$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: WrgGZ7Uoyc/cGST3wjp+0DutwYE25oBGylMchgadpeU= Subject key identifier: F0:9B:AA:C7:FA:56:FF:DD:AA:93:53:00:2A:48:81:81:48:49:1C:A1 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 019D28F340FEEF293760C4B214085B34C41B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 18AE Signing time: Thu 26 Mar 2026 07:02:03 +0000 Manifest this update: Thu 26 Mar 2026 07:02:03 +0000 Manifest next update: Fri 27 Mar 2026 07:02:03 +0000 Files and hashes: 1: 0D14gN2WiBa54cFbuKlrQUOrf8M.roa (hash: 2wB51bMRZ+T+HK/B9Edc9OpYAvR825v+i0duj5mr6/E=) 2: 8alVrjrWY968nNzLuKlTYJqWO5s.roa (hash: n3cPQVf1JqZIIBHl4vdLfSmHsel7C5NhWsG2ov9U0fE=) 3: AfDFx5CztN26DfCfFCFVeLtbfYk.roa (hash: 6hydPd19IUZH5tUXaWmgrdl0J31zdN4Hkjua9Sst5JQ=) 4: Go3pOTuap2_fsOG2Cy2Y4VT2pN0.roa (hash: 0oyx4eIX+vmWlDNgh2kGWbDg44/BIpYISvXYVe/lRmI=) 5: OsaS-W05X64hVseLWVJ98CCH4bg.roa (hash: ZOdWLGxsnjVKDfjbUq3CekoJyLOWeoL5aqMKIGP91V8=) 6: ZGek-6HBksI7UR516vE0gk5R-L4.roa (hash: t0Obkj8sK06HaBNs4kmLvSB4hxDxnIEARfCn1Ni3RSc=) 7: axdSVqIzRJIZuL4bUaXgsCZR0GA.roa (hash: o1y1RiYLt8sTd8RRJ89cjZcmfxt/0UhXCW4mXlZ2wPw=) 8: cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa (hash: 3JUexyB8UKFK23yZaQJY7snnPpz1rOPKcvmbdq5kUeg=) 9: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: rTBGhXmVWg2bJYUpY/JQjDZuC1xFrumvrBDim306b3E=) 10: nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa (hash: 4zzXn53ZU7R+himiAEAxl3zTsYnZiM207WqrGti69uY=) 11: pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa (hash: FZmisnstiTUOgcPXpHL2ZJ5p2aJPRBsk+SIz8t4Ftlc=) 12: qtFUd8UrHAjg1CQzxCUVYh49r34.roa (hash: zeOnhH1WA+57cINQaOKMw3j5q8bJlC2Ele92zkBPv4I=) 13: rQ8ohk71V4ClseY7wRU6uUdfWw0.roa (hash: +Un59zWJ5v19ef4G1vmVABla4G6FDYt+TwXokRhf32c=) 14: t6LGbWPehA5-4bGA_0I8d0ATs2A.roa (hash: VJvhwVfSb8eKnL2DGvlH1c5C6AHV73YvtD/x841o6yw=) 15: xpxQq-XYLTeZi1RJOWi2RhOZm6M.roa (hash: stugu/O0ZbeQlykuDSWoq5P19xqk7ytCQZZAgWlL1aI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:f3:40:fe:ef:29:37:60:c4:b2:14:08:5b:34:c4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Mar 26 07:02:03 2026 GMT Not After : Mar 27 07:02:03 2026 GMT Subject: CN=f09baac7fa56ffddaa9353002a48818148491ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:01:ff:b0:c1:8c:bf:f8:7b:6c:21:28:db:aa: 5a:13:cc:38:b7:8e:bc:69:ef:3d:04:96:ba:a9:51: f0:e4:91:6c:94:55:55:2b:6b:be:48:a3:f6:53:73: 21:c7:f7:0f:0b:8d:f3:8d:aa:17:d3:5a:09:9d:36: 69:5f:3c:ac:38:90:6e:fa:7d:7d:a5:3b:e2:76:eb: d1:54:31:6d:09:70:f3:3e:1f:c6:42:50:46:49:3f: 66:52:3f:2b:8c:0c:ae:43:7e:16:a1:a8:09:68:73: f2:6d:ec:57:1a:49:2b:4e:23:ef:34:ab:e1:21:38: