$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: zl8YQEw67qtI3IbAOYtUSo7DgwQeYIHQDBiCMsyzL28= Subject key identifier: 3D:8C:3A:A1:16:1C:B7:07:24:36:6D:A8:DA:55:6B:55:F6:42:DB:F9 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019D3A5405A95896E41631EC51033632ED20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 15BB Signing time: Sun 29 Mar 2026 16:01:18 +0000 Manifest this update: Sun 29 Mar 2026 16:01:18 +0000 Manifest next update: Mon 30 Mar 2026 16:01:18 +0000 Files and hashes: 1: CNbyub_ywtPJGqzP5UZEA0DNtXg.roa (hash: 9XO75azpd4xnA1Fcmx7YElMcl6h2AUZai5Sul1ZnzbI=) 2: MK0PJN0MMreFyMgjGNJVCcP1kio.roa (hash: /0jr4evlMMVaJu7NGHDu4KX/gcucZOxed/cQrWReq7A=) 3: Sc45OK_ODFvPX6AE8nSZ5FbJFlU.roa (hash: gPl/EfQBajKnpdkX9+XCHslwBpwrlTf6l+4BLwHTF4A=) 4: _U9BGLEG7vRfktFO8xi21MAtt54.roa (hash: hjEgCWQMFqUs25rtyBx/grzy2AflNXODIi2nt6p8P6I=) 5: dJi6YZs9u5yGuAWQeA9vl6v1pS4.roa (hash: TJ07Erx1ucmbk+mY6rmvN19iMh+szM0QGGm7xsqrDio=) 6: odaxqgyA-464XPpTnAMVsq1gFQQ.roa (hash: l1a1cObbS9L/mSITEi5cj0NI70j4hT2KUAatMVyc5Wc=) 7: pnPhFyOQR-Ty5FxTDJWIViYOAg0.roa (hash: 6baTF2h+tI9HWRnEgIpahEHZAePaskQeBXXklNj5/lA=) 8: s4lzZoz4TOfaTfA5UYeDZq8ur3s.roa (hash: KyjAil5KpYj/3CPJ9ff7WFWwWdPxYX9NKnWKTA8EtMA=) 9: uh-5s87WlZuWxJttfnAOxsNuAX0.roa (hash: UMgBRSmBBTiRT9lOOBu/YU9ZoLQXuPHxz04QjDjJfyg=) 10: vqV-YMbeGG5ZOz3NRgFA2jG8or0.roa (hash: iwFpWruBzEZJPWkyeXovTBxFrumsa94FJvSmEvJk/vY=) 11: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: 8ZAf+5pqco3mf2klh8TzEOodK3gmDIka2zkf9W2bWdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 16:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:3a:54:05:a9:58:96:e4:16:31:ec:51:03:36:32:ed:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Mar 29 16:01:18 2026 GMT Not After : Mar 30 16:01:18 2026 GMT Subject: CN=3d8c3aa1161cb70724366da8da556b55f642dbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:fb:d6:3a:dc:68:b4:6d:4f:91:88:8e:42: 9a:d6:16:28:de:d7:65:5f:48:45:6c:48:68:f2:05: 54:0c:00:39:62:e0:7c:48:7c:56:fc:cf:18:c6:66: d4:96:67:2f:b0:3a:95:7f:27:25:90:cf:df:15:ed: 0b:6f:ae:93:e9:94:7f:b6:dc:08:dc:9c:b9:a0:6f: 24:52:3c:5a:0f:16:a7:06:9b:ea:91:41:81:0e:82: f2:21:ea:d0:97:90:bd:f3:42:ff:a2:9a:1e:b8:d1: 60:ce:d6:e8:1e:4d:45:67:23:76:70:79:f1:a2:96: 37:db:47:1f:8e:e1:9b:06:2a:24:2d:af:0c:cd:64: 23:6e:bd:d4:04:a0:09:9d:42:af:03:b9:cc:34:ab: e6:c4:53:d2:6e:8e:19:c0:46:85:70:28:68:8d:bc: 6b:30:aa:ba:c5:b5:e9:58:02:e8:63:b3:e1:c6:d7: