$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: Ybo/3QdK0yByByUw7ASgl9bXnkxAEf71mzHjaARxGLg= Subject key identifier: 5E:E6:75:D7:41:5A:D4:F6:B4:C3:D2:15:71:46:98:05:C4:56:19:E8 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019D28BBD43848F6C8104157126B088C113A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 18B5 Signing time: Thu 26 Mar 2026 06:01:31 +0000 Manifest this update: Thu 26 Mar 2026 06:01:31 +0000 Manifest next update: Fri 27 Mar 2026 06:01:31 +0000 Files and hashes: 1: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: 9xPhJ8Lp8JPTOox7r6+i0A6C63nrmfqAe4mofwePMuQ=) 2: 6wXcfaNHNIKPsPI9yxLfZE8Q_jQ.roa (hash: ECXhCTN51hl1ngcmROyprePwXkJAyAbxEBIgymRFGBA=) 3: 9Y15TiSyn2wNGdw4h-rBMbyFaAc.roa (hash: 72P6b2id8MZPAK23i1WaqWGaegThFlPqZ6DtT05Xwkc=) 4: 9qGo67yr4HRrxBkAO69NOfH1xyM.roa (hash: 9kV8qye+hDokGEdQvc6wx6xFhzWb+QDG85qAmFrrRNc=) 5: HBS5CYoNWOXobGPomOlaeFTG4h8.roa (hash: D7vH7TbSVaq4pp/oo4dyUnQisHAJ6z4gW2NLDiuh3AQ=) 6: IHMW0iOLCaPimXteCXKckZiuXok.roa (hash: eKTeqM0561BoLTc+G0Vfml+zBr4iHbl5NUyAYC+RQzM=) 7: TBEAu5KKSTnnuwJ2g_Z91zWbXKA.roa (hash: smnw3toc9NIJXiN4piIx54U4f4Mbs+Yue06OIF7Ed2g=) 8: ZAW9hLoDnVp80PJK59uzMqseMQg.roa (hash: zROFGa57szBUE/hPHlcNo31U/nC8cbg/ehhEeCGDUB4=) 9: fAkVmSuP4C8Tt3ysLgXTuPqL4JM.roa (hash: new7s/Zw+Z3LxE1g27Tl/cjYXZW77+lOLNDzxaXxgPs=) 10: gi6Xytn9Iu0GHoS2bz8-D2_xuYw.roa (hash: zRXOYl9PkTzrkMP8UCwOsXf5eAi2L1/FabDUe5aeP6I=) 11: nLhpxF_vYMtPztaP2Ob2bwrsO-c.roa (hash: X8qVQYMo7q02YZkTCY5KKMS/PXISC65xUOcTfDXBI/8=) 12: r9Onf1Z5MTGo6HQvvK-yrmEpNLw.roa (hash: MdZ3nuj2R7EYy2YZK3WtRbRVVeyc+IpvGV7gP3oPGfI=) 13: udGl8isNJxExRSIhiZ2jjvucC5s.roa (hash: 46OQaBoVhzlHfO3MZlMA5GIChgYIIijufkFgTDDBkM8=) 14: xR-uNlcwaXq95_WLOZVSHPtWfsg.roa (hash: wbICW+uS9aypVREci9aQAEMY15M6aAuzi/Y5YFPee8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:bb:d4:38:48:f6:c8:10:41:57:12:6b:08:8c:11:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Mar 26 06:01:31 2026 GMT Not After : Mar 27 06:01:31 2026 GMT Subject: CN=5ee675d7415ad4f6b4c3d21571469805c45619e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e6:4e:e0:2f:e4:8f:9c:75:c5:0b:a1:56:d7: 32:96:62:79:2c:eb:24:7b:d7:b3:bc:19:43:01:8b: 37:26:b2:1d:23:de:91:b7:0a:e2:8d:f4:95:b9:3e: 6b:f1:40:95:9d:26:b1:ef:f3:df:26:a3:9f:88:5e: 7a:6b:58:85:1a:ad:14:1c:1e:95:02:30:89:0c:f7: d0:e5:1d:97:ad:47:70:99:79:16:a1:1d:71:5c:6f: 3a:66:05:ef:01:d4:e5:90:35:69:5d:a2:ad:6d:2c: 8d:b2:4f:b1:08:af:f1:38:0f:cb:82:a1:93:e9:93: 75:13:c4:66:5b:bc:4f:f4:e0:c4:30:20:39:71:82: