$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: uHDN/A9GtHfhfKLQEldH16ylIUIO4NuXlQN8aJ+M0u0= Subject key identifier: 3D:A0:75:CC:96:09:90:F6:70:11:48:8D:58:DF:66:A4:56:00:CC:69 Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019D0DE8F1818567EC34056F9596306BDC22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 188E Signing time: Sat 21 Mar 2026 01:01:03 +0000 Manifest this update: Sat 21 Mar 2026 01:01:03 +0000 Manifest next update: Sun 22 Mar 2026 01:01:03 +0000 Files and hashes: 1: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=) 2: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=) 3: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=) 4: FQSV18p_T_droUZh08zoIA9Ax8A.roa (hash: znhD3qntwxP0GJzV41Y9fLTZXvTyllhrzmb59F4/qY4=) 5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=) 6: QWGsJlARLoXD3dTifaZvCAad7X4.roa (hash: Qzx6/bGY/9F07uNBPAulRDJPcAim/44VXRU8uq17XTM=) 7: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=) 8: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=) 9: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=) 10: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: ldUNKFcMrTd7bXKe9M7s4Y5rmM1BT6p8gTKDrFgNvlg=) 11: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0d:e8:f1:81:85:67:ec:34:05:6f:95:96:30:6b:dc:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Mar 21 01:01:03 2026 GMT Not After : Mar 22 01:01:03 2026 GMT Subject: CN=3da075cc960990f67011488d58df66a45600cc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:97:6b:05:9b:2b:11:20:94:df:a9:19:e2:c7: 61:5b:11:89:97:b4:1a:9d:68:1e:89:3a:fd:20:37: 56:13:e4:61:b3:1a:85:d0:c9:50:0d:c9:f2:14:66: 7a:4b:1d:c2:75:d0:30:56:64:2d:7d:97:ca:98:45: 5c:85:ba:b4:bc:22:d4:f3:70:f7:7f:e6:f9:76:89: 4c:e8:5d:3e:3b:4a:9e:4e:2f:39:bd:ae:d1:20:33: a5:1e:75:e7:50:83:85:02:7e:07:26:b7:b3:a1:6f: 6e:af:83:c3:b4:97:bd:8d:76:1b:1b:a1:88:04:86: c3:45:96:a9:64:7d:2c:6c:ea:6f:1c:97:69:ce:d5: e8:e0:b7:28:3e:e4:42:ef:c6:b5:ea:7c:8d:7e:b2: b3:63:a6:69:ad:c3:a4:a3:a7:e3:d6:11:c9:c9:76: 60:dc:88:74:d5:2a:d5:53:63:85:f8:6b:6c:c4:0f: ad:b2:8d:88:11:80:17:e0:cf:80:ad:ab:1a:7b:f5: e0:77:89:86:92:4a:b8:a9:2a:1e:5d:c1:cb:11:30: 88:88:8c:79:21:d1:9b:53:f3:05:23:8e:4c:2f:30: e5:2e:2c:8d:da:51:d6:cb:21:af:f3:3f:f2:5b:7c: dc:93:8d:ab:db:22:40:da:2a:f6:25:c4:a9:86:e8: ee:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A0:75:CC:96:09:90:F6:70:11:48:8D:58:DF:66:A4:56:00:CC:69 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c6:69:15:38:19:ff:2f:9c:d9:62:2f:a7:fd:68:43:5c:b6: ef:46:6a:44:dd:08:03:25:41:d8:b4:c3:5a:0f:8b:41:74:ca: d1:a8:3a:19:ff:2a:bb:5b:91:73:54:8f:ce:40:1c:0b:7a:c4: f5:d2:fc:70:4a:c3:33:6b:48:23:85:dc:ae:c7:31:f7:0b:86: cd:22:ac:0c:96:f0:f4:9e:ae:c3:4f:50:f6:b3:2b:d7:7a:ed: 24:70:7e:12:71:89:e0:a8:db:5d:8c:11:07:f9:5e:e8:fa:a9: 67:d4:53:27:10:73:6e:2d:01:3f:96:b5:f8:3f:96:77:91:e1: 9b:41:3c:31:ec:15:bf:d6:19:97:e7:b4:04:d2:8c:60:58:0e: fa:53:d3:73:98:f5:26:91:d1:1f:29:f0:fe:1d:c3:05:53:09: 44:53:21:e0:fc:e4:3f:e3:1f:b4:2c:9d:43:1b:dd:16:42:0c: 6b:ef:d7:c2:b0:19:53:cb:65:e2:4f:24:2f:77:d0:e0:c3:9d: 9b:79:7f:f5:79:f5:93:83:f7:bc:ee:6c:a2:7a:9a:76:69:0d: 87:1c:84:7a:16:bc:f4:74:90:b6:ed:94:bd:25:46:6f:ea:5a: bd:73:e0:57:ab:ca:ba:9e:3d:a2:8f:f6:ee:bb:62:69:c1:ad: 5f:41:cb:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0N6PGBhWfsNAVvlZYwa9wiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwMzIxMDEwMTAzWhcNMjYwMzIyMDEwMTAzWjAzMTEwLwYDVQQD EygzZGEwNzVjYzk2MDk5MGY2NzAxMTQ4OGQ1OGRmNjZhNDU2MDBjYzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JdrBZsrESCU36kZ4sdhWxGJl7Qa nWgeiTr9IDdWE+RhsxqF0MlQDcnyFGZ6Sx3CddAwVmQtfZfKmEVchbq0vCLU83D3 f+b5dolM6F0+O0qeTi85va7RIDOlHnXnUIOFAn4HJrezoW9ur4PDtJe9jXYbG6GI BIbDRZapZH0sbOpvHJdpztXo4LcoPuRC78a16nyNfrKzY6ZprcOko6fj1hHJyXZg 3Ih01SrVU2OF+GtsxA+tso2IEYAX4M+Arasae/Xgd4mGkkq4qSoeXcHLETCIiIx5 IdGbU/MFI45MLzDlLiyN2lHWyyGv8z/yW3zck42r2yJA2ir2JcSphujuYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2gdcyWCZD2cBFIjVjfZqRWAMxpMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMZpFTgZ /y+c2WIvp/1oQ1y270ZqRN0IAyVB2LTDWg+LQXTK0ag6Gf8qu1uRc1SPzkAcC3rE 9dL8cErDM2tII4Xcrscx9wuGzSKsDJbw9J6uw09Q9rMr13rtJHB+EnGJ4KjbXYwR B/le6PqpZ9RTJxBzbi0BP5a1+D+Wd5Hhm0E8MewVv9YZl+e0BNKMYFgO+lPTc5j1 JpHRHynw/h3DBVMJRFMh4PzkP+MftCydQxvdFkIMa+/XwrAZU8tl4k8kL3fQ4MOd m3l/9Xn1k4P3vO5sonqadmkNhxyEeha89HSQtu2UvSVGb+pavXPgV6vKup49oo/2 7rtiacGtX0HLVQ== -----END CERTIFICATE-----Generated at Sat Mar 21 08:12:56 2026 by rpki-client