$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft File: s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft (raw, json) Hash identifier: I1/ZIZpqJ5YZyvPLQaIpEpvpw9xddeYneSPv6mVW3co= Subject key identifier: BA:63:8D:D7:CA:24:FD:66:E2:E3:43:E3:5D:61:AD:9F:51:A0:9F:C2 Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019CE3D9BC2142078C11E941C36E0CAD4C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft Manifest number: 1886 Signing time: Thu 12 Mar 2026 21:00:23 +0000 Manifest this update: Thu 12 Mar 2026 21:00:23 +0000 Manifest next update: Fri 13 Mar 2026 21:00:23 +0000 Files and hashes: 1: 3qg1KGc8omoslEG7jKlx4gx_LhQ.roa (hash: TnGs+EX2f9uQeebTem+/sfQFkc/zmqJQ5dURkVKi/n4=) 2: 6GTkHhvGaHh_ppvgJMPn5q-SDT4.roa (hash: zOLVYqNLZkRsHu25N50zDbPPg1XzLp1BrOsPiOu+9z8=) 3: 6JxXQsPP5HeOd-zrinJyzOvxbvk.roa (hash: avnYdM5iKLHNYRmn2VZGG+0Rulxb30BrgSNse/s1Stw=) 4: Lm2Fdw-4HY59cWTBR1AYmOLC0Mk.roa (hash: SNGqheW6LsNlSg4kHxkvmFfi6Fzh2bEiE379f5CYZNA=) 5: N18aROBQ19Wj6Kdi3-iQ5c6OfeA.roa (hash: ezUkbSC7P3mO/d4z+5YndvD9aLmtqZ6KOctd3R4dOws=) 6: OUOP2IJYsVbNI_PTNHQ12RVMoDI.roa (hash: BnGONzncD2wwl5KKt6nDn2hcjBqGU1Umy1qq2TndNLU=) 7: X5qhIZ7xGCMvKQfZQrbeuOZ9uf8.roa (hash: i3DUL5+61b/Yr3dFWew0V6gv0s7RuSUIeTUfltYEFJs=) 8: Zjh5y2Kd8cSRzdszQnign9Lz3l4.roa (hash: TMEeISdGQlH/KULrec6oWy2p2scTUrKdaSvlMRJx3eE=) 9: davP__FvqtFRD-X_NqiEFhhBbv0.roa (hash: 4RXC3pzMOtisG7APBmg+7ubBijArd9IpJUc7sUhKN2U=) 10: g-q-xyU0r6niX_HcUqMnHfOWVQg.roa (hash: 3EYAH+TPHIG5maEa02mmMDsDD6AUBoN3T8wtoxwbwEg=) 11: iO24D_W0B1UjBwRFlQ8CdPgIqgs.roa (hash: VKTFC+1OrvrVs+DP4mHHKFLGZKyqteGaSW/b1eEAqMs=) 12: jytqbvPB7p4L3yG-M73X311CEZM.roa (hash: OoChTy3t+Ypl0/yoHt/yN9OFfFbQL1CiSDqOkSSFy9Y=) 13: qzIbIOdweY6pocYgDw-BYpuwt2k.roa (hash: RCGDZNml0heHLSfAzhIyGN2imnWRjKRBHXZrfhyhHtA=) 14: s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl (hash: Y73kxEFmu/64u1loLahJkx3p9ls7LombIsRoylfVknI=) 15: x3SzmyzLt8OYyGIP7YYKzeSx1t0.roa (hash: aW1SwGzhZKDv9vTg+ztGzAN+MHGjx+qNx1xNIM7zvvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 21:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e3:d9:bc:21:42:07:8c:11:e9:41:c3:6e:0c:ad:4c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Mar 12 21:00:23 2026 GMT Not After : Mar 13 21:00:23 2026 GMT Subject: CN=ba638dd7ca24fd66e2e343e35d61ad9f51a09fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:ab:b7:2f:48:29:5b:b0:90:d6:2d:80:10: ca:f3:ab:43:2e:1a:8e:f8:15:ac:7e:85:51:66:a4: 86:97:64:bd:d7:ba:19:f7:19:3e:ca:d5:7d:17:1d: 91:bd:f6:9f:ac:ed:09:48:af:8d:db:35:09:51:d5: de:8b:1b:87:e8:7c:72:ed:ec:29:b3:7b:d4:90:b7: 10:56:e0:6c:6b:11:28:21:91:32:36:f5:47:0c:43: 