$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: VckVow9VQqV2hH2KRdHTOkBbETgzrHtITqjDefyHZrY= Subject key identifier: 01:A1:08:43:BA:F5:62:70:95:5F:56:87:36:3F:D2:3E:46:A7:BF:66 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019D38D2D1F5AC9816FE9AA23ED5EACCF50D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 15BF Signing time: Sun 29 Mar 2026 09:00:33 +0000 Manifest this update: Sun 29 Mar 2026 09:00:33 +0000 Manifest next update: Mon 30 Mar 2026 09:00:33 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 2zIgCHVsuwyzUlczHTmtHzKbcqo.roa (hash: XtTVvuJ7wJ6AMvDlLc/Z9ph2kaE/WMDOHDw0P5r/pfY=) 3: 3aV_UzeZWkVLYdBcdJhGvghnl4c.roa (hash: zIZrgZNehbD7uBxLcLO/tdVtklU882uJK8x5m1rGUnw=) 4: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 5: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 6: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: MebP/W1fX6qBCMwd1k/aYzrQpSAuXhSaSKE6L0G5xVQ=) 7: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 8: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 9: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 10: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 11: j_Se_UUpvXzgFBHV0DKpPTUboes.roa (hash: NyS6Ky7kfRsPmVEkp6PDfLDSTRMbr7bwze8MtEAMXCc=) 12: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 13: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) 14: zVLW9HFt-3z2M7Ja19rIMJwG2_Y.roa (hash: /CaIYvptsHDUu9JqgaUmQ5T95opFTVpgVggOdpKaM0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:d2:d1:f5:ac:98:16:fe:9a:a2:3e:d5:ea:cc:f5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Mar 29 09:00:33 2026 GMT Not After : Mar 30 09:00:33 2026 GMT Subject: CN=01a10843baf56270955f5687363fd23e46a7bf66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:a0:e4:f3:5d:ba:de:91:e9:00:23:2e:70: 11:a0:26:83:44:36:c4:55:e1:43:fb:e0:0b:15:ee: 90:97:a1:f4:03:d9:59:12:64:4f:10:09:5e:11:b8: bf:9c:e6:2f:97:c5:a5:6c:7c:4c:3f:9a:53:31:7f: 46:bb:4a:29:3b:7a:a9:0b:7f:72:8d:a9:73:de:f4: ea:2d:28:80:f9:f4:e5:80:21:00:63:4e:a6:01:bf: 36:8d:ef:b5:d6:a5:62:43:ba:4e:67:51:36:4b:30: f0:db:b1:77:6e:bf:9b:3c:84:56:9c:a6:6d:4f:13: 46:11:c9:03:85:83:14:5d:00:85:c6:a0:fa:3f:2b: fa:0e:27:ac:59:b7:87:a9:6f:d5:4f:42:e0:3e:0d: 5d:4d:5f:0e:2b:7e:9a:85:ba:ce:12:75:59:b7:a8: e5:0e:cd:86:c2:59:e5:be:52:ec:d7:54:16:d1:0a: 38:5e:82:53:ed:a2:40:ef:45:d2:90:72:fd:c0:37: 6c:ba:2e:17:c4:cf:59:07:6e:f8:e3:7b:bb:1c:f1: 33:7d:6b:89:fc:ef:fa:aa:a1:a4:ed:fc:65:cc:21: 6b:d2:7c:3c:6e:7e:84:29:81:9c:41:4b:ef:64:ae: 0c:3a:88:d0:30:b9:f8:4b:b5:e7:8a:3b:f7:ce:bd: 0c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A1:08:43:BA:F5:62:70:95:5F:56:87:36:3F:D2:3E:46:A7:BF:66 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:27:a3:08:61:90:19:d2:d5:4d:18:e7:99:74:fc:91:8f:7b: ad:67:4e:39:3a:b9:ab:db:f3:e9:db:0a:8c:24:07:ed:75:54: a9:85:48:f9:03:59:17:ef:4b:d3:d3:55:cc:66:b7:0d:9a:a9: 48:95:bd:f9:43:37:5e:bd:39:d4:23:73:22:aa:3f:bd:73:c2: 8f:04:e5:88:8e:54:7e:a7:a8:67:71:a7:b0:8e:25:4a:b8:b6: 23:37:18:96:2c:82:d7:e0:ed:fc:cd:a5:1c:62:8e:b2:b6:3d: ce:97:56:6c:c2:9d:de:d1:99:63:2f:42:6a:bc:78:07:75:fa: 6c:32:8b:70:63:12:8b:88:5f:61:21:3d:ae:d8:da:00:5a:74: bd:88:a2:76:5c:50:92:ea:cc:88:8a:b8:e1:7a:49:a7:9b:77: c0:78:c7:e1:dd:ca:e0:52:f1:46:12:b3:b4:b2:eb:91:d9:19: fc:17:3e:67:05:ac:e8:6a:05:cf:30:db:e4:50:28:af:97:ac: 69:1f:da:0a:00:a9:9e:a1:5d:07:e3:86:cf:e4:83:6f:ce:77: e3:c8:db:ac:df:60:1c:74:f3:f8:99:c1:85:25:29:23:3c:6d: 68:ad:7c:7f:80:72:b4:ea:38:52:cb:c7:3d:8b:1f:81:b7:58: b3:2f:70:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ040tH1rJgW/pqiPtXqzPUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwMzI5MDkwMDMzWhcNMjYwMzMwMDkwMDMzWjAzMTEwLwYDVQQD EygwMWExMDg0M2JhZjU2MjcwOTU1ZjU2ODczNjNmZDIzZTQ2YTdiZjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTag5PNdut6R6QAjLnARoCaDRDbE VeFD++ALFe6Ql6H0A9lZEmRPEAleEbi/nOYvl8WlbHxMP5pTMX9Gu0opO3qpC39y jalz3vTqLSiA+fTlgCEAY06mAb82je+11qViQ7pOZ1E2SzDw27F3br+bPIRWnKZt TxNGEckDhYMUXQCFxqD6Pyv6DiesWbeHqW/VT0LgPg1dTV8OK36ahbrOEnVZt6jl Ds2GwlnlvlLs11QW0Qo4XoJT7aJA70XSkHL9wDdsui4XxM9ZB27443u7HPEzfWuJ /O/6qqGk7fxlzCFr0nw8bn6EKYGcQUvvZK4MOojQMLn4S7Xnijv3zr0MSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGhCEO69WJwlV9WhzY/0j5Gp79mMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiejCGGQ GdLVTRjnmXT8kY97rWdOOTq5q9vz6dsKjCQH7XVUqYVI+QNZF+9L09NVzGa3DZqp SJW9+UM3Xr051CNzIqo/vXPCjwTliI5UfqeoZ3GnsI4lSri2IzcYliyC1+Dt/M2l HGKOsrY9zpdWbMKd3tGZYy9Carx4B3X6bDKLcGMSi4hfYSE9rtjaAFp0vYiidlxQ kurMiIq44XpJp5t3wHjH4d3K4FLxRhKztLLrkdkZ/Bc+ZwWs6GoFzzDb5FAor5es aR/aCgCpnqFdB+OGz+SDb85348jbrN9gHHTz+JnBhSUpIzxtaK18f4BytOo4UsvH PYsfgbdYsy9wOQ== -----END CERTIFICATE-----Generated at Sun Mar 29 12:47:30 2026 by rpki-client