$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: V3irbHNMlEgzdNPIfxV/IQH7Sxr+flm2cQVcUQR3YZA= Subject key identifier: 50:F3:A4:28:FD:B9:BE:6C:55:4F:1F:99:71:F6:41:86:9D:12:AA:8C Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019D322C11C820BCA7C0C9FCB1F6F058E5C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 18DC Signing time: Sat 28 Mar 2026 02:00:42 +0000 Manifest this update: Sat 28 Mar 2026 02:00:42 +0000 Manifest next update: Sun 29 Mar 2026 02:00:42 +0000 Files and hashes: 1: 2X2Ba8rgbouM32gnizEyTUGgONU.roa (hash: /S0uaILIP04CzsCMDO3CxuQ/dGQk0LoPnR9uswe+Dno=) 2: BgYgNXUiTeu31n67bX2V90cAvTI.roa (hash: 0v54WM21W+/w7a0Su0L6xDmLThFZAOM3uY/lMR5ZoI4=) 3: H3tBAn476s18gPJKTSL87Rv5Hfw.roa (hash: K4eLaR9vBqA4AN5CoJGHX6K3zIZNHj23kEJNlCUBq5o=) 4: H7xAtviqUTTZ-2BturV__GojEYU.roa (hash: 7y/cFcrHkaXFHOFisDiq8TbDYWThg68s7xHeQ5K5iWc=) 5: R8F1DSddbUmoi5Lvz7GVdblbDkk.roa (hash: ti1BqLXIAMU2z5zdrrvdHJM6DJeICOfg1NjS+8ZVzTI=) 6: TRm4u9w4aHluG_xWq8D3WD9cjE0.roa (hash: t+LJY16hYEjvyFHAQ5NgBP7TAysJCOIWTLbr8ofTjqA=) 7: U8NQ-X6oXdPJtDvZC2bEGyclVuc.roa (hash: EnK49cFtZphk+Uu4vq0sYXSzWqCtB8Omy8Rc0kmt4Ts=) 8: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: La88MsUANKxM+eCNDuZu49G9rYYzew7D7WjwYrP+C4M=) 9: _0309cZ1kikOxbfzcD2XJAY-ldA.roa (hash: cZXM6KU83tIxyiRuWRs4jXSNFO8qUxYJiHjRIWvBrHc=) 10: dLSSiZeltba729G3UFGH0XwLSho.roa (hash: 4MsOLvl+y1vyg93nB2nnBksXqFnl7fNEnQs0xIF73hU=) 11: eqjRIQl2tcvdRn0WGpqecEf39BE.roa (hash: wo1ZcMLEQzOlMVuGPZQ1qvLlzhW3e3KGV8eqOLVncZU=) 12: vngvIz2KaFj8ZKtPi7_fxlNZjyQ.roa (hash: SSRAx6tIqP5pWWJsGfEi1oQj/WWXNPjtWbIrNaJW0nU=) 13: yHx7U3h6JZL7GjJtXadc-tvTWag.roa (hash: bHjlqHL1rl0Vu0vK21UaruHUNcXQbTCMAh8NovcebO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:32:2c:11:c8:20:bc:a7:c0:c9:fc:b1:f6:f0:58:e5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Mar 28 02:00:42 2026 GMT Not After : Mar 29 02:00:42 2026 GMT Subject: CN=50f3a428fdb9be6c554f1f9971f641869d12aa8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0f:4a:e9:65:a9:a4:8b:4a:72:e9:e7:04:34: 5d:6a:50:23:1d:5b:f2:a0:28:0a:2e:48:bb:b4:a7: e6:e1:2b:c7:d4:b9:34:8a:4e:65:f5:4f:06:5e:37: 75:ec:97:47:c1:71:78:33:8b:18:22:b9:a7:28:47: c7:b1:0d:1f:cc:51:6e:e7:ca:31:be:5d:2b:38:bf: 4a:1d:60:da:4b:36:eb:d8:89:65:84:c0:db:35:87: 3c:17:19:9e:4e:25:3e:a3:14:8f:87:17:98:62:9e: dc:ae:fc:40:ee:0b:67:84:eb:57:50:e6:79:50:a6: 1a:02:12:bd:c6:7c:4b:bc:0c:24:10:7b:99:a3:e0: 7b:1d:4a:f3:bb:72:0b:06:ca:35:a2:1f:bd:20:03: 