$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: 025FICKEAJaDxIVs7gWyTZGoLeSd4DS5JySW4WVvSK8= Subject key identifier: 85:77:9D:3B:44:71:FA:5D:DA:5F:00:72:E3:B1:8C:EA:B8:10:80:93 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019D2772D1AC958EAE7122FD785EE8987DEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 18AC Signing time: Thu 26 Mar 2026 00:02:09 +0000 Manifest this update: Thu 26 Mar 2026 00:02:09 +0000 Manifest next update: Fri 27 Mar 2026 00:02:09 +0000 Files and hashes: 1: 3Uhad0KFSfjXI_TbydoftNMdE3g.roa (hash: j9tyqYt4el5e/EHBRQPaMKBm+kYVSqQDGKdC5+GV1fw=) 2: EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa (hash: BrnZ+O7PpPP2CgQz6l0MWy62IQSvfZEBI+G8ayJnLRE=) 3: GCKLMhjEZ4tgpahsAAW0b7v-pbY.roa (hash: vfauSOW8KSxhKm84diH34kDOUYgfp1RoadLmCV5cdWc=) 4: W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa (hash: fb2PFmFnYQYmWpVf2HANiiXyOyVRMMcnLRhOHSluDkI=) 5: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: 83u19Xgtx5sMGrjM3sltPgcn9YpZgqBvuY/eoqiMggI=) 6: fuQjo-R8V7RgupEifO88mUFsfq4.roa (hash: XgKKf+T/JHflu47fZ8lbK7Ea+coPaRrFsg001BzHny4=) 7: m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa (hash: RVNHVX31tSGpQABOxa6EqSIdwiAZEEfgy9G0c8Rv6CQ=) 8: njVUBNP2pawlmJYfjO-aqV7rHxg.roa (hash: KsrtTqSnlW3K+gpEPkMgT8sO+EsW0Fbd90twROTiMXk=) 9: qSxlathEcN6ZfWcqIYKI4rq_zNk.roa (hash: LYI2xAakIbFGxMC1GmxnDwbT1/w57IsHNS5Uguz6j68=) 10: tA_6j6gquShwOWQHuXqZmv-DGJ8.roa (hash: MBd1V9peNX1ONVT7gAUeTBj/y3gvMH+RO35qWdORDv4=) 11: xrlQxD2aCilEx5MBkW5ICdMkjmI.roa (hash: XyJhHEW8YK45zRLRx/h09ilca39SOfBBhQAfbZq7s3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:d1:ac:95:8e:ae:71:22:fd:78:5e:e8:98:7d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Mar 26 00:02:09 2026 GMT Not After : Mar 27 00:02:09 2026 GMT Subject: CN=85779d3b4471fa5dda5f0072e3b18ceab8108093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:fc:4c:03:0f:05:b0:98:9c:95:d6:bf:03: 80:7b:cc:90:e2:01:e4:28:f0:e0:44:d5:58:0a:30: 85:6d:51:59:59:d2:d6:d5:fb:00:12:3f:dc:f6:e7: 3c:68:fa:1e:84:4e:de:b4:ea:59:89:18:ff:da:60: ad:80:d8:33:64:48:d7:29:7f:22:9c:eb:2b:df:a4: d5:d0:d5:6c:0d:94:83:c5:61:96:cb:33:67:5a:44: 11:7b:13:64:cb:90:be:af:f9:45:cc:51:34:2a:49: ef:e3:a9:66:af:be:9c:aa:68:7d:d5:19:db:b9:50: c7:67:b9:2e:38:68:75:3f:c8:08:7b:01:2c:d2:5d: 23:ee:d4:c2:a4:5f:fe:4d:b0:5f:00:54:62:39:f4: 5c:7a:39:9a:bf:cf:74:33:af:57:7a:df:e9:3c:e4: 