$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: J4dgIAss26yFUBgTz/8cLkl+56HQRKszsrnuvmUpVMM= Subject key identifier: C1:64:9D:76:13:19:0F:C8:A5:3D:52:39:8D:CC:D8:94:CF:A0:29:C5 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019D2961400C2491F0F44FFA036CC0FDE4B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 18C4 Signing time: Thu 26 Mar 2026 09:02:12 +0000 Manifest this update: Thu 26 Mar 2026 09:02:12 +0000 Manifest next update: Fri 27 Mar 2026 09:02:12 +0000 Files and hashes: 1: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (hash: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8=) 2: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (hash: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ=) 3: 2RHKEFUbX-V0Mf6y31Iq5dGlemY.roa (hash: 22aNA0RqHM/lo1ZuXKI24lPSyNZYgt9FvnHMilKuHJY=) 4: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (hash: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg=) 5: C58HKVenwwmbh1jkwoeqIUWdglo.roa (hash: dbM/VaOE1y6PqBg/KjdbXvgt9ovsuviuBnEC3nra0Jo=) 6: GEKxvGic2KzXVJsj3dcok72CGco.roa (hash: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw=) 7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: PZxz1Zq7sUTeRxEfNrIYwoJxgqW71fhkgJFSbLbWBY8=) 8: S4ZdWdrpb3qYx-e6gRNqyxS9XXU.roa (hash: HWieGKn5oMIm/cd+NltvfFL1DEkHDM7h4JKc/BDbryw=) 9: TN_g4sfmmPrHK_oZ30J7gNWtpIY.roa (hash: m5dgi6YlmiEMbhGuQK1tT2ie/bg//bcOLn6xqpAH6Zs=) 10: U_DCEtPw_hUMwrzj8r6wUIXBPig.roa (hash: zOV0/cSp312KHscfdmAUHtLOyMQW+m7fH0EzuAciKbU=) 11: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (hash: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk=) 12: XVl9Jn76mWQ8ncaJ_wDuumCSFsA.roa (hash: Hs6XsuXHPXeVRFbGDUcPFLc6y5U4gwmlkZ/AR7/NeXE=) 13: XuBKY0oAARsXVXjq7u8JeDvNOcU.roa (hash: vlWZjrm0v836+Ch01+GkfQiIKmv/HzSaOumEGtSwczo=) 14: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (hash: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA=) 15: k_MSpCKVnChWzSccoFJBjl40Vo8.roa (hash: VdSgjLWna9h9svrbMMSXJmkEe/+wqNq0RNqZ0DwPUZc=) 16: nkcD404rwM-bjy3W1eqAGIf4-jM.roa (hash: c+Jt4XtXipvJeR1ev/pkQCOQCvUzFmWnznkD8NrTMoI=) 17: pWHrs5rw_KgbSRJAL6KONruKqFc.roa (hash: AB3huwEj/N+euzlEzjByisO3oP/M0v+P+iouNnZD7xs=) 18: unZltpWjHIJfFpLIwg4b58uUsuU.roa (hash: hb7AVSL7Cg4MYbwSNaPjN4NWBI4LlWAD7QoGarhaIFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:61:40:0c:24:91:f0:f4:4f:fa:03:6c:c0:fd:e4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Mar 26 09:02:12 2026 GMT Not After : Mar 27 09:02:12 2026 GMT Subject: CN=c1649d7613190fc8a53d52398dccd894cfa029c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2b:d5:e7:5d:20:e5:d3:b7:6d:24:50:f3:5a: eb:60:c3:46:a4:22:69:a0:54:21:55:a2:6a:19:4d: 62:a4:c5:6f:c8:ff:5a:e3:f0:19:e0:1b:0a:a4:e5: 6c:2c:44:df:ce:67:68:a6:18:ab:92:63:0b:66:c5: 