$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft File: Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json) Hash identifier: FlajcFoEbfER3JYBhJpSknCf1iCHbpP52wl4b/2WcVg= Subject key identifier: 6C:EF:44:0E:BE:17:53:D1:E6:FA:43:09:60:5C:50:BE:AD:EE:4E:18 Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Certificate serial: 019D38D2FB5D46008D4249ACBEF5F6DC61FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft Manifest number: 1895 Signing time: Sun 29 Mar 2026 09:00:44 +0000 Manifest this update: Sun 29 Mar 2026 09:00:44 +0000 Manifest next update: Mon 30 Mar 2026 09:00:44 +0000 Files and hashes: 1: 1N902uWxBewZ5PtMsS3s5KUkFgs.roa (hash: o8+FHwdwrm2FTsBbNR1O1Ec7gfE8MxmnmProyM8q4BU=) 2: 2DNY0VHjCzgXwvjQNfwSv13IiMs.roa (hash: 8hJ99PzYGO7rhyJIiR2XiqspVTy1Mvm/8YAqXh3HlZM=) 3: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: d4TQ+w8Bt7rVM6eHkZdcu9IkeYIklaIijBDHI0ebZAk=) 4: NdaVlYyGJzmfbtga--jSELZwlbE.roa (hash: 44YtoyTu9IHJo6Ox432rtAmIAiFL2xtPhJVn1fVc8ls=) 5: PXLUhkQGAdUhNdDhpDuX0qygtu4.roa (hash: C+ltPVNXFjYPNIseXTX/KmgQFlM5AY25yJREciY6tp8=) 6: ScefcWvuVGksXbQ0acoDdIYtZjE.roa (hash: l6JU0XgsxIoGIXcMc/fmzvrEp0Yz0Adf89ehE860isQ=) 7: YPVTV3WJ_kGERtyfsujU7TWmTuo.roa (hash: 3mQ5HyF6SXyaMb4D8sGEX7HkxBwBKSkoqI68TSckUnY=) 8: h4TS8P3Y9MPkSGxAwU5ny5ii-0Q.roa (hash: Z3pTNwIsVEmIXkCWPiwIUSynncIo2xxknOvYt/KXrfg=) 9: khuyur07z0KIfw77cPqiILd6kWM.roa (hash: jw4UZ6Kl6Ypyl46B52Rks2JHmI7Dr2yJY3HZEtC2NY0=) 10: t4QXxCvVmATXxT0HCiqC_03hiYc.roa (hash: FFvuRkQsX/cM6EacvCjfXpy5kO0eYWaiz4Ci86Jfl6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:d2:fb:5d:46:00:8d:42:49:ac:be:f5:f6:dc:61:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Validity Not Before: Mar 29 09:00:44 2026 GMT Not After : Mar 30 09:00:44 2026 GMT Subject: CN=6cef440ebe1753d1e6fa4309605c50beadee4e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3b:7a:b2:3a:e0:88:67:5a:fd:f1:3e:cb:06: 46:43:7f:05:b7:cc:af:8e:06:70:ea:02:53:c2:bd: ce:e6:eb:4b:79:ac:31:53:91:c4:c3:ea:96:a4:25: be:95:e2:56:a7:b0:c1:6b:ee:db:ee:22:d3:c4:14: b9:70:0b:e4:16:07:21:43:ff:c3:40:61:f1:6f:c2: ab:16:e4:4e:ba:ef:ae:51:3e:21:b0:d8:b1:2f:5c: 8e:60:01:21:91:a7:04:75:bd:93:40:64:6c:1c:5d: 50:e7:01:32:a1:43:cd:0e:b3:82:62:5d:e6:4a:5d: f3:fa:a7:dc:30:d1:b3:82:18:24:87:e5:76:f0:d3: bf:37:e8:06:2a:69:f0:a2:b8:67:f6:9c:26:29:e2: cc:60:df:26:e9:3a:e3:0b:4d:9b:2b:b0:1d:6b:7c: fa:9a:ca:3d:1e:c9:14:4b:53:be:be:88:29:c7:cd: e9:28:d1:47:43:38:d9:15:ea:5c:71:26:5a:eb:c4: d4:e6:68:4d:96:af:e4:58:09:c3:34:22:75:ac:b5: fd:58:bc:e9:ab:8c:10:df:46:ae:11:a9:e8:1e:fd: 9c:40:79:04:c1:68:aa:cd:4e:2e:38:cf:f5:ad:b6: 4a:ba:40:8f:5c:c4:b2:18:6e:5e:58:a5:b9:8e:cc: 1d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EF:44:0E:BE:17:53:D1:E6:FA:43:09:60:5C:50:BE:AD:EE:4E:18 X509v3 Authority Key Identifier: keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ed:26:0a:dc:f4:76:be:de:6c:ba:18:69:03:95:70:c8:36: a7:ce:5b:54:d8:de:0b:03:c4:dd:20:d4:18:ce:92:0f:8e:21: eb:70:a7:32:78:8c:ee:11:d7:af:5f:98:e5:e4:84:13:3e:df: db:aa:25:5d:fa:55:b4:46:67:6c:bc:ab:38:a0:8e:96:14:e7: 77:f3:46:34:7e:3f:30:aa:34:56:fb:26:fd:c1:0f:39:1e:51: ff:8a:44:8f:68:cd:d0:e1:4d:58:34:a1:97:72:82:a3:8c:17: 8c:87:fb:5f:4a:e3:f1:c9:82:ef:55:76:31:39:18:f2:c7:c9: f9:76:a6:9e:5b:d4:6e:88:2f:d1:ed:b7:69:7d:14:5c:90:a9: 36:9d:14:cc:c3:9f:5c:a9:60:54:b0:92:34:56:c0:0d:56:2c: 26:56:b7:c2:02:ef:e0:37:bd:a8:0c:e2:cd:e2:18:a2:7e:bc: bc:01:bc:6c:db:7d:a6:29:f0:c7:c2:0d:8d:d2:c6:96:c9:8a: c2:e8:eb:4a:8a:0f:0a:10:fb:c8:28:d3:04:c6:1c:ab:67:1c: bf:7e:a2:10:f8:72:2b:83:cc:f3:aa:83:4c:26:c9:1f:c0:06: 21:35:6a:1c:cd:ad:67:90:c1:3d:cd:e1:53:93:aa:7f:2d:68: 9b:1c:57:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ040vtdRgCNQkmsvvX23GH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll MGEyMzgwHhcNMjYwMzI5MDkwMDQ0WhcNMjYwMzMwMDkwMDQ0WjAzMTEwLwYDVQQD Eyg2Y2VmNDQwZWJlMTc1M2QxZTZmYTQzMDk2MDVjNTBiZWFkZWU0ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Dt6sjrgiGda/fE+ywZGQ38Ft8yv jgZw6gJTwr3O5utLeawxU5HEw+qWpCW+leJWp7DBa+7b7iLTxBS5cAvkFgchQ//D QGHxb8KrFuROuu+uUT4hsNixL1yOYAEhkacEdb2TQGRsHF1Q5wEyoUPNDrOCYl3m Sl3z+qfcMNGzghgkh+V28NO/N+gGKmnworhn9pwmKeLMYN8m6TrjC02bK7Ada3z6 mso9HskUS1O+vogpx83pKNFHQzjZFepccSZa68TU5mhNlq/kWAnDNCJ1rLX9WLzp q4wQ30auEanoHv2cQHkEwWiqzU4uOM/1rbZKukCPXMSyGG5eWKW5jswdQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzvRA6+F1PR5vpDCWBcUL6t7k4YMB8GA1UdIwQY MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt Nzg3OTFjOTM1NmEzLzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQO0mCtz0 dr7ebLoYaQOVcMg2p85bVNjeCwPE3SDUGM6SD44h63CnMniM7hHXr1+Y5eSEEz7f 26olXfpVtEZnbLyrOKCOlhTnd/NGNH4/MKo0Vvsm/cEPOR5R/4pEj2jN0OFNWDSh l3KCo4wXjIf7X0rj8cmC71V2MTkY8sfJ+XamnlvUbogv0e23aX0UXJCpNp0UzMOf XKlgVLCSNFbADVYsJla3wgLv4De9qAzizeIYon68vAG8bNt9pinwx8INjdLGlsmK wujrSooPChD7yCjTBMYcq2ccv36iEPhyK4PM86qDTCbJH8AGITVqHM2tZ5DBPc3h U5Oqfy1omxxXEA== -----END CERTIFICATE-----Generated at Sun Mar 29 16:28:31 2026 by rpki-client