$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json) Hash identifier: 5y3atoGat6Syh2lNUMl6GpPW2XJslLPNKFUb2/SP1NY= Subject key identifier: E8:25:6C:7C:13:55:EE:31:15:A9:B8:90:81:56:0F:13:0B:F8:ED:46 Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 019D2772C82902A0EB3AFC1E2EADF956BE5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft Manifest number: 18D3 Signing time: Thu 26 Mar 2026 00:02:06 +0000 Manifest this update: Thu 26 Mar 2026 00:02:06 +0000 Manifest next update: Fri 27 Mar 2026 00:02:06 +0000 Files and hashes: 1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=) 2: 13WTNIS6A0dihpmd1UZATvnV9K4.roa (hash: KHlhyO/RASQzL4I4VsavXB94t3yBZq5r1Q6M/Qi/yyE=) 3: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=) 4: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=) 5: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: /6Xf+9h4/0RTb+XLoq8hg2e+MIddbrWJBbqlWdlybUw=) 6: 53LrOjzoo4E_JjsRePn1B73fFtc.roa (hash: NrghBBUU3a/THjQg3AhmUAWYpxF5cPsuE6iPec4zb/o=) 7: 6VTW_McNM2gKUiEd9Bc3Gfwm0AE.roa (hash: K0b0iJpVzmEPNcexIYjgjDjmiNKN28rNQZIz8nCu1GU=) 8: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=) 9: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=) 10: G_gkubCq_7tYxAJOgwxm9_sjOcc.roa (hash: HTO/NujLkueszrKTl1jypitd1221vQx4YiPnzs/pQes=) 11: ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa (hash: 3rOjqBfIhvTmF0AbgtiUHguUfUPEBFg5H4WMtyl2b1I=) 12: PG5gaW6QKtR5JzL6q5eBke0iYq0.roa (hash: CI7oeUgCJQOVE+/gNMHsZoUM76jLEBj4sJYAooPBpw4=) 13: X1Gmpx7ELtfrrjtvBfMJbDc_PDU.roa (hash: 3UVhYg8pgXN07FqWkvVyaQiJdCXbQoNnU+1Ji0Fdl18=) 14: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=) 15: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=) 16: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:c8:29:02:a0:eb:3a:fc:1e:2e:ad:f9:56:be:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: Mar 26 00:02:06 2026 GMT Not After : Mar 27 00:02:06 2026 GMT Subject: CN=e8256c7c1355ee3115a9b89081560f130bf8ed46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6c:f2:93:57:fe:57:a0:55:37:ff:0c:a6:cf: c5:55:09:2c:85:2d:41:c0:9c:c7:57:1c:75:c9:55: 8c:18:18:b0:5c:2f:23:81:bc:a9:0f:29:e4:b0:37: c4:4e:9c:dc:b2:77:e7:35:0d:39:f5:a6:16:f2:e5: 06:07:52:62:02:87:0f:2d:9d:f8:65:44:25:bf:8e: 83:2e:18:6d:a6:80:7c:76:12:19:79:d7:42:b0:9e: d3:e5:5a:90:fe:ac:bc:15:e9:7d:b5:78:50:4f:a6: 29:aa:4c:84:08:50:bf:f8:b8:b7:fb:e3:62:a9:7e: dd:86:9b:41:91:a9:d8:7b:91:f3:8b:27:79:1b:65: 94:74:d9:1d:89:55:55:35:ae:c7:cb:d1:85:6f:89: ff:3b:e1:cb:03:b8:63:8f:ee:61:3e:54:ef:fb:9e: d1:2e:5e:f2:c6:2f:3b:0a:90:f8:91:f7:c4:6e:3d: ac:41:a8:72:11:6f:f4:f9:de:5a:e8:f6:1e:70:d6: a5:81:2e:ef:4a:95:b7:13:89:50:33:0e:b6:5d:01: f4:4b:ea:c9:17:80:76:22:ee:8b:c6:09:d1:3a:af: 8d:c1:94:83:3d:2c:bb:3c:61:77:a1:1d:7e:e5:fb: e6:c1:2a:d8:0d:5c:3d:dc:93:20:34:dc:bc:02:1a: 87:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:25:6C:7C:13:55:EE:31:15:A9:B8:90:81:56:0F:13:0B:F8:ED:46 X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3c:c1:53:aa:6f:bb:57:b0:63:a5:75:d4:02:a7:c8:fe:59: ef:3a:8f:d7:0d:c7:b2:73:3f:8f:fa:d2:65:f6:50:4d:6d:7b: ed:3b:3e:34:97:59:1f:c0:da:d6:61:88:51:ac:71:b4:7c:04: 4a:c6:fc:1d:4d:fb:99:fe:d9:28:44:d2:47:04:d1:26:e8:4c: 53:9b:ec:eb:19:ea:22:a0:18:b4:d6:06:c2:da:f5:75:93:31: b0:ea:dc:fb:27:8c:8b:e6:79:8b:ca:cb:b9:d1:e4:3c:1f:4e: 72:26:00:c5:3c:ee:56:a2:36:31:b0:0a:da:4e:5a:89:bd:fa: dd:04:14:49:82:f0:fd:9b:f2:64:c3:e4:a1:da:6c:28:22:f9: d9:2e:bc:77:27:04:a9:b5:4e:07:6d:26:aa:a1:d9:39:23:d4: 0c:62:26:01:d6:91:2f:bf:d3:6c:ae:a2:ba:e9:f8:80:c3:7d: 7d:d1:27:c4:5a:70:8d:dc:9c:72:d9:70:f9:c7:e1:e4:69:ba: b7:98:2e:4e:4a:60:bb:e2:91:6e:17:d8:04:dc:68:43:7d:8b: 51:41:95:ae:b8:a1:60:b5:4b:8d:c0:67:05:cf:aa:5c:03:b3: 12:26:c3:a1:fb:a6:5e:83:7d:c6:83:0f:85:5f:5c:b5:0a:f5: 36:51:75:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncsgpAqDrOvweLq35Vr5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjYwMzI2MDAwMjA2WhcNMjYwMzI3MDAwMjA2WjAzMTEwLwYDVQQD EyhlODI1NmM3YzEzNTVlZTMxMTVhOWI4OTA4MTU2MGYxMzBiZjhlZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGzyk1f+V6BVN/8Mps/FVQkshS1B wJzHVxx1yVWMGBiwXC8jgbypDynksDfETpzcsnfnNQ059aYW8uUGB1JiAocPLZ34 ZUQlv46DLhhtpoB8dhIZeddCsJ7T5VqQ/qy8Fel9tXhQT6YpqkyECFC/+Li3++Ni qX7dhptBkanYe5Hziyd5G2WUdNkdiVVVNa7Hy9GFb4n/O+HLA7hjj+5hPlTv+57R Ll7yxi87CpD4kffEbj2sQahyEW/0+d5a6PYecNalgS7vSpW3E4lQMw62XQH0S+rJ F4B2Iu6LxgnROq+NwZSDPSy7PGF3oR1+5fvmwSrYDVw93JMgNNy8AhqHSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOglbHwTVe4xFam4kIFWDxML+O1GMB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzzBU6pv u1ewY6V11AKnyP5Z7zqP1w3HsnM/j/rSZfZQTW177Ts+NJdZH8Da1mGIUaxxtHwE Ssb8HU37mf7ZKETSRwTRJuhMU5vs6xnqIqAYtNYGwtr1dZMxsOrc+yeMi+Z5i8rL udHkPB9OciYAxTzuVqI2MbAK2k5aib363QQUSYLw/ZvyZMPkodpsKCL52S68dycE qbVOB20mqqHZOSPUDGImAdaRL7/TbK6iuun4gMN9fdEnxFpwjdycctlw+cfh5Gm6 t5guTkpgu+KRbhfYBNxoQ32LUUGVrrihYLVLjcBnBc+qXAOzEibDofumXoN9xoMP hV9ctQr1NlF1ZQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:58:00 2026 by rpki-client