$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: 5DhvK66s64DGwwDffVW5DEoWEalOk8s/fAHEjgoXfic= Subject key identifier: 4C:92:F6:B8:BC:B5:98:C9:A9:6C:30:BF:D3:18:E1:88:49:D8:76:4D Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019D2A04F02FF8B33111D77A2EE6532D2FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 18C1 Signing time: Thu 26 Mar 2026 12:00:59 +0000 Manifest this update: Thu 26 Mar 2026 12:00:59 +0000 Manifest next update: Fri 27 Mar 2026 12:00:59 +0000 Files and hashes: 1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=) 2: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=) 3: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=) 4: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (hash: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=) 5: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=) 6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: F5DPimxL5fMxUA1wFLUQBGjSMlP6WvvwS+EmYwJcwMA=) 7: CpwjRHd-dlM6HLWtJRLo65vz3sE.roa (hash: ipcBkj7y8N+DKJBxCvsI7Zk0obHeYg4amjAZYyQnzfU=) 8: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=) 9: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=) 10: TWWxT-nCkmtPHnYGn6dWdhUMzGM.roa (hash: 7Vooj87eGlBm2XvcSGagn83xkeJCxQE8AEsJBuPCxmA=) 11: eUbHTyUSavH8iggt7_qSKew38qc.roa (hash: DkFbowlItExQYC/lsxmajYQ2K4RpBXLaJENP+PgEu2I=) 12: eu0CoO4MQ8ynKFtapNpQqOzhd5U.roa (hash: CE6Pwn13O7Jm2klRaAsz6obokQcz3Q5vJ5OCjk+3oLA=) 13: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=) 14: wIQN1qjszJK_EWTG2KZPYPb7pjY.roa (hash: gRnICZ8LPFfQ15En6Kpg0jEOMzCzPNmoOaQr/MOyZDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:04:f0:2f:f8:b3:31:11:d7:7a:2e:e6:53:2d:2f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Mar 26 12:00:59 2026 GMT Not After : Mar 27 12:00:59 2026 GMT Subject: CN=4c92f6b8bcb598c9a96c30bfd318e18849d8764d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:60:1c:7b:49:64:19:f3:1a:1e:49:90:19: f2:8d:28:01:68:8a:69:f7:4b:2a:db:d1:4e:5f:43: 65:f2:22:70:f1:95:03:20:1d:b9:bc:24:d0:a9:fe: c6:3b:f4:5f:47:e1:25:12:3f:1e:2c:40:9d:22:37: 6b:f7:bb:7a:9f:fd:4e:aa:51:83:d6:15:e8:5b:01: a7:3c:65:c1:42:84:32:82:98:e7:c2:b7:6c:ad:a1: 0d:6c:3a:50:6a:da:5b:0a:26:87:3d:7a:5b:cc:b9: e4:26:35:7c:a2:ea:48:5a:cb:bc:b6:35:6e:2b:75: 37:68:8f:83:56:39:16:5e:35:d7:d0:a0:e4:5f:24: 10:1b:e3:75:22:ae:49:8a:24:48:79:6d:cd:be:fb: 06:20:a0:d8:20:74:fa:3d:ae:be:1d:68:23:2b:85: 