$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: KE0Fj5lG5Lq5BxNQWsPLgsT7qnUg7wgm1BO2OqT7VuI= Subject key identifier: F2:A7:07:F0:60:CB:4B:3F:4E:C1:83:AE:6B:70:88:27:D4:FC:FA:E4 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019D27A895A68A55A486C3EF0D2BE8B9DA3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 147C Signing time: Thu 26 Mar 2026 01:00:52 +0000 Manifest this update: Thu 26 Mar 2026 01:00:52 +0000 Manifest next update: Fri 27 Mar 2026 01:00:52 +0000 Files and hashes: 1: 1_FG2YBqdRhKKIdbfUoaXRIcZtY.roa (hash: DZwW0dAX0l87sLjk9z+qjZR2gAmIuChfWqvnjdJSHpE=) 2: ExLhkVGO_IcP9FKIq81f0oI-oCg.roa (hash: 5HCccmMIa3ZS3Rm7UZ7dWL9/99iZ3k4KgXviDu7U84Y=) 3: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (hash: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg=) 4: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (hash: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08=) 5: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (hash: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI=) 6: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: 07cLGYQZL6zn2JxXO6W8FIbvmlY84Fk0672CQm3tGlg=) 7: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (hash: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU=) 8: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (hash: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU=) 9: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (hash: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4=) 10: k5tcy3X-bfkTgY-KuojhW38Hb84.roa (hash: /njehwBJ3hy+S6rVtCdBk1btpc3S6jZQpXCGPHURc0Y=) 11: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (hash: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M=) 12: omuRSlN3uxDC5Q-fxRiwTPk66HM.roa (hash: GxwNrXChKZTEhS9UT+A6aKihcuWe4QoSUJOCbKFbnmw=) 13: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (hash: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI=) 14: woLmD7M3XCh8hzd96HJkdchNmr0.roa (hash: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA=) 15: zEU1dCR-4rlXlEW4u-atk395zhk.roa (hash: Kfvh6mjf8zMx7Jx8eSoWtHWYqopwifCIKWlHo0qGGIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:a8:95:a6:8a:55:a4:86:c3:ef:0d:2b:e8:b9:da:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Mar 26 01:00:52 2026 GMT Not After : Mar 27 01:00:52 2026 GMT Subject: CN=f2a707f060cb4b3f4ec183ae6b708827d4fcfae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ad:b1:8a:b4:f3:3e:21:97:45:65:f5:4a:53: 25:bf:d2:30:83:d9:cc:4c:4c:01:39:70:30:3d:1e: e5:06:38:2b:65:da:d4:3f:77:43:c7:fb:ae:b8:16: c7:1d:3a:49:70:80:9b:14:b4:3c:ed:a2:58:f4:43: 22:ca:4d:a1:0a:53:8a:f5:47:c0:3b:9f:b1:7c:f0: 90:54:bf:d0:32:0c:db:07:71:39:73:8e:6d:35:d9: