$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: 5hKapHBIG2X2ku8h6i2OEm2pPJSFrjEhZeUQQXoPl34= Subject key identifier: 73:7B:86:10:20:D8:B5:39:C0:EA:6E:C0:DD:A5:B6:D1:F1:A8:67:F0 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019D27DF655B465F26DB76C6A39D45152502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 188F Signing time: Thu 26 Mar 2026 02:00:44 +0000 Manifest this update: Thu 26 Mar 2026 02:00:44 +0000 Manifest next update: Fri 27 Mar 2026 02:00:44 +0000 Files and hashes: 1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=) 2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: tSFwbZstIWTh/Jd1m/pn3vw93i+sLcq3I6evvuLTqck=) 3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=) 4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=) 5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=) 6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=) 7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=) 8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=) 9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=) 10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=) 11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=) 12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=) 13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:df:65:5b:46:5f:26:db:76:c6:a3:9d:45:15:25:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Mar 26 02:00:44 2026 GMT Not After : Mar 27 02:00:44 2026 GMT Subject: CN=737b861020d8b539c0ea6ec0dda5b6d1f1a867f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:bb:f2:9f:35:48:94:88:52:92:4a:34:4d: 5e:d7:14:6b:78:57:c6:0c:00:76:b1:ab:0f:2b:f7: 30:8e:68:4d:fb:c0:78:8c:01:37:ad:84:ba:2f:2b: ab:6d:8c:4f:02:df:74:06:e0:1c:dd:ae:29:2a:6e: 67:eb:19:f8:c5:b6:0a:7b:22:9a:f6:a4:dc:e4:28: f2:5d:ce:a5:55:9a:aa:3b:0c:f8:d7:d4:50:45:70: 38:73:60:03:95:8b:ae:94:33:7c:7a:ca:47:55:c2: a9:ce:30:44:80:85:f5:0e:ce:9d:71:42:97:a8:a4: 79:12:61:53:1d:a4:31:fd:46:9d:78:82:af:35:ed: cb:7f:d0:6a:95:bf:8c:94:36:6b:08:b9:10:e6:44: 61:70:61:80:83:30:93:20:55:50:09:4b:eb:38:9f: 64:e4:ad:05:7a:c7:88:85:55:d4:57:7b:c3:ce:54: 11:61:98:3e:ec:2e:1e:18:0b:a8:0f:11:0a:14:6d: b0:7a:e7:b0:be:9e:1e:3f:df:c6:77:7e:63:bd:94: 06:42:74:48:c2:ec:cf:af:79:97:de:ad:82:63:5a: 31:d7:f8:99:b5:15:a4:d7:7b:f8:5e:dc:ef:7f:6e: 9e:75:0d:c9:79:e1:63:27:00:a2:2a:58:37:4b:ad: 4f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7B:86:10:20:D8:B5:39:C0:EA:6E:C0:DD:A5:B6:D1:F1:A8:67:F0 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5d:9f:af:a8:4e:24:03:e1:98:6f:0d:af:3f:7b:69:a9:08: 0e:63:ea:e3:09:31:3e:f0:9d:f9:8b:b6:3a:a4:f4:ac:4a:6a: af:08:70:ec:87:b0:9f:41:fe:4d:1b:25:2e:e6:ec:90:4b:a0: b4:5d:0f:8b:fe:2c:af:98:dd:83:f9:85:7e:cd:2e:cb:72:db: 77:d3:e9:93:d6:a4:ff:c7:16:48:4c:d3:76:df:41:eb:cd:9d: 2d:84:1c:bf:ba:1d:39:74:fd:a1:09:81:76:33:33:f8:c5:aa: bd:64:e7:1f:d9:63:43:72:c3:bf:1c:3d:e6:93:6a:45:91:62: 79:cd:ab:d8:1f:3f:9a:f0:58:63:2b:87:e9:dd:1d:24:83:9f: d8:5a:7f:6b:11:bb:38:d1:a8:b4:4b:e3:8d:64:23:0b:a4:fb: 74:c3:54:7c:30:e1:b3:28:a2:ef:ff:02:06:e1:72:d3:fb:1f: d0:fa:d7:fd:93:07:7f:f8:1f:4d:94:fc:fd:d2:37:19:3b:3c: 94:6d:63:3b:73:dc:55:eb:93:fb:1d:d3:48:50:1c:fd:78:77: 20:53:93:be:02:1e:21:20:0a:be:93:af:e0:2a:93:70:fe:a2: e5:95:c2:7f:54:f8:7a:ba:69:1a:ae:89:b7:7a:21:2a:3a:39: dc:a4:54:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n32VbRl8m23bGo51FFSUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwMzI2MDIwMDQ0WhcNMjYwMzI3MDIwMDQ0WjAzMTEwLwYDVQQD Eyg3MzdiODYxMDIwZDhiNTM5YzBlYTZlYzBkZGE1YjZkMWYxYTg2N2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAway78p81SJSIUpJKNE1e1xRreFfG DAB2sasPK/cwjmhN+8B4jAE3rYS6LyurbYxPAt90BuAc3a4pKm5n6xn4xbYKeyKa 9qTc5CjyXc6lVZqqOwz419RQRXA4c2ADlYuulDN8espHVcKpzjBEgIX1Ds6dcUKX qKR5EmFTHaQx/UadeIKvNe3Lf9Bqlb+MlDZrCLkQ5kRhcGGAgzCTIFVQCUvrOJ9k 5K0FeseIhVXUV3vDzlQRYZg+7C4eGAuoDxEKFG2weuewvp4eP9/Gd35jvZQGQnRI wuzPr3mX3q2CY1ox1/iZtRWk13v4Xtzvf26edQ3JeeFjJwCiKlg3S61PDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHN7hhAg2LU5wOpuwN2lttHxqGfwMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAll2fr6hO JAPhmG8Nrz97aakIDmPq4wkxPvCd+Yu2OqT0rEpqrwhw7Iewn0H+TRslLubskEug tF0Pi/4sr5jdg/mFfs0uy3Lbd9Ppk9ak/8cWSEzTdt9B682dLYQcv7odOXT9oQmB djMz+MWqvWTnH9ljQ3LDvxw95pNqRZFiec2r2B8/mvBYYyuH6d0dJIOf2Fp/axG7 ONGotEvjjWQjC6T7dMNUfDDhsyii7/8CBuFy0/sf0PrX/ZMHf/gfTZT8/dI3GTs8 lG1jO3PcVeuT+x3TSFAc/Xh3IFOTvgIeISAKvpOv4CqTcP6i5ZXCf1T4erppGq6J t3ohKjo53KRU3Q== -----END CERTIFICATE-----Generated at Thu Mar 26 07:02:20 2026 by rpki-client