$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: wJvheRX1tKLGyvIsTfITz0SV0AeRJlUzWKKKFSV4dlg= Subject key identifier: 38:81:76:58:18:35:A2:44:93:11:F7:CD:AC:52:F3:E3:AA:27:40:43 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019CE6DAA7959B177DB357320D5710704C18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 1873 Signing time: Fri 13 Mar 2026 11:00:15 +0000 Manifest this update: Fri 13 Mar 2026 11:00:15 +0000 Manifest next update: Sat 14 Mar 2026 11:00:15 +0000 Files and hashes: 1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=) 2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=) 3: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=) 4: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=) 5: NjoBWFZasR4u5kKYBTzr17mcUXo.roa (hash: 5hFL56Dz1c0tBp4+xkoRBXQC3H4xXKPV9W/AB2fy/u0=) 6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=) 7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: KtV7mtOoyo6DMp3uu38aIXQLZGwI6Xn5Ca7OpUir36Q=) 8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=) 9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=) 10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 09:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e6:da:a7:95:9b:17:7d:b3:57:32:0d:57:10:70:4c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Mar 13 11:00:15 2026 GMT Not After : Mar 14 11:00:15 2026 GMT Subject: CN=388176581835a2449311f7cdac52f3e3aa274043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:08:40:ac:0d:3a:21:ce:2f:20:c9:36:f4: 88:ed:d2:2c:0a:8b:ef:fd:d4:f5:e5:f1:d6:ea:3e: ad:61:f7:2f:2e:1d:32:03:bd:cf:7e:71:3d:4a:f1: 37:65:5f:92:1a:13:30:fc:94:14:bc:06:19:66:48: a2:44:7e:33:b9:36:8b:87:da:cd:cd:22:44:57:3d: 50:15:67:0a:41:3d:b1:2d:d0:cd:75:1b:63:96:d0: 8f:d3:49:62:8e:55:ef:7b:4c:0e:9b:1b:67:78:d2: 24:66:89:fe:e6:90:ca:5f:fa:da:4a:fb:30:60:f0: a8:a8:0a:f3:bf:61:b5:49:e6:f9:e9:23:ca:c5:5c: b6:94:26:0c:fb:2d:b9:fc:00:40:c2:df:83:6c:da: e0:b9:0c:9e:a4:63:6d:ec:d0:1f:e7:89:0e:cc:97: 4b:3c:6c:07:a0:88:69:40:b1:3a:35:c3:d4:41:58: d4:c6:ba:71:ca:60:07:c7:ca:48:b1:61:9b:83:21: 8c:89:9f:94:64:2f:41:a6:36:fd:f4:03:ec:64:04: 80:06:a5:bd:ce:c3:82:c5:39:f3:c0:63:59:63:e8: cc:b1:9a:91:58:ae:8d:ec:4c:b6:d2:d8:17:23:4b: ba:f8:b0:64:a2:95:48:8d:b1:1a:68:e7:1e:25:5d: cb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:81:76:58:18:35:A2:44:93:11:F7:CD:AC:52:F3:E3:AA:27:40:43 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:da:1e:b5:99:68:7d:e5:c1:b8:86:db:2c:ba:b7:80:b8:57: dd:c9:f7:78:6d:b9:50:c8:37:e2:2d:d5:48:4f:6d:ef:1d:1f: 16:12:3f:35:1f:34:3d:7e:64:2a:4e:03:f0:a8:37:f8:32:ba: fd:c9:19:0e:68:7c:f3:e8:5e:03:ee:e2:b1:ec:59:cf:67:aa: e8:fc:91:39:59:c3:0a:8e:bd:42:aa:4f:48:b1:cf:37:2a:97: ad:82:74:42:7b:1d:26:a7:c8:04:b3:60:ea:db:b5:91:f7:49: b4:f6:13:b1:7f:34:9b:18:07:4a:45:c7:b4:63:ca:24:3e:8d: d4:a1:41:99:06:18:62:01:ff:8b:f0:11:10:53:4a:ca:16:a3: cb:d2:03:0b:a8:00:21:9b:d0:e3:78:f6:e9:9e:af:ed:a2:78: 96:b8:6f:06:30:9d:54:39:e0:3a:76:38:50:8f:3f:77:d8:26: 72:57:a1:31:f9:26:68:15:2b:22:2d:b2:c1:ce:a7:9f:8b:65: cc:5a:2d:a1:df:ac:eb:96:13:d8:bb:86:82:52:02:72:65:6e: 7a:5b:f4:33:9f:a4:2f:ad:3e:5a:09:ca:92:67:9e:c9:da:00: 2b:74:38:64:cb:48:8e:56:51:f5:7e:e4:5d:b8:28:28:33:ae: a2:69:be:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzm2qeVmxd9s1cyDVcQcEwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwMzEzMTEwMDE1WhcNMjYwMzE0MTEwMDE1WjAzMTEwLwYDVQQD EygzODgxNzY1ODE4MzVhMjQ0OTMxMWY3Y2RhYzUyZjNlM2FhMjc0MDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ4IQKwNOiHOLyDJNvSI7dIsCovv /dT15fHW6j6tYfcvLh0yA73PfnE9SvE3ZV+SGhMw/JQUvAYZZkiiRH4zuTaLh9rN zSJEVz1QFWcKQT2xLdDNdRtjltCP00lijlXve0wOmxtneNIkZon+5pDKX/raSvsw YPCoqArzv2G1Seb56SPKxVy2lCYM+y25/ABAwt+DbNrguQyepGNt7NAf54kOzJdL PGwHoIhpQLE6NcPUQVjUxrpxymAHx8pIsWGbgyGMiZ+UZC9Bpjb99APsZASABqW9 zsOCxTnzwGNZY+jMsZqRWK6N7Ey20tgXI0u6+LBkopVIjbEaaOceJV3LjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiBdlgYNaJEkxH3zaxS8+OqJ0BDMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdoetZlo feXBuIbbLLq3gLhX3cn3eG25UMg34i3VSE9t7x0fFhI/NR80PX5kKk4D8Kg3+DK6 /ckZDmh88+heA+7isexZz2eq6PyROVnDCo69QqpPSLHPNyqXrYJ0QnsdJqfIBLNg 6tu1kfdJtPYTsX80mxgHSkXHtGPKJD6N1KFBmQYYYgH/i/AREFNKyhajy9IDC6gA IZvQ43j26Z6v7aJ4lrhvBjCdVDngOnY4UI8/d9gmclehMfkmaBUrIi2ywc6nn4tl zFotod+s65YT2LuGglICcmVuelv0M5+kL60+WgnKkmeeydoAK3Q4ZMtIjlZR9X7k XbgoKDOuomm+OA== -----END CERTIFICATE-----Generated at Fri Mar 13 13:46:58 2026 by rpki-client