5d:c7:f3:aa:86:ab:38:5f:f8:8e:80:93:76:0f:99: c7:7c:40:c1:d9:1a:87:fe:f5:0f:c0:4a:ae:9d:23: d3:ea:c4:d3:d8:63:a0:01:77:90:ac:07:cb:3e:d1: cf:5e:9b:e2:10:5e:a8:c9:6c:63:e7:7a:00:9f:b6: 31:b7:69:8f:46:20:cd:ec:11:62:94:70:8f:1f:0e: 67:97:8f:5f:fb:ef:70:ed:b5:d1:36:6a:2e:25:f4: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:77:9D:3B:44:71:FA:5D:DA:5F:00:72:E3:B1:8C:EA:B8:10:80:93 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:60:75:a4:23:15:01:79:a2:15:41:8d:7e:45:c7:1e:e3:92: 2c:1d:9b:12:04:26:e9:2e:ce:a2:0a:65:14:88:59:2b:22:d3: 40:4d:1f:15:82:23:5f:fe:78:b2:f9:e4:77:f9:97:93:8e:81: 2b:23:33:c2:9f:fe:6d:c8:86:81:17:c2:cc:e6:8c:b1:7e:ee: 6c:59:af:ad:46:e1:1b:65:03:0c:17:c5:d8:bb:21:7b:2a:c7: 21:df:04:b7:38:6e:b5:29:4a:ed:07:fc:d6:9d:8c:d3:3d:a1: e9:e7:c4:48:fb:50:e2:33:06:95:44:3f:1c:0f:28:fd:fd:98: df:87:ba:68:be:ef:d3:49:e1:ef:61:45:d3:0d:46:5d:b6:88: 19:42:6d:41:b2:f9:c5:60:f4:83:ec:88:82:e7:ac:5c:54:c4: c2:29:ae:a4:5c:44:7c:1a:9f:bf:3d:fd:3b:f5:88:e0:af:4e: 16:af:24:e2:0c:ba:6c:3d:81:f4:ff:f1:86:2d:75:2d:27:f7: ff:f8:91:2c:7e:1c:ea:6b:db:a5:85:f0:28:28:ab:e9:d2:6d: e6:00:2e:ee:05:af:9f:95:12:ea:1e:04:c8:fe:53:5d:4f:28: d8:72:ec:35:07:bf:ed:1b:ab:24:b5:cd:d5:81:14:ff:e9:ba: a2:cf:fa:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nctGslY6ucSL9eF7omH3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjYwMzI2MDAwMjA5WhcNMjYwMzI3MDAwMjA5WjAzMTEwLwYDVQQD Eyg4NTc3OWQzYjQ0NzFmYTVkZGE1ZjAwNzJlM2IxOGNlYWI4MTA4MDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGj8TAMPBbCYnJXWvwOAe8yQ4gHk KPDgRNVYCjCFbVFZWdLW1fsAEj/c9uc8aPoehE7etOpZiRj/2mCtgNgzZEjXKX8i nOsr36TV0NVsDZSDxWGWyzNnWkQRexNky5C+r/lFzFE0Kknv46lmr76cqmh91Rnb uVDHZ7kuOGh1P8gIewEs0l0j7tTCpF/+TbBfAFRiOfRcejmav890M69Xet/pPORd x/Oqhqs4X/iOgJN2D5nHfEDB2RqH/vUPwEqunSPT6sTT2GOgAXeQrAfLPtHPXpvi EF6oyWxj53oAn7Yxt2mPRiDN7BFilHCPHw5nl49f++9w7bXRNmouJfRnnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIV3nTtEcfpd2l8AcuOxjOq4EICTMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWB1pCMV AXmiFUGNfkXHHuOSLB2bEgQm6S7OogplFIhZKyLTQE0fFYIjX/54svnkd/mXk46B KyMzwp/+bciGgRfCzOaMsX7ubFmvrUbhG2UDDBfF2LsheyrHId8EtzhutSlK7Qf8 1p2M0z2h6efESPtQ4jMGlUQ/HA8o/f2Y34e6aL7v00nh72FF0w1GXbaIGUJtQbL5 xWD0g+yIguesXFTEwimupFxEfBqfvz39O/WI4K9OFq8k4gy6bD2B9P/xhi11LSf3 //iRLH4c6mvbpYXwKCir6dJt5gAu7gWvn5US6h4EyP5TXU8o2HLsNQe/7RurJLXN 1YEU/+m6os/6hQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:17:33 2026 by rpki-client