$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: i9uHwrtSjCaf0U1A7/drUKCF1tr2XkqDyDs2yD0FQCs= Subject key identifier: 5B:3B:8C:05:25:90:DE:E0:D8:80:D0:EB:DD:D4:52:E3:52:E0:07:02 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019CE1B4621DC98ABA39A5D3E41F884C9D11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0D9B Signing time: Thu 12 Mar 2026 11:00:21 +0000 Manifest this update: Thu 12 Mar 2026 11:00:21 +0000 Manifest next update: Fri 13 Mar 2026 11:00:21 +0000 Files and hashes: 1: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=) 2: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=) 3: 5vGd1hrRUgjw-VsLzTylini_B7Q.roa (hash: sg0Um8p6l1c6gl4UvV5+SwzisrScl+Xsl5xaWUIwQqQ=) 4: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=) 5: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=) 6: QGAJExkL2FvXDViXp-Coxz1ISyE.roa (hash: KqS/q7o4Pi5DS6O8i7jT3UhmWb+gbQp5j9Y+K8+kuI8=) 7: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=) 8: Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa (hash: 11efmsxVKEDPybIj7bqcT7q0gfbmOyOH1LpPDuuPMuI=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: jk_vo45DTCE6Qch6NeSYYIx2UVA.roa (hash: Y3KIabgiInfNA/NNjT/XlQnKjIR2mWc9rhmGkHb5FNU=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=) 13: pgVasoGtiLKSu7Gip3svipxzZPk.roa (hash: 0SihNtYkT1G6gzAeawF0Zf7V1EZDtwvsDM2yXROG1dk=) 14: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: HzFsm/cDE0FELV7DRzXMz1JbBpDIQWsIDstdZPBHSyw=) 15: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=) 16: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 11:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e1:b4:62:1d:c9:8a:ba:39:a5:d3:e4:1f:88:4c:9d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Mar 12 11:00:21 2026 GMT Not After : Mar 13 11:00:21 2026 GMT Subject: CN=5b3b8c052590dee0d880d0ebddd452e352e00702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:59:6a:5d:6c:84:6a:9f:a4:df:25:28:4d: 35:31:99:17:81:22:4f:1f:25:97:c6:a0:f2:90:22: e0:f0:7f:60:a2:d2:32:b7:ad:73:5f:a7:a6:1c:ef: 34:a1:14:c3:ca:5b:98:93:f8:fe:53:be:57:52:1f: 13:21:f4:80:c7:c8:b5:7e:e7:a3:67:96:35:80:ed: ae:14:53:53:f0:38:ba:d9:46:0e:f8:38:6c:33:cd: c6:46:a1:12:28:6c:d7:ac:89:90:d1:0a:1b:91:ce: 7b:eb:7c:2d:15:81:92:e7:d1:92:bc:ae:fb:3d:7f: 18:a3:83:78:19:5d:d0:c4:df:fa:b4:df:f0:fc:bb: 35:83:36:0e:c4:c1:26:4d:7a:ce:e6:52:8a:0b:ed: 70:2f:32:df:d3:b1:e8:4d:56:cd:87:44:d5:04:26: 62:9c:47:5d:ce:38:d0:ab:e7:17:a5:23:dd:df:bd: 04:a9:ff:00:44:73:dd:72:4f:30:3e:c0:ac:78:9a: 5a:ee:63:d7:2f:0c:49:d4:a3:d8:7f:2b:18:be:ed: 19:b3:47:86:e2:58:ad:d1:52:a5:e9:ce:35:8f:b8: a7:09:63:7d:e3:49:74:ef:ed:63:0e:30:ac:7e:01: 2e:8f:e4:7e:8d:b0:2a:56:46:21:58:85:c0:18:64: e0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3B:8C:05:25:90:DE:E0:D8:80:D0:EB:DD:D4:52:E3:52:E0:07:02 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a0:7e:c2:17:00:b9:60:fc:bd:67:0d:1c:14:fe:3a:6b:bf: be:26:b8:40:a0:b9:fd:5e:cd:8b:ec:9c:e6:26:db:ab:c6:9c: 43:d4:fa:d3:c0:1d:3f:91:f4:d8:52:3a:4a:e3:4d:da:33:e3: 76:fb:e8:13:59:0c:56:94:d1:31:72:00:cd:4d:16:33:7d:f8: 22:47:97:5f:0f:cf:69:ba:3f:dd:11:a0:c4:60:d9:56:ff:58: ab:8b:4b:a4:39:de:a5:da:d5:e4:ec:5d:e2:10:97:cb:3d:6b: e1:ac:30:4c:d7:a5:15:79:0e:bc:1e:2e:0f:76:0b:61:55:85: f3:20:11:d1:7a:40:27:cb:34:7c:25:3a:82:c0:82:26:da:f3: 41:e8:af:bc:9f:6f:32:8d:c3:95:72:4b:1e:15:f8:1d:d0:b4: 3d:23:ed:1e:86:9f:2c:ed:bb:ca:50:ab:a5:8b:85:8b:d7:e3: 2e:5e:9d:7d:3f:ed:65:9e:e0:60:ba:8b:40:44:50:54:9e:e7: ed:d9:cd:f3:b9:ea:d6:bf:71:1b:2b:16:c6:12:dd:2e:82:ab: af:65:5e:72:89:43:ef:5b:bb:65:39:50:be:80:58:a6:33:6c: 12:5b:85:7c:98:1e:44:6c:cf:4b:83:4a:e6:4c:b6:72:af:31: e1:77:19:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzhtGIdyYq6OaXT5B+ITJ0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwMzEyMTEwMDIxWhcNMjYwMzEzMTEwMDIxWjAzMTEwLwYDVQQD Eyg1YjNiOGMwNTI1OTBkZWUwZDg4MGQwZWJkZGQ0NTJlMzUyZTAwNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgBZal1shGqfpN8lKE01MZkXgSJP HyWXxqDykCLg8H9gotIyt61zX6emHO80oRTDyluYk/j+U75XUh8TIfSAx8i1fuej Z5Y1gO2uFFNT8Di62UYO+DhsM83GRqESKGzXrImQ0Qobkc5763wtFYGS59GSvK77 PX8Yo4N4GV3QxN/6tN/w/Ls1gzYOxMEmTXrO5lKKC+1wLzLf07HoTVbNh0TVBCZi nEddzjjQq+cXpSPd370Eqf8ARHPdck8wPsCseJpa7mPXLwxJ1KPYfysYvu0Zs0eG 4lit0VKl6c41j7inCWN940l07+1jDjCsfgEuj+R+jbAqVkYhWIXAGGTgkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFs7jAUlkN7g2IDQ693UUuNS4AcCMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxKB+whcA uWD8vWcNHBT+Omu/via4QKC5/V7Ni+yc5ibbq8acQ9T608AdP5H02FI6SuNN2jPj dvvoE1kMVpTRMXIAzU0WM334IkeXXw/Pabo/3RGgxGDZVv9Yq4tLpDnepdrV5Oxd 4hCXyz1r4awwTNelFXkOvB4uD3YLYVWF8yAR0XpAJ8s0fCU6gsCCJtrzQeivvJ9v Mo3DlXJLHhX4HdC0PSPtHoafLO27ylCrpYuFi9fjLl6dfT/tZZ7gYLqLQERQVJ7n 7dnN87nq1r9xGysWxhLdLoKrr2VecolD71u7ZTlQvoBYpjNsEluFfJgeRGzPS4NK 5ky2cq8x4XcZAw== -----END CERTIFICATE-----Generated at Thu Mar 12 20:40:22 2026 by rpki-client