$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: MKZEOPOiXFBemXVE7upQul5GpSzy4kb7K3x0EwcNqW8= Subject key identifier: 90:39:DD:2D:65:32:51:46:EE:FE:3F:10:1F:B1:C9:63:51:97:7B:00 Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019D26967E2979C803A60C1B9314FF066193 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 037E Signing time: Wed 25 Mar 2026 20:01:30 +0000 Manifest this update: Wed 25 Mar 2026 20:01:30 +0000 Manifest next update: Thu 26 Mar 2026 20:01:30 +0000 Files and hashes: 1: 0hivjmx3zESdF4O-A2SSYqLGRzk.roa (hash: shH0/H2kUggaPw7GkO5zNoGa7K6ORDulOONVmqwNyzg=) 2: 34ts3PIYYIFWGi911YLJC_MNTy0.roa (hash: 4pjAppUY+fw8yDaAV/Qux+rVoBRiKl+Kw/H8kkGtDI4=) 3: 3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa (hash: 92O5pIZ5W4yGOk4rHe6wXslYmPaUdiXeWtRLQm4goss=) 4: 4BsASipyNhMfne7kcDB1nUMHv4U.roa (hash: gNxM9v4Ci9bVQzz6zMSsl4HxARtJa2mrpaEAF1ssvBc=) 5: 51oAIofJkFXpGxq0u0pMpGIor0Y.roa (hash: luFon6hTssLT0GVFCEnyosU6nzOcK0/WHgWU8mcIjfk=) 6: 6v6eeI5cY68j_2oFbpbr5jPTgdU.roa (hash: zqirwLCXgdjJFeXHZFQIYNjwkSF+pg6w51CqhX494MQ=) 7: HHVyXzUcc_YIy8baKZaV2Y45k38.roa (hash: ndUe7viQWWyFXFChfyWy877/Y7Q3qjUplP6K/mFzfDE=) 8: SodBob46gHvkE9f0X3aM1jnjv_0.roa (hash: USjt5jELYEu1iaW09TQw060b9YelZ/w0+6LrYh++vTo=) 9: bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa (hash: JYxMnFiCRaisfCjM99QzlqqTlxpJrwkoJa68usH9YxI=) 10: cHAy_4A-CMasQbGFupRjCXJRveA.roa (hash: Z5sX4UD5pwFqxzXI/4DJgcahhJVYCnCAo+Vk4S1WDik=) 11: fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa (hash: sPu4yXxTGRc2nkq1SBHu8c/xRYRB8YjHSE2w/qhSkXw=) 12: kEgukI4x5ATV385AVFHglji0HH0.roa (hash: 7W67j4OKnAJPYfKA7VB2yMPYazX4qvOU73e4/HvQ//o=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: oZcC1pz/es3Fj1tTiQDANpT20A+Cujm6S2lr6MvQXI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 20:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:96:7e:29:79:c8:03:a6:0c:1b:93:14:ff:06:61:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Mar 25 20:01:30 2026 GMT Not After : Mar 26 20:01:30 2026 GMT Subject: CN=9039dd2d65325146eefe3f101fb1c96351977b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c9:79:f8:62:38:85:1e:c7:f5:77:37:8f:98: 2d:d1:1a:ee:8a:1a:1d:4f:ef:cc:e7:14:3c:95:98: 36:6b:c5:eb:44:d5:a2:39:80:df:5e:10:d8:c3:ee: 86:15:6e:f2:8c:8f:d3:24:1e:4a:cc:1b:0d:71:65: d0:7f:c8:f1:72:a7:70:96:39:a6:28:15:89:f5:98: 0f:2d:bf:da:98:db:0a:25:c5:cf:90:9b:35:99:e7: ae:88:f1:be:f0:05:40:25:e6:75:c0:3f:d3:e1:bd: 29:0a:ca:cc:43:8f:fc:47:ec:6e:d6:e2:de:0c:50: c8:24:2a:b7:fe:18:e2:58:09:bd:0d:4c:47:67:2f: 