$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: IOx8CZSIN6PZL6Poezm4hPwAUgfafDSAuMg6pkZnYpE= Subject key identifier: 9B:1C:A9:B0:75:4D:32:6D:16:7A:DB:8B:31:F7:70:D2:3B:55:87:E3 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019CE146F157136FBB1BA0079DB975EE283F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 18FF Signing time: Thu 12 Mar 2026 09:00:48 +0000 Manifest this update: Thu 12 Mar 2026 09:00:48 +0000 Manifest next update: Fri 13 Mar 2026 09:00:48 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: dSv0lCPMylPD1csnvB3vqOwfu9mznlB91w1Fa0KyAHc=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 2tSMN_pYPToDr9I5ka7QuhM6K8c.roa (hash: EKsO7v439UBdRALGntRf+KdOY/pezXTdYABa+aa0lNw=) 6: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 7: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 8: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 9: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 10: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 11: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 12: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 13: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 14: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 15: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 16: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 17: KE8wPpi49xiO7rZJQ7uhlqOLLHw.roa (hash: 2TxPIJ9ZSPXuWkn0jdm0N4HJMJsSy4jeH/o6WF6Nqr8=) 18: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 19: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 20: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 21: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 22: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 23: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 24: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 25: c2Yu4gx5LPJ3HF69pXhK7_25yXI.roa (hash: Q4DNvIlUJ8XVj3rmssf9V95x20ibWTrUMeHs2DCLCj8=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: fEH6GXoroSfAEDj0z55rGNitKMU.roa (hash: Zmq+V4G0nlMIUgVrJqMNAD4Dj5EQvHd5LCZ6hw/cQJg=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e1:46:f1:57:13:6f:bb:1b:a0:07:9d:b9:75:ee:28:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Mar 12 09:00:48 2026 GMT Not After : Mar 13 09:00:48 2026 GMT Subject: CN=9b1ca9b0754d326d167adb8b31f770d23b5587e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:48:2b:36:47:12:98:e8:22:63:73:2e:8e: ba:0a:fd:b7:0d:c9:5a:e7:fe:d7:a8:b8:1c:2d:b3: 28:d8:c8:c7:cf:2a:45:79:69:f4:1a:01:7b:ed:16: 20:b9:45:4e:fb:80:87:44:9e:81:3f:fc:38:58:e8: 7f:c9:3e:32:05:dd:c4:1c:b9:3d:ba:b0:69:a3:a8: 5a:b5:2c:67:9a:fc:28:11:01:72:cd:c1:be:e3:29: e5:51:0e:53:d0:0d:46:9b:65:e1:49:d1:db:6e:eb: d4:a8:a1:81:0f:20:0c:de:be:40:63:55:ce:60:1f: df:08:a5:94:d6:be:6f:28:94:20:38:7f:a1:26:a3: 7a:af:fd:90:e3:e6:fa:b6:d1:b1:c5:ba:c8:c4:e2: bc:cb:83:a3:64:02:27:b3:94:9f:8b:df:c8:51:fb: b7:72:ae:0d:03:31:76:b0:29:eb:c4:25:cb:03:7f: f6:76:08:23:a0:40:0b:ed:9e:c2:9f:dc:96:38:79: 87:66:8f:ad:9e:1a:98:89:28:78:f7:45:52:4d:f1: 01:83:53:3c:0f:19:79:a1:40:7c:d7:b3:02:fb:ae: 88:a7:10:bd:2b:df:70:86:4c:52:ba:45:64:60:6f: 57:1a:5c:60:da:cd:cb:9a:3c:a6:db:97:f0:f8:94: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1C:A9:B0:75:4D:32:6D:16:7A:DB:8B:31:F7:70:D2:3B:55:87:E3 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:78:11:ff:fd:fb:45:9a:fa:b0:62:2d:f7:39:22:94:bc:8f: 56:dd:4b:30:3e:24:57:1a:bd:44:96:ed:d1:7b:97:6e:0e:2b: 00:63:06:04:0b:79:09:b8:65:db:28:26:ae:8f:45:2d:4b:08: 79:8f:c9:ed:b4:f5:77:a6:71:fd:7e:e9:65:5e:35:72:bc:41: 0f:1a:9a:ad:a2:68:2f:78:38:f0:f9:ae:ec:cb:f9:76:a4:ef: ce:c3:e3:a3:c6:63:ca:2b:d4:2a:69:a5:fa:05:e6:1e:da:3e: b5:15:cb:83:05:49:4a:e3:3f:fc:44:09:9d:e5:fd:d6:ae:6e: 47:f8:c3:da:02:04:34:18:f2:be:bb:3c:14:4b:40:0a:8c:ea: e1:3a:0d:b2:96:9e:8a:f4:48:1a:fa:07:2d:6b:34:00:29:52: c5:24:e9:78:35:da:bf:14:6b:ce:25:53:1b:0a:5c:db:65:5d: 35:59:58:0c:b6:4e:e5:5b:54:7c:5a:15:40:a6:91:48:53:8f: b6:0f:4a:3c:78:97:ac:62:57:b8:5a:39:40:27:97:08:14:c6: 96:f8:7d:10:e3:e7:32:26:04:6c:f2:39:9d:81:ef:b3:69:57: a9:d2:33:bb:a6:9b:21:15:8a:8f:5d:db:c1:8c:90:60:75:40: 28:c6:80:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzhRvFXE2+7G6AHnbl17ig/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMzEyMDkwMDQ4WhcNMjYwMzEzMDkwMDQ4WjAzMTEwLwYDVQQD Eyg5YjFjYTliMDc1NGQzMjZkMTY3YWRiOGIzMWY3NzBkMjNiNTU4N2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE1IKzZHEpjoImNzLo66Cv23Dcla 5/7XqLgcLbMo2MjHzypFeWn0GgF77RYguUVO+4CHRJ6BP/w4WOh/yT4yBd3EHLk9 urBpo6hatSxnmvwoEQFyzcG+4ynlUQ5T0A1Gm2XhSdHbbuvUqKGBDyAM3r5AY1XO YB/fCKWU1r5vKJQgOH+hJqN6r/2Q4+b6ttGxxbrIxOK8y4OjZAIns5Sfi9/IUfu3 cq4NAzF2sCnrxCXLA3/2dggjoEAL7Z7Cn9yWOHmHZo+tnhqYiSh490VSTfEBg1M8 Dxl5oUB817MC+66IpxC9K99whkxSukVkYG9XGlxg2s3Lmjym25fw+JR4+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJscqbB1TTJtFnrbizH3cNI7VYfjMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHgR//37 RZr6sGIt9zkilLyPVt1LMD4kVxq9RJbt0XuXbg4rAGMGBAt5Cbhl2ygmro9FLUsI eY/J7bT1d6Zx/X7pZV41crxBDxqaraJoL3g48Pmu7Mv5dqTvzsPjo8ZjyivUKmml +gXmHto+tRXLgwVJSuM//EQJneX91q5uR/jD2gIENBjyvrs8FEtACozq4ToNspae ivRIGvoHLWs0AClSxSTpeDXavxRrziVTGwpc22VdNVlYDLZO5VtUfFoVQKaRSFOP tg9KPHiXrGJXuFo5QCeXCBTGlvh9EOPnMiYEbPI5nYHvs2lXqdIzu6abIRWKj13b wYyQYHVAKMaAUA== -----END CERTIFICATE-----Generated at Thu Mar 12 18:40:23 2026 by rpki-client