ec:9c:3a:dc:d7:c2:9d:4d:a5:aa:47:31:51:9d:e6: 48:b3:0d:0c:a8:d8:b6:7a:be:df:c1:6b:3f:fc:e2: 73:a6:03:6a:1c:da:1b:e4:9d:af:8a:00:16:94:43: b6:09:3c:80:95:65:92:ef:60:b3:06:78:31:e9:5e: f3:1f:37:70:6f:35:0c:ea:95:90:a5:7d:57:00:b7: f5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8C:3A:A1:16:1C:B7:07:24:36:6D:A8:DA:55:6B:55:F6:42:DB:F9 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b3:ec:af:1a:f0:cf:07:cd:77:b4:b4:42:0e:d7:de:e1:c4: f8:4d:ad:fa:73:0d:6c:30:cf:e4:1d:09:9a:56:be:95:f8:7b: b5:75:2b:cf:ad:0e:97:fd:2b:df:84:49:00:54:a1:8e:e9:55: bd:24:e3:f5:d2:25:47:72:e9:cf:b8:6b:8c:fc:2d:03:0a:09: 4e:a7:b3:09:8f:2d:51:36:ae:76:12:33:db:bc:9e:37:61:27: 6d:8c:1f:18:06:d4:79:37:53:c3:8f:1a:47:17:38:2d:bf:39: ab:24:4d:3c:8c:6d:bc:3e:30:68:1d:e4:ee:2c:2d:52:f7:98: c4:24:93:15:4f:54:44:e5:58:8c:01:69:2a:3b:64:9b:2e:8b: 83:7c:a8:e5:02:ce:ec:46:c9:ee:98:3d:d8:52:5c:47:15:a9: 1b:29:30:eb:38:c8:10:00:70:6b:53:21:1e:28:81:b4:ed:02: 99:7a:b8:cf:6c:74:15:8a:17:7b:16:be:4a:b5:72:de:51:d3: f2:b1:a2:1c:2d:25:eb:37:33:8a:4c:3c:83:3a:35:f6:fe:12: b9:f1:e6:2e:c9:ed:c9:9d:b5:05:c6:45:01:b3:ad:ec:6e:fd: 9b:14:f8:4e:e9:e6:9a:9c:55:5a:f0:fd:db:24:ce:0f:cb:66: 75:19:fe:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ06VAWpWJbkFjHsUQM2Mu0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjYwMzI5MTYwMTE4WhcNMjYwMzMwMTYwMTE4WjAzMTEwLwYDVQQD EygzZDhjM2FhMTE2MWNiNzA3MjQzNjZkYThkYTU1NmI1NWY2NDJkYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlf71jrcaLRtT5GIjkKa1hYo3tdl X0hFbEho8gVUDAA5YuB8SHxW/M8YxmbUlmcvsDqVfyclkM/fFe0Lb66T6ZR/ttwI 3Jy5oG8kUjxaDxanBpvqkUGBDoLyIerQl5C980L/opoeuNFgztboHk1FZyN2cHnx opY320cfjuGbBiokLa8MzWQjbr3UBKAJnUKvA7nMNKvmxFPSbo4ZwEaFcChojbxr MKq6xbXpWALoY7PhxtfsnDrc18KdTaWqRzFRneZIsw0MqNi2er7fwWs//OJzpgNq HNob5J2vigAWlEO2CTyAlWWS72CzBngx6V7zHzdwbzUM6pWQpX1XALf1cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2MOqEWHLcHJDZtqNpVa1X2Qtv5MB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7Psrxrw zwfNd7S0Qg7X3uHE+E2t+nMNbDDP5B0Jmla+lfh7tXUrz60Ol/0r34RJAFShjulV vSTj9dIlR3Lpz7hrjPwtAwoJTqezCY8tUTaudhIz27yeN2EnbYwfGAbUeTdTw48a Rxc4Lb85qyRNPIxtvD4waB3k7iwtUveYxCSTFU9UROVYjAFpKjtkmy6Lg3yo5QLO 7EbJ7pg92FJcRxWpGykw6zjIEABwa1MhHiiBtO0CmXq4z2x0FYoXexa+SrVy3lHT 8rGiHC0l6zczikw8gzo19v4SufHmLsntyZ21BcZFAbOt7G79mxT4TunmmpxVWvD9 2yTOD8tmdRn++A== -----END CERTIFICATE-----Generated at Sun Mar 29 21:15:38 2026 by rpki-client