$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: SG1c1PTgoVa5zcVoP6MCKCtTXpbFdvCjXf6f93bgnYA= Subject key identifier: 55:60:F2:B5:68:EC:34:85:32:5D:37:65:D9:9F:6F:84:F1:01:8E:2E Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019D0C68A97EC4772B1D483064A8EC913CBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0BDE Signing time: Fri 20 Mar 2026 18:01:18 +0000 Manifest this update: Fri 20 Mar 2026 18:01:18 +0000 Manifest next update: Sat 21 Mar 2026 18:01:18 +0000 Files and hashes: 1: 0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa (hash: W/W8DjgReH/V+5pe/5+3BKwvc8dz5PRxxtmAIvZ373s=) 2: 3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa (hash: LjFP5plUCIY5Si52J4E1UiGHvt4F3YfbtrTK+AdpPww=) 3: AD3DllK0spDacTrZOzUoNjsaEXY.roa (hash: E0XWVs3lhPoRvEa16ZsuDhIGmQin6DlhoQyYSbyhShU=) 4: BM_HgvB1ieY5WUpFTxU63_9kGNo.roa (hash: iddaFlVd9smwAlHjBr7dZr+J/UTaU0dMdguVDg9n9Xg=) 5: HVCa9r5thWjsE4kAoaBRSlvTvK4.roa (hash: QayBo0rlXlFxr86ACWyOG/yDe9UFq1WxBL/y2YeNVL4=) 6: ONqPurqrHVMfwrJOahm-hLa_T5g.roa (hash: ZlEZvfK7OYrNuzavDM8lorWGQ5ktu+dv/s2X755rVok=) 7: RHDQQEmbcOrqTmjc99mQ-Eu0900.roa (hash: x+3xhE8Ho8gzcy+Ei5kfiLpvFaz62BymEv0joq6kEPs=) 8: ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa (hash: OWPE9KkCxV1y82ynMwT7Wfz+7H4kVGPyxV8fArKWLm0=) 9: WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa (hash: vQjmo6B5bhn28fdIrHICw7DprEul1mU/rEs6H7jrIrc=) 10: n6eR2WfCXImcpQbWii3OXMfT1io.roa (hash: 9i7i+fHrN+OULt3g7OjkSiNbFJDZzaQ5rh/6y0F1XFE=) 11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: RYKnMfPae1/lehn1Ium9OwukMBTz6KCi3J2IQqSS6RI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0c:68:a9:7e:c4:77:2b:1d:48:30:64:a8:ec:91:3c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Mar 20 18:01:18 2026 GMT Not After : Mar 21 18:01:18 2026 GMT Subject: CN=5560f2b568ec3485325d3765d99f6f84f1018e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3a:9f:8e:85:d8:2c:15:5a:96:db:7c:62:9b: 63:f2:e2:ab:30:7f:34:4b:d1:6c:d5:5f:00:9f:16: 61:7b:fb:0c:2f:d9:eb:5f:eb:dc:5b:ef:91:72:62: e5:00:eb:a4:12:6b:bc:b7:e0:34:8e:15:4d:b7:b1: 6e:74:9d:a8:2c:48:1e:eb:58:67:d0:62:15:9d:b9: 89:39:8f:bd:50:f1:21:53:1f:32:11:0f:e4:f8:96: ae:64:e6:5d:bf:19:d0:ee:f7:0b:0a:04:51:38:a5: 23:2b:1b:1c:8f:4f:b7:70:af:38:d5:eb:24:7c:2c: 7a:26:e8:01:c5:76:80:ad:a6:63:00:20:64:95:78: 5c:80:6d:28:f9:52:62:09:1d:04:18:65:97:1e:83: 63:a9:44:80:c8:12:25:df:18:94:8d:f4:c7:49:e0: 