$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: IsM1kaHy7SJfRxhvcJXuozj1fJicl7BEHyI4Ti+GoeY= Subject key identifier: 4D:29:FD:26:4C:5F:EC:6D:C1:74:7A:AB:68:E1:07:26:12:54:D5:D9 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019D265F941409B3713392D28D9F1240E376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: 0262 Signing time: Wed 25 Mar 2026 19:01:31 +0000 Manifest this update: Wed 25 Mar 2026 19:01:31 +0000 Manifest next update: Thu 26 Mar 2026 19:01:31 +0000 Files and hashes: 1: 1E8AiSnlYGPXbOfAXqZEBvdti0Q.roa (hash: zg4/KmKPBBnWqoo6XqmqqOeEWKX38ZMsmowwS7V3CsY=) 2: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: CwMsUXGUsbxo+TQ4cH2N6eeLtPevGWj3lPIplMAnvp4=) 3: AvhSVHbyFsNJfn-87fA7oHcica0.roa (hash: JjNvwI8D/DTZ5Kz60xSRCIvB7TZ/neKfvnL3MZ2ZTSU=) 4: HXuTzX9VfifSgh_by8R4gzXpV0A.roa (hash: VupAOJRlaCiEgZ7wECzmuZMBjr0LXoaZxVyyqAIjAFU=) 5: IVZBRFdSJY29zLQZ1_9wiAyBY3s.roa (hash: xXi2DYhCr9UQ0TOmKNZR/7z5N9pMzwYqtN9+5h1VndQ=) 6: L6Ra25CjKp_mEEvb6fnLzB9z48Y.roa (hash: gAYyNL8en1bwIuDNmy096pQ8EjEcbk/vtZcx5FewlIM=) 7: ZmA7YXk1EXie8V8IljOsrQAeVMc.roa (hash: KfN3YtXoCnYtbOhys/L3JbGSTPU3Jpxa1rNO5rVZaaM=) 8: adb_NQqDE2btKs5IvofM8ruzaqs.roa (hash: mZd2SOSViUwqdouzHTAAV8V8TgiRqrWPvi7A8y6abkk=) 9: hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa (hash: AabyFao1094cA8E0S9PcCwFVPGA7d1c7Y+W9MYMaIkQ=) 10: iCAoTJ6_FbKXxlsZVDeLJRceNFg.roa (hash: bMQFyA/DfiURPI0ApEpZ777S9eYeQRmm3uEDLrIS7DM=) 11: iNlyy6fzG-pZXJKLvpBU9XAYkVo.roa (hash: S8q8QiAGEz7MV6+djxO4YwhYaC2j/vE52wvZ9iUEIgY=) 12: nV0RGA8YeIAJC8r564YsBz3tWb0.roa (hash: FRyDhevAMb9Jk+hqGXSfT9bbfYtcdvEV1kNPuTHLMzc=) 13: rTCIQuB8b5-23Fe16EFzxOkFAo0.roa (hash: 85dTReYxmMkhMzb7ZnE2kpCceaZUsUjOdsiOl8VJLKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5f:94:14:09:b3:71:33:92:d2:8d:9f:12:40:e3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Mar 25 19:01:31 2026 GMT Not After : Mar 26 19:01:31 2026 GMT Subject: CN=4d29fd264c5fec6dc1747aab68e107261254d5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:90:31:c1:5e:61:7d:cb:9a:e8:1c:47:17:dc: b2:c3:b7:06:b5:e6:85:bd:75:79:70:1f:c7:31:e6: 49:d8:60:2e:ec:82:13:fa:50:fd:49:62:c4:c1:07: c0:b7:52:5a:38:af:3f:3a:56:4d:eb:6a:79:3d:88: 09:5e:42:b3:89:df:41:ed:53:b7:76:c6:33:f7:ae: 30:80:88:21:a1:3b:a8:97:d9:05:f9:09:7c:0f:76: d2:be:5b:0a:e5:1f:5b:b5:71:00:3d:49:74:5f:cd: cb:50:9a:2a:d5:b5:f2:55:bc:22:4c:13:e8:1b:29: 1b:b7:4a:58:e2:0e:bc:d4:7c:c2:d6:20:95:f6:ce: 8a:2a:f2:23:51:2c:a9:60:0c:16:e5:95:34:94:36: 