$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: M7aYwCEcn5WbU3fZu44qqMZreXr7JlEccByQjK7Mcn8= Subject key identifier: D2:46:E6:8D:A4:51:60:0C:44:BD:8A:02:8E:69:E1:76:A0:6F:E8:10 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019D352D697CB560717302F80D4EB084634D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0E92 Signing time: Sat 28 Mar 2026 16:01:01 +0000 Manifest this update: Sat 28 Mar 2026 16:01:01 +0000 Manifest next update: Sun 29 Mar 2026 16:01:01 +0000 Files and hashes: 1: 3vLLEawWlFzGv5JsfUPDtZBDJGY.roa (hash: PavOw4v6+T14FuM5j33PYH4PD5HZoqWe5pgCu1sHQTM=) 2: AHtaW66JMITwcArnsmCRwFXXsoI.roa (hash: ZcCP5/OLK7h3hkYbytBpwMfpzhJ4QDRnFvoryxgp3QU=) 3: GlceivHp-TV4Q9crmL9mrMBEglg.roa (hash: fi9rQQg/AghEIXY2rzjh9Ngdd5xXBUgGLZxXNH+o2gI=) 4: LXdVZsghVBzvzoaxQRbvjkVx8jQ.roa (hash: NF23Tpd0XzXu/8VnH1fo4lwK7GUHlQSNd4PIlBQQqXM=) 5: SqqfV0cqdsmTEBKuOvF0JJEbDoo.roa (hash: bMcPfDE84mvLVznq47OZBYkUC9R902MrAMG5aI6NhzY=) 6: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: TIYlF+dLsd7y8Sx/+jnHo7w7nZxw2nKuJVbsgBCHDr8=) 7: fLKffdmk_A9Snr8RhFbOZjjywPY.roa (hash: IiagzZLO/ENGlk4BhZMQEHdxX+qkJzXcYKWPS2YP1/k=) 8: hxoGXcKSbBJ2PWCa3J0fMHiuDsU.roa (hash: 7Q+LWc6VgpTopv5k3/peiGrLhiln8d4FJvX1XgGREac=) 9: m4ddTK804isbAZwCK7aJ6EBhPpU.roa (hash: 7StX8F57GxKb2pQJDMDon9e+sgj78negT0fCwKTunA8=) 10: yHzr1mLOyq97cMlnkU_QbvILd_k.roa (hash: A7tEKpefOfoVMYMfFB/0vDiWMTh6ZA+ebsPXTsPnyck=) 11: ziPECi56XWvOBSk7jFhCDI6bu7M.roa (hash: GtmGk+9Vj+/ONt8GKGTxXSgpLCYGnOP8KSMdgsMgpmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 16:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:35:2d:69:7c:b5:60:71:73:02:f8:0d:4e:b0:84:63:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Mar 28 16:01:01 2026 GMT Not After : Mar 29 16:01:01 2026 GMT Subject: CN=d246e68da451600c44bd8a028e69e176a06fe810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:51:d5:07:3d:5c:5d:c2:e0:02:21:ca:55: 5c:3d:e9:cb:69:e8:a0:d3:e6:3b:2a:4e:bc:79:30: 32:59:7e:66:48:64:15:af:e1:f8:b9:29:4c:29:13: f7:5a:6f:4f:6d:41:d3:c9:3e:c9:11:8c:9c:ad:af: 30:b4:f1:b0:30:16:c0:e6:78:cb:fe:5d:d2:48:86: 7b:73:d8:95:19:bb:b6:45:00:33:d8:08:23:9e:e5: 7b:ce:b2:a5:00:66:02:6b:6c:ae:c6:94:16:19:16: 52:21:fa:67:0e:88:59:fd:b4:6f:e0:de:55:66:f4: bd:eb:7b:e1:9e:cc:d4:5e:59:00:fe:e8:f9:0e:75: ee:16:da:38:ea:fe:a6:c6:b8:0a:d3:b4:cc:13:32: 95:1e:0b:fe:2e:b9:95:8f:b6:db:3f:d8:1d:f6:ff: fe:93:2a:57:4b:7d:86:e8:59:48:54:04:35:a9:88: 