$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: 2314y+oOFQYLdpKpSubSi4HrGeH8pQ1uwj0NtbA7JV4= Subject key identifier: 98:E2:13:A8:28:B0:2A:4B:2F:45:6B:03:6E:5C:A6:25:49:D7:41:0B Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019D26CD32784CAB3CD311AAFFC454A5E112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 18B4 Signing time: Wed 25 Mar 2026 21:01:15 +0000 Manifest this update: Wed 25 Mar 2026 21:01:15 +0000 Manifest next update: Thu 26 Mar 2026 21:01:15 +0000 Files and hashes: 1: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: jzuN4iLoJgcED8hUlZDGi8k4duhwS0XDCQQBKYgW9po=) 2: 6wXcfaNHNIKPsPI9yxLfZE8Q_jQ.roa (hash: ECXhCTN51hl1ngcmROyprePwXkJAyAbxEBIgymRFGBA=) 3: 9Y15TiSyn2wNGdw4h-rBMbyFaAc.roa (hash: 72P6b2id8MZPAK23i1WaqWGaegThFlPqZ6DtT05Xwkc=) 4: 9qGo67yr4HRrxBkAO69NOfH1xyM.roa (hash: 9kV8qye+hDokGEdQvc6wx6xFhzWb+QDG85qAmFrrRNc=) 5: HBS5CYoNWOXobGPomOlaeFTG4h8.roa (hash: D7vH7TbSVaq4pp/oo4dyUnQisHAJ6z4gW2NLDiuh3AQ=) 6: IHMW0iOLCaPimXteCXKckZiuXok.roa (hash: eKTeqM0561BoLTc+G0Vfml+zBr4iHbl5NUyAYC+RQzM=) 7: TBEAu5KKSTnnuwJ2g_Z91zWbXKA.roa (hash: smnw3toc9NIJXiN4piIx54U4f4Mbs+Yue06OIF7Ed2g=) 8: ZAW9hLoDnVp80PJK59uzMqseMQg.roa (hash: zROFGa57szBUE/hPHlcNo31U/nC8cbg/ehhEeCGDUB4=) 9: fAkVmSuP4C8Tt3ysLgXTuPqL4JM.roa (hash: new7s/Zw+Z3LxE1g27Tl/cjYXZW77+lOLNDzxaXxgPs=) 10: gi6Xytn9Iu0GHoS2bz8-D2_xuYw.roa (hash: zRXOYl9PkTzrkMP8UCwOsXf5eAi2L1/FabDUe5aeP6I=) 11: nLhpxF_vYMtPztaP2Ob2bwrsO-c.roa (hash: X8qVQYMo7q02YZkTCY5KKMS/PXISC65xUOcTfDXBI/8=) 12: r9Onf1Z5MTGo6HQvvK-yrmEpNLw.roa (hash: MdZ3nuj2R7EYy2YZK3WtRbRVVeyc+IpvGV7gP3oPGfI=) 13: udGl8isNJxExRSIhiZ2jjvucC5s.roa (hash: 46OQaBoVhzlHfO3MZlMA5GIChgYIIijufkFgTDDBkM8=) 14: xR-uNlcwaXq95_WLOZVSHPtWfsg.roa (hash: wbICW+uS9aypVREci9aQAEMY15M6aAuzi/Y5YFPee8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:32:78:4c:ab:3c:d3:11:aa:ff:c4:54:a5:e1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Mar 25 21:01:15 2026 GMT Not After : Mar 26 21:01:15 2026 GMT Subject: CN=98e213a828b02a4b2f456b036e5ca62549d7410b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:0c:cb:48:85:d5:40:65:62:9c:2b:11:5b: d2:72:ca:8c:b0:d5:e5:ec:d4:4f:e0:75:09:ab:16: d4:df:47:55:43:64:e9:21:04:8d:50:f3:92:c4:1a: b6:51:df:b6:d4:53:46:83:4a:6a:44:f1:77:ef:47: 40:a7:d9:88:ce:6a:df:11:a3:a0:54:47:f2:e4:02: 9a:12:2c:21:2c:58:4e:d6:d0:d0:d0:1e:9c:12:a5: ac:18:b6:8f:98:c5:66:06:e6:5c:81:a5:0b:5d:49: 5c:a1:ca:0c:e0:f1:de:95:bd:ec:5e:0f:f1:c8:0f: 5a:18:e2:e6:12:c4:a6:25:51:2d:3c:7a:4b:65:4a: 