$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: 3Saug6yjy70jTT6wb3xA9iZbUrJmKeBIT+AeK4libxc= Subject key identifier: F7:B1:9C:44:D9:56:74:16:88:CE:AE:F2:2B:DA:61:EC:80:96:DD:FF Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019D2703C987DAF8A95052051761DCF2F409 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0BDF Signing time: Wed 25 Mar 2026 22:00:52 +0000 Manifest this update: Wed 25 Mar 2026 22:00:52 +0000 Manifest next update: Thu 26 Mar 2026 22:00:52 +0000 Files and hashes: 1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=) 2: 6WWr83TSCDVC54Q6T3lJdNTzhec.roa (hash: bqOXRmyjRmssTC0gEpcTMmCXeTubysghN9/RhsWfZ2I=) 3: 8d1TSvhqd070e1gxYQ3MnczO_xc.roa (hash: /b+G6xqm7avkCzyKrxmL+NHi0UtXKICGZqK/1lGYRPA=) 4: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: xHFE15rIPQ9NGn1SQC/Eo6w9vYH2mPRbl/hc0Ub7xQo=) 5: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=) 6: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=) 7: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=) 8: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=) 9: Xb74_mxC58qckaHte1VFV4EbES8.roa (hash: bHLl4jzDn9SqUhje+ZibMWhomIBMoABBlLHUs8yypwk=) 10: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=) 11: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=) 12: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=) 13: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=) 14: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=) 15: kGneqi-DhIJThQbxo8k8aRtzhC0.roa (hash: LH1+UqmotTldhBb3/js9nM0r1q8ixXwicRK2tem2Z4A=) 16: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=) 17: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:03:c9:87:da:f8:a9:50:52:05:17:61:dc:f2:f4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Mar 25 22:00:52 2026 GMT Not After : Mar 26 22:00:52 2026 GMT Subject: CN=f7b19c44d956741688ceaef22bda61ec8096ddff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:40:ee:43:08:9e:2c:28:93:75:a5:7f:b3: 88:eb:09:47:5a:53:d2:e2:30:dd:26:92:dc:1c:5f: 44:a0:ff:5f:41:ae:67:a6:a0:23:8f:b1:c4:8d:57: 47:c4:5a:fa:99:34:1f:8e:e5:5d:e5:c9:fc:72:87: da:0c:10:33:b6:bc:2e:a8:f2:19:dc:ee:dc:6b:82: be:32:49:94:95:aa:cd:a9:b3:5c:c8:84:53:0d:bf: 97:f3:ca:c1:d6:d7:1e:d9:d4:55:eb:e3:d9:83:e7: 88:13:b7:a3:db:7e:6e:c8:6d:cc:e7:85:29:72:2b: 87:45:14:a0:17:aa:32:b5:ca:cc:fc:b9:5b:26:db: 87:6f:bc:46:f9:09:2f:0a:62:0b:11:6e:0f:8e:69: a1:98:c1:8f:dc:39:95:77:4c:ef:6b:2f:d0:75:fc: 24:65:33:bf:d2:10:5f:ec:d8:e2:c2:81:88:75:89: 3e:5c:d7:0b:7f:d0:13:52:6f:fa:41:45:19:c0:76: 53:67:54:5d:93:35:40:59:c1:6e:cf:e3:02:62:96: 50:e6:2f:4d:9b:ab:cb:72:78:e3:e5:e1:a4:d5:7f: 43:2a:92:bf:b3:e9:c7:0c:d4:cc:d8:8a:5e:fd:a2: 1a:f2:3a:a4:ff:15:4b:68:7b:11:37:b5:ac:df:8c: 5e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B1:9C:44:D9:56:74:16:88:CE:AE:F2:2B:DA:61:EC:80:96:DD:FF X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c4:c0:66:c1:69:50:31:79:a8:6e:c2:0c:d4:93:9e:87:6a: dc:f3:04:9c:0c:ef:15:e2:6e:b8:93:ca:72:31:9b:37:c7:f6: 96:fe:2a:11:f4:18:c8:c4:1c:5a:55:ef:78:21:0e:68:ba:68: 0e:d3:76:ad:65:42:b4:cd:51:ce:64:35:54:c1:24:ea:a3:55: 4d:b3:6e:5f:76:a2:26:db:8d:42:8e:e4:b6:db:ca:62:9b:45: 6e:76:d4:78:23:3c:e5:b7:f2:56:a7:7f:bd:67:34:8b:5c:36: 88:d5:35:fd:f5:72:c5:05:61:0f:8b:fa:4b:2b:87:14:90:8d: 4b:b7:d7:44:7c:d7:2e:88:27:59:f9:30:25:f1:be:1d:63:c0: 44:dc:11:01:34:7c:52:17:51:5e:c0:8a:43:a5:63:4b:f3:56: 32:28:25:8c:e7:8b:ac:f9:fa:8c:4f:96:f0:16:6b:a7:ab:36: 22:d8:7e:27:96:62:2f:64:af:cc:aa:22:ed:c1:53:3f:0b:a9: 1c:cf:39:bc:12:93:24:e9:e9:2a:ab:9d:d4:42:1c:f9:91:fc: 7c:7b:8c:f7:5a:8d:0d:a7:df:c7:14:76:e5:93:b0:23:6e:37: 9b:54:cf:5a:2b:46:8c:e6:b3:bb:73:ea:c0:c8:b3:8e:0e:4e: 25:d6:26:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nA8mH2vipUFIFF2Hc8vQJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwMzI1MjIwMDUyWhcNMjYwMzI2MjIwMDUyWjAzMTEwLwYDVQQD EyhmN2IxOWM0NGQ5NTY3NDE2ODhjZWFlZjIyYmRhNjFlYzgwOTZkZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7NA7kMIniwok3Wlf7OI6wlHWlPS 4jDdJpLcHF9EoP9fQa5npqAjj7HEjVdHxFr6mTQfjuVd5cn8cofaDBAztrwuqPIZ 3O7ca4K+MkmUlarNqbNcyIRTDb+X88rB1tce2dRV6+PZg+eIE7ej235uyG3M54Up ciuHRRSgF6oytcrM/LlbJtuHb7xG+QkvCmILEW4PjmmhmMGP3DmVd0zvay/Qdfwk ZTO/0hBf7NjiwoGIdYk+XNcLf9ATUm/6QUUZwHZTZ1RdkzVAWcFuz+MCYpZQ5i9N m6vLcnjj5eGk1X9DKpK/s+nHDNTM2Ipe/aIa8jqk/xVLaHsRN7Ws34xeAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPexnETZVnQWiM6u8ivaYeyAlt3/MB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcTAZsFp UDF5qG7CDNSTnodq3PMEnAzvFeJuuJPKcjGbN8f2lv4qEfQYyMQcWlXveCEOaLpo DtN2rWVCtM1RzmQ1VMEk6qNVTbNuX3aiJtuNQo7kttvKYptFbnbUeCM85bfyVqd/ vWc0i1w2iNU1/fVyxQVhD4v6SyuHFJCNS7fXRHzXLognWfkwJfG+HWPARNwRATR8 UhdRXsCKQ6VjS/NWMigljOeLrPn6jE+W8BZrp6s2Ith+J5ZiL2SvzKoi7cFTPwup HM85vBKTJOnpKqud1EIc+ZH8fHuM91qNDaffxxR25ZOwI243m1TPWitGjOazu3Pq wMizjg5OJdYmhg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:27 2026 by rpki-client