$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: O8EOPazFU1kM4gvLSTPpH5Y8xhP4Vt0eh3QZQidz7Gk= Subject key identifier: C4:10:C8:E6:FA:AB:78:1C:91:5B:88:F7:94:8D:41:94:76:14:E6:E4 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019D2960F08F2BC0BCC8F1E2EA7052293043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0C39 Signing time: Thu 26 Mar 2026 09:01:51 +0000 Manifest this update: Thu 26 Mar 2026 09:01:51 +0000 Manifest next update: Fri 27 Mar 2026 09:01:51 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: QP9CNlQFuVB9wS0BW21smKX3lBU.roa (hash: dwNtwT/3EY1R/q2zrzRe6Xma12Bkc4BEFlUrU3pbm+Q=) 9: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: tSLfIYODdgKktRD8lAILVjlkxLEthDgvhPWS7q2kZls=) 10: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: fzxoNfiPUD7xeSSlqYVskKUZ9gQ.roa (hash: XjcQQ4lJaJtOIDs0K1l+gH5MfloiUUpBeoZaPEDBX6c=) 14: imTf8No1ZINbCYJNVjvMbyKdYDc.roa (hash: v7b/CtSyIh4Qh/63ZcyMa4HLHKrxYzw4yW2zbhrt2aQ=) 15: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 16: jdhRRSqw1KV-OBkZuUAJ-tCWDik.roa (hash: PZnlHT69L4VcU/X0HEwE+Wn3yCWoZ+g03Z4fHifOKPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:60:f0:8f:2b:c0:bc:c8:f1:e2:ea:70:52:29:30:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Mar 26 09:01:51 2026 GMT Not After : Mar 27 09:01:51 2026 GMT Subject: CN=c410c8e6faab781c915b88f7948d41947614e6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:11:ad:8d:d5:f5:b6:6a:25:83:66:b7:2b: c0:a0:d7:8e:0d:d9:58:b0:3e:40:c3:86:86:11:f4: 60:d1:06:6c:2a:21:9f:56:4d:bb:4b:b2:ac:8a:b8: 25:2e:89:d9:4c:d9:d8:8f:59:38:10:3d:8d:70:a0: 87:16:55:60:22:cb:5b:2e:fa:1a:52:b1:df:10:cc: 34:41:2b:11:d3:61:73:42:b9:06:96:ae:13:6a:b0: 87:53:a8:20:cd:9c:6e:8a:2e:02:13:3b:2d:3b:a5: 94:3a:d1:88:a3:21:cc:04:2e:a4:19:24:d1:82:6b: 36:5e:17:ba:33:66:bd:8b:5f:08:8b:ef:2b:6d:96: d7:49:bf:5f:a9:ce:d9:cd:0d:a6:4f:63:fb:31:03: d5:fa:a7:43:cd:95:9f:31:42:2c:af:c9:92:61:07: 64:dd:f2:15:62:e9:53:22:81:40:d5:60:cc:73:f6: 13:d4:10:26:f5:a7:4d:3d:d6:ae:66:3f:15:3d:8d: 12:34:28:88:0c:10:31:63:fc:ab:9d:ed:ec:86:80: fb:01:c9:77:3b:27:20:2c:0a:59:55:1f:4d:a9:59: 21:0b:89:bf:9b:10:5b:9f:80:a8:64:28:28:20:99: 69:23:74:4a:e0:cb:6b:64:57:63:e9:e9:29:52:c5: e1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:10:C8:E6:FA:AB:78:1C:91:5B:88:F7:94:8D:41:94:76:14:E6:E4 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c1:2a:c4:bf:38:2d:58:c1:4b:03:00:94:de:13:95:d8:45: ec:33:0c:6c:cb:72:09:ef:d9:d5:49:9e:6a:8a:37:64:13:0d: 2a:2d:26:54:7f:de:da:a6:06:e9:bd:49:d8:60:f4:0a:57:89: b5:a6:6b:32:a1:7c:34:28:ad:e4:f0:9c:68:2c:ea:50:e1:8d: f0:4f:8d:f2:81:ed:94:c0:a7:c3:de:9c:3b:58:7c:ab:1b:c1: 19:38:ce:75:22:51:71:75:72:a6:53:1c:e9:21:1c:84:d7:d3: 37:78:e3:7a:75:c6:79:99:cf:dd:a4:76:15:6f:2c:8c:f5:10: 36:44:88:28:28:8e:2d:56:95:2a:70:dc:49:e0:e9:46:2c:bf: 89:66:d0:95:e6:4d:2d:b6:f8:48:af:61:0e:cc:3b:8d:da:04: 49:72:64:d7:dc:fe:d2:89:d8:66:1b:e9:50:1e:0f:b0:58:b2: 50:bc:2d:f8:b8:60:ea:27:fe:7a:54:6a:76:a5:8b:a8:3b:18: de:ff:c6:06:34:18:0d:a1:0d:88:ad:11:77:e8:5d:77:1b:e9: 97:bf:ae:12:f3:c1:df:cc:1c:fa:62:28:22:07:87:1a:9b:4e: e2:52:6a:f9:d2:9e:e2:24:a2:48:8e:70:93:0b:bb:7e:8d:90: 36:53:33:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pYPCPK8C8yPHi6nBSKTBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMzI2MDkwMTUxWhcNMjYwMzI3MDkwMTUxWjAzMTEwLwYDVQQD EyhjNDEwYzhlNmZhYWI3ODFjOTE1Yjg4Zjc5NDhkNDE5NDc2MTRlNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJcRrY3V9bZqJYNmtyvAoNeODdlY sD5Aw4aGEfRg0QZsKiGfVk27S7KsirglLonZTNnYj1k4ED2NcKCHFlVgIstbLvoa UrHfEMw0QSsR02FzQrkGlq4TarCHU6ggzZxuii4CEzstO6WUOtGIoyHMBC6kGSTR gms2Xhe6M2a9i18Ii+8rbZbXSb9fqc7ZzQ2mT2P7MQPV+qdDzZWfMUIsr8mSYQdk 3fIVYulTIoFA1WDMc/YT1BAm9adNPdauZj8VPY0SNCiIDBAxY/yrne3shoD7Acl3 OycgLApZVR9NqVkhC4m/mxBbn4CoZCgoIJlpI3RK4MtrZFdj6ekpUsXh0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQQyOb6q3gckVuI95SNQZR2FObkMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8EqxL84 LVjBSwMAlN4TldhF7DMMbMtyCe/Z1Umeaoo3ZBMNKi0mVH/e2qYG6b1J2GD0CleJ taZrMqF8NCit5PCcaCzqUOGN8E+N8oHtlMCnw96cO1h8qxvBGTjOdSJRcXVyplMc 6SEchNfTN3jjenXGeZnP3aR2FW8sjPUQNkSIKCiOLVaVKnDcSeDpRiy/iWbQleZN Lbb4SK9hDsw7jdoESXJk19z+0onYZhvpUB4PsFiyULwt+Lhg6if+elRqdqWLqDsY 3v/GBjQYDaENiK0Rd+hddxvpl7+uEvPB38wc+mIoIgeHGptO4lJq+dKe4iSiSI5w kwu7fo2QNlMz7g== -----END CERTIFICATE-----Generated at Thu Mar 26 12:59:21 2026 by rpki-client