$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json) Hash identifier: QKUfUp+zPcYCTLZSJihPnCeCPNGqLot+REquE+effjU= Subject key identifier: 88:3A:05:43:0C:52:50:2D:E3:09:E0:92:AA:B6:AD:D5:BD:B8:01:AE Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019D25F207FBC2F411DE81670451052D2758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft Manifest number: 160A Signing time: Wed 25 Mar 2026 17:01:51 +0000 Manifest this update: Wed 25 Mar 2026 17:01:51 +0000 Manifest next update: Thu 26 Mar 2026 17:01:51 +0000 Files and hashes: 1: 1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa (hash: Ddu3dw5E5cMsctwBaCnCHBJl5vVM/XMeaSx8/U1wJfs=) 2: 10rcPrImsu8PZEdla8aGpqVO6qU.roa (hash: L3JiXE1iCTndxNrL5q/bo9206BV+caOYpXrLh1CtuNU=) 3: 1B2E5LozjiOiEEIVllZwGOlUoUc.roa (hash: DtZRGHhFLQ8RyYzUJ9AqMoeV1gGyFtUW3kQz1Kw7pNc=) 4: 1h3O8l_TW_Pt04UkNDvHQykjzBo.roa (hash: YPYjSO8A3RKdjeZ4kpCNyf7+uhxWq8m+nhKrC4aIRXo=) 5: 40ahziHyLtQx_pyEk0bHk67E8fw.roa (hash: rWZqu675dNYqvBqcBL0jVKw3VJWQVGQYGPhVN2Iiit0=) 6: 4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa (hash: X8RR+0PaypDLpsEOWttv6W/dtoMpGTgNbkp3JkclUF8=) 7: IQvdujgainvo4C34zkOLdjKY5vg.roa (hash: w17Fv3nrN5mdxpMpocz8vqnCEddTCZeK1yywJC7rkAQ=) 8: PhXZiIOr7piIHYlDtgFb-SE3XFc.roa (hash: kQ6KIuUu9lWGspD3sgkP3G1eQcAyvbDdP58M3rp8Fes=) 9: REtMs1U8A3vNupGfA8YHkLMBg20.roa (hash: 8cbxOjQg2znipTCYsgxq7I7rjGz0FDOmTb0bqODGJZQ=) 10: XIVBNcTJBnkT90tLXiCswsUi9O0.roa (hash: PPElf6bVEODRo+3cgHN5ArR3uE+ZQHhLBOE/ConPN30=) 11: Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa (hash: 13k76cemt6Sf92ZNBW6R6RxtUCROzQCLop1b+iGGSUQ=) 12: Ys5uNWXcabyigl96ree5Jzjc4xQ.roa (hash: f+JccggJ2odV8dttKzqJrNMhrUYzKd+wSv2brX2GdxA=) 13: bLty7x4_bp6bJO68Cul62fRMxlU.roa (hash: kYiMfI9JDPevUGPZ1zVTj//0LProZnsEPqeHJe8gbiQ=) 14: c1of_GGOGBpj8gjfCUC0AsJuKNg.roa (hash: f3erzVhNqOm3b2k4MQozf9a0YdwKNFSjx0Hb4KbZctc=) 15: d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa (hash: ybFlHwrk0/bn9A8GTyAQQ72jsrneQsxgrXLeXX2L7mc=) 16: dCqQVizHmCbsgLcX6csX7Rciuic.roa (hash: sDGzeBpaeg3YAhNrnUWPuM/ODk832tRUJ5O2TTkUfds=) 17: hzNDyInh_bUBg7Uejg55aTvL-3Q.roa (hash: FJw1sBNqJdJQhACILp+itphyL4fweg2OQEEsFKom/I8=) 18: p8xrYoE8jgCdAonYCfT-ApjsEIQ.roa (hash: f7jnATXq/oP3S34j8++EJHwq/uX1I51J0Ibdj4DXw3g=) 19: rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa (hash: iB8AOxEYfvNU1/L6TivJBk9QHQFdeq4cJO6UXX1sPUM=) 20: s4XhO3zd68odlYNKfOcr66qKpYo.roa (hash: lGF4r2lhB2RKS4kFkLqdXXo14Ag7CA/0NH/w4b5IOWU=) 21: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: fvUGT9iwEOS4DEXzxS0qUGfAOt8wQFzfoYg39qCbmnI=) 22: yBju9251opQb0e4SsoLoTlY7kVM.roa (hash: eQSRE9eUeTSXYWB/iKLZnX5m98d5OnEnkEhe2IV+YaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f2:07:fb:c2:f4:11:de:81:67:04:51:05:2d:27:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Mar 25 17:01:51 2026 GMT Not After : Mar 26 17:01:51 2026 GMT Subject: CN=883a05430c52502de309e092aab6add5bdb801ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:3c:f7:42:e3:14:f4:c5:d4:73:50:7e:94: 