7b:43:a2:aa:70:df:f2:21:6f:e6:2b:af:aa:1f:5d: 45:79:1f:d5:a1:7c:ac:c7:fe:53:af:4f:9f:3b:9a: 37:f0:0b:3f:65:de:cb:88:a9:e6:ea:13:10:bc:5c: 3d:f2:a8:e5:d9:c8:96:21:9b:eb:05:6a:ca:d3:75: 91:8f:29:1c:7d:09:46:ce:ae:75:0d:73:1a:e9:5d: db:ca:f4:6a:53:93:a7:2d:f6:5c:95:ec:81:2e:6c: ee:1a:8e:8c:9f:4b:4f:fc:90:60:7e:3e:90:e1:94: 3e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:29:FD:26:4C:5F:EC:6D:C1:74:7A:AB:68:E1:07:26:12:54:D5:D9 X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:08:50:36:29:4d:d0:a6:20:df:4d:20:ae:b0:2f:da:0f:b8: d1:65:0e:f3:32:08:cf:d2:76:1c:90:27:99:4b:75:da:da:a3: 24:b8:a7:45:93:ed:9e:fb:05:f1:42:6b:c3:bf:48:43:e2:df: 21:79:7a:c5:da:be:b7:f3:ef:4d:8f:1c:81:5b:4b:63:3d:9c: 2b:ba:87:5b:f2:ca:66:2d:de:63:7c:af:0d:f8:2a:cb:42:d7: 86:4e:2b:73:8e:bb:26:dc:7f:36:8e:9e:53:28:4b:9e:81:12: 90:fc:b6:96:c4:81:4d:50:dd:25:64:7d:e9:30:81:04:4d:5f: e7:17:b0:6e:ba:e3:49:a6:f4:23:c3:50:6e:12:4f:22:a5:66: 08:cc:80:8b:05:0a:43:e4:c0:9b:54:07:03:b5:9a:e8:90:b1: 19:75:25:f2:80:c1:b4:32:b0:9b:59:34:36:e1:76:96:ed:e6: 93:15:4d:2e:98:0c:21:3d:c1:57:c5:0f:17:9f:f9:fd:9c:2d: 20:af:f1:1a:df:6c:e0:f2:9c:a1:69:ad:5b:c8:89:eb:8d:4f: ee:d5:cc:d5:c7:2a:33:54:c0:e6:e6:e6:9a:1f:90:0d:85:f6: 13:01:06:8e:de:cd:12:51:e9:94:2d:f9:88:3c:da:30:c5:ba: 30:3f:ad:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mX5QUCbNxM5LSjZ8SQON2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwMzI1MTkwMTMxWhcNMjYwMzI2MTkwMTMxWjAzMTEwLwYDVQQD Eyg0ZDI5ZmQyNjRjNWZlYzZkYzE3NDdhYWI2OGUxMDcyNjEyNTRkNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpAxwV5hfcua6BxHF9yyw7cGteaF vXV5cB/HMeZJ2GAu7IIT+lD9SWLEwQfAt1JaOK8/OlZN62p5PYgJXkKzid9B7VO3 dsYz964wgIghoTuol9kF+Ql8D3bSvlsK5R9btXEAPUl0X83LUJoq1bXyVbwiTBPo Gykbt0pY4g681HzC1iCV9s6KKvIjUSypYAwW5ZU0lDZ7Q6KqcN/yIW/mK6+qH11F eR/VoXysx/5Tr0+fO5o38As/Zd7LiKnm6hMQvFw98qjl2ciWIZvrBWrK03WRjykc fQlGzq51DXMa6V3byvRqU5OnLfZcleyBLmzuGo6Mn0tP/JBgfj6Q4ZQ+WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0p/SZMX+xtwXR6q2jhByYSVNXZMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtAhQNilN 0KYg300grrAv2g+40WUO8zIIz9J2HJAnmUt12tqjJLinRZPtnvsF8UJrw79IQ+Lf IXl6xdq+t/PvTY8cgVtLYz2cK7qHW/LKZi3eY3yvDfgqy0LXhk4rc467Jtx/No6e UyhLnoESkPy2lsSBTVDdJWR96TCBBE1f5xewbrrjSab0I8NQbhJPIqVmCMyAiwUK Q+TAm1QHA7Wa6JCxGXUl8oDBtDKwm1k0NuF2lu3mkxVNLpgMIT3BV8UPF5/5/Zwt IK/xGt9s4PKcoWmtW8iJ641P7tXM1ccqM1TA5ubmmh+QDYX2EwEGjt7NElHplC35 iDzaMMW6MD+thQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:19:45 2026 by rpki-client