$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft File: 6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json) Hash identifier: oFWc3byRvd8QnB9VjekegV0eybAkSiPRlyNUs+Jhvpc= Subject key identifier: E7:F7:1F:27:4E:D6:06:45:E7:C6:A0:21:71:BD:06:B0:2A:B6:7A:D6 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019D3789941818036245B637534B71788650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft Manifest number: 18AF Signing time: Sun 29 Mar 2026 03:00:56 +0000 Manifest this update: Sun 29 Mar 2026 03:00:56 +0000 Manifest next update: Mon 30 Mar 2026 03:00:56 +0000 Files and hashes: 1: 3_x1fMTPoRvLX1TcN9jNkDdkszI.roa (hash: qChZ12jGPt+igqR3YYtp2bz0dKJAKMPd592ma9NcCNg=) 2: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: Qq2YpRpACPmsmGH1A0U3X3nQtaQ/i+OrHlwafRE/pSA=) 3: 6amDSMQ_855VNIbRII_DXHjnq_k.roa (hash: HCMqnracA8A73jBfs9v8hnmmkLDx0vR0XfYQrjLn7vw=) 4: BV0kbYMEcmAv6rpHU2pEh-w65Xo.roa (hash: ouC+rh/o+/bFmEFqwkxPbJmSVE32vMaY+/Xhjpux2a0=) 5: F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa (hash: FrHQz6VBgsdDzG1EgR21e8l/oyJBYEHWEEgLbKK49Oc=) 6: Ifo6NwD56xJA6y61SpEQqvLf_R8.roa (hash: ArTm2IJOiT2dFcspxzA0JNm1iU6P54xELTMvSTOHQ8U=) 7: N2hJlPxzOaiP-0JOcE7E0Kk14z8.roa (hash: lBlro6ZfcBUQahYTWw9cYvjI96CLCeStJjQ3Cmlkpxs=) 8: O0zR1L9MgT5YwBbq6ISw_Bf7MB0.roa (hash: cICGD+vgHpne8r3yKqEMRJZStOofj1K0i19NpAHXpU4=) 9: S8CzuNBRlFxh0RCxcEYtrsSnrsU.roa (hash: etDBZKFL1Nfc+kBaajeV+YtDevN2RBSTQ7egtdVU0rg=) 10: _dXE-UR4YRoA9ses5dqlWyYCiIk.roa (hash: mq7uXlOBNSd5zRdIjUiiLaVvztFPBgtSE6JrvNPES20=) 11: bvcvNYojmTtMnBysPzJxWFLdF80.roa (hash: rEF2pNowtb5e9TFBM+KqVgoLZ9CLxZ76uZKkrlZ2GsU=) 12: cBwp2ouu-kTQUV0AP3SgjoKtpKE.roa (hash: 2mn/5LNm9rX3SfstPhosdI3pLFHA9jE4gvH4r7JdHQg=) 13: rYWyVFJzLrFOCnVo-LA8TMd7XMk.roa (hash: /09X2rjXIYAHVxxz61B+a44mcYZqQFBBx89GEQ/r21o=) 14: yYJYN7yB_Q-nMabNeBbuq0usaU8.roa (hash: JotV8yhZRYv27OMcLIgmr6zSV2UH9Ktauyk4zm0D0HY=) 15: zbuFuKdn8FFVoWiKIOgewd-9diY.roa (hash: 36jMzQUc3TxS+/RDyNv/sTqqO15sLlzoMkMaWAxXiIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:89:94:18:18:03:62:45:b6:37:53:4b:71:78:86:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Mar 29 03:00:56 2026 GMT Not After : Mar 30 03:00:56 2026 GMT Subject: CN=e7f71f274ed60645e7c6a02171bd06b02ab67ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:21:36:2c:45:32:f5:18:ef:fd:71:ec:6f: 30:55:2a:91:d2:7f:7a:7d:96:40:d9:9c:1e:bf:ac: 71:ff:3f:d0:cc:1a:92:6f:b1:b3:4c:95:8e:15:17: 10:c6:d7:fa:c4:fb:38:fc:b7:1d:99:d0:59:5d:02: a4:91:c9:d7:76:42:0e:f5:6d:3f:a4:09:73:44:0e: 79:7c:eb:76:59:d3:c3:7d:22:41:f7:1c:ca:3f:7b: 37:a0:15:f1:74:2b:2d:c4:5b:52:15:62:35:8e:aa: 