87:d1:0f:11:5d:89:5e:4b:09:04:33:25:27:07:e6: 3c:33:3f:bd:f1:95:fa:ab:02:5c:0f:68:32:eb:52: 77:f6:b7:cf:24:76:f2:1f:29:8e:13:ef:92:d2:fa: 84:33:d0:18:ac:92:d8:f1:82:eb:3e:aa:48:fe:9b: 85:76:53:8a:1a:11:99:f9:99:43:f9:a0:be:4e:f5: dd:d7:08:df:d3:a3:9a:77:0f:5a:96:5f:1f:e1:7d: 49:ed:db:4a:6f:5d:c8:5a:c0:e6:33:cc:9c:30:ab: 73:11:9b:7b:bf:a6:4d:cd:6d:00:9e:29:0c:e1:c2: 3f:23:db:7e:7c:e6:5b:47:49:c0:b5:79:d0:c0:80: 56:40:45:99:cf:9a:12:fd:e6:83:47:18:2c:45:e7: 7c:46:a3:47:da:85:dd:0b:16:1b:c3:18:1e:f3:b4: 47:45:dc:05:4a:b4:7c:a2:86:84:1c:3d:01:78:31: 35:c7:ad:b2:f7:45:1e:87:f4:6c:6a:91:70:4f:68: 0d:3b:0a:8e:01:87:d0:f2:2f:8f:36:6b:6d:e6:27: a7:6e:64:d8:07:c6:a0:4a:4d:30:9e:e1:ec:4a:ff: 38:bc:19:af:9a:96:83:31:4b:44:57:e6:e1:b7:cf: 94:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3A:05:43:0C:52:50:2D:E3:09:E0:92:AA:B6:AD:D5:BD:B8:01:AE X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:44:c0:2b:54:58:98:0e:d1:0c:2e:12:5e:69:66:2e:cd:83: ba:f5:c6:5f:e5:b4:7f:fc:5b:18:da:51:2b:ce:ee:54:af:bb: 07:15:76:80:65:5b:34:9c:b9:34:ad:b1:f3:88:df:41:2b:36: e9:87:d4:be:a5:8b:f4:04:15:61:d6:44:84:84:12:47:7e:85: 90:c3:03:24:ec:b6:1e:10:31:ac:c6:cf:54:86:44:d8:7d:c1: b0:8d:5a:87:f6:f5:ff:df:9d:59:62:c6:18:b8:38:61:cc:da: d9:52:54:d8:b2:d8:b5:6b:8b:5b:0d:d1:60:99:71:87:72:dc: 6b:0c:16:a6:09:5f:5d:01:95:f0:88:10:f6:bf:5b:e8:c1:4b: b8:de:70:78:d7:2c:8e:18:ca:d8:9a:4d:7d:33:06:40:5d:49: fe:e5:81:45:d0:eb:19:14:a9:f0:8d:ed:00:3a:66:79:7d:fb: 70:81:ce:90:6c:e9:36:04:70:36:97:e8:99:09:3e:4d:bf:c0: 11:3d:3f:22:1a:9a:4f:42:4a:c8:b6:0e:b7:29:d9:05:00:38: 17:90:d2:75:a3:be:f1:5a:ab:98:2b:51:ee:d9:36:76:68:1d: 05:56:2a:17:2d:81:21:fd:4b:54:26:46:9e:8c:99:d5:e5:e8: 34:97:ef:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8gf7wvQR3oFnBFEFLSdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMzI1MTcwMTUxWhcNMjYwMzI2MTcwMTUxWjAzMTEwLwYDVQQD Eyg4ODNhMDU0MzBjNTI1MDJkZTMwOWUwOTJhYWI2YWRkNWJkYjgwMWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApec890LjFPTF1HNQfpSH0Q8RXYle SwkEMyUnB+Y8Mz+98ZX6qwJcD2gy61J39rfPJHbyHymOE++S0vqEM9AYrJLY8YLr PqpI/puFdlOKGhGZ+ZlD+aC+TvXd1wjf06Oadw9all8f4X1J7dtKb13IWsDmM8yc MKtzEZt7v6ZNzW0AnikM4cI/I9t+fOZbR0nAtXnQwIBWQEWZz5oS/eaDRxgsRed8 RqNH2oXdCxYbwxge87RHRdwFSrR8ooaEHD0BeDE1x62y90Ueh/RsapFwT2gNOwqO AYfQ8i+PNmtt5ienbmTYB8agSk0wnuHsSv84vBmvmpaDMUtEV+bht8+UVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIg6BUMMUlAt4wngkqq2rdW9uAGuMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGETAK1RY mA7RDC4SXmlmLs2DuvXGX+W0f/xbGNpRK87uVK+7BxV2gGVbNJy5NK2x84jfQSs2 6YfUvqWL9AQVYdZEhIQSR36FkMMDJOy2HhAxrMbPVIZE2H3BsI1ah/b1/9+dWWLG GLg4Ycza2VJU2LLYtWuLWw3RYJlxh3LcawwWpglfXQGV8IgQ9r9b6MFLuN5weNcs jhjK2JpNfTMGQF1J/uWBRdDrGRSp8I3tADpmeX37cIHOkGzpNgRwNpfomQk+Tb/A ET0/IhqaT0JKyLYOtynZBQA4F5DSdaO+8VqrmCtR7tk2dmgdBVYqFy2BIf1LVCZG noyZ1eXoNJfvyw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:32:34 2026 by rpki-client