bb:8a:8c:96:11:a5:b7:e2:e9:9f:30:c2:a9:eb:3d: 48:ba:5c:4b:60:60:16:81:a0:17:b7:30:e6:69:f3: a5:a9:12:8a:00:bc:ae:2c:43:74:3e:2e:be:ab:68: 15:42:52:7c:a7:7e:44:7d:74:1b:8d:a4:79:e6:aa: 79:e9:ce:50:26:2e:bc:5b:68:15:96:63:3f:93:d2: c4:46:55:61:81:ba:65:aa:24:ea:e9:33:7e:ee:5e: 07:bb:5c:ed:e0:5a:aa:10:e4:42:e9:5e:7c:a5:c3: 4a:98:80:91:1c:52:81:64:43:48:f3:19:9f:ed:fb: 7a:c2:49:2c:e2:e2:60:f9:26:61:2f:d1:ca:da:08: 73:05:c3:44:b8:0d:da:9d:9a:9a:9f:45:2b:46:98: 0b:1f:da:c1:b5:60:97:e2:31:6e:c2:7b:8d:79:71: e0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A7:07:F0:60:CB:4B:3F:4E:C1:83:AE:6B:70:88:27:D4:FC:FA:E4 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:eb:d8:16:c5:eb:25:5c:4e:83:e9:4d:b9:ee:c0:9f:9a:60: 24:e5:1f:21:8e:82:84:9c:7e:ba:fd:ce:59:4f:95:51:f4:eb: ed:f7:ae:b9:15:2c:29:9a:f1:65:53:d3:83:a9:67:4c:66:b8: 2f:5e:7d:7b:27:0b:26:f2:98:75:c1:d9:05:47:c3:f1:35:1f: 19:5c:a7:9c:fb:a7:02:40:45:98:66:55:8e:81:74:df:3d:42: 39:f1:e8:0d:5c:05:5c:42:06:0a:c9:c8:74:a0:59:18:28:aa: 05:aa:dd:c4:ee:a2:54:c2:5c:a1:84:8f:0b:58:98:d1:c1:de: 8b:0c:2f:dd:66:aa:91:03:64:23:54:f6:b0:d8:ea:da:ba:46: e8:2e:84:f8:1a:1c:e7:3a:1d:86:20:92:54:3c:2c:c3:08:a3: 60:60:cd:33:0d:7a:a9:9f:1b:0e:fb:35:e0:0d:74:a3:cc:2f: cb:d9:ea:d2:dc:78:46:3a:d2:91:98:03:cd:59:10:6a:e2:66: f5:f7:f4:52:3d:f9:f9:e5:f3:fd:8f:5a:6e:64:94:0c:0a:83: 94:19:30:17:c1:1d:26:33:62:02:6c:7a:3d:0d:7b:9e:cf:0d: 3f:58:d7:7f:2d:13:73:f3:f3:5b:63:37:a8:fa:1b:8b:c2:1a: a3:d0:4f:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nqJWmilWkhsPvDSvoudo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwMzI2MDEwMDUyWhcNMjYwMzI3MDEwMDUyWjAzMTEwLwYDVQQD EyhmMmE3MDdmMDYwY2I0YjNmNGVjMTgzYWU2YjcwODgyN2Q0ZmNmYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq2xirTzPiGXRWX1SlMlv9Iwg9nM TEwBOXAwPR7lBjgrZdrUP3dDx/uuuBbHHTpJcICbFLQ87aJY9EMiyk2hClOK9UfA O5+xfPCQVL/QMgzbB3E5c45tNdm7ioyWEaW34umfMMKp6z1IulxLYGAWgaAXtzDm afOlqRKKALyuLEN0Pi6+q2gVQlJ8p35EfXQbjaR55qp56c5QJi68W2gVlmM/k9LE RlVhgbplqiTq6TN+7l4Hu1zt4FqqEORC6V58pcNKmICRHFKBZENI8xmf7ft6wkks 4uJg+SZhL9HK2ghzBcNEuA3anZqan0UrRpgLH9rBtWCX4jFuwnuNeXHgjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKnB/Bgy0s/TsGDrmtwiCfU/PrkMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+vYFsXr JVxOg+lNue7An5pgJOUfIY6ChJx+uv3OWU+VUfTr7feuuRUsKZrxZVPTg6lnTGa4 L159eycLJvKYdcHZBUfD8TUfGVynnPunAkBFmGZVjoF03z1COfHoDVwFXEIGCsnI dKBZGCiqBardxO6iVMJcoYSPC1iY0cHeiwwv3WaqkQNkI1T2sNjq2rpG6C6E+Boc 5zodhiCSVDwswwijYGDNMw16qZ8bDvs14A10o8wvy9nq0tx4RjrSkZgDzVkQauJm 9ff0Uj35+eXz/Y9abmSUDAqDlBkwF8EdJjNiAmx6PQ17ns8NP1jXfy0Tc/PzW2M3 qPobi8Iao9BPiw== -----END CERTIFICATE-----Generated at Thu Mar 26 12:20:39 2026 by rpki-client