$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: mxB/bH/WUclxmbbdoyrFrWQgfhA+MIa7PA95MZmGb2Q= Subject key identifier: CC:4F:28:3D:1C:EF:AA:61:1E:0D:B9:D4:B4:AF:00:A0:5D:8E:53:0E Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019D27DFB2D1D7CE05548D0365C59BD7ED60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 189A Signing time: Thu 26 Mar 2026 02:01:04 +0000 Manifest this update: Thu 26 Mar 2026 02:01:04 +0000 Manifest next update: Fri 27 Mar 2026 02:01:04 +0000 Files and hashes: 1: 1-Av5slqVQGl13SrEfsDMUE9C8xw.roa (hash: fHxcC/pLnuuTMmJ/MEePK0x7KhULD48H+HBYLlLnLM0=) 2: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=) 3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=) 4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=) 5: E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa (hash: 5MnQxHTjDi2NDKJrwnJ1AAzWp+hIpNaMlweOYJUqXj8=) 6: HfpMqcQpb_Oyo8q91Gxgrjfcnfs.roa (hash: 3z+4GXfqGZOD8OYrsC4T9FL0WEjQRqb08RZme3k48Lw=) 7: JsVZuQIKNIHzo3qKU_aGaN9TGy0.roa (hash: W7p0gBk862eedQpONG4wyoOk08n0osQClMT4stp+hJs=) 8: PyPswdGk1ZVrHOm_LMSZBjhQB1A.roa (hash: +8V8Dt++uOTSXhRHoCWJ+fxEyoBe8YcJTvD0shhiPWM=) 9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=) 10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=) 11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=) 12: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: 2XAK8E8y8l0DePPPuQSdX//Va96s887pczACkgcD6EY=) 13: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=) 14: oYXyy77jFFZFt2039BhjAw8G3L0.roa (hash: Cn7bnwSGye9UBPsmnOsVK1mE3z5k0eAVuqmgNwd2Ik4=) 15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=) 16: s1pXuGWW8y0eMDg2PLAPlJOS44g.roa (hash: 65AbhQkFbG41XkwAPCWwnfEfJS7XNkEvl4ocnYbT4oA=) 17: tKQOFu4gDtiR9E_Fs5E_WSdxqYs.roa (hash: WdBgiiX6jEX+9nf9y/4sf97cV0r9Y0+TqLFDE6JwVjA=) 18: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=) 19: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=) 20: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:df:b2:d1:d7:ce:05:54:8d:03:65:c5:9b:d7:ed:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Mar 26 02:01:04 2026 GMT Not After : Mar 27 02:01:04 2026 GMT Subject: CN=cc4f283d1cefaa611e0db9d4b4af00a05d8e530e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0a:89:e9:34:a5:2d:9f:91:bb:dd:4a:49:1f: 7d:ff:a7:2d:68:97:47:15:4a:b1:a2:86:57:40:a7: fe:91:59:e3:83:a4:d1:70:28:95:c8:a0:e6:b4:5f: f2:8d:8d:47:a1:b6:f1:c4:46:f3:a2:ae:f9:24:27: 53:6a:d7:df:c6:b5:bc:0c:67:23:9c:37:2b:0d:42: ef:b0:53:9c:60:7a:87:f6:ab:65:6e:71:47:7e:2d: 4f:a3:9c:ed:73:a9:eb:b8:7d:76:b0:63:08:d4:06: