$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: 1V9nZhFi8Ga9PjYjj3tOv1x1zFnpqBXu4jE6hgZFolc= Subject key identifier: 9C:3A:3E:93:3E:42:CD:D9:01:30:66:1B:8B:14:E1:35:70:08:A3:55 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019D273B4504BBF128C06323B02D7961C97F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 1646 Signing time: Wed 25 Mar 2026 23:01:28 +0000 Manifest this update: Wed 25 Mar 2026 23:01:28 +0000 Manifest next update: Thu 26 Mar 2026 23:01:28 +0000 Files and hashes: 1: 5izoM-ae0viPYeMa8vG_OMdcCFM.roa (hash: TwuLhMgA2SHR4gXSc9/RCEg/7dBujziBPA56lp4yzpw=) 2: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=) 3: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=) 4: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=) 5: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: IE8bTdvrQa6fQ3toz8T+aWuxOYJXe5HVYLamuxVffLs=) 6: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=) 7: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=) 8: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=) 9: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=) 10: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=) 11: qJOi4zVPIJeiBz6kzCUQLpwMngk.roa (hash: vqduf5OrqJ9boER+M0PF82VqTnPYijX9elPDZEa03wo=) 12: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=) 13: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=) 14: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:3b:45:04:bb:f1:28:c0:63:23:b0:2d:79:61:c9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Mar 25 23:01:28 2026 GMT Not After : Mar 26 23:01:28 2026 GMT Subject: CN=9c3a3e933e42cdd90130661b8b14e1357008a355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:84:5a:12:01:ef:28:bc:83:30:eb:8e:8b:ad: a9:9a:3c:83:cf:32:37:00:85:72:8c:8b:b8:38:cd: 72:18:eb:24:dd:b5:6e:87:5b:09:d5:f4:bb:dd:1f: f6:29:3f:71:81:f8:d5:63:5a:4a:d5:44:5f:b4:ee: 22:17:d9:1a:00:67:e8:c4:92:e6:18:84:57:5e:d3: 21:b0:8d:73:72:4d:b3:c6:5d:21:9c:28:12:a4:a0: 9e:e1:a7:2b:a4:66:be:f5:1f:48:f9:7e:b3:1e:4e: 27:bb:f6:14:da:61:1c:0d:92:53:2e:aa:50:f7:60: 64:c7:aa:db:ae:fe:d7:d5:31:81:8e:80:9f:b5:da: 90:f1:43:34:2f:0a:da:21:6f:c0:75:15:e3:ca:c0: b1:9e:f0:6e:c6:2f:8a:dc:6f:43:83:1b:e3:6d:fd: 2a:2a:ea:bc:65:1c:b0:9c:f1:94:87:4f:a6:57:1d: 4a:dd:2d:2e:87:cf:58:46:25:06:68:0d:50:69:99: e4:4b:0f:94:23:da:1a:dc:f1:4f:6f:54:74:bd:d9: d5:e9:6a:d3:b1:2e:bb:99:7b:10:8b:66:f8:b0:04: 68:7e:29:d7:b4:39:d7:c0:6b:cc:3f:3d:69:31:15: c2:86:46:92:1c:27:4a:8b:04:0c:d8:e4:0c:6e:b7: 0a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3A:3E:93:3E:42:CD:D9:01:30:66:1B:8B:14:E1:35:70:08:A3:55 X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:da:d3:06:5d:1f:dd:71:f1:c6:23:66:a2:a0:56:24:1f:7b: a8:08:8b:67:e1:0e:70:6a:de:4a:7b:1e:f6:7f:f2:ca:6f:d2: be:88:5b:4b:fe:ce:63:1d:2d:8a:fa:22:2c:9a:0c:20:38:97: 28:62:79:e0:a7:51:4d:28:ee:2f:e3:28:c9:84:85:90:43:5f: 70:f9:e4:75:fe:ba:2c:17:f3:0e:92:36:65:af:d5:4e:2d:50: 1e:34:d0:13:92:66:cb:bd:a2:9b:39:e5:e5:ed:86:62:47:c0: 0d:29:61:c0:9d:5b:63:14:0c:5a:0a:50:55:bf:e2:c0:75:a8: d4:35:ba:dd:04:b6:42:1c:62:87:f4:32:c4:41:07:2d:5c:bf: b9:c9:50:9b:b0:34:15:e2:46:f5:20:a3:3c:b3:56:18:66:9d: 58:83:8b:7b:43:03:6a:af:e6:5d:0f:27:8d:55:b8:27:70:6b: a2:19:7a:ba:4b:7e:10:89:20:62:7a:58:dc:33:e8:b3:e5:a4: 92:6c:b9:f5:51:de:f1:97:51:53:db:8e:c3:91:bc:d8:84:0f: a2:c8:50:e6:81:db:35:df:42:c8:24:be:7b:c9:f4:f2:ba:8c: f0:c1:67:18:9a:45:0a:05:ee:c8:f4:98:87:c5:39:f0:b1:1e: 7f:3c:a2:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nO0UEu/EowGMjsC15Ycl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYwMzI1MjMwMTI4WhcNMjYwMzI2MjMwMTI4WjAzMTEwLwYDVQQD Eyg5YzNhM2U5MzNlNDJjZGQ5MDEzMDY2MWI4YjE0ZTEzNTcwMDhhMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYRaEgHvKLyDMOuOi62pmjyDzzI3 AIVyjIu4OM1yGOsk3bVuh1sJ1fS73R/2KT9xgfjVY1pK1URftO4iF9kaAGfoxJLm GIRXXtMhsI1zck2zxl0hnCgSpKCe4acrpGa+9R9I+X6zHk4nu/YU2mEcDZJTLqpQ 92Bkx6rbrv7X1TGBjoCftdqQ8UM0LwraIW/AdRXjysCxnvBuxi+K3G9Dgxvjbf0q Kuq8ZRywnPGUh0+mVx1K3S0uh89YRiUGaA1QaZnkSw+UI9oa3PFPb1R0vdnV6WrT sS67mXsQi2b4sARofinXtDnXwGvMPz1pMRXChkaSHCdKiwQM2OQMbrcKkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJw6PpM+Qs3ZATBmG4sU4TVwCKNVMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtrTBl0f 3XHxxiNmoqBWJB97qAiLZ+EOcGreSnse9n/yym/SvohbS/7OYx0tivoiLJoMIDiX KGJ54KdRTSjuL+MoyYSFkENfcPnkdf66LBfzDpI2Za/VTi1QHjTQE5Jmy72imznl 5e2GYkfADSlhwJ1bYxQMWgpQVb/iwHWo1DW63QS2Qhxih/QyxEEHLVy/uclQm7A0 FeJG9SCjPLNWGGadWIOLe0MDaq/mXQ8njVW4J3Brohl6ukt+EIkgYnpY3DPos+Wk kmy59VHe8ZdRU9uOw5G82IQPoshQ5oHbNd9CyCS+e8n08rqM8MFnGJpFCgXuyPSY h8U58LEefzyiCg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:47 2026 by rpki-client