06:ea:59:d4:1b:58:21:b9:88:e4:19:95:0a:2c:d3: ee:76:fc:65:83:28:7c:db:d0:a2:3b:75:f1:15:4a: a2:3b:42:70:12:55:1c:21:84:eb:a4:b7:3a:a1:75: 3d:7a:e1:e1:2a:6d:95:f0:63:b0:cf:ce:9d:75:b2: f3:4d:1c:11:ab:5a:65:a1:94:e6:83:c8:66:7c:dd: 7a:65:9e:3e:5b:eb:1f:e6:d2:3a:6f:97:f8:bb:ba: f1:15:41:85:0c:d4:60:b8:2a:a9:7a:25:85:7b:da: 52:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F3:A4:28:FD:B9:BE:6C:55:4F:1F:99:71:F6:41:86:9D:12:AA:8C X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:7c:6c:a0:9a:74:0a:30:9d:d7:a9:85:c8:7d:f2:50:7a:c7: 25:07:5e:9a:fd:66:d9:a5:7a:a3:13:bc:e7:31:37:0a:52:a2: f4:6e:7b:14:da:cc:6b:63:75:58:53:3b:58:d7:35:d8:4c:98: 58:ac:0c:b1:93:c0:5b:9c:2a:1a:c3:e8:3e:11:c0:d4:1a:21: 81:b7:a2:47:86:b6:6a:a5:d6:ed:ec:a1:8e:65:dc:d0:0c:e8: c7:82:91:e4:aa:95:87:b4:6e:b8:db:4c:ea:16:4c:2d:bc:a2: 3a:6b:af:5f:ae:25:0d:2e:7a:7a:02:e8:39:de:6d:13:90:17: 32:75:ab:6f:24:7c:53:e9:c2:6c:09:fe:62:ff:00:db:fc:6e: ae:b6:b3:23:8d:ab:e1:ef:00:7f:d6:d0:b3:20:a1:15:b5:22: 9c:a2:80:c5:a7:08:7c:97:e9:14:c2:9a:1a:e1:ec:5b:a5:92: ce:8c:4f:9b:0c:b2:24:b1:bc:98:0c:ed:53:b8:57:3e:b3:2b: 79:4b:f7:44:b9:76:33:d0:aa:e1:9d:e7:ad:a3:82:b6:7e:1b: 74:e7:d1:3c:47:fd:8b:d8:b0:11:70:d5:fd:3b:7c:9e:52:a4: 78:5a:36:99:15:f3:61:ec:a8:4e:e7:1d:b0:4b:54:47:c0:d3: e5:7b:95:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0yLBHIILynwMn8sfbwWOXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjYwMzI4MDIwMDQyWhcNMjYwMzI5MDIwMDQyWjAzMTEwLwYDVQQD Eyg1MGYzYTQyOGZkYjliZTZjNTU0ZjFmOTk3MWY2NDE4NjlkMTJhYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g9K6WWppItKcunnBDRdalAjHVvy oCgKLki7tKfm4SvH1Lk0ik5l9U8GXjd17JdHwXF4M4sYIrmnKEfHsQ0fzFFu58ox vl0rOL9KHWDaSzbr2IllhMDbNYc8FxmeTiU+oxSPhxeYYp7crvxA7gtnhOtXUOZ5 UKYaAhK9xnxLvAwkEHuZo+B7HUrzu3ILBso1oh+9IAMG6lnUG1ghuYjkGZUKLNPu dvxlgyh829CiO3XxFUqiO0JwElUcIYTrpLc6oXU9euHhKm2V8GOwz86ddbLzTRwR q1ploZTmg8hmfN16ZZ4+W+sf5tI6b5f4u7rxFUGFDNRguCqpeiWFe9pSBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDzpCj9ub5sVU8fmXH2QYadEqqMMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3xsoJp0 CjCd16mFyH3yUHrHJQdemv1m2aV6oxO85zE3ClKi9G57FNrMa2N1WFM7WNc12EyY WKwMsZPAW5wqGsPoPhHA1BohgbeiR4a2aqXW7eyhjmXc0Azox4KR5KqVh7RuuNtM 6hZMLbyiOmuvX64lDS56egLoOd5tE5AXMnWrbyR8U+nCbAn+Yv8A2/xurrazI42r 4e8Af9bQsyChFbUinKKAxacIfJfpFMKaGuHsW6WSzoxPmwyyJLG8mAztU7hXPrMr eUv3RLl2M9Cq4Z3nraOCtn4bdOfRPEf9i9iwEXDV/Tt8nlKkeFo2mRXzYeyoTucd sEtUR8DT5XuVNw== -----END CERTIFICATE-----Generated at Sat Mar 28 11:48:24 2026 by rpki-client