce:42: 98:78:d3:91:8d:f7:6a:5c:5a:2d:62:17:13:82:ca:aa:fe:43: 7f:3e:e4:be:87:fa:0e:d3:5a:69:3b:23:b8:43:65:84:7a:86: ff:d8:ad:8e:75:98:58:e4:12:91:0d:8d:68:63:b4:61:c5:b2: 0d:1f:6e:a2:e1:8f:f0:61:79:5f:d0:6f:8d:07:6a:d9:49:bb: c4:73:14:2f:5e:b3:65:e2:77:34:90:0f:a3:42:18:f1:10:78: 5b:80:a9:48:c8:49:33:0d:3f:97:f4:df:c1:88:72:16:bc:75: 00:77:69:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ou7L6f2zF8V9/b9UTWSDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwMzI2MDYwMTIyWhcNMjYwMzI3MDYwMTIyWjAzMTEwLwYDVQQD EyhmZDRlZjAwMzdjZDliYTMxOGJmYTgyN2RmZGFjYTI1NzFmNTkzMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ViOcaazkn1Ppph7DW+suMzFj9O2 tckHedtZoNuoQwR6Kl7qaWmGXGO53J4Y801zwtDSsnxUwhOhlFRbEtCW0je0wGUK 7GCOhKmXdsf1Y6TbGZPrP/v2grJ51rlzivMRvSjmYdit6iSJ0KX7NZITWr9Tu5Ry Lzb+vE3D/SCLbS9yb9+TYT/IM+DJco8n+vmnwpoU7ruBmsV9qU8MvuvV5qW+cLi6 zMbx0G6fIfqFkWlhN2fW9PN/Ga0OaA4ULUBw6eKNjfRj4QJ/V2HnInphN7Y6wVx9 niBgiYbxMea4f/+ufKNP/XUqulZpiRdmSAgem22pXT6iVdZbO8fsyqz+IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1O8AN82boxi/qCff2solcfWTI8MB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6dvZBr7L kmDQh/obDKBdroGkH+8H1D7gVmAZEIkPngtYmpQ/NvFq51SD5iUuFHUxDgK+CjTq 4H1dZmXpHQ7D5WyUkCe54CDOIMoqPSZV2NFZfauFL6NsVHbF1fmsVZSjYliw7HvK 3JsOcR/PrZ7ad7LeJ1D+UUJZNsMVoPCd1pfUd4Z+Grn88keNdpAwN85CmHjTkY33 alxaLWIXE4LKqv5Dfz7kvof6DtNaaTsjuENlhHqG/9itjnWYWOQSkQ2NaGO0YcWy DR9uouGP8GF5X9BvjQdq2Um7xHMUL16zZeJ3NJAPo0IY8RB4W4CpSMhJMw0/l/Tf wYhyFrx1AHdpfQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:40 2026 by rpki-client