fc:c1:36:b4:0f:ff:e5:72:49:d5:ff:3a:33:6a:d0: 21:46:f7:db:1c:0c:a0:7c:77:85:07:c2:ef:47:33: 33:f8:5c:4a:15:1a:2f:89:d5:bb:89:12:61:79:b3: fe:e0:2e:9e:9f:8a:d0:0d:69:5d:ce:8f:c9:ee:f2: 34:f5:96:7b:cf:a5:f6:06:52:99:44:24:91:8d:57: 32:ca:54:01:93:e9:b6:46:90:55:57:36:60:c8:ae: 8a:7b:47:fd:ff:4b:3b:16:8f:fd:b2:35:88:39:d7: 94:b4:91:88:12:42:37:56:73:28:b4:28:4f:92:27: 40:c1:42:0a:aa:ed:5a:3b:1c:3b:28:70:c7:98:30: 44:4f:c8:e4:04:dc:ba:54:bd:61:64:3f:2f:d6:73: 0f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4F:28:3D:1C:EF:AA:61:1E:0D:B9:D4:B4:AF:00:A0:5D:8E:53:0E X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c0:91:a9:2d:8e:7f:97:e7:7e:0f:ed:bb:ff:05:bf:7a:d5: 36:ea:2c:be:3d:f1:69:d2:a3:bb:9f:f9:5a:0f:ee:9a:00:a9: b4:94:f6:10:9b:80:89:ac:39:10:12:fc:8a:d4:3e:b9:73:f9: 4c:c6:34:0b:94:18:c2:15:ae:cb:7b:e2:f3:36:9c:7f:f0:2f: 64:65:26:ff:c4:c0:ff:fd:e3:67:d0:ce:a5:61:a1:8c:01:06: 89:48:6a:06:c5:5c:12:fc:64:99:3c:34:d0:41:17:ad:b0:b2: 9e:58:e7:08:47:54:96:4e:12:b9:87:cd:75:8e:cb:67:95:93: 2c:d5:28:bf:bd:d2:46:44:1e:0f:96:12:32:4a:11:74:97:14: e9:37:94:d5:9a:05:a1:de:53:1a:e4:4e:82:08:80:86:08:73: e0:a4:87:c1:72:24:58:06:40:0e:89:c5:e4:44:c5:9d:b3:31: f3:61:d5:e2:f1:a1:57:c6:f6:45:91:80:87:2c:b5:63:38:21: 25:4d:35:b7:4e:55:2c:9c:98:37:71:a6:9c:03:fa:97:31:a5: 36:4a:4b:41:33:3c:82:fc:f5:b4:18:a1:6b:b0:8f:4b:56:be: 5d:97:8c:d4:30:e3:cd:48:4c:97:fc:3e:da:6b:0e:68:c1:47: b6:db:47:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n37LR184FVI0DZcWb1+1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMzI2MDIwMTA0WhcNMjYwMzI3MDIwMTA0WjAzMTEwLwYDVQQD EyhjYzRmMjgzZDFjZWZhYTYxMWUwZGI5ZDRiNGFmMDBhMDVkOGU1MzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AqJ6TSlLZ+Ru91KSR99/6ctaJdH FUqxooZXQKf+kVnjg6TRcCiVyKDmtF/yjY1HobbxxEbzoq75JCdTatffxrW8DGcj nDcrDULvsFOcYHqH9qtlbnFHfi1Po5ztc6nruH12sGMI1Ab8wTa0D//lcknV/zoz atAhRvfbHAygfHeFB8LvRzMz+FxKFRovidW7iRJhebP+4C6en4rQDWldzo/J7vI0 9ZZ7z6X2BlKZRCSRjVcyylQBk+m2RpBVVzZgyK6Ke0f9/0s7Fo/9sjWIOdeUtJGI EkI3VnMotChPkidAwUIKqu1aOxw7KHDHmDBET8jkBNy6VL1hZD8v1nMP6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxPKD0c76phHg251LSvAKBdjlMOMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8CRqS2O f5fnfg/tu/8Fv3rVNuosvj3xadKju5/5Wg/umgCptJT2EJuAiaw5EBL8itQ+uXP5 TMY0C5QYwhWuy3vi8zacf/AvZGUm/8TA//3jZ9DOpWGhjAEGiUhqBsVcEvxkmTw0 0EEXrbCynljnCEdUlk4SuYfNdY7LZ5WTLNUov73SRkQeD5YSMkoRdJcU6TeU1ZoF od5TGuROggiAhghz4KSHwXIkWAZADonF5ETFnbMx82HV4vGhV8b2RZGAhyy1Yzgh JU01t05VLJyYN3GmnAP6lzGlNkpLQTM8gvz1tBiha7CPS1a+XZeM1DDjzUhMl/w+ 2msOaMFHtttHDA== -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:45 2026 by rpki-client