bb:79:99:ad:96:9e:87:bb:16:27:26:80:a6:f4:77: 1c:f8:8e:a2:f7:b3:f9:ab:f9:6e:71:7d:17:28:ea: cf:00:ca:01:28:6b:77:81:50:1f:71:00:00:9b:10: 22:9c:3d:0a:1f:a1:52:54:11:93:85:78:a1:28:24: f4:8b:96:f9:16:50:4b:af:39:da:80:36:47:88:2f: 74:8a:eb:03:89:3b:20:e8:a2:b3:6c:a2:1e:0c:0a: 95:51:d2:68:4c:d9:ad:91:06:e4:b3:10:af:9f:49: c1:27:18:39:b4:3a:73:62:4a:38:4a:7f:3a:36:0e: 35:04:39:5a:48:75:cc:6c:20:c1:08:1f:97:e0:c7: 72:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9B:AA:C7:FA:56:FF:DD:AA:93:53:00:2A:48:81:81:48:49:1C:A1 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1f:e1:b6:0b:16:46:70:0c:b5:57:96:f1:b5:f9:22:48:ec: 0a:7b:06:50:e5:e3:48:43:0c:1f:c7:8a:85:2e:3d:76:cc:60: 38:b1:1c:2d:42:7d:af:6a:1b:b3:25:1e:78:ce:7f:44:1d:06: 56:f3:7e:40:15:89:e6:d7:0f:c4:6c:5f:89:2e:ef:df:43:05: d0:a3:39:4a:43:db:05:58:72:55:6e:c5:49:a4:71:d0:0b:dc: 9e:52:24:45:36:7d:81:1e:fd:40:e0:cb:20:d0:75:28:99:e1: 4d:18:a6:79:67:de:4b:1d:9a:dc:7a:2b:46:42:34:81:4a:f4: 50:02:21:80:ed:39:7d:8d:16:73:f9:6c:b7:72:85:21:9f:51: 69:bb:5f:7e:84:96:85:33:2e:6f:d8:c7:64:e6:74:3e:a6:75: 00:54:f7:a1:ef:9e:27:f8:8b:d5:af:8f:1e:f8:c0:c5:0c:9c: 21:38:28:2e:df:d1:6f:ac:7f:6d:6c:e8:76:91:49:b5:30:37: 20:3d:f7:01:fd:5f:76:d2:89:e2:95:1f:69:86:14:e1:c7:06: 7e:fd:34:6f:1d:47:6a:8d:2b:9f:6f:f2:0e:d9:0b:22:48:e9: 81:1f:ce:3f:0d:e1:11:c1:f8:65:27:2b:68:98:57:c2:4d:b6: 77:13:2d:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0o80D+7yk3YMSyFAhbNMQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjYwMzI2MDcwMjAzWhcNMjYwMzI3MDcwMjAzWjAzMTEwLwYDVQQD EyhmMDliYWFjN2ZhNTZmZmRkYWE5MzUzMDAyYTQ4ODE4MTQ4NDkxY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAH/sMGMv/h7bCEo26paE8w4t468 ae89BJa6qVHw5JFslFVVK2u+SKP2U3Mhx/cPC43zjaoX01oJnTZpXzysOJBu+n19 pTviduvRVDFtCXDzPh/GQlBGST9mUj8rjAyuQ34WoagJaHPybexXGkkrTiPvNKvh ITi7eZmtlp6HuxYnJoCm9Hcc+I6i97P5q/lucX0XKOrPAMoBKGt3gVAfcQAAmxAi nD0KH6FSVBGThXihKCT0i5b5FlBLrznagDZHiC90iusDiTsg6KKzbKIeDAqVUdJo TNmtkQbksxCvn0nBJxg5tDpzYko4Sn86Ng41BDlaSHXMbCDBCB+X4MdyzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCbqsf6Vv/dqpNTACpIgYFISRyhMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATx/htgsW RnAMtVeW8bX5IkjsCnsGUOXjSEMMH8eKhS49dsxgOLEcLUJ9r2obsyUeeM5/RB0G VvN+QBWJ5tcPxGxfiS7v30MF0KM5SkPbBVhyVW7FSaRx0AvcnlIkRTZ9gR79QODL INB1KJnhTRimeWfeSx2a3HorRkI0gUr0UAIhgO05fY0Wc/lst3KFIZ9RabtffoSW hTMub9jHZOZ0PqZ1AFT3oe+eJ/iL1a+PHvjAxQycITgoLt/Rb6x/bWzodpFJtTA3 ID33Af1fdtKJ4pUfaYYU4ccGfv00bx1Hao0rn2/yDtkLIkjpgR/OPw3hEcH4ZScr aJhXwk22dxMtag== -----END CERTIFICATE-----Generated at Thu Mar 26 11:55:40 2026 by rpki-client