0b:3d:26:14:92:f1:1f:b7:62:bd:14:8d:3e:40:9f: f0:54:e5:ff:30:ec:09:9c:b2:8f:2f:3e:64:35:31: 85:4e:fd:7f:e1:db:f4:4a:78:72:24:89:80:9e:04: 5b:47:95:b2:0d:c1:9a:25:8c:d2:0a:c6:3c:c7:bf: 7a:fa:20:b2:47:01:2b:28:02:86:7b:94:b1:8b:c1: 6a:af:c5:95:a3:f3:f9:4c:7d:2c:d1:bd:0e:76:9c: df:62:df:87:eb:71:d6:5c:ed:11:33:6c:39:76:73: e3:5e:3c:94:ee:ca:31:19:0f:42:01:32:e6:e2:89: 56:72:60:0a:30:af:b5:28:7c:7b:d7:c3:7f:bf:a7: f3:8e:ea:45:ca:a6:2e:eb:32:74:80:5d:79:ca:a9: 86:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F7:1F:27:4E:D6:06:45:E7:C6:A0:21:71:BD:06:B0:2A:B6:7A:D6 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:9f:63:2a:72:14:67:14:67:04:b4:07:a9:e9:55:e9:6e:34: 96:6b:cf:93:66:e1:7d:e0:41:c2:b7:18:4e:75:4f:e9:cf:45: 2f:60:bb:5d:81:c9:8a:96:65:29:ab:a7:36:5d:d4:e2:e4:e5: 0e:48:dc:05:41:04:b0:f6:d0:ae:05:10:db:0f:90:1c:9e:13: 70:8e:97:61:78:a1:32:91:74:01:15:ac:3c:ab:6b:a2:1f:11: 09:ed:be:69:05:3c:09:37:7b:b7:c8:7e:0c:90:b7:bf:be:3a: f2:c8:51:ab:86:89:06:24:3d:a9:a3:cb:88:3b:90:f6:a8:aa: 45:c6:7c:24:72:9f:fe:88:43:bd:ff:e8:07:76:85:7f:00:fc: 32:69:45:13:05:8e:e1:24:26:9a:e0:a9:55:fd:ea:c3:09:2a: 27:19:e7:a3:5b:e0:cd:df:45:34:fa:85:f9:e6:be:51:d5:94: 99:c6:6c:d2:8b:45:4d:ea:01:3c:f4:e5:52:d9:0b:04:86:2e: 25:f5:1a:c9:ca:9b:6a:3b:a5:a9:ad:3b:a0:e2:9f:dd:56:53: 1f:42:1c:21:ee:8f:56:01:d1:aa:5e:a1:71:56:ac:2f:cf:1a: 17:40:93:c7:bc:c5:ff:1f:fe:b7:4c:e2:c7:1a:95:3c:ad:29: ef:77:81:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ03iZQYGANiRbY3U0txeIZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwMzI5MDMwMDU2WhcNMjYwMzMwMDMwMDU2WjAzMTEwLwYDVQQD EyhlN2Y3MWYyNzRlZDYwNjQ1ZTdjNmEwMjE3MWJkMDZiMDJhYjY3YWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKQhNixFMvUY7/1x7G8wVSqR0n96 fZZA2Zwev6xx/z/QzBqSb7GzTJWOFRcQxtf6xPs4/LcdmdBZXQKkkcnXdkIO9W0/ pAlzRA55fOt2WdPDfSJB9xzKP3s3oBXxdCstxFtSFWI1jqoLPSYUkvEft2K9FI0+ QJ/wVOX/MOwJnLKPLz5kNTGFTv1/4dv0SnhyJImAngRbR5WyDcGaJYzSCsY8x796 +iCyRwErKAKGe5Sxi8Fqr8WVo/P5TH0s0b0OdpzfYt+H63HWXO0RM2w5dnPjXjyU 7soxGQ9CATLm4olWcmAKMK+1KHx718N/v6fzjupFyqYu6zJ0gF15yqmG8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOf3HydO1gZF58agIXG9BrAqtnrWMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUp9jKnIU ZxRnBLQHqelV6W40lmvPk2bhfeBBwrcYTnVP6c9FL2C7XYHJipZlKaunNl3U4uTl DkjcBUEEsPbQrgUQ2w+QHJ4TcI6XYXihMpF0ARWsPKtroh8RCe2+aQU8CTd7t8h+ DJC3v7468shRq4aJBiQ9qaPLiDuQ9qiqRcZ8JHKf/ohDvf/oB3aFfwD8MmlFEwWO 4SQmmuCpVf3qwwkqJxnno1vgzd9FNPqF+ea+UdWUmcZs0otFTeoBPPTlUtkLBIYu JfUaycqbajulqa07oOKf3VZTH0IcIe6PVgHRql6hcVasL88aF0CTx7zF/x/+t0zi xxqVPK0p73eB4w== -----END CERTIFICATE-----Generated at Sun Mar 29 11:13:21 2026 by rpki-client