3f:69:6f:62:6c:40:7e:23:84:ca:4a:b1:e1:c3:79: ec:35:ce:cb:8b:9d:e5:d3:db:83:b9:ef:bb:78:51: 30:fc:d5:71:e1:20:97:c3:ba:6c:be:2c:12:04:8f: 08:79:9b:e5:44:70:5c:c0:d6:5a:33:eb:76:01:b7: 94:9f:56:b8:29:21:6f:6f:f8:a4:f2:da:ef:5b:d5: cc:40:58:3f:b9:43:0d:3c:60:53:41:6e:0f:c2:d8: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:92:F6:B8:BC:B5:98:C9:A9:6C:30:BF:D3:18:E1:88:49:D8:76:4D X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:6a:25:b9:03:1c:cb:a3:e7:b7:10:57:ab:21:56:b8:d8:2e: 67:33:76:bc:68:17:6d:01:4b:6d:b1:2c:98:a5:ae:33:cc:bf: 3e:ec:eb:f1:38:4a:3b:da:3f:09:97:2d:a6:66:19:24:e9:93: 0d:21:b6:77:5b:e9:92:73:ce:5a:9d:35:e0:d7:aa:77:56:89: 27:de:e5:f8:fc:f1:35:cf:f6:c1:10:af:5d:40:e2:53:a3:df: ac:d1:41:d8:5c:e2:49:84:6b:27:0e:f4:15:f8:9b:c4:87:cb: 3a:4f:af:b7:56:4e:6c:f2:e6:2d:af:d4:d1:d6:a8:e2:be:fb: e6:8d:1b:8d:62:9d:50:96:54:41:3b:06:ab:95:fa:2c:26:bb: e4:90:a5:87:c9:6a:3c:c7:e4:56:5f:2a:f9:02:35:0e:8b:ac: 3b:9c:ee:bc:55:49:f0:56:22:e0:96:68:76:59:93:ac:d5:65: f8:70:cb:05:39:8a:e6:7b:43:08:7c:85:bf:fb:0d:73:b7:70: f2:56:3b:a1:be:00:df:b9:71:fe:f8:64:94:70:d9:c9:fb:90: 68:83:e8:3b:2d:15:65:cb:be:d8:6e:7b:b4:17:d5:e5:bb:3e: 74:5e:2a:f5:74:a7:11:07:4b:31:09:16:4f:83:20:46:4c:5b: 91:9c:79:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qBPAv+LMxEdd6LuZTLS+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwMzI2MTIwMDU5WhcNMjYwMzI3MTIwMDU5WjAzMTEwLwYDVQQD Eyg0YzkyZjZiOGJjYjU5OGM5YTk2YzMwYmZkMzE4ZTE4ODQ5ZDg3NjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7RgHHtJZBnzGh5JkBnyjSgBaIpp 90sq29FOX0Nl8iJw8ZUDIB25vCTQqf7GO/RfR+ElEj8eLECdIjdr97t6n/1OqlGD 1hXoWwGnPGXBQoQygpjnwrdsraENbDpQatpbCiaHPXpbzLnkJjV8oupIWsu8tjVu K3U3aI+DVjkWXjXX0KDkXyQQG+N1Iq5JiiRIeW3NvvsGIKDYIHT6Pa6+HWgjK4U/ aW9ibEB+I4TKSrHhw3nsNc7Li53l09uDue+7eFEw/NVx4SCXw7psviwSBI8IeZvl RHBcwNZaM+t2AbeUn1a4KSFvb/ik8trvW9XMQFg/uUMNPGBTQW4PwtiUQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyS9ri8tZjJqWwwv9MY4YhJ2HZNMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGoluQMc y6PntxBXqyFWuNguZzN2vGgXbQFLbbEsmKWuM8y/Puzr8ThKO9o/CZctpmYZJOmT DSG2d1vpknPOWp014Neqd1aJJ97l+PzxNc/2wRCvXUDiU6PfrNFB2FziSYRrJw70 FfibxIfLOk+vt1ZObPLmLa/U0dao4r775o0bjWKdUJZUQTsGq5X6LCa75JClh8lq PMfkVl8q+QI1DousO5zuvFVJ8FYi4JZodlmTrNVl+HDLBTmK5ntDCHyFv/sNc7dw 8lY7ob4A37lx/vhklHDZyfuQaIPoOy0VZcu+2G57tBfV5bs+dF4q9XSnEQdLMQkW T4MgRkxbkZx54g== -----END CERTIFICATE-----Generated at Thu Mar 26 14:43:21 2026 by rpki-client