$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: uuVdAALn0EJoGJftkkfOxXuXsspbHCirN6Z44tOHMnM= Subject key identifier: 0B:89:F9:72:8A:AB:50:4E:19:C6:F3:81:8D:84:65:36:90:87:29:43 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019D0F3212AEEA524F80342302F84D625B63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 0568 Signing time: Sat 21 Mar 2026 07:00:32 +0000 Manifest this update: Sat 21 Mar 2026 07:00:32 +0000 Manifest next update: Sun 22 Mar 2026 07:00:32 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: F4Ae2fvNPRxJ/wBgs5OhkRrstx79pPsDWQ5OKozd4Nk=) 2: 4FvrTlxGhcdz6JszhweukK-HXp4.roa (hash: vyQEyyYQodDDsgXdHyrJ4jLSuzaa1xOpp48GTtDNY8I=) 3: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 4: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 5: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 6: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 7: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 8: ZVUX-ukmxmMuSmBaOHN4VXarmdk.roa (hash: v4YUjhuoNj8kXmli1Rh7WdYmfXPmnvN9UdaKmw/4lRw=) 9: czip9fB3eES0M4GiRgiFLUFG2LU.roa (hash: kV0itFYP13LMUao8KqcZelmv0P9H0e0lmM8ENEJ/MZk=) 10: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=) 11: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 12: rAJ9_5zEd3dmMjWOCjfsZFUyKPQ.roa (hash: DyTaBCznWg0kaPfdOOVudlJY7K+OhAqJ5CvIYLUzE9s=) 13: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) 14: zlq4yjrsiwQ-lDB1rbbuPd4T-JA.roa (hash: uXc6oUOSXmZtScGHVD8LMsXSU4xPZkADb1L4rjkI9VU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0f:32:12:ae:ea:52:4f:80:34:23:02:f8:4d:62:5b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Mar 21 07:00:32 2026 GMT Not After : Mar 22 07:00:32 2026 GMT Subject: CN=0b89f9728aab504e19c6f3818d84653690872943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:9a:09:35:36:2d:7f:0c:ac:64:b1:c3:b9: 43:d6:b8:8a:24:5e:8b:67:f1:4d:c6:77:04:9c:7b: 93:7e:64:12:3d:57:11:dc:d0:b0:3a:82:92:20:f6: 77:87:12:9e:88:15:c8:71:33:e1:e9:04:6c:54:ce: 6b:0e:7c:57:ee:1e:6a:b3:98:f2:d1:d2:e6:fd:67: 88:7e:43:15:20:48:74:38:3a:c9:36:f5:47:e2:5e: 1b:a8:d1:57:dc:17:c9:00:fe:8e:f6:a7:f5:dc:64: 86:c3:c6:64:8e:9c:51:be:c1:2e:cd:f2:37:7d:a6: 5b:15:ac:d3:b4:8c:7b:1c:c9:5d:51:29:a4:ad:47: 5d:ad:68:68:af:61:71:e6:ad:c4:1b:1f:f6:b4:03: f8:e9:c2:52:fa:c3:44:83:06:4f:cc:83:45:6d:8b: ca:59:68:c3:4f:89:ae:d7:42:e9:2d:f7:f2:d0:68: 76:94:c1:1a:66:dc:c9:94:ad:cc:87:4d:9c:e4:db: 5b:c0:14:4b:96:1f:8f:55:7d:38:01:a0:2d:ad:61: 62:c6:0e:39:90:36:64:c0:70:ac:84:b4:7c:7d:84: c5:84:31:62:70:8d:da:f2:c2:bc:ed:59:35:1d:ec: fc:6d:e0:26:1a:1e:e1:9b:ca:a2:99:59:b2:88:23: 02:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:89:F9:72:8A:AB:50:4E:19:C6:F3:81:8D:84:65:36:90:87:29:43 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:79:48:f1:97:d8:f9:05:87:e3:25:36:1b:b7:82:25:4c:c6: 4e:f5:62:a3:58:e4:68:06:fa:52:42:b3:fa:a7:02:cc:89:16: 72:37:cc:1e:35:37:c8:1d:01:cf:3b:19:39:09:1e:05:55:ea: 8a:e7:62:6c:af:47:c0:98:6b:37:39:e7:57:52:34:35:45:54: 35:5e:13:47:34:ab:53:9f:fc:f8:85:c0:7b:84:94:3e:9f:bd: 06:54:8f:93:17:ee:46:1d:fd:55:bb:81:f9:d5:44:82:9f:4f: ab:7a:dc:ce:55:62:5c:de:df:75:10:1d:ba:3e:8e:b0:cf:75: f8:dc:8f:81:72:59:f1:97:94:22:5d:c6:0d:74:bb:ac:37:70: fe:7b:de:d6:e6:9e:64:14:df:3d:18:14:38:d1:dc:90:32:7f: 55:51:8f:87:42:3d:64:f9:a4:5c:6a:c5:9a:e2:96:ba:27:ff: a4:b4:44:e1:70:1c:92:e9:96:d2:86:a1:62:20:ae:8d:7f:27: 10:60:d2:2e:c5:d4:e9:5d:40:5d:34:1b:2e:b9:4e:ae:46:96: 68:44:36:43:24:f1:36:1c:6e:4f:fb:df:dc:af:05:3f:06:89: b5:b2:78:76:b4:60:01:d8:8c:c7:f6:64:0b:0d:db:cf:0f:26: c3:18:fe:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0PMhKu6lJPgDQjAvhNYltjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwMzIxMDcwMDMyWhcNMjYwMzIyMDcwMDMyWjAzMTEwLwYDVQQD EygwYjg5Zjk3MjhhYWI1MDRlMTljNmYzODE4ZDg0NjUzNjkwODcyOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQyaCTU2LX8MrGSxw7lD1riKJF6L Z/FNxncEnHuTfmQSPVcR3NCwOoKSIPZ3hxKeiBXIcTPh6QRsVM5rDnxX7h5qs5jy 0dLm/WeIfkMVIEh0ODrJNvVH4l4bqNFX3BfJAP6O9qf13GSGw8ZkjpxRvsEuzfI3 faZbFazTtIx7HMldUSmkrUddrWhor2Fx5q3EGx/2tAP46cJS+sNEgwZPzINFbYvK WWjDT4mu10LpLffy0Gh2lMEaZtzJlK3Mh02c5NtbwBRLlh+PVX04AaAtrWFixg45 kDZkwHCshLR8fYTFhDFicI3a8sK87Vk1Hez8beAmGh7hm8qimVmyiCMCvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuJ+XKKq1BOGcbzgY2EZTaQhylDMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXlI8ZfY +QWH4yU2G7eCJUzGTvVio1jkaAb6UkKz+qcCzIkWcjfMHjU3yB0BzzsZOQkeBVXq iudibK9HwJhrNznnV1I0NUVUNV4TRzSrU5/8+IXAe4SUPp+9BlSPkxfuRh39VbuB +dVEgp9Pq3rczlViXN7fdRAduj6OsM91+NyPgXJZ8ZeUIl3GDXS7rDdw/nve1uae ZBTfPRgUONHckDJ/VVGPh0I9ZPmkXGrFmuKWuif/pLRE4XAckumW0oahYiCujX8n EGDSLsXU6V1AXTQbLrlOrkaWaEQ2QyTxNhxuT/vf3K8FPwaJtbJ4drRgAdiMx/Zk Cw3bzw8mwxj+ww== -----END CERTIFICATE-----Generated at Sat Mar 21 13:38:03 2026 by rpki-client