$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: 4zCn2jF7Si9RNXC+FspWGZb3jPqTQu2h5Mn3l2e5iOc= Subject key identifier: F4:07:8E:F0:E4:33:E3:02:CE:60:B8:A9:5A:51:9E:AD:B1:C3:CC:EB Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019D3262B4CFEE423F9B94A5DFA064514291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 18AA Signing time: Sat 28 Mar 2026 03:00:22 +0000 Manifest this update: Sat 28 Mar 2026 03:00:22 +0000 Manifest next update: Sun 29 Mar 2026 03:00:22 +0000 Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=) 2: A5PgGRLn4kXJK7rp7MRelJlQCGs.roa (hash: uoHX6U7FvckkMUmhHzgYs1oGVMNEJnR2TmiJTsJFLvY=) 3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=) 4: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=) 5: HQZ8h0k5o98AkDATLinCxsRe43I.roa (hash: aSwjxHDuomJbPa6AGVBEyYNaJyQepEqbPTE9fjxbKqY=) 6: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=) 7: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: B14GYYpzhbzube3jEBlV/pxQeF89C5Zi8ebIqdQk0KY=) 9: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=) 10: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=) 11: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=) 12: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:32:62:b4:cf:ee:42:3f:9b:94:a5:df:a0:64:51:42:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Mar 28 03:00:22 2026 GMT Not After : Mar 29 03:00:22 2026 GMT Subject: CN=f4078ef0e433e302ce60b8a95a519eadb1c3cceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:e9:7f:24:b2:1e:56:a4:17:d8:81:da:b5: 89:da:ba:2d:26:76:08:e3:fb:4d:b4:9a:7b:57:45: fb:e3:fa:bc:7f:60:a5:f2:8d:15:09:ea:88:50:a6: 53:3d:fb:35:50:eb:01:32:21:d1:10:b9:1b:a2:6a: 55:28:da:4f:f1:52:b5:77:6b:ed:03:90:1d:90:87: c4:a1:ba:4d:09:a7:96:aa:fa:7d:af:da:4c:03:1c: 69:fc:7a:61:55:c0:c9:3f:b9:c3:44:7f:d9:a3:47: 11:cc:e8:f9:44:17:0a:ed:25:1f:18:25:e0:d6:23: 45:2b:40:db:3e:e3:aa:89:87:11:f3:50:3e:a6:92: 90:68:43:7a:22:9f:4f:aa:25:ed:db:bf:1e:69:98: 62:93:d6:99:4f:a3:b8:5e:1c:11:c9:6f:53:e0:b7: 3b:30:c1:86:aa:23:54:8b:95:44:eb:51:36:0b:92: c1:c5:19:85:e6:28:23:3a:c5:f8:34:fd:60:8d:c1: 54:a9:8e:d8:50:d8:30:03:aa:bb:2a:b5:3b:c5:9e: 2c:8a:5c:2e:89:1f:5d:23:3a:30:63:c3:79:70:b9: 60:9a:f4:be:84:b7:38:21:22:78:e6:2d:55:d8:6a: b5:1c:f5:2c:24:b9:6e:22:18:e5:ca:9e:d5:2d:b0: 1f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:07:8E:F0:E4:33:E3:02:CE:60:B8:A9:5A:51:9E:AD:B1:C3:CC:EB X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:51:54:f0:b5:22:82:c1:5b:19:6e:12:5f:41:3d:48:79:b6: 9f:1c:a6:96:7b:3e:16:80:e3:df:ab:20:25:9a:db:52:54:cd: 9a:26:7b:90:8b:2e:e6:9d:64:9f:38:0a:62:55:87:84:5d:e2: f1:18:33:f5:2d:53:c9:32:15:d0:8a:81:67:3e:74:99:0c:ea: 5a:d1:63:8c:c5:26:6a:78:bf:38:d8:df:b9:33:fb:a7:b5:23: 7b:e9:12:5b:54:fb:a3:3a:44:5e:2a:70:15:f2:1d:f9:0d:ce: 42:5a:ef:31:f9:1e:cd:f5:31:3d:9f:1a:86:ae:58:50:10:8e: 86:e6:ac:c8:79:ab:c1:61:77:05:50:6e:b2:7d:a5:01:f2:24: 04:b7:37:de:2a:7c:e7:bd:d1:a1:0f:ea:d6:20:7f:44:57:f7: 71:db:3d:5a:0e:33:5a:69:57:d9:1b:f6:79:35:db:77:ec:82: dd:87:c7:4a:96:26:25:a7:4c:0b:7d:5c:dd:69:57:b6:98:e4: e5:f3:90:8c:8a:03:00:8c:df:c7:a3:e0:cf:db:c2:8b:0e:e4: a3:7c:fc:9e:ef:8a:5f:bd:5f:00:28:11:b3:ce:11:c7:f8:16: e8:c5:44:59:43:9c:05:fe:fc:da:c7:ee:2b:10:cc:7f:de:70: 8a:a1:4c:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0yYrTP7kI/m5Sl36BkUUKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwMzI4MDMwMDIyWhcNMjYwMzI5MDMwMDIyWjAzMTEwLwYDVQQD EyhmNDA3OGVmMGU0MzNlMzAyY2U2MGI4YTk1YTUxOWVhZGIxYzNjY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx3pfySyHlakF9iB2rWJ2rotJnYI 4/tNtJp7V0X74/q8f2Cl8o0VCeqIUKZTPfs1UOsBMiHRELkbompVKNpP8VK1d2vt A5AdkIfEobpNCaeWqvp9r9pMAxxp/HphVcDJP7nDRH/Zo0cRzOj5RBcK7SUfGCXg 1iNFK0DbPuOqiYcR81A+ppKQaEN6Ip9PqiXt278eaZhik9aZT6O4XhwRyW9T4Lc7 MMGGqiNUi5VE61E2C5LBxRmF5igjOsX4NP1gjcFUqY7YUNgwA6q7KrU7xZ4silwu iR9dIzowY8N5cLlgmvS+hLc4ISJ45i1V2Gq1HPUsJLluIhjlyp7VLbAfewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQHjvDkM+MCzmC4qVpRnq2xw8zrMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw1FU8LUi gsFbGW4SX0E9SHm2nxymlns+FoDj36sgJZrbUlTNmiZ7kIsu5p1knzgKYlWHhF3i 8Rgz9S1TyTIV0IqBZz50mQzqWtFjjMUmani/ONjfuTP7p7Uje+kSW1T7ozpEXipw FfId+Q3OQlrvMfkezfUxPZ8ahq5YUBCOhuasyHmrwWF3BVBusn2lAfIkBLc33ip8 573RoQ/q1iB/RFf3cds9Wg4zWmlX2Rv2eTXbd+yC3YfHSpYmJadMC31c3WlXtpjk 5fOQjIoDAIzfx6Pgz9vCiw7ko3z8nu+KX71fACgRs84Rx/gW6MVEWUOcBf782sfu KxDMf95wiqFMeA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:35:11 2026 by rpki-client