$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft File: pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json) Hash identifier: Ykptb1OWNOGSChP2ENXLj9bKMz/Xq10ReuRFNx47xdI= Subject key identifier: 26:99:2C:FE:67:4D:0E:3A:90:68:73:DA:98:60:7C:B4:C7:A3:61:AF Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019D28842F52CEEF4292F08338A50B7D95DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft Manifest number: 02CE Signing time: Thu 26 Mar 2026 05:00:44 +0000 Manifest this update: Thu 26 Mar 2026 05:00:44 +0000 Manifest next update: Fri 27 Mar 2026 05:00:44 +0000 Files and hashes: 1: 1-QpEsL_AtML3ScLvBXvkFT8qJ80.roa (hash: +pcA6aIuMEkhsfThQ01/KfIXIckOnFaz60ouEEzocyo=) 2: 3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa (hash: pz2rG+hBKqBtyp01TUwFPW7c8W6AKlPJM3L7dBpBCVg=) 3: 4ofKO6WJJ9gvwJBsnh0_DxIUiCQ.roa (hash: GKRpPV/E1hNbYjuWh9w1ms8zKc2uw/7DUOZK8HvTW2k=) 4: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (hash: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs=) 5: AEmrEvTl5nZilDd5lyZaWGwH9Rk.roa (hash: PtBxNCrF8QX0P315dOs4ZmrXEvyhJt7cb+0UMIIHYW4=) 6: IdcY3v8c0CZDDmi3STdilJPAqYA.roa (hash: MtpvUlKM4NkKs2dwWGucxHDKfkZ77Tg0i1COdRQImog=) 7: In9fUZ6_laTBK3Ny_2v45J-DRyk.roa (hash: AVqBR/4RXTDFlurKJYXZ2mUzQ6COZ0Mw32Yf6crahoY=) 8: WIxhLEYJGDRzvi2YQPkejSnZcyY.roa (hash: IQv8lDCReAIo1vSxymiyMrbwR8Ln0jB9PXL5wzjZ1uM=) 9: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (hash: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw=) 10: YGgmrBWdNr2gr-PCb7IviufXu1s.roa (hash: XCRz3ie5NHXPDBJb939GkB0ydCGEbtQ+g5/MkaAJQ/w=) 11: cngSEETmst842JVqCMuJdzGT1YQ.roa (hash: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0=) 12: demNlliFBXRCd4_BO7uGvr9OBWs.roa (hash: 3e0uS6Ngag4AQ8UkZJyAtJ3ajUAIc6mhDPE4a8UAS9c=) 13: ipupcdvp4LbD6D-C1ZVS4_JrtVM.roa (hash: 1kO7KglXg+mOXu0757cqWUOoHLIBVcVZE3NF8cCE/Wk=) 14: keSJdnMwcVK2FtcwzmCvVNU79JQ.roa (hash: /rXHdI2JjhjhwAIXDwev1G3+2EHSEVpVeCwEeEhKfkg=) 15: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (hash: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE=) 16: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: MI+uAOlImRMAYoJ4R2duCM6eJuchbfB6QRQWe+hei4A=) 17: sLk-izSTWX7GM5E-kM2g-ymgESA.roa (hash: a3gJXW/HoyQtdrjVm/h5X6VgqIynZQ0Fud92Ay7J9lc=) 18: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (hash: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw=) 19: u5FZO77rNxNEkJD4LsiEc6a8_CA.roa (hash: aVz6x+NZB5VGBSbcGEWu4/T/WbGZk31t3jiovFu5kdA=) 20: wnofk64UVBKP93Op1kPJw8OAZVA.roa (hash: tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:84:2f:52:ce:ef:42:92:f0:83:38:a5:0b:7d:95:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Mar 26 05:00:44 2026 GMT Not After : Mar 27 05:00:44 2026 GMT Subject: CN=26992cfe674d0e3a906873da98607cb4c7a361af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:73:16:0d:d7:48:15:76:10:84:76:ef:97: 