$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: 7Td7oXzJqgLQXM7377sSWyU62fMxUFc6LW6oLwVBMZU= Subject key identifier: 7D:0B:C8:75:BD:75:A0:50:91:DA:A9:18:86:BB:77:08:F2:DF:27:7A Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019D2704A92946E7ADECE1CECC3A4CBCDBB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 18E0 Signing time: Wed 25 Mar 2026 22:01:49 +0000 Manifest this update: Wed 25 Mar 2026 22:01:49 +0000 Manifest next update: Thu 26 Mar 2026 22:01:49 +0000 Files and hashes: 1: 3_yk5eFrwBov3U-c2HIugxbMWSI.roa (hash: kKYQPtwtsyFnBnK/TTMNwaIGIt9OfuH8gl7hmRir+s0=) 2: 5aufIPquq3w8czdEJb_x03ID0ok.roa (hash: SXHv0uNnbQMrAAz38TkQXV7mhkcxZQRjdTnk2ZFMJ+Q=) 3: C5KHI6RHNe-c2_yE7mE0xFRL3gk.roa (hash: +jtxc9DRUocKwAVf35hRGVq2koZLjGVbE1XT/GiZZ2w=) 4: FOMPy_BK9Fi89Du1DiZYEnZuYqY.roa (hash: cvZrm+ar43YelQ09ZwBvqrLgjuizfADCJwzl9al2n74=) 5: OT8ciThviWG76oS0x4VT1DU7_CM.roa (hash: z/3tt6KD2m+nhRRFPABZHX2/tqaQ7t/vcbTbJ5OkeGs=) 6: RaSDCVs_3yb1Ag2Siqma7OPDTfI.roa (hash: 1BDwjFvUC8jAom6YokpKMPw9vBJY33AEAijvzVkLCbY=) 7: Xr8xD7AXvc_NpDNbXXImHz1-T_E.roa (hash: O9XLK98Rrx+wWOYoABEY4zrxCIQq8E3Z2Dq/mTA56c8=) 8: Y7bbNd_D_GJxw7w73h3QtuIaUD0.roa (hash: 6H7OQcEN2pqdM3pakr5EUmL8sOX3gH9g5VYKISR0rPs=) 9: _JStqxohmn4P46Jzv1xfqnIG_sQ.roa (hash: yg2AC+9uSmhpqVYsI3pa8EbjhOZNSYHEU2+Rij7qWjo=) 10: _kSC6SxEhsOLshYqTVwsSFaNbLI.roa (hash: KB6xLUsnETAFSWCWhqb4kG0B7HnLwgn6REmfOJuSowg=) 11: bIbo_daevEia3FzSMEis2R2yTQE.roa (hash: 2f8dvTsv4PE91HZTf97I67YVmPlzEU+5RlZeN9O2YSM=) 12: dWDpJgjgHWUUxlAFcGw9oho9DCA.roa (hash: EeKrlvmSYyhLjmugOgYr/BAu9l1QdnUK48FOOPpwoHE=) 13: ixD-Arj77LHgfX3zc7lJeNIlCF0.roa (hash: IZQY7H0KoOl6mudSH5mbC7Fo+cS244qdxxA31tTlbtI=) 14: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: /kYXDnuTBW4fFmo0pSIcXHgrX4bAAoN3SJpA1Lmd+0s=) 15: qutDbHBwHvwdi5EGALlPGyrMVYQ.roa (hash: cMdSXzsofITh70yCwGq+Cbopm8wIcWBaikFgYr1Fwsg=) 16: viXkXLZxJ-KrBDTHEU9eV2JpXfc.roa (hash: wxGAEO+n9Vh6k1iK9Pba4O/c6CbkZthcZ5GK3ng4+Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:a9:29:46:e7:ad:ec:e1:ce:cc:3a:4c:bc:db:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Mar 25 22:01:49 2026 GMT Not After : Mar 26 22:01:49 2026 GMT Subject: CN=7d0bc875bd75a05091daa91886bb7708f2df277a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cd:e4:f2:bf:0c:5c:ed:8c:81:0a:1f:fd:4a: 42:3f:1b:c2:4c:97:08:46:ea:06:fb:47:45:f3:5f: 68:3b:49:a9:ca:7f:05:12:72:83:e7:6f:70:68:ab: ba:fc:58:28:0c:46:f4:64:e1:bf:e6:bb:6d:d0:8e: ff:ab:63:bd:d8:5d:16:d9:2e:90:af:d2:57:f6:aa: 7f:7b:a5:ff:59:5f:2b:fc:f9:05:5d:27:2e:64:73: 71:e6:95:e0:66:2d:6d:9e:fb:80:b3:17:db:b8:e5: fe:57:a7:cf:82:9e:0f:f2:b6:31:7d:ce:9a:95:36: 74:94:11:e5:22:ef:6b:90:ae:34:9b:b0:3f:2f:b0: 29:19:19:58:f6:7d:e5:99:46:54:d9:b4:bc:83:bf: 0d:e4:88:45:61:4d:e8:06:47:1d:e4:15:fb:83:96: 0a:79:08:b0:d4:85:0c:96:fa:e3:0c:ed:00:37:40: 02:cc:01:6d:0b:e5:b8:95:a5:54:8b:5c:c4:8c:96: 16:0e:6b:b9:69:1e:70:4b:05:69:a6:00:4c:9c:26: 6a:ac:ac:db:4a:6b:38:e6:0e:34:53:89:65:d0:ed: d9:7b:dc:51:01:ff:b7:02:3b:a8:e0:e8:20:0e:cd: b3:34:9b:b5:f3:7e:30:05:9f:31:8c:09:26:b1:36: 86:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0B:C8:75:BD:75:A0:50:91:DA:A9:18:86:BB:77:08:F2:DF:27:7A X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:33:b8:37:c7:2b:b8:17:11:8a:e9:2d:cd:75:0c:3c:ce:22: b6:9b:74:c8:77:d5:39:1b:c8:8b:99:e8:27:31:c8:cf:e2:cd: e0:64:88:89:65:a1:22:df:03:45:23:f3:e4:20:28:c7:ac:08: cb:1d:f7:78:ea:cf:7b:d2:7c:55:77:95:8d:f4:ca:ad:3a:00: ea:82:be:16:9f:8d:07:eb:ab:50:a4:9c:c3:d5:42:b2:10:21: 41:81:61:c0:93:3a:37:e9:e7:2e:b9:56:f1:0f:df:c0:6c:02: 6e:02:cc:4b:4c:bc:ab:8d:23:ee:a2:0b:9a:f9:5a:43:c4:a3: 91:bc:b5:71:cc:90:b4:c4:57:c8:70:be:57:53:3f:bf:39:f1: 8e:6d:59:dd:30:26:91:e9:84:1a:06:41:67:3f:10:04:44:2b: fa:51:ae:d9:43:5a:40:46:a8:39:bc:b5:bf:4d:0b:71:28:81: 1a:f8:bd:c4:98:bd:bc:56:17:70:64:c3:c0:2e:7f:82:86:da: bd:ec:d8:24:72:64:67:2c:5f:76:96:86:2f:a7:3d:7d:33:54: d5:e1:ef:06:55:87:4a:8c:0e:81:4e:d9:3d:ab:a2:18:6d:a5: 35:65:ba:55:cb:2a:c8:d0:51:60:8f:af:78:e8:ea:33:7c:35: 37:b7:e5:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBKkpRuet7OHOzDpMvNu3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwMzI1MjIwMTQ5WhcNMjYwMzI2MjIwMTQ5WjAzMTEwLwYDVQQD Eyg3ZDBiYzg3NWJkNzVhMDUwOTFkYWE5MTg4NmJiNzcwOGYyZGYyNzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc3k8r8MXO2MgQof/UpCPxvCTJcI RuoG+0dF819oO0mpyn8FEnKD529waKu6/FgoDEb0ZOG/5rtt0I7/q2O92F0W2S6Q r9JX9qp/e6X/WV8r/PkFXScuZHNx5pXgZi1tnvuAsxfbuOX+V6fPgp4P8rYxfc6a lTZ0lBHlIu9rkK40m7A/L7ApGRlY9n3lmUZU2bS8g78N5IhFYU3oBkcd5BX7g5YK eQiw1IUMlvrjDO0AN0ACzAFtC+W4laVUi1zEjJYWDmu5aR5wSwVppgBMnCZqrKzb Sms45g40U4ll0O3Ze9xRAf+3Ajuo4OggDs2zNJu1834wBZ8xjAkmsTaGAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0LyHW9daBQkdqpGIa7dwjy3yd6MB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDO4N8cr uBcRiuktzXUMPM4itpt0yHfVORvIi5noJzHIz+LN4GSIiWWhIt8DRSPz5CAox6wI yx33eOrPe9J8VXeVjfTKrToA6oK+Fp+NB+urUKScw9VCshAhQYFhwJM6N+nnLrlW 8Q/fwGwCbgLMS0y8q40j7qILmvlaQ8Sjkby1ccyQtMRXyHC+V1M/vznxjm1Z3TAm kemEGgZBZz8QBEQr+lGu2UNaQEaoOby1v00LcSiBGvi9xJi9vFYXcGTDwC5/goba vezYJHJkZyxfdpaGL6c9fTNU1eHvBlWHSowOgU7ZPauiGG2lNWW6VcsqyNBRYI+v eOjqM3w1N7flbg== -----END CERTIFICATE-----Generated at Thu Mar 26 03:40:48 2026 by rpki-client