04:f0:26:cb:cf:9a:a1:dd:8c:fc:f8:bd:4b:99:dc: 80:ba:f9:c5:d3:8d:c6:b3:fb:d9:1f:0b:49:59:7e: f4:6c:b6:98:c8:4d:24:88:64:ed:f4:91:0a:aa:e0: 1b:49:58:d6:be:6d:ea:e4:3a:6e:36:74:37:64:76: 66:fa:83:39:02:ec:4e:b1:7f:a8:10:30:73:66:95: fe:19:c1:08:f2:13:97:18:e2:28:dc:b1:0e:50:48: 54:9c:bd:65:03:aa:6b:40:c5:25:fb:84:9f:a2:92: c4:69:a2:5e:16:5c:e1:a1:93:7a:3f:ca:36:41:17: 90:bd:9b:c9:60:c2:e9:79:02:70:32:7c:0a:bc:04: 10:02:e9:da:62:31:34:01:6f:1d:ab:e7:e1:73:4e: 36:c9:c8:14:55:95:4f:f5:65:8b:b5:62:f8:5f:19: 50:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:63:8D:D7:CA:24:FD:66:E2:E3:43:E3:5D:61:AD:9F:51:A0:9F:C2 X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8f:10:d9:1e:e9:8b:c4:af:46:f4:3a:31:40:69:38:20:75: 1d:f3:50:fd:e7:06:ed:4f:e4:70:07:50:d1:ec:cc:45:88:19: 7c:e3:e2:1c:ac:6c:9a:dd:67:80:c5:da:19:a2:ab:d4:b1:f9: dc:55:39:cd:b2:94:05:09:0e:c7:cd:7d:21:67:f6:81:8b:c1: 4a:2a:4e:49:33:1f:9f:cc:16:1c:dd:0d:16:21:c2:29:21:28: 5a:32:2a:c3:07:a9:6d:80:31:cb:99:50:8b:41:51:72:fc:9f: 59:8f:f2:9d:c5:25:4a:f4:97:3b:48:e7:f3:52:a5:7d:ee:38: 1e:6d:86:b0:8b:d5:e9:47:4f:62:98:00:fe:db:c9:af:79:20: ff:12:d6:41:e4:23:f3:eb:e7:d3:71:be:20:00:ea:46:7c:1d: 45:3e:fe:95:d2:3b:28:15:6b:85:01:95:a2:69:a8:dd:b3:b9: de:43:d2:f9:3b:b6:1c:2d:f8:09:ef:e6:ce:ee:4e:f1:8d:b4: e5:28:ce:ff:24:45:c5:41:e1:4d:d7:4c:be:81:30:ac:9c:e2: d9:b4:7c:09:8a:72:99:17:95:de:2e:87:d7:aa:e4:2e:b5:c6: 21:10:8e:80:03:f3:05:d5:f2:bc:74:45:74:67:91:04:c7:dc: 6c:d7:71:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzj2bwhQgeMEelBw24MrUwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjYwMzEyMjEwMDIzWhcNMjYwMzEzMjEwMDIzWjAzMTEwLwYDVQQD EyhiYTYzOGRkN2NhMjRmZDY2ZTJlMzQzZTM1ZDYxYWQ5ZjUxYTA5ZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiSrty9IKVuwkNYtgBDK86tDLhqO +BWsfoVRZqSGl2S917oZ9xk+ytV9Fx2RvfafrO0JSK+N2zUJUdXeixuH6Hxy7ewp s3vUkLcQVuBsaxEoIZEyNvVHDEME8CbLz5qh3Yz8+L1LmdyAuvnF043Gs/vZHwtJ WX70bLaYyE0kiGTt9JEKquAbSVjWvm3q5DpuNnQ3ZHZm+oM5AuxOsX+oEDBzZpX+ GcEI8hOXGOIo3LEOUEhUnL1lA6prQMUl+4SfopLEaaJeFlzhoZN6P8o2QReQvZvJ YMLpeQJwMnwKvAQQAunaYjE0AW8dq+fhc042ycgUVZVP9WWLtWL4XxlQRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpjjdfKJP1m4uND411hrZ9RoJ/CMB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADo8Q2R7p i8SvRvQ6MUBpOCB1HfNQ/ecG7U/kcAdQ0ezMRYgZfOPiHKxsmt1ngMXaGaKr1LH5 3FU5zbKUBQkOx819IWf2gYvBSipOSTMfn8wWHN0NFiHCKSEoWjIqwwepbYAxy5lQ i0FRcvyfWY/yncUlSvSXO0jn81Klfe44Hm2GsIvV6UdPYpgA/tvJr3kg/xLWQeQj 8+vn03G+IADqRnwdRT7+ldI7KBVrhQGVommo3bO53kPS+Tu2HC34Ce/mzu5O8Y20 5SjO/yRFxUHhTddMvoEwrJzi2bR8CYpymReV3i6H16rkLrXGIRCOgAPzBdXyvHRF dGeRBMfcbNdxZA== -----END CERTIFICATE-----Generated at Fri Mar 13 01:29:08 2026 by rpki-client