2e:3e:a6:71:39:05:4b:f2:49:74:75:ed:00:80:c6: fd:62:59:31:d6:e9:20:74:83:db:ed:87:12:4f:80: 97:2c:74:14:f1:77:2a:2a:ed:da:60:d5:4f:9b:f2: b7:c7:9a:5f:6c:1d:b0:0e:50:52:f0:fb:cc:ac:af: 2a:af:fb:e0:ad:4a:f1:6e:08:43:43:37:23:c8:a2: d7:ad:6f:fc:21:ba:df:ea:f2:e4:6a:77:5d:2a:b8: 12:7f:11:c2:64:4c:fd:c4:47:8b:60:c0:9a:f8:7e: 15:1d:75:0c:fe:e9:a5:48:cb:72:35:2e:0f:53:02: 5e:fd:2c:3e:2a:88:fe:ed:4a:31:71:4a:41:27:f9: a6:2e:92:40:49:28:a4:09:ac:30:49:42:75:59:45: 43:2e:10:3d:fd:58:71:4a:83:ae:83:d3:f9:63:fe: b9:7b:d2:44:fb:75:8b:e3:2a:d2:16:0a:43:23:1c: d8:67:ce:cf:ff:06:dc:38:e2:b6:d9:72:e5:13:9d: bc:b7:83:8d:0a:59:4c:0c:d0:d7:40:55:68:4e:f6: df:e5:fd:1c:76:30:4a:96:c2:2b:17:e9:1a:40:4d: d9:51:c5:d6:3a:ae:ea:c0:7b:fb:d3:8b:ed:46:be: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:99:2C:FE:67:4D:0E:3A:90:68:73:DA:98:60:7C:B4:C7:A3:61:AF X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8a:6d:5a:bc:4c:ef:93:52:ad:a5:b9:58:fa:b1:a2:da:e8: b5:52:20:e4:8e:cb:83:b3:61:3d:4f:15:9d:5d:3c:58:9f:72: 05:cf:22:74:b8:c1:3c:f0:47:80:03:cd:31:79:4c:c0:ac:da: 25:66:ec:1e:cf:68:75:f1:4e:68:11:43:03:d8:a1:21:20:af: 30:46:b7:e5:4b:b8:90:9e:b5:39:08:bb:e4:31:9e:b1:f4:d8: 55:45:fd:e3:59:19:dc:a2:50:bc:d3:27:a3:90:6e:86:6d:7d: 7a:87:9b:1b:06:32:0e:89:b3:4b:aa:2e:ff:ae:21:57:d9:03: de:6f:38:03:20:0d:70:35:3d:f4:18:08:c5:59:bb:74:2e:f0: bf:ca:5b:1f:b8:5b:aa:3c:e5:ba:5a:41:93:43:f8:b4:fb:78: 20:c0:ec:e0:45:12:92:00:8c:67:76:84:50:80:54:c4:e8:aa: 72:d6:b7:0f:8f:a1:24:ef:6d:86:94:a6:52:20:1c:55:3f:7f: a3:7a:17:62:e2:83:4e:96:37:e6:83:ad:53:aa:7a:a8:42:ea: c7:cd:80:f3:d4:cc:f9:52:7b:9e:f0:b9:73:b1:0d:c3:55:2b: 70:b4:5f:d1:5c:6e:51:4c:83:53:77:cd:18:1b:bb:0f:79:4a: b5:f5:e2:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ohC9Szu9CkvCDOKULfZXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMzI2MDUwMDQ0WhcNMjYwMzI3MDUwMDQ0WjAzMTEwLwYDVQQD EygyNjk5MmNmZTY3NGQwZTNhOTA2ODczZGE5ODYwN2NiNGM3YTM2MWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm31zFg3XSBV2EIR275cuPqZxOQVL 8kl0de0AgMb9Ylkx1ukgdIPb7YcST4CXLHQU8XcqKu3aYNVPm/K3x5pfbB2wDlBS 8PvMrK8qr/vgrUrxbghDQzcjyKLXrW/8Ibrf6vLkanddKrgSfxHCZEz9xEeLYMCa +H4VHXUM/umlSMtyNS4PUwJe/Sw+Koj+7UoxcUpBJ/mmLpJASSikCawwSUJ1WUVD LhA9/VhxSoOug9P5Y/65e9JE+3WL4yrSFgpDIxzYZ87P/wbcOOK22XLlE528t4ON CllMDNDXQFVoTvbf5f0cdjBKlsIrF+kaQE3ZUcXWOq7qwHv704vtRr6g8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaZLP5nTQ46kGhz2phgfLTHo2GvMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYptWrxM 75NSraW5WPqxotrotVIg5I7Lg7NhPU8VnV08WJ9yBc8idLjBPPBHgAPNMXlMwKza JWbsHs9odfFOaBFDA9ihISCvMEa35Uu4kJ61OQi75DGesfTYVUX941kZ3KJQvNMn o5Buhm19eoebGwYyDomzS6ou/64hV9kD3m84AyANcDU99BgIxVm7dC7wv8pbH7hb qjzlulpBk0P4tPt4IMDs4EUSkgCMZ3aEUIBUxOiqcta3D4+hJO9thpSmUiAcVT9/ o3oXYuKDTpY35oOtU6p6qELqx82A89TM+VJ7nvC5c7ENw1UrcLRf0VxuUUyDU3fN GBu7D3lKtfXinA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:11 2026 by rpki-client