$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: cbRhOgj2l7QTQ8FpGIS6jpOI6Hsb+hYYHY52egkFXVw= Subject key identifier: 82:98:2A:5A:10:BD:82:FD:D6:86:1E:17:D3:09:03:5D:F2:01:17:7F Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019D2583B9630FEE82122277AABAADB79148 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 1654 Signing time: Wed 25 Mar 2026 15:01:22 +0000 Manifest this update: Wed 25 Mar 2026 15:01:22 +0000 Manifest next update: Thu 26 Mar 2026 15:01:22 +0000 Files and hashes: 1: 6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa (hash: oIH5kZRy4QQWIkNsi+TOmhTdqOjqPl4X4VEu5ZY7rrc=) 2: 6yY85OHD-46vFhP-wtPZWs3MeCY.roa (hash: hOno4SiXgMirUzFVpAXsEoPlI4QIn/ikV8WWQvXsoXg=) 3: 8McrGRfEqcovWnRSpklEmiBGADA.roa (hash: xszqUKxiKaCx1G5C+PDbNWuR86U3w6LgZy01FF25iiY=) 4: BooqKG4SsYSQxh6PGW72NBqbtuw.roa (hash: TU0xZxrNhYVeehRBPFf+LnBXvIDYoAVW0L6Hmfayq5M=) 5: Dib_4B7-59g2qlFon4U52XelorA.roa (hash: 7rKsJnSr5QX2uVe31jye987BgbcYNd7z/lfjZmUFdDY=) 6: J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa (hash: PhWWvX6X2tLUSE0WxzAfwrSrZ7vyehY98guTk5gmtdI=) 7: Td85PzLGixLgYgdBT3GS17rfwTQ.roa (hash: ZtLYgrcf2o9oO80ckMCQ8oe+MvEY9qGa8/wSqJ2K4VY=) 8: bpUtIFcpj0wFmx0CClP1L0TgIfY.roa (hash: JpwXWXow0nu1gKjNId4RQPrmV9a8gFVj5DrvmpBJ7Ac=) 9: dkSZC1vcgEsyqm56yAJmonI1P1E.roa (hash: Wn8sFewfyDAMaX3VNG1l/GCgIijws7/FwmZlH3//5Vk=) 10: eH8mEFUxJaD15bIkdrb0eoEm43Q.roa (hash: iVNXmnAd/Aq9qGpFjFCXba0ETiSTvXsmOGBSWpVw4y4=) 11: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: +K/ar7r9WSg1ghMYkC46vbD5yeZKwClgfgtYNbYz5/s=) 12: vJiRTEd6tTiZDm_JR7rLwIox0zw.roa (hash: IYF63rRulzFNBpbGnH/dDmLviCvKmUvwCJNoi515Gao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:83:b9:63:0f:ee:82:12:22:77:aa:ba:ad:b7:91:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Mar 25 15:01:22 2026 GMT Not After : Mar 26 15:01:22 2026 GMT Subject: CN=82982a5a10bd82fdd6861e17d309035df201177f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c7:8b:e0:7f:52:3e:2f:ec:4e:5e:a5:ce:1d: d3:0a:e1:fe:ca:7a:da:7d:92:a7:f0:eb:59:a7:50: 63:0b:d4:35:41:89:f0:b2:64:f3:4e:1e:89:0f:c3: c6:80:11:b7:dc:a1:44:c1:34:91:60:c1:90:d7:11: 09:e2:59:bb:69:bb:45:1c:e1:47:00:dc:e4:62:6f: a1:00:1d:8e:52:53:e9:d7:5e:8d:5c:2f:6e:8c:36: 0b:96:21:b8:cd:8c:f0:f7:c7:a8:09:f0:08:ef:1f: 2e:f9:37:85:33:32:ee:b7:60:d6:e7:9a:4e:85:4d: e0:cf:f1:45:98:77:6c:bc:0f:8f:5b:62:b4:a9:15: 91:09:c0:1f:e2:fa:18:98:5c:85:58:02:5e:d7:bb: 52:94:34:0c:05:be:7f:04:e5:3a:fe:37:f0:25:3c: ec:33:44:5c:ba:3c:cb:48:ea:c2:51:8d:fd:57:c1: e9:b6:ca:77:5e:49:44:06:32:68:1a:f7:9d:c1:82: d9:4d:d0:0b:c5:78:1a:ea:48:0e:27:83:19:9a:aa: af:e1:4a:89:70:53:3e:85:3b:e5:5d:c6:89:8e:b5: b8:7c:f2:c8:63:20:f2:ae:c3:12:5a:9c:d1:4e:1b: 5b:ae:8d:ed:9f:29:20:11:a0:31:3e:0b:be:56:59: 9f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:98:2A:5A:10:BD:82:FD:D6:86:1E:17:D3:09:03:5D:F2:01:17:7F X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:3f:87:56:25:a2:38:57:6a:0e:eb:73:62:0d:68:be:47:0f: bd:af:93:8f:58:0a:32:1a:1b:96:5e:7a:bc:8c:be:00:4c:45: 0f:9b:11:f9:08:7a:61:d6:2c:d8:2c:c6:64:98:f7:b5:2d:a9: 1d:a4:3a:fa:21:5f:a7:6b:0e:33:6d:1a:b6:ff:7c:6f:68:55: 89:df:83:ce:dd:cd:3a:ed:65:1f:eb:10:e3:ae:b9:1d:08:dd: 06:0d:c9:04:21:98:df:39:b4:f2:c5:21:a2:3d:7b:f3:fb:dc: 6d:ed:c5:e6:49:04:a5:b5:cb:16:cd:0b:9f:de:a9:0b:29:b8: 1a:bb:73:eb:e2:85:44:b5:43:7b:69:00:57:33:ca:6d:8c:29: 30:57:37:0f:50:48:0f:da:6a:73:98:1f:c1:aa:4f:8b:76:06: 22:d2:f7:68:1a:e8:87:c0:0d:2f:5f:5d:89:77:e1:2a:02:64: b4:44:98:d5:06:fa:92:35:f7:d5:f4:d8:04:37:2a:e9:1f:78: 57:87:8f:50:10:51:0c:b9:cf:2d:c1:85:8c:b1:2e:d4:93:a0: 35:f9:4e:c4:52:00:10:af:01:5c:ef:2e:97:0b:55:0b:a2:30: a2:94:33:64:a1:94:6e:ba:f8:3a:76:75:2a:c3:b3:2f:ba:93: 68:db:27:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lg7ljD+6CEiJ3qrqtt5FIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwMzI1MTUwMTIyWhcNMjYwMzI2MTUwMTIyWjAzMTEwLwYDVQQD Eyg4Mjk4MmE1YTEwYmQ4MmZkZDY4NjFlMTdkMzA5MDM1ZGYyMDExNzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmseL4H9SPi/sTl6lzh3TCuH+ynra fZKn8OtZp1BjC9Q1QYnwsmTzTh6JD8PGgBG33KFEwTSRYMGQ1xEJ4lm7abtFHOFH ANzkYm+hAB2OUlPp116NXC9ujDYLliG4zYzw98eoCfAI7x8u+TeFMzLut2DW55pO hU3gz/FFmHdsvA+PW2K0qRWRCcAf4voYmFyFWAJe17tSlDQMBb5/BOU6/jfwJTzs M0RcujzLSOrCUY39V8Hptsp3XklEBjJoGvedwYLZTdALxXga6kgOJ4MZmqqv4UqJ cFM+hTvlXcaJjrW4fPLIYyDyrsMSWpzRThtbro3tnykgEaAxPgu+VlmfzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKYKloQvYL91oYeF9MJA13yARd/MB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcj+HViWi OFdqDutzYg1ovkcPva+Tj1gKMhobll56vIy+AExFD5sR+Qh6YdYs2CzGZJj3tS2p HaQ6+iFfp2sOM20atv98b2hVid+Dzt3NOu1lH+sQ4665HQjdBg3JBCGY3zm08sUh oj178/vcbe3F5kkEpbXLFs0Ln96pCym4Grtz6+KFRLVDe2kAVzPKbYwpMFc3D1BI D9pqc5gfwapPi3YGItL3aBroh8ANL19diXfhKgJktESY1Qb6kjX31fTYBDcq6R94 V4ePUBBRDLnPLcGFjLEu1JOgNflOxFIAEK8BXO8ulwtVC6IwopQzZKGUbrr4OnZ1 KsOzL7qTaNsnmQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:10:52 2026 by rpki-client