3c:06:c4:88:88:25:31:39:76:a8:66:85:02:ed:6b: 09:a0:7b:ce:49:49:ca:52:6d:f2:4c:b9:43:2c:68: 68:d2:af:7c:f7:07:05:aa:07:50:06:0d:78:fa:a8: aa:24:b0:5e:f0:9e:fc:ba:76:9d:07:ec:14:af:39: 79:71:db:f3:75:60:b5:15:c9:ca:6b:15:47:e6:89: 50:f8:97:3c:e1:c0:61:91:6d:30:d5:bf:03:e1:95: 6e:b7:63:79:41:24:32:70:a0:d2:27:d2:a4:f6:6f: 88:f1:9a:b9:4d:59:13:26:a1:b4:8a:8f:27:09:a8: fe:b6:03:25:d0:9d:c1:19:24:ed:c5:a6:70:e2:1b: df:6b:ea:ea:4f:37:bf:a3:1f:4c:84:2f:bc:f6:0a: 66:b8:24:fd:c4:e5:8c:b1:65:01:78:32:49:3d:cb: 74:73:95:02:17:fd:54:cf:d9:20:92:ed:48:7f:a2: 31:ed:71:5a:2e:08:1b:2d:a8:0d:fc:6b:ad:8c:c6: b2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:64:9D:76:13:19:0F:C8:A5:3D:52:39:8D:CC:D8:94:CF:A0:29:C5 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:aa:c9:5e:af:fc:6d:10:ec:fb:00:b8:89:0d:5a:64:05:c4: b2:c0:ae:e7:e1:4c:ff:8e:cd:9e:bf:c3:fa:ee:8a:fc:c5:bf: 69:92:76:f5:eb:16:c6:9b:e4:2d:e9:b9:cb:71:17:10:c5:e2: 6a:0b:ab:95:78:3a:a9:7d:49:5c:9f:21:c7:3e:ed:15:de:df: 16:f7:84:b9:57:7f:66:b2:bc:ed:5a:66:d2:c5:66:16:2c:d3: c3:78:14:44:9c:79:c0:b0:f4:e7:3f:42:af:93:bf:68:de:4f: 69:26:8a:b3:22:cd:89:89:29:bf:27:63:a1:0e:d7:01:7b:80: dd:41:ac:ef:9d:08:eb:d6:96:2f:93:18:c7:d7:8f:9a:d3:db: b1:c7:42:ba:12:ef:48:e7:ae:85:23:bb:a8:1e:0e:19:23:d4: 12:29:07:2a:58:aa:ff:2d:98:94:f2:bc:48:d3:14:99:ff:9b: c8:50:ad:3c:14:60:48:3f:cf:0a:ef:0b:28:44:d5:69:12:f3: 77:79:54:f5:18:58:d6:45:c9:0c:65:84:aa:e9:ab:ab:76:6c: cf:c5:eb:5e:8c:ee:2b:13:76:64:22:56:5e:4d:b2:87:5e:c1: 6a:df:8a:1e:2e:67:8d:1f:b3:8c:e4:68:cd:81:61:dc:45:e3: 70:6c:77:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pYUAMJJHw9E/6A2zA/eS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwMzI2MDkwMjEyWhcNMjYwMzI3MDkwMjEyWjAzMTEwLwYDVQQD EyhjMTY0OWQ3NjEzMTkwZmM4YTUzZDUyMzk4ZGNjZDg5NGNmYTAyOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SvV510g5dO3bSRQ81rrYMNGpCJp oFQhVaJqGU1ipMVvyP9a4/AZ4BsKpOVsLETfzmdophirkmMLZsU8BsSIiCUxOXao ZoUC7WsJoHvOSUnKUm3yTLlDLGho0q989wcFqgdQBg14+qiqJLBe8J78unadB+wU rzl5cdvzdWC1FcnKaxVH5olQ+Jc84cBhkW0w1b8D4ZVut2N5QSQycKDSJ9Kk9m+I 8Zq5TVkTJqG0io8nCaj+tgMl0J3BGSTtxaZw4hvfa+rqTze/ox9MhC+89gpmuCT9 xOWMsWUBeDJJPct0c5UCF/1Uz9kgku1If6Ix7XFaLggbLagN/GutjMayfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFknXYTGQ/IpT1SOY3M2JTPoCnFMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFarJXq/8 bRDs+wC4iQ1aZAXEssCu5+FM/47Nnr/D+u6K/MW/aZJ29esWxpvkLem5y3EXEMXi agurlXg6qX1JXJ8hxz7tFd7fFveEuVd/ZrK87Vpm0sVmFizTw3gURJx5wLD05z9C r5O/aN5PaSaKsyLNiYkpvydjoQ7XAXuA3UGs750I69aWL5MYx9ePmtPbscdCuhLv SOeuhSO7qB4OGSPUEikHKliq/y2YlPK8SNMUmf+byFCtPBRgSD/PCu8LKETVaRLz d3lU9RhY1kXJDGWEqumrq3Zsz8XrXozuKxN2ZCJWXk2yh17Bat+KHi5njR+zjORo zYFh3EXjcGx34g== -----END CERTIFICATE-----Generated at Thu Mar 26 17:42:08 2026 by rpki-client