$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: YwPMvYNM4N9NotFxFC7XqyRqd98c0x64wQzzgPz3loE= Subject key identifier: 2A:BE:CF:25:00:EF:78:54:02:6D:A8:FA:40:D5:7A:BA:34:7D:AD:91 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019D2BF2B51F2892B94122798BFA8BF849BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 1869 Signing time: Thu 26 Mar 2026 21:00:19 +0000 Manifest this update: Thu 26 Mar 2026 21:00:19 +0000 Manifest next update: Fri 27 Mar 2026 21:00:19 +0000 Files and hashes: 1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=) 2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=) 3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=) 4: H3x0T_83rlo2BTe5d7dbAF2ptxg.roa (hash: PQJVU6JoM83KwjANErOepQ3bz3i1NBfWfLmiBsgEm0c=) 5: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=) 6: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=) 7: XN2j2ZnyCgistBzzXo98ceyqR5E.roa (hash: /uVeuVZywozOmzMeKf0pUlvlMBObR5bHXnc9LBKX9hg=) 8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: jEDTJU126MN/4eGjed1jMI9MRT8yBmv/XajelDhSXak=) 9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=) 10: cV7dC0pNAKEULz7tUevMHVPoO2I.roa (hash: adieXG5yJS9ZLy1/S1WWQwhI/4aQn97j+i1QEsFv1q4=) 11: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=) 12: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=) 13: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2b:f2:b5:1f:28:92:b9:41:22:79:8b:fa:8b:f8:49:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Mar 26 21:00:19 2026 GMT Not After : Mar 27 21:00:19 2026 GMT Subject: CN=2abecf2500ef7854026da8fa40d57aba347dad91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9e:f4:8e:5a:fd:29:7d:4f:15:a7:95:12:d2: e2:a8:f8:5f:b6:84:7b:fc:e4:d4:e5:38:45:6f:dc: 60:e2:60:38:8b:52:ee:2e:aa:52:6f:28:ad:db:3a: 48:74:61:a3:f1:69:eb:93:00:8a:0a:31:ce:05:1b: f5:5f:b7:77:ad:2d:f1:37:c7:c7:22:61:96:5b:48: 0e:c9:59:68:bb:12:ec:c4:2c:6e:2a:f1:d7:d7:ec: b7:92:01:fa:74:68:6e:f4:11:8a:f0:f2:0c:09:ac: 2d:50:e8:72:35:03:19:76:df:3f:f9:46:79:dd:72: ae:c7:3e:a0:34:98:c8:57:43:25:28:12:56:ac:42: da:12:4e:41:6e:da:6c:86:79:e9:c1:a7:9d:39:f2: a5:3a:12:9f:0e:2d:cd:74:6c:52:bc:da:ea:bf:63: 0d:d9:c5:19:eb:b8:ea:db:d6:f5:fc:5a:b8:93:c7: 84:65:ea:ab:2a:8f:98:d9:89:7f:cd:fa:0f:0f:0d: 6d:bc:dd:a3:30:96:44:ff:e3:3d:b6:ea:f0:92:71: 4d:9a:7b:71:5a:66:d1:29:2e:ec:b6:c2:a6:a6:82: 01:fe:a6:7b:c4:52:05:ea:4b:2f:5d:7a:b9:61:1d: a5:9a:df:12:3f:da:e0:17:7c:f7:9f:b5:9b:bd:f9: 6d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BE:CF:25:00:EF:78:54:02:6D:A8:FA:40:D5:7A:BA:34:7D:AD:91 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e4:fc:bc:74:ec:ae:78:e3:ea:6b:66:77:cc:51:cd:e0:f9: 8e:b8:2e:38:6f:8a:40:33:fb:07:73:d2:3e:96:bb:72:ac:2f: 0e:54:b1:4e:6c:d2:e6:93:5f:e7:64:d2:e9:9a:b3:9c:bd:6b: 8a:06:be:be:71:3e:e9:92:ee:c9:4f:cf:38:31:d9:6d:96:91: 77:57:c8:11:ef:c9:b2:06:a5:4c:2c:a4:d1:bd:50:f5:ba:03: ff:29:0e:bc:05:80:5b:4c:18:ef:fa:39:75:5f:21:95:d1:20: 9b:ad:65:df:d7:9a:77:1b:02:ba:d0:6a:2e:4a:9f:54:23:38: c8:db:b1:cb:f2:af:8d:1a:7b:6d:b3:b2:b2:ae:bf:0a:99:9f: 1e:ce:ee:da:c7:2c:cc:84:5c:1f:92:1e:e6:84:52:cb:f3:fa: ae:d8:d5:78:e0:93:5d:1d:3d:3c:2e:19:91:18:a0:da:8c:07: 72:92:35:d0:df:68:18:97:f4:73:c3:e1:b5:1e:18:aa:42:b4: fe:52:1d:b0:74:b8:a0:88:25:f6:6e:dd:29:e5:0e:44:a3:d7: f3:70:04:52:fa:b4:bd:2e:d9:e9:49:17:d7:4c:21:23:37:2b: 25:30:5f:fb:2f:db:32:17:c3:97:84:f8:ff:19:69:fa:d7:04: 3a:a4:99:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0r8rUfKJK5QSJ5i/qL+Em7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwMzI2MjEwMDE5WhcNMjYwMzI3MjEwMDE5WjAzMTEwLwYDVQQD EygyYWJlY2YyNTAwZWY3ODU0MDI2ZGE4ZmE0MGQ1N2FiYTM0N2RhZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z70jlr9KX1PFaeVEtLiqPhftoR7 /OTU5ThFb9xg4mA4i1LuLqpSbyit2zpIdGGj8WnrkwCKCjHOBRv1X7d3rS3xN8fH ImGWW0gOyVlouxLsxCxuKvHX1+y3kgH6dGhu9BGK8PIMCawtUOhyNQMZdt8/+UZ5 3XKuxz6gNJjIV0MlKBJWrELaEk5BbtpshnnpwaedOfKlOhKfDi3NdGxSvNrqv2MN 2cUZ67jq29b1/Fq4k8eEZeqrKo+Y2Yl/zfoPDw1tvN2jMJZE/+M9turwknFNmntx WmbRKS7stsKmpoIB/qZ7xFIF6ksvXXq5YR2lmt8SP9rgF3z3n7Wbvflt9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCq+zyUA73hUAm2o+kDVero0fa2RMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeT8vHTs rnjj6mtmd8xRzeD5jrguOG+KQDP7B3PSPpa7cqwvDlSxTmzS5pNf52TS6ZqznL1r iga+vnE+6ZLuyU/PODHZbZaRd1fIEe/JsgalTCyk0b1Q9boD/ykOvAWAW0wY7/o5 dV8hldEgm61l39eadxsCutBqLkqfVCM4yNuxy/KvjRp7bbOysq6/CpmfHs7u2scs zIRcH5Ie5oRSy/P6rtjVeOCTXR09PC4ZkRig2owHcpI10N9oGJf0c8PhtR4YqkK0 /lIdsHS4oIgl9m7dKeUORKPX83AEUvq0vS7Z6UkX10whIzcrJTBf+y/bMhfDl4T4 /xlp+tcEOqSZUg== -----END CERTIFICATE-----Generated at Fri Mar 27 06:25:54 2026 by rpki-client