$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: IrZPHj/kxnQEgG5gmKyxk4YiW4jCKKWzwtstgR8Xocs= Subject key identifier: A2:C9:CA:7F:36:C9:4F:71:81:49:9A:E7:9F:73:A0:B1:33:F2:43:92 Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 019D2997A05748DD960EF24124894660A28A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 75 Signing time: Thu 26 Mar 2026 10:01:36 +0000 Manifest this update: Thu 26 Mar 2026 10:01:36 +0000 Manifest next update: Fri 27 Mar 2026 10:01:36 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: b1iDCvcB1fE5pcahlkPn5NGI2KESF9K6sUNZabBdIgM=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:97:a0:57:48:dd:96:0e:f2:41:24:89:46:60:a2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Mar 26 10:01:36 2026 GMT Not After : Mar 27 10:01:36 2026 GMT Subject: CN=a2c9ca7f36c94f7181499ae79f73a0b133f24392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f5:d8:7f:bc:ac:45:3c:82:8d:be:36:53:4c: e3:63:ff:56:77:bb:39:a2:a0:cc:49:8a:b3:18:e7: 9b:2d:7c:2f:02:ad:a8:f8:38:49:0f:d8:1a:19:e8: 85:f2:b7:be:1d:0c:1e:c1:ff:5a:ba:7d:a1:a0:f7: 43:82:f0:ba:ca:cc:8d:3b:5f:65:08:b4:9b:c8:e3: 1d:2c:2e:57:bf:bc:22:8a:3d:6f:8c:6a:6f:fd:88: 85:bb:a5:ab:a6:66:0b:26:eb:9f:50:d0:cc:59:da: d3:44:41:0b:11:52:85:81:88:8c:ca:cf:5b:13:2d: 92:96:1b:59:98:54:9c:63:6c:fa:d7:73:04:78:6d: bc:25:e2:d6:35:7a:4e:ab:d1:b2:bb:ab:ea:87:a8: 4c:28:b4:e3:54:24:86:5c:35:bf:89:06:a3:c7:1b: 3f:85:ac:96:3c:ac:7c:9e:db:ab:04:b5:5a:37:61: 40:e0:81:ab:a5:37:9c:a6:ad:1e:a4:9d:a0:98:7c: 13:dd:c0:0d:eb:e2:47:e7:90:d1:bd:ba:5f:2e:40: 85:1f:54:a8:f2:c0:31:d3:d1:27:8c:b7:ca:95:8e: 73:48:3b:8e:09:6c:b4:80:80:97:15:c4:00:e3:b1: b3:c0:d9:83:69:13:f5:c5:a5:bf:c1:cc:65:ed:cd: 9f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C9:CA:7F:36:C9:4F:71:81:49:9A:E7:9F:73:A0:B1:33:F2:43:92 X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5e:ea:e7:b8:62:e7:62:1d:ac:f3:c2:79:e8:7a:16:b2:f4: 06:74:c7:16:af:ad:c9:a1:6b:9b:1c:f5:26:1d:37:11:9b:d9: 9b:31:10:fd:d4:85:05:f7:59:9a:7c:29:2e:ff:85:85:26:6a: 7d:ea:26:f2:f5:9e:f3:c6:8e:d3:c3:3a:23:20:4a:85:d5:00: 4f:80:06:b6:d1:58:b4:36:09:39:60:05:91:f2:9a:46:1e:4c: 3c:0a:28:07:ef:df:38:6c:2d:d0:12:f3:bf:2f:58:d9:2a:e7: d7:db:51:0c:99:c4:da:ee:84:87:c5:8a:3b:fd:a9:0a:2e:e4: c5:b8:b9:9d:36:0a:27:98:8d:6b:75:9e:38:09:1c:d6:1a:8a: 89:28:0d:7a:66:e0:bd:fc:b4:fb:10:96:bc:73:ff:41:04:d0: 23:b9:1f:17:54:ef:d3:8f:84:5f:f3:d2:da:09:75:67:78:a3: c8:6f:68:ed:ff:ad:9c:e8:75:b5:74:18:5c:8e:86:4d:d7:7c: 64:e5:8d:99:51:da:31:65:9e:17:82:5f:a2:65:86:26:91:ee: 6a:b1:99:f0:93:d4:fa:de:7d:1b:2a:40:1f:0f:94:83:20:fd: 68:50:61:13:70:e2:2e:6a:b6:22:51:9b:d6:f4:85:4f:bb:d2: 13:71:c3:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pl6BXSN2WDvJBJIlGYKKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYwMzI2MTAwMTM2WhcNMjYwMzI3MTAwMTM2WjAzMTEwLwYDVQQD EyhhMmM5Y2E3ZjM2Yzk0ZjcxODE0OTlhZTc5ZjczYTBiMTMzZjI0MzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vXYf7ysRTyCjb42U0zjY/9Wd7s5 oqDMSYqzGOebLXwvAq2o+DhJD9gaGeiF8re+HQwewf9aun2hoPdDgvC6ysyNO19l CLSbyOMdLC5Xv7wiij1vjGpv/YiFu6WrpmYLJuufUNDMWdrTREELEVKFgYiMys9b Ey2SlhtZmFScY2z613MEeG28JeLWNXpOq9Gyu6vqh6hMKLTjVCSGXDW/iQajxxs/ hayWPKx8nturBLVaN2FA4IGrpTecpq0epJ2gmHwT3cAN6+JH55DRvbpfLkCFH1So 8sAx09EnjLfKlY5zSDuOCWy0gICXFcQA47GzwNmDaRP1xaW/wcxl7c2fSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLJyn82yU9xgUma559zoLEz8kOSMB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQF7q57hi 52IdrPPCeeh6FrL0BnTHFq+tyaFrmxz1Jh03EZvZmzEQ/dSFBfdZmnwpLv+FhSZq feom8vWe88aO08M6IyBKhdUAT4AGttFYtDYJOWAFkfKaRh5MPAooB+/fOGwt0BLz vy9Y2Srn19tRDJnE2u6Eh8WKO/2pCi7kxbi5nTYKJ5iNa3WeOAkc1hqKiSgNembg vfy0+xCWvHP/QQTQI7kfF1Tv04+EX/PS2gl1Z3ijyG9o7f+tnOh1tXQYXI6GTdd8 ZOWNmVHaMWWeF4JfomWGJpHuarGZ8JPU+t59GypAHw+UgyD9aFBhE3DiLmq2IlGb 1vSFT7vSE3HDbw== -----END CERTIFICATE-----Generated at Thu Mar 26 17:45:12 2026 by rpki-client