$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: g4dEv1EhpK+lhFtkPAt0Kx0TQkTv8578+XZCJwJAZQg= Subject key identifier: 15:89:05:96:BD:A4:DC:1B:34:EE:BB:6E:8B:F5:A4:63:42:40:93:54 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019D2817236AAD329DB044537936B87600F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 174C Signing time: Thu 26 Mar 2026 03:01:38 +0000 Manifest this update: Thu 26 Mar 2026 03:01:38 +0000 Manifest next update: Fri 27 Mar 2026 03:01:38 +0000 Files and hashes: 1: 8ZTbVFN88ElJOvnxpynWkBywvcU.roa (hash: Zi7aMmYsFeMT6y4m/OMRvzAw9FlwVPNAsEeEWMyssQs=) 2: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (hash: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4=) 3: D4HmthbydYoqExoa56VFIbe7J5A.roa (hash: 1gmVpoixHN/Zn+8HJ6YdrukA3JeRxcEeBWZ/2aGh+ps=) 4: DKZJyriLpkX0P03xQILHD2FwZEo.roa (hash: x6vx2AQsWgf7sMGXLXxiRwrb7PArAVgKRPBlJd4ah10=) 5: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: u6XLRzmzxLx0pTyQN0sh2IHHZvXrLbZTf+kwJjFPwL0=) 6: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (hash: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ=) 7: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (hash: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4=) 8: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (hash: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A=) 9: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (hash: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI=) 10: S3K9bo4j9NjF6L9mhwIsz-LYyHg.roa (hash: FX7C0FNczXeRPZms4zyJ1OukTZNK4zd0GhG7vBTsBvg=) 11: UWgtqXah3liJx-awsYUK3XIS54c.roa (hash: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs=) 12: _d7ohj2Ako_tiSFSE9-jnGs0uoI.roa (hash: mf32LDbJ2Su5F5H62P0/F/PId5oq7GFGgkD8WKRwmPw=) 13: f5svUnEK1n30wRVLtixbJDS7pZM.roa (hash: sILbepz7GhK0jGMQ48sIN5LBYx9eYZB9voFGWkXvx60=) 14: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (hash: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY=) 15: mcS4SdpuWVbabfdpCB_tOwct_TA.roa (hash: hcfOoUJHvls1DL90VCIcUIUdeQTL2YjVgbYPY6TdJAA=) 16: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (hash: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg=) 17: tDoaGy6SLh3swARR-izxiYVQMmU.roa (hash: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:17:23:6a:ad:32:9d:b0:44:53:79:36:b8:76:00:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Mar 26 03:01:38 2026 GMT Not After : Mar 27 03:01:38 2026 GMT Subject: CN=15890596bda4dc1b34eebb6e8bf5a46342409354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:08:9e:13:35:cb:73:63:54:55:77:b0:de:65: 6f:e3:38:40:57:f3:9f:d4:e8:bb:5a:ae:bd:0c:bf: b8:79:e1:17:15:ec:b3:78:80:8b:c3:68:c3:ea:07: ad:e5:90:d4:31:b8:7d:7b:08:92:16:0f:ae:ff:d5: 