$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: cDFVm6Uvb0F+0dWNByvLDjhnlCGM3BPmRXaS6gcd0W4= Subject key identifier: 68:61:D8:B4:1D:E4:E8:D0:E8:A1:15:4F:1B:7E:52:C4:8C:5C:CD:DD Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019D25F0F131C5D122593639F7171C9FB15A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 18CC Signing time: Wed 25 Mar 2026 17:00:40 +0000 Manifest this update: Wed 25 Mar 2026 17:00:40 +0000 Manifest next update: Thu 26 Mar 2026 17:00:40 +0000 Files and hashes: 1: FDadFeqXdB-4hSls4tkk3SxPK0c.roa (hash: vYzxw+U9C6N8QQp+gQ4+C6IjpNypmXaiCUE3aon4FxA=) 2: MfgRriYJp7m_VcqdOdfAbTb2DNo.roa (hash: KLVx3gQAbv0plQDb9I4VjnfX1uzxg36H8GHKeOJlzFY=) 3: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=) 4: QqOOXG2U8KmftWPIGkmnz-He-1I.roa (hash: 9H7M4l3KUWpTvpSo8NQDnFUn85s8Qh4futzKFfEpRME=) 5: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=) 6: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: ATuQHMWmp4t1gifyJiDpSebo2FJO7aOFEZgErjRNtu0=) 7: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=) 8: kT2l4aAekYpUQWufDkupbupuegk.roa (hash: rw2rc2iNkA7LVF7/4CAp2ausXlmtVnPSsdvSUBErb28=) 9: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=) 10: o6MpHL8yV-krGyep73H6gsRAx8s.asa (hash: L1E71NWbjV6huTp1t3AtPjE427jqHBJJESkb1c/dD1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f0:f1:31:c5:d1:22:59:36:39:f7:17:1c:9f:b1:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Mar 25 17:00:40 2026 GMT Not After : Mar 26 17:00:40 2026 GMT Subject: CN=6861d8b41de4e8d0e8a1154f1b7e52c48c5ccddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:eb:81:5b:4a:2c:2e:e7:e2:15:b6:24:d7: de:b8:e4:e1:1a:7b:76:f0:c7:ad:6b:31:fe:3b:98: cb:ab:67:66:bb:55:ae:d5:9a:29:3d:39:66:69:cc: bd:5a:80:05:0e:df:c1:21:2f:5b:74:c7:5f:2d:45: ae:c5:c1:9d:a5:7b:2c:59:ab:96:ce:d0:98:75:2c: 6a:4a:8d:2d:50:05:1d:c0:8e:fd:3b:69:3e:d0:ef: 84:89:a4:ac:ce:31:99:71:60:71:48:2d:cd:fa:23: 7f:76:f5:3a:0e:cc:f8:a0:84:1e:33:fb:bb:ad:21: 51:af:1c:92:16:6c:09:84:28:70:9a:f7:d6:b6:fa: ba:7c:41:eb:17:a8:da:b3:4a:f2:26:f8:d5:d8:b5: 8a:47:0d:65:59:b6:b3:72:1a:26:f9:9b:76:12:fe: a5:6b:6a:4a:98:03:f7:8b:63:94:7d:a0:7a:5c:61: 6d:81:a6:b8:84:10:96:88:68:60:ec:d8:e8:9a:55: 24:cc:18:60:8f:06:c5:e3:e3:93:8d:29:1f:72:cf: 9e:ed:92:28:21:b2:d4:4e:3d:07:9d:c9:dc:b2:9b: 25:4e:d9:72:89:95:f6:69:96:5f:be:08:73:40:3f: 8e:46:56:01:17:af:7d:5c:ba:6d:9e:bf:f8:80:66: 1a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:61:D8:B4:1D:E4:E8:D0:E8:A1:15:4F:1B:7E:52:C4:8C:5C:CD:DD X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cd:b7:d9:72:c4:92:a3:22:a8:c1:e8:16:d3:75:7f:a3:0f: 47:cc:97:b4:3a:3f:b5:1a:24:a9:d1:ee:76:a4:40:f8:c8:e3: 9e:52:93:f8:2a:be:72:9e:8c:86:f6:8d:5b:59:b3:81:c2:c3: 3c:2b:3b:8a:3c:fb:1e:f8:21:44:ea:ef:3c:ca:a5:9f:80:97: 1a:86:a3:f9:bc:3e:9b:0d:c6:eb:f9:d7:54:01:ce:ea:3e:13: e1:5a:1d:f9:26:35:0d:24:7f:e3:87:9c:af:41:8c:8f:fb:04: 93:dc:38:d1:68:5f:ce:b2:3c:3c:4f:53:ed:8b:26:2b:d7:f2: 00:a9:7b:34:24:5a:6b:64:68:49:28:29:a1:dc:51:f8:d0:01: bd:34:41:7a:b5:c9:76:8f:fb:85:5b:8f:47:3f:a6:87:53:3e: 11:53:4f:c8:14:11:87:ae:45:e7:2a:e5:68:42:d3:72:01:d9: fe:91:37:ef:3b:7c:06:32:f6:2d:c1:5d:91:3f:43:d5:c5:02: 9e:06:54:34:70:bc:4e:82:29:c1:5c:25:13:d5:c8:dc:4c:8d: 23:35:5f:0a:41:23:a0:98:f0:0c:8e:82:0f:cd:81:c1:5c:bd: 39:5b:a0:56:d9:9b:c4:16:9b:18:81:62:18:43:3d:26:b7:97: 42:58:2c:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8PExxdEiWTY59xccn7FaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjYwMzI1MTcwMDQwWhcNMjYwMzI2MTcwMDQwWjAzMTEwLwYDVQQD Eyg2ODYxZDhiNDFkZTRlOGQwZThhMTE1NGYxYjdlNTJjNDhjNWNjZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n3rgVtKLC7n4hW2JNfeuOThGnt2 8MetazH+O5jLq2dmu1Wu1ZopPTlmacy9WoAFDt/BIS9bdMdfLUWuxcGdpXssWauW ztCYdSxqSo0tUAUdwI79O2k+0O+EiaSszjGZcWBxSC3N+iN/dvU6Dsz4oIQeM/u7 rSFRrxySFmwJhChwmvfWtvq6fEHrF6jas0ryJvjV2LWKRw1lWbazchom+Zt2Ev6l a2pKmAP3i2OUfaB6XGFtgaa4hBCWiGhg7NjomlUkzBhgjwbF4+OTjSkfcs+e7ZIo IbLUTj0HncncspslTtlyiZX2aZZfvghzQD+ORlYBF699XLptnr/4gGYaxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhh2LQd5OjQ6KEVTxt+UsSMXM3dMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfM232XLE kqMiqMHoFtN1f6MPR8yXtDo/tRokqdHudqRA+MjjnlKT+Cq+cp6MhvaNW1mzgcLD PCs7ijz7HvghROrvPMqln4CXGoaj+bw+mw3G6/nXVAHO6j4T4Vod+SY1DSR/44ec r0GMj/sEk9w40WhfzrI8PE9T7YsmK9fyAKl7NCRaa2RoSSgpodxR+NABvTRBerXJ do/7hVuPRz+mh1M+EVNPyBQRh65F5yrlaELTcgHZ/pE37zt8BjL2LcFdkT9D1cUC ngZUNHC8ToIpwVwlE9XI3EyNIzVfCkEjoJjwDI6CD82BwVy9OVugVtmbxBabGIFi GEM9JreXQlgsUA== -----END CERTIFICATE-----Generated at Wed Mar 25 22:46:50 2026 by rpki-client