7e:3d:fe:ed:28:eb:ec:b9:90:95:57:d9:6b:5f:24: c2:64:c1:6e:11:e4:69:32:c3:04:5c:08:ab:63:f5: 3a:66:a5:bf:a5:42:43:04:6f:98:44:8a:4c:98:8a: e1:2c:24:0e:41:42:47:1e:04:21:51:d9:6b:e9:4b: a6:bf:f0:a6:20:b6:e8:f1:82:3d:ea:80:f5:30:fa: fa:d0:20:03:37:e4:39:97:94:79:4b:07:4f:8f:ef: d2:f2:d3:01:09:95:f6:f1:48:ce:7b:67:6f:31:24: e6:04:57:cd:b0:78:fe:bf:a1:7e:81:29:96:a6:d4: 8b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E2:13:A8:28:B0:2A:4B:2F:45:6B:03:6E:5C:A6:25:49:D7:41:0B X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:4c:4e:4a:35:43:87:6a:dd:28:b3:c1:a2:bb:d6:2f:59:d1: c6:e4:14:93:d5:6a:ea:30:3d:6f:7c:fa:2e:d4:43:cd:95:87: e3:b6:4d:b5:ee:da:38:68:70:f4:12:df:17:24:2f:4a:85:97: 76:4c:e2:76:9e:8f:b0:6e:0c:9d:66:ed:c7:33:90:4c:f5:e0: 30:fd:2d:14:0c:ca:e9:6a:27:44:cc:3d:3b:53:cc:99:ba:5e: 14:9a:99:d6:ba:f1:7d:5f:f7:da:bb:48:9d:06:04:78:b7:2f: 7c:6b:0d:20:fb:4a:dc:e2:a0:3f:4e:39:83:21:74:e3:7b:4a: 8c:e5:fa:49:d7:f9:ed:bb:98:ee:f3:36:f5:a2:62:66:7d:1f: b7:d0:52:0b:99:6f:df:be:84:1e:03:b4:a8:ea:fc:40:bd:e6: 98:76:e0:6e:18:94:78:2c:a2:a6:94:a7:55:31:59:e7:42:74: df:1f:bb:65:9e:ac:1d:bb:e1:d3:ac:de:45:46:b1:ad:59:08: 8b:e4:70:1c:da:a5:e2:83:aa:2f:c8:9f:43:b6:f2:ed:f4:20: 87:2c:55:ee:b8:bd:da:4a:07:fd:fd:ea:31:38:2b:fc:c2:58: 91:e1:ae:b9:60:e7:e4:9b:84:02:e3:39:60:8c:ad:6b:4a:f9: c5:18:32:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzTJ4TKs80xGq/8RUpeESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMzI1MjEwMTE1WhcNMjYwMzI2MjEwMTE1WjAzMTEwLwYDVQQD Eyg5OGUyMTNhODI4YjAyYTRiMmY0NTZiMDM2ZTVjYTYyNTQ5ZDc0MTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4sMy0iF1UBlYpwrEVvScsqMsNXl 7NRP4HUJqxbU30dVQ2TpIQSNUPOSxBq2Ud+21FNGg0pqRPF370dAp9mIzmrfEaOg VEfy5AKaEiwhLFhO1tDQ0B6cEqWsGLaPmMVmBuZcgaULXUlcocoM4PHelb3sXg/x yA9aGOLmEsSmJVEtPHpLZUp+Pf7tKOvsuZCVV9lrXyTCZMFuEeRpMsMEXAirY/U6 ZqW/pUJDBG+YRIpMmIrhLCQOQUJHHgQhUdlr6Uumv/CmILbo8YI96oD1MPr60CAD N+Q5l5R5SwdPj+/S8tMBCZX28UjOe2dvMSTmBFfNsHj+v6F+gSmWptSLDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjiE6gosCpLL0VrA25cpiVJ10ELMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0xOSjVD h2rdKLPBorvWL1nRxuQUk9Vq6jA9b3z6LtRDzZWH47ZNte7aOGhw9BLfFyQvSoWX dkzidp6PsG4MnWbtxzOQTPXgMP0tFAzK6WonRMw9O1PMmbpeFJqZ1rrxfV/32rtI nQYEeLcvfGsNIPtK3OKgP045gyF043tKjOX6Sdf57buY7vM29aJiZn0ft9BSC5lv 376EHgO0qOr8QL3mmHbgbhiUeCyippSnVTFZ50J03x+7ZZ6sHbvh06zeRUaxrVkI i+RwHNql4oOqL8ifQ7by7fQghyxV7ri92koH/f3qMTgr/MJYkeGuuWDn5JuEAuM5 YIyta0r5xRgyIA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:54:54 2026 by rpki-client