5a:66:e8:17:8f:62:cf:f6:92:fd:e3:0f:16:a1:63: 59:50:ae:11:5d:5a:14:0e:2a:18:04:c0:65:8c:11: c4:03:c4:4b:80:4b:02:1f:4a:99:1c:5c:13:cd:f3: a8:3c:e4:a7:f5:52:68:46:5d:b0:e5:c7:da:45:df: 69:01:cb:f0:47:c8:6e:1b:64:40:0e:49:88:6d:6b: 13:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:46:E6:8D:A4:51:60:0C:44:BD:8A:02:8E:69:E1:76:A0:6F:E8:10 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e3:58:11:d9:f8:5f:1e:c4:42:95:d8:e5:47:d7:d1:82:31: 58:b2:a4:29:62:c7:2a:fc:64:41:ae:7e:ea:ee:d0:c5:cb:59: b3:7f:c0:87:63:50:02:c4:7a:71:d0:e8:91:d0:b2:dd:54:1a: 43:d4:93:4c:c6:66:ff:d1:82:6b:e9:3a:2d:ed:9d:1d:c6:96: bb:8d:6f:b1:16:ee:43:bf:7a:10:c4:3a:4a:f9:8e:c1:0d:1b: c6:9e:42:2e:0f:7f:f8:48:28:b1:89:f4:28:74:d4:fa:8f:fb: 6a:a1:89:61:3e:95:9f:71:6d:79:62:50:04:f9:22:ee:b2:17: 57:a6:e0:5f:14:34:67:55:36:17:44:34:4a:20:01:ff:3d:ad: ac:dd:e7:af:0f:71:ff:0f:db:52:fb:48:a2:e2:63:bf:9d:72: 77:f9:80:40:bc:54:38:1e:b5:f9:de:cd:24:1c:b6:b5:b7:b6: 47:98:fa:95:7a:a9:15:2f:3f:4f:91:3a:2a:7c:d0:a9:66:52: c9:5f:69:9b:d5:0c:3d:30:b6:7f:cf:c0:e2:b0:b1:0e:c0:94: d5:21:a1:69:98:c6:32:cb:96:32:8d:05:3f:25:7f:2d:5b:06: d1:d9:eb:d9:5e:52:11:32:30:5d:b1:30:c7:cb:5e:c7:09:f3: dc:4d:65:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ01LWl8tWBxcwL4DU6whGNNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjYwMzI4MTYwMTAxWhcNMjYwMzI5MTYwMTAxWjAzMTEwLwYDVQQD EyhkMjQ2ZTY4ZGE0NTE2MDBjNDRiZDhhMDI4ZTY5ZTE3NmEwNmZlODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7dR1Qc9XF3C4AIhylVcPenLaeig 0+Y7Kk68eTAyWX5mSGQVr+H4uSlMKRP3Wm9PbUHTyT7JEYycra8wtPGwMBbA5njL /l3SSIZ7c9iVGbu2RQAz2AgjnuV7zrKlAGYCa2yuxpQWGRZSIfpnDohZ/bRv4N5V ZvS963vhnszUXlkA/uj5DnXuFto46v6mxrgK07TMEzKVHgv+LrmVj7bbP9gd9v/+ kypXS32G6FlIVAQ1qYhaZugXj2LP9pL94w8WoWNZUK4RXVoUDioYBMBljBHEA8RL gEsCH0qZHFwTzfOoPOSn9VJoRl2w5cfaRd9pAcvwR8huG2RADkmIbWsTmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJG5o2kUWAMRL2KAo5p4Xagb+gQMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+NYEdn4 Xx7EQpXY5UfX0YIxWLKkKWLHKvxkQa5+6u7QxctZs3/Ah2NQAsR6cdDokdCy3VQa Q9STTMZm/9GCa+k6Le2dHcaWu41vsRbuQ796EMQ6SvmOwQ0bxp5CLg9/+EgosYn0 KHTU+o/7aqGJYT6Vn3FteWJQBPki7rIXV6bgXxQ0Z1U2F0Q0SiAB/z2trN3nrw9x /w/bUvtIouJjv51yd/mAQLxUOB61+d7NJBy2tbe2R5j6lXqpFS8/T5E6KnzQqWZS yV9pm9UMPTC2f8/A4rCxDsCU1SGhaZjGMsuWMo0FPyV/LVsG0dnr2V5SETIwXbEw x8texwnz3E1l+Q== -----END CERTIFICATE-----Generated at Sun Mar 29 03:10:39 2026 by rpki-client