$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: WmCppSuDhrK5AGU9m+H2rK0ioWjE+W+Dm6KC6b9+0sA= Subject key identifier: 02:4E:84:30:18:FF:14:A6:5B:9D:F0:A3:38:30:40:65:E4:C0:51:5E Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019D25F1710D8EE87947E29B1C9DD5F5EFFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 184E Signing time: Wed 25 Mar 2026 17:01:13 +0000 Manifest this update: Wed 25 Mar 2026 17:01:13 +0000 Manifest next update: Thu 26 Mar 2026 17:01:13 +0000 Files and hashes: 1: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=) 2: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=) 3: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=) 4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=) 5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=) 6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=) 7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=) 8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=) 9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=) 10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: HCie2+W32VBNhkis7mJExvZX26oyeexbjAe3QW3+FM4=) 11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=) 12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:71:0d:8e:e8:79:47:e2:9b:1c:9d:d5:f5:ef:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Mar 25 17:01:13 2026 GMT Not After : Mar 26 17:01:13 2026 GMT Subject: CN=024e843018ff14a65b9df0a338304065e4c0515e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d5:47:73:13:59:38:34:79:03:58:ce:15:81: 58:3a:b7:f8:0e:7c:61:e2:38:25:c3:3c:9d:53:e7: 98:8d:7b:0b:76:6b:d1:ff:83:78:87:a7:d9:f9:15: 83:e6:01:80:f7:ef:68:a6:9f:5d:3d:a7:79:0a:a0: 5b:30:c8:06:ff:d6:ab:c2:4a:1f:6b:70:56:77:c7: 1e:6b:6e:c7:bb:1c:a7:d8:b3:89:2c:8f:ef:d7:24: 09:f6:2f:9e:44:9a:28:ea:2e:24:f4:80:da:df:bd: f6:29:4f:95:53:ac:0e:b4:31:e0:a1:68:cd:47:18: 09:10:a0:33:1f:ff:ab:e9:83:02:17:25:16:c6:23: b8:62:26:dc:27:d5:b9:49:a6:36:3d:72:20:78:2d: a3:ec:4e:4a:a9:65:02:82:04:9a:89:71:06:71:87: 19:60:1f:e7:bd:13:d8:5b:ee:b3:39:ba:9b:53:55: 34:b9:5f:6c:de:0a:67:ec:d8:a9:13:d8:72:db:dc: 67:66:de:54:00:a7:04:e0:d6:35:15:48:64:8e:74: 7d:2e:84:73:c6:00:25:e4:55:cd:45:16:eb:d5:c2: 34:d5:68:b2:87:82:3b:be:9d:62:30:91:f7:a2:28: a4:04:ad:47:4c:a0:ff:ea:b2:8b:b9:b5:69:c1:56: ed:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4E:84:30:18:FF:14:A6:5B:9D:F0:A3:38:30:40:65:E4:C0:51:5E X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:74:c8:06:90:33:9d:b3:c3:94:fa:49:47:0b:5f:5d:65:f7: 9a:81:1a:39:0e:16:7e:3b:02:10:88:db:8e:46:6e:37:35:4e: 4a:d3:4d:1e:29:90:b9:25:c6:9a:dd:d3:a2:2f:74:66:14:d7: 91:a7:a1:a2:0c:93:75:ea:30:e9:86:6e:10:30:5b:54:58:60: fa:03:ab:24:8a:57:86:82:1a:4f:32:31:35:2a:0a:78:2f:ee: 74:f3:6f:df:94:be:8a:2a:c7:63:8d:74:f3:9f:34:b6:d9:31: 1d:b8:3b:46:5d:80:9a:e5:1a:82:bb:b6:04:5d:b2:c3:52:07: 5b:15:97:a3:30:4c:7b:2c:55:b2:bd:50:be:33:b2:81:58:cd: 82:f3:18:3f:69:c5:d6:02:91:c0:f3:78:c9:ca:5c:fd:2a:a5: 1f:fd:af:c6:6e:99:c7:99:df:02:f7:29:62:05:60:fc:48:5b: e7:d5:0b:2a:2a:97:f0:89:d8:94:d1:1b:47:ac:b3:5b:32:e0: a2:08:03:0b:c1:04:9a:75:4d:95:28:a9:78:8a:da:fb:85:cc: b6:d9:3d:72:d8:85:aa:a2:34:69:38:20:70:a1:c5:71:7c:97: 38:a4:65:e3:dd:96:34:b4:1d:c1:cb:87:e9:2b:70:3c:8f:f9: 52:2a:8b:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8XENjuh5R+KbHJ3V9e/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwMzI1MTcwMTEzWhcNMjYwMzI2MTcwMTEzWjAzMTEwLwYDVQQD EygwMjRlODQzMDE4ZmYxNGE2NWI5ZGYwYTMzODMwNDA2NWU0YzA1MTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtVHcxNZODR5A1jOFYFYOrf4Dnxh 4jglwzydU+eYjXsLdmvR/4N4h6fZ+RWD5gGA9+9opp9dPad5CqBbMMgG/9arwkof a3BWd8cea27Huxyn2LOJLI/v1yQJ9i+eRJoo6i4k9IDa3732KU+VU6wOtDHgoWjN RxgJEKAzH/+r6YMCFyUWxiO4YibcJ9W5SaY2PXIgeC2j7E5KqWUCggSaiXEGcYcZ YB/nvRPYW+6zObqbU1U0uV9s3gpn7NipE9hy29xnZt5UAKcE4NY1FUhkjnR9LoRz xgAl5FXNRRbr1cI01Wiyh4I7vp1iMJH3oiikBK1HTKD/6rKLubVpwVbtAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJOhDAY/xSmW53wozgwQGXkwFFeMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3TIBpAz nbPDlPpJRwtfXWX3moEaOQ4WfjsCEIjbjkZuNzVOStNNHimQuSXGmt3Toi90ZhTX kaehogyTdeow6YZuEDBbVFhg+gOrJIpXhoIaTzIxNSoKeC/udPNv35S+iirHY410 8580ttkxHbg7Rl2AmuUagru2BF2yw1IHWxWXozBMeyxVsr1QvjOygVjNgvMYP2nF 1gKRwPN4ycpc/SqlH/2vxm6Zx5nfAvcpYgVg/Ehb59ULKiqX8InYlNEbR6yzWzLg oggDC8EEmnVNlSipeIra+4XMttk9ctiFqqI0aTggcKHFcXyXOKRl492WNLQdwcuH 6StwPI/5UiqLoA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:32:26 2026 by rpki-client