5a:ed:b0:e0:87:6b:a3:34:a3:cf:e7:57:4a:5f:2f: 2b:bd:df:a3:45:4d:ca:be:b5:12:ad:6d:73:1a:74: 0e:22:c7:19:61:63:bc:aa:30:1f:d7:ad:fc:96:0f: 48:6d:6d:f2:8f:7d:94:2a:6b:4c:5e:33:bd:49:de: d1:2b:9f:62:ae:52:35:af:e5:5c:a6:81:03:88:03: 34:69:02:1b:c3:d9:20:af:42:80:27:10:85:55:38: c5:02:df:02:1b:66:ea:a3:8b:f6:09:72:f1:a1:ef: 1c:62:bd:07:2c:88:fa:a1:00:85:5a:59:e3:fd:ca: 70:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:39:DD:2D:65:32:51:46:EE:FE:3F:10:1F:B1:C9:63:51:97:7B:00 X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5c:64:12:97:6b:e5:db:af:80:1d:0c:af:12:31:73:35:0b: cd:aa:e6:2d:61:41:a4:79:e7:0c:da:34:a8:b4:42:6e:4c:28: 3a:17:26:bb:37:cc:eb:a4:da:fe:47:4c:42:6f:4b:58:a9:1c: 64:d2:b3:0e:35:bd:2f:c6:3d:1e:1c:a0:29:5e:1a:33:3d:3b: c8:91:42:db:15:94:2f:7d:d2:55:55:3d:f2:78:d2:f0:42:13: 2e:b9:c1:77:7b:c5:82:ba:67:f1:c1:ad:66:8b:88:7a:fb:d8: ad:3e:29:52:c0:85:6b:f4:3a:dd:57:30:a0:0a:e1:44:bf:4f: 78:47:0b:6c:9b:88:18:62:02:26:d4:2f:46:91:23:94:d8:8f: 6b:1a:b8:87:8f:19:a5:f7:63:db:fa:bc:0b:b1:3f:d0:03:79: ae:65:59:5f:26:16:3d:e0:5f:b7:e7:2a:7e:c5:08:eb:5d:f3: 38:b0:b3:bd:50:46:d9:8b:f9:c3:ef:58:42:28:01:34:d4:fc: 60:d1:c0:63:19:4c:8c:aa:6a:99:e6:bd:ee:4e:0b:16:5f:89: 56:18:dd:a1:6b:37:5c:80:4a:98:69:81:6f:2d:5c:70:7a:e2: 2b:26:37:44:8b:5f:00:07:7c:96:6c:83:df:64:a1:12:55:da: 35:23:6c:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mln4pecgDpgwbkxT/BmGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwMzI1MjAwMTMwWhcNMjYwMzI2MjAwMTMwWjAzMTEwLwYDVQQD Eyg5MDM5ZGQyZDY1MzI1MTQ2ZWVmZTNmMTAxZmIxYzk2MzUxOTc3YjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cl5+GI4hR7H9Xc3j5gt0Rruihod T+/M5xQ8lZg2a8XrRNWiOYDfXhDYw+6GFW7yjI/TJB5KzBsNcWXQf8jxcqdwljmm KBWJ9ZgPLb/amNsKJcXPkJs1meeuiPG+8AVAJeZ1wD/T4b0pCsrMQ4/8R+xu1uLe DFDIJCq3/hjiWAm9DUxHZy9a7bDgh2ujNKPP51dKXy8rvd+jRU3KvrUSrW1zGnQO IscZYWO8qjAf1638lg9IbW3yj32UKmtMXjO9Sd7RK59irlI1r+VcpoEDiAM0aQIb w9kgr0KAJxCFVTjFAt8CG2bqo4v2CXLxoe8cYr0HLIj6oQCFWlnj/cpwNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJA53S1lMlFG7v4/EB+xyWNRl3sAMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlxkEpdr 5duvgB0MrxIxczULzarmLWFBpHnnDNo0qLRCbkwoOhcmuzfM66Ta/kdMQm9LWKkc ZNKzDjW9L8Y9HhygKV4aMz07yJFC2xWUL33SVVU98njS8EITLrnBd3vFgrpn8cGt ZouIevvYrT4pUsCFa/Q63VcwoArhRL9PeEcLbJuIGGICJtQvRpEjlNiPaxq4h48Z pfdj2/q8C7E/0AN5rmVZXyYWPeBft+cqfsUI613zOLCzvVBG2Yv5w+9YQigBNNT8 YNHAYxlMjKpqmea97k4LFl+JVhjdoWs3XIBKmGmBby1ccHriKyY3RItfAAd8lmyD 32ShElXaNSNs/g== -----END CERTIFICATE-----Generated at Thu Mar 26 06:55:54 2026 by rpki-client