$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: 5zkRU8P7Kik2g0x51BKoWAbz6Iu674eGC+jQuxeRKGY= Subject key identifier: 42:B0:1B:F5:95:83:22:0E:4E:97:D0:FE:35:E1:FD:A7:39:3E:83:2C Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019D2816E873F4E69B9D7D474EFB57FA0190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 1867 Signing time: Thu 26 Mar 2026 03:01:23 +0000 Manifest this update: Thu 26 Mar 2026 03:01:23 +0000 Manifest next update: Fri 27 Mar 2026 03:01:23 +0000 Files and hashes: 1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=) 2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=) 3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=) 4: H3x0T_83rlo2BTe5d7dbAF2ptxg.roa (hash: PQJVU6JoM83KwjANErOepQ3bz3i1NBfWfLmiBsgEm0c=) 5: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=) 6: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=) 7: XN2j2ZnyCgistBzzXo98ceyqR5E.roa (hash: /uVeuVZywozOmzMeKf0pUlvlMBObR5bHXnc9LBKX9hg=) 8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: awDZFaRqG0UaDDJsEXlBhuiLIecTxDmhVKFWH8UeN5g=) 9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=) 10: cV7dC0pNAKEULz7tUevMHVPoO2I.roa (hash: adieXG5yJS9ZLy1/S1WWQwhI/4aQn97j+i1QEsFv1q4=) 11: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=) 12: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=) 13: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:16:e8:73:f4:e6:9b:9d:7d:47:4e:fb:57:fa:01:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Mar 26 03:01:23 2026 GMT Not After : Mar 27 03:01:23 2026 GMT Subject: CN=42b01bf59583220e4e97d0fe35e1fda7393e832c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c8:db:ce:6d:c5:70:ae:64:57:ef:ef:90:07: 86:57:00:17:b8:6c:95:54:03:22:cd:e7:63:aa:9d: c1:cf:70:f5:d9:03:0e:f0:56:db:02:cf:cd:ee:82: 32:41:12:2f:7f:ea:95:80:1c:cd:83:dd:83:0b:f8: d3:5e:f0:a7:76:7a:9e:ce:f3:51:59:5a:0a:07:62: f7:4e:39:5e:c1:28:a6:2d:a9:cf:ac:ee:64:7f:44: f5:bb:d1:79:ba:23:47:f2:9d:c7:75:30:68:f8:ae: a4:4c:bb:23:e5:b0:e3:d1:eb:5d:c7:0a:b2:81:a5: 07:cf:e2:1f:2e:50:23:5f:6e:17:57:c0:90:bd:8e: f9:6a:aa:93:a8:e6:fd:48:40:0d:15:d0:b4:76:d4: 9b:09:ec:3c:f5:78:f6:9e:06:d2:0c:5b:49:ae:37: 66:67:65:65:c7:87:0a:1f:3e:ff:0e:2b:c1:ec:b9: 2c:df:36:68:61:6b:8f:0d:01:c8:40:e1:7f:20:ae: 2f:58:3f:40:05:82:6e:8f:0b:3b:f6:9e:45:e6:64: 1a:ee:f9:8d:f6:a6:6d:9c:87:6a:43:7f:3d:02:9f: 0b:8e:71:88:f2:e2:3a:95:4e:80:0f:a5:9f:f6:0b: 8a:12:d1:2b:ad:bc:e7:68:ba:39:17:86:92:9a:35: 63:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B0:1B:F5:95:83:22:0E:4E:97:D0:FE:35:E1:FD:A7:39:3E:83:2C X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c3:e9:5c:ff:59:7c:4f:11:9e:7e:10:2b:66:3f:30:72:16: bd:7f:68:00:e7:f1:5c:fa:38:ff:5f:fb:f9:c1:50:e4:14:1d: fa:7e:13:7c:2e:2c:2f:8a:8f:31:64:3f:41:05:d5:20:14:35: 92:db:7a:8c:9f:56:37:86:d9:5b:a1:cc:76:84:b0:91:86:1b: 42:d3:bf:d5:72:a9:ee:00:cb:24:ce:fe:6b:89:63:2e:26:ab: dc:9d:d9:c2:97:02:67:a9:9b:f3:42:bf:9d:0b:88:f9:e6:20: fc:36:e8:65:6a:bf:a3:92:8d:fb:03:18:0e:f6:0e:91:72:01: 57:ad:8c:a6:fb:81:0d:4d:c5:00:02:8f:63:67:42:73:5a:24: ab:40:a4:ea:ed:9e:c1:0a:05:d0:97:90:d7:87:78:6b:98:d8: f8:bd:37:59:98:ec:1c:d2:c7:a7:15:a4:97:bf:f9:29:db:5f: 03:b8:8f:42:3a:f9:4a:2d:4a:62:e0:86:ed:64:f8:76:56:3f: af:a0:94:1d:24:ba:66:67:7e:67:41:0d:ab:a8:a6:5d:71:9f: d2:a7:ee:63:1a:b5:30:d6:63:84:8e:e0:51:60:77:6a:a9:4e: d8:87:10:a4:c0:21:f5:1e:47:04:9f:e7:e0:3c:8b:fc:ec:a3: b4:47:8e:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFuhz9OabnX1HTvtX+gGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwMzI2MDMwMTIzWhcNMjYwMzI3MDMwMTIzWjAzMTEwLwYDVQQD Eyg0MmIwMWJmNTk1ODMyMjBlNGU5N2QwZmUzNWUxZmRhNzM5M2U4MzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cjbzm3FcK5kV+/vkAeGVwAXuGyV VAMizedjqp3Bz3D12QMO8FbbAs/N7oIyQRIvf+qVgBzNg92DC/jTXvCndnqezvNR WVoKB2L3TjlewSimLanPrO5kf0T1u9F5uiNH8p3HdTBo+K6kTLsj5bDj0etdxwqy gaUHz+IfLlAjX24XV8CQvY75aqqTqOb9SEANFdC0dtSbCew89Xj2ngbSDFtJrjdm Z2Vlx4cKHz7/DivB7Lks3zZoYWuPDQHIQOF/IK4vWD9ABYJujws79p5F5mQa7vmN 9qZtnIdqQ389Ap8LjnGI8uI6lU6AD6Wf9guKEtErrbznaLo5F4aSmjVjjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKwG/WVgyIOTpfQ/jXh/ac5PoMsMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicPpXP9Z fE8Rnn4QK2Y/MHIWvX9oAOfxXPo4/1/7+cFQ5BQd+n4TfC4sL4qPMWQ/QQXVIBQ1 ktt6jJ9WN4bZW6HMdoSwkYYbQtO/1XKp7gDLJM7+a4ljLiar3J3ZwpcCZ6mb80K/ nQuI+eYg/DboZWq/o5KN+wMYDvYOkXIBV62MpvuBDU3FAAKPY2dCc1okq0Ck6u2e wQoF0JeQ14d4a5jY+L03WZjsHNLHpxWkl7/5KdtfA7iPQjr5Si1KYuCG7WT4dlY/ r6CUHSS6Zmd+Z0ENq6imXXGf0qfuYxq1MNZjhI7gUWB3aqlO2IcQpMAh9R5HBJ/n 4DyL/OyjtEeOIA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:03:04 2026 by rpki-client