08:a8:df:f3:23:0d:29:ca:3c:04:d0:d1:f1:c4:99: 77:38:e2:15:54:e2:f9:a3:5a:bf:46:91:b6:23:43: 72:1a:d5:93:2b:61:72:fb:bf:60:32:38:63:8e:ff: a6:b1:c6:e2:5e:2b:8f:d0:d6:3b:bc:cd:cd:40:ba: f5:8e:ab:86:a6:6f:d6:cc:2c:18:0a:2e:23:72:0e: 48:b9:d1:c3:33:16:5f:a1:38:e4:74:c8:ea:4e:e0: 91:5d:ec:09:1d:fd:40:90:50:eb:ab:a2:11:a4:50: ea:30:e0:da:7f:75:4e:e4:9d:37:ea:01:cc:14:a2: 78:15:17:27:87:90:fc:33:73:3d:ea:9b:f7:32:60: ee:a7:ea:7c:0d:d0:32:6a:ee:cd:74:c0:7e:4d:26: 4c:e5:97:e5:b1:74:2b:13:a5:65:66:90:39:57:63: 9f:96:f1:f4:9d:f6:be:ee:b9:b2:43:c8:6c:cc:c5: 61:20:ef:f7:99:74:48:2d:a3:f8:af:80:f6:fd:12: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:89:05:96:BD:A4:DC:1B:34:EE:BB:6E:8B:F5:A4:63:42:40:93:54 X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:19:9b:d3:e0:d9:9f:a2:62:cf:7d:91:ac:82:1e:98:a2:6d: f1:3e:df:ee:de:7e:b1:4a:f2:38:05:13:c7:17:cb:d3:38:9f: ff:72:bd:33:d1:56:ac:f9:f8:11:df:9e:b1:af:77:fc:ff:fd: 7d:1e:26:ca:85:dc:2d:92:03:3e:45:16:3e:30:b9:44:7f:ba: 1e:90:d6:c8:23:86:e1:4c:23:b8:08:bf:ae:0e:cb:07:1e:ae: 0c:47:23:32:f4:4f:ea:50:e2:ec:1e:dc:b9:14:0f:7b:be:1a: 31:4f:6b:39:23:3c:eb:55:13:2d:57:43:77:36:23:e0:47:2f: 8c:17:29:45:12:d4:ed:ec:88:0b:8e:93:41:d4:a6:11:10:ef: 18:c7:0f:84:0c:30:b8:69:5a:8d:c8:5e:ef:8f:9c:98:e7:a2: dc:6a:95:dd:4c:ca:db:46:66:b0:bd:9f:77:34:2c:59:c5:04: ac:bf:2b:38:5f:e5:d6:e5:56:43:56:16:4f:4e:ef:38:c2:84: 9f:02:02:97:02:d3:26:fd:35:39:fc:bf:80:39:f3:be:a1:63: f3:59:51:a0:28:8d:ad:0a:4e:2d:3c:cb:89:dc:bc:f1:c9:07: fc:7d:01:fa:26:34:38:b4:fa:03:80:a2:b5:c3:dd:25:c4:46: dc:8f:b4:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFyNqrTKdsERTeTa4dgD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwMzI2MDMwMTM4WhcNMjYwMzI3MDMwMTM4WjAzMTEwLwYDVQQD EygxNTg5MDU5NmJkYTRkYzFiMzRlZWJiNmU4YmY1YTQ2MzQyNDA5MzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AieEzXLc2NUVXew3mVv4zhAV/Of 1Oi7Wq69DL+4eeEXFeyzeICLw2jD6get5ZDUMbh9ewiSFg+u/9UIqN/zIw0pyjwE 0NHxxJl3OOIVVOL5o1q/RpG2I0NyGtWTK2Fy+79gMjhjjv+mscbiXiuP0NY7vM3N QLr1jquGpm/WzCwYCi4jcg5IudHDMxZfoTjkdMjqTuCRXewJHf1AkFDrq6IRpFDq MODaf3VO5J036gHMFKJ4FRcnh5D8M3M96pv3MmDup+p8DdAyau7NdMB+TSZM5Zfl sXQrE6VlZpA5V2OflvH0nfa+7rmyQ8hszMVhIO/3mXRILaP4r4D2/RLrlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWJBZa9pNwbNO67bov1pGNCQJNUMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRmb0+DZ n6Jiz32RrIIemKJt8T7f7t5+sUryOAUTxxfL0zif/3K9M9FWrPn4Ed+esa93/P/9 fR4myoXcLZIDPkUWPjC5RH+6HpDWyCOG4UwjuAi/rg7LBx6uDEcjMvRP6lDi7B7c uRQPe74aMU9rOSM861UTLVdDdzYj4EcvjBcpRRLU7eyIC46TQdSmERDvGMcPhAww uGlajche74+cmOei3GqV3UzK20ZmsL2fdzQsWcUErL8rOF/l1uVWQ1YWT07vOMKE nwIClwLTJv01Ofy/gDnzvqFj81lRoCiNrQpOLTzLidy88ckH/H0B+iY0OLT6A4Ci tcPdJcRG3I+0Bw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:58 2026 by rpki-client