$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft File: EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json) Hash identifier: uzB6Qp+lpmxGlQL6/PEMhdpy0L+GtodwA1+ODlpnIW4= Subject key identifier: 84:AD:47:F5:CB:FE:ED:91:25:47:C8:03:81:F2:93:E1:B8:4E:3E:CA Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b Certificate serial: 019D3C426E49255225C4DC3489B9D11F0D57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft Manifest number: 18DC Signing time: Mon 30 Mar 2026 01:01:19 +0000 Manifest this update: Mon 30 Mar 2026 01:01:19 +0000 Manifest next update: Tue 31 Mar 2026 01:01:19 +0000 Files and hashes: 1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=) 2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=) 3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=) 4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: kFrdwtPkXSsDz9vnROftW7T95Ion7Fu9UmhNeOAu8nY=) 5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=) 6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=) 7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=) 8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=) 9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=) 10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=) 11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=) 12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=) 13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=) 14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=) 15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=) 16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=) 17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=) 18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=) 19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 20:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:3c:42:6e:49:25:52:25:c4:dc:34:89:b9:d1:1f:0d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b Validity Not Before: Mar 30 01:01:19 2026 GMT Not After : Mar 31 01:01:19 2026 GMT Subject: CN=84ad47f5cbfeed912547c80381f293e1b84e3eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:48:24:db:4b:69:a8:fc:55:14:46:3e:06: a0:47:4f:1d:de:ea:9f:dc:cf:d4:4a:ae:19:b9:b5: 78:df:e4:68:27:2d:fc:4d:e5:59:ff:42:2c:a5:c6: 7b:6a:5e:82:bb:1b:06:48:da:4c:08:a4:82:0b:d8: 93:4b:01:3f:38:74:1d:e8:70:7b:74:70:42:c0:0f: 44:17:e2:9d:76:9e:ac:2d:6e:f3:51:f2:fa:47:e1: d0:8c:a9:df:e7:28:41:a2:c8:34:45:4c:f8:d7:15: f5:a6:a3:9c:a4:98:85:38:97:ee:49:25:82:e4:a4: 3b:57:bf:0b:b5:af:71:99:64:68:51:73:4c:7a:cb: 38:65:57:e1:38:e3:4d:b5:4b:95:21:3c:ee:38:87: 94:68:65:bc:da:47:f0:0c:6c:7d:a0:09:d7:ef:8d: 86:27:f9:ee:76:71:85:79:e2:5a:9b:33:42:75:05: d7:6a:71:ec:0c:c0:2e:11:99:99:6e:b2:dd:ad:cc: 20:33:70:1c:1f:3d:0b:7f:1d:23:cd:48:80:fa:8f: b0:e3:66:a7:b0:87:24:d0:0b:75:22:b0:a3:21:c5: 1a:4e:28:aa:c4:fa:10:48:09:8f:9c:76:0f:39:44: b5:ef:c0:7b:69:53:8e:1c:7b:d1:9e:52:76:f2:d2: e9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AD:47:F5:CB:FE:ED:91:25:47:C8:03:81:F2:93:E1:B8:4E:3E:CA X509v3 Authority Key Identifier: keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3b:10:f3:b4:e6:55:61:55:67:7a:a1:6c:79:80:b8:a7:77: 0d:95:f6:2d:dc:21:80:f1:8f:f5:7c:21:c4:7f:d2:65:cb:5d: d9:bb:7a:a3:18:b1:fa:48:38:d6:32:8a:03:46:a9:b6:7e:d0: cc:bf:3a:f1:b1:dd:8b:e6:84:c4:f9:06:86:fb:12:40:e5:b6: ef:9a:91:2e:8f:fd:35:c2:76:e1:ed:29:92:b2:ca:a7:7f:cc: ed:f7:11:f1:a9:35:2e:72:d5:b1:0d:3c:d6:58:35:e7:19:84: 79:80:aa:2f:48:f5:7b:32:21:9c:3e:ea:72:ec:2e:d1:1d:67: b8:fc:10:d1:ae:62:06:6a:57:a3:a6:d5:9b:10:02:ce:25:f2: b5:78:b2:e9:66:ca:b0:3e:19:07:e8:f1:66:c2:cf:d1:ab:01: 85:06:fd:b0:b1:83:eb:91:02:7d:76:09:e8:a8:af:ab:6b:43: ae:3c:05:74:b3:67:c3:98:33:25:80:a8:2b:6e:7c:d9:eb:73: a9:07:9d:2c:18:64:bb:3d:e4:d4:50:69:c6:a7:d4:e6:aa:3a: 8a:59:2e:bf:75:b3:fd:7a:b2:16:68:20:49:ef:9d:ed:22:c7: 2c:4e:33:c8:bb:41:a4:72:bf:ae:db:0d:06:9c:81:d9:28:6f: 91:04:bb:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ08Qm5JJVIlxNw0ibnRHw1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy YjE4MWIwHhcNMjYwMzMwMDEwMTE5WhcNMjYwMzMxMDEwMTE5WjAzMTEwLwYDVQQD Eyg4NGFkNDdmNWNiZmVlZDkxMjU0N2M4MDM4MWYyOTNlMWI4NGUzZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2NIJNtLaaj8VRRGPgagR08d3uqf 3M/USq4ZubV43+RoJy38TeVZ/0IspcZ7al6CuxsGSNpMCKSCC9iTSwE/OHQd6HB7 dHBCwA9EF+Kddp6sLW7zUfL6R+HQjKnf5yhBosg0RUz41xX1pqOcpJiFOJfuSSWC 5KQ7V78Lta9xmWRoUXNMess4ZVfhOONNtUuVITzuOIeUaGW82kfwDGx9oAnX742G J/nudnGFeeJamzNCdQXXanHsDMAuEZmZbrLdrcwgM3AcHz0Lfx0jzUiA+o+w42an sIck0At1IrCjIcUaTiiqxPoQSAmPnHYPOUS178B7aVOOHHvRnlJ28tLpwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIStR/XL/u2RJUfIA4Hyk+G4Tj7KMB8GA1UdIwQY MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct YWE4NTllMTkyYjE2LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2 LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijsQ87Tm VWFVZ3qhbHmAuKd3DZX2LdwhgPGP9XwhxH/SZctd2bt6oxix+kg41jKKA0aptn7Q zL868bHdi+aExPkGhvsSQOW275qRLo/9NcJ24e0pkrLKp3/M7fcR8ak1LnLVsQ08 1lg15xmEeYCqL0j1ezIhnD7qcuwu0R1nuPwQ0a5iBmpXo6bVmxACziXytXiy6WbK sD4ZB+jxZsLP0asBhQb9sLGD65ECfXYJ6Kivq2tDrjwFdLNnw5gzJYCoK2582etz qQedLBhkuz3k1FBpxqfU5qo6ilkuv3Wz/XqyFmggSe+d7SLHLE4zyLtBpHK/rtsN BpyB2ShvkQS79Q== -----END CERTIFICATE-----Generated at Mon Mar 30 04:47:23 2026 by rpki-client