08:c3:e9:68:20:2c:1f:6d:45:00:a9:d2:cb:13:d5: d3:ff:b6:40:89:50:a9:6f:ed:ce:81:0e:97:9c:c9: 2d:26:c6:26:f9:02:51:f7:27:16:46:8b:f3:7f:9f: 78:0b:0d:04:02:23:de:8e:4a:97:1a:0b:2a:94:df: 93:7b:f8:39:59:38:71:a3:64:e4:f5:8f:4a:d4:66: 92:46:4b:94:39:13:96:7d:97:4e:ac:c7:4b:f9:59: fb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:60:F2:B5:68:EC:34:85:32:5D:37:65:D9:9F:6F:84:F1:01:8E:2E X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d0:3c:fd:a3:ac:68:d9:29:44:b4:91:d5:60:6b:eb:7c:69: 93:30:64:14:16:6b:02:24:48:0b:d9:ef:9d:9d:a0:e4:fc:8b: 4f:5d:91:cb:c0:cd:f5:0b:63:39:3b:46:d7:eb:36:f4:87:f6: 13:a1:d9:3b:f9:d1:e6:81:40:36:f7:10:19:de:6f:3d:7b:96: f0:16:cc:6a:5b:26:a6:2a:52:a7:2b:ea:34:d6:4e:06:8c:69: 62:35:c9:08:34:02:4e:b5:98:85:e1:08:97:cf:f8:cd:2e:46: bd:c4:29:d9:8d:4d:43:c8:ff:e3:ad:8c:63:5e:71:a6:8e:2c: 41:86:68:a3:3d:6d:cb:7d:7b:1f:cf:e3:69:54:c1:a9:36:93: fb:2c:90:9f:6b:0c:b0:c8:cc:3c:7d:00:f3:58:39:ba:1c:4d: f2:d3:ff:83:a8:37:99:63:5f:31:4a:02:28:77:14:3e:83:68: 86:57:c0:16:18:f7:1f:43:b0:9d:bf:67:ec:78:b3:50:30:b2: ce:d1:cf:4d:28:5b:4a:da:20:3a:3e:ff:de:5b:c5:7c:a0:04: b3:5a:91:ad:a3:74:af:8e:4f:f2:81:bb:ae:21:10:cb:ac:bd: 24:6b:0f:b2:bf:4d:bd:f9:eb:ad:e6:5a:7b:b0:9c:62:5c:15: 71:67:fc:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0MaKl+xHcrHUgwZKjskTy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwMzIwMTgwMTE4WhcNMjYwMzIxMTgwMTE4WjAzMTEwLwYDVQQD Eyg1NTYwZjJiNTY4ZWMzNDg1MzI1ZDM3NjVkOTlmNmY4NGYxMDE4ZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DqfjoXYLBValtt8Yptj8uKrMH80 S9Fs1V8AnxZhe/sML9nrX+vcW++RcmLlAOukEmu8t+A0jhVNt7FudJ2oLEge61hn 0GIVnbmJOY+9UPEhUx8yEQ/k+JauZOZdvxnQ7vcLCgRROKUjKxscj0+3cK841esk fCx6JugBxXaAraZjACBklXhcgG0o+VJiCR0EGGWXHoNjqUSAyBIl3xiUjfTHSeAI w+loICwfbUUAqdLLE9XT/7ZAiVCpb+3OgQ6XnMktJsYm+QJR9ycWRovzf594Cw0E AiPejkqXGgsqlN+Te/g5WThxo2Tk9Y9K1GaSRkuUOROWfZdOrMdL+Vn74QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVg8rVo7DSFMl03Zdmfb4TxAY4uMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNA8/aOs aNkpRLSR1WBr63xpkzBkFBZrAiRIC9nvnZ2g5PyLT12Ry8DN9QtjOTtG1+s29If2 E6HZO/nR5oFANvcQGd5vPXuW8BbMalsmpipSpyvqNNZOBoxpYjXJCDQCTrWYheEI l8/4zS5GvcQp2Y1NQ8j/462MY15xpo4sQYZooz1ty317H8/jaVTBqTaT+yyQn2sM sMjMPH0A81g5uhxN8tP/g6g3mWNfMUoCKHcUPoNohlfAFhj3H0Ownb9n7HizUDCy ztHPTShbStogOj7/3lvFfKAEs1qRraN0r45P8oG7riEQy6y9JGsPsr9NvfnrreZa e7CcYlwVcWf8yA== -----END CERTIFICATE-----Generated at Sat Mar 21 04:13:20 2026 by rpki-client