fa:04:41:c8:46:b9:2d:c7:41:4c:00:57:ec:40:b0: 7a:5d:57:ac:cc:0c:72:9d:ec:45:fc:d2:02:46:0a: aa:b0:2f:4b:c6:d8:c2:ba:50:aa:4b:00:ad:13:70: 8b:c1:c7:fa:78:33:a0:20:34:16:58:2d:27:9a:b8: 4f:69:8d:8f:45:ce:68:3f:46:6a:91:ed:b3:98:a5: 05:73:6f:26:de:43:28:f3:e1:1f:58:60:af:d8:e7: 6d:79:6b:74:33:7d:25:31:d6:ec:b1:0e:b5:11:c5: 81:5a:08:6a:da:71:d0:b9:6f:79:b6:20:04:f2:4a: 5e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E6:75:D7:41:5A:D4:F6:B4:C3:D2:15:71:46:98:05:C4:56:19:E8 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a2:de:e0:b6:0a:86:3b:98:f6:1c:6c:92:4b:ab:28:8d:c3: 06:9a:35:a0:a3:a1:4c:28:d5:51:b7:3e:f3:4c:dd:1b:eb:73: 2f:ed:4f:ec:35:92:a8:55:1a:99:35:cb:64:ba:37:4b:62:90: 2b:16:60:5c:5d:4b:0b:61:29:1e:d5:e9:3e:ef:c1:a9:33:a5: 41:b3:c8:62:6a:94:f8:5c:85:b5:d8:43:04:ea:ab:6a:c6:34: a3:7b:10:6c:e7:1c:ab:b3:7d:ca:9c:75:bb:78:28:d7:9b:2b: 8b:88:5c:ab:7f:ee:c0:68:dc:2b:6d:24:7f:70:6c:49:31:3d: 1f:d0:be:7a:71:96:70:f6:b8:7e:51:19:83:74:95:84:e6:44: ed:08:12:ba:37:45:4f:23:c7:97:20:e7:af:d5:61:ac:1a:fc: b7:c8:53:2d:4b:b5:21:63:3b:d6:9a:35:9c:a6:94:36:20:14: 77:24:b8:e9:5d:57:86:9d:b0:08:d0:54:71:92:6e:0e:8a:7e: 23:d4:e1:5e:61:44:b3:8f:17:8e:e8:b9:83:9f:88:38:3d:0d: 12:24:9d:38:e0:46:4f:6f:9e:8b:df:11:67:c2:0e:f3:7c:7d: 1f:3e:12:29:9a:e9:33:c6:cd:f0:49:8c:e4:78:69:28:25:8b: 34:6f:2f:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ou9Q4SPbIEEFXEmsIjBE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMzI2MDYwMTMxWhcNMjYwMzI3MDYwMTMxWjAzMTEwLwYDVQQD Eyg1ZWU2NzVkNzQxNWFkNGY2YjRjM2QyMTU3MTQ2OTgwNWM0NTYxOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+ZO4C/kj5x1xQuhVtcylmJ5LOsk e9ezvBlDAYs3JrIdI96RtwrijfSVuT5r8UCVnSax7/PfJqOfiF56a1iFGq0UHB6V AjCJDPfQ5R2XrUdwmXkWoR1xXG86ZgXvAdTlkDVpXaKtbSyNsk+xCK/xOA/LgqGT 6ZN1E8RmW7xP9ODEMCA5cYL6BEHIRrktx0FMAFfsQLB6XVeszAxynexF/NICRgqq sC9LxtjCulCqSwCtE3CLwcf6eDOgIDQWWC0nmrhPaY2PRc5oP0Zqke2zmKUFc28m 3kMo8+EfWGCv2OdteWt0M30lMdbssQ61EcWBWghq2nHQuW95tiAE8kpeswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7mdddBWtT2tMPSFXFGmAXEVhnoMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqLe4LYK hjuY9hxskkurKI3DBpo1oKOhTCjVUbc+80zdG+tzL+1P7DWSqFUamTXLZLo3S2KQ KxZgXF1LC2EpHtXpPu/BqTOlQbPIYmqU+FyFtdhDBOqrasY0o3sQbOccq7N9ypx1 u3go15sri4hcq3/uwGjcK20kf3BsSTE9H9C+enGWcPa4flEZg3SVhOZE7QgSujdF TyPHlyDnr9VhrBr8t8hTLUu1IWM71po1nKaUNiAUdyS46V1Xhp2wCNBUcZJuDop+ I9ThXmFEs48Xjui5g5+IOD0NEiSdOOBGT2+ei98RZ8IO83x9Hz4SKZrpM8bN8EmM 5HhpKCWLNG8viA== -----END CERTIFICATE-----Generated at Thu Mar 26 11:27:48 2026 by rpki-client