$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: EK+TwdTnMewmwnfCYQH6o0gMQjDwpDrf4VYVZH6gyuw= Subject key identifier: DA:43:09:1A:6F:66:2C:3A:F1:DD:11:F8:40:77:26:28:CB:83:6D:DF Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019CFC87BDE0621227F2FFE4E050CEBCD6A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 188A Signing time: Tue 17 Mar 2026 16:01:19 +0000 Manifest this update: Tue 17 Mar 2026 16:01:19 +0000 Manifest next update: Wed 18 Mar 2026 16:01:19 +0000 Files and hashes: 1: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: L66JS1TWzcqB6Zi5rALWlBcf+hHXRAbGixmLQw543bc=) 2: GiXGWF3XbNUka_6eZbMkF4lwUUU.roa (hash: Ghc0ZSrMNmrLcxpN1ogM8Bq5yh44DA/gg5TX6sTsGwk=) 3: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (hash: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E=) 4: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (hash: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g=) 5: Ow_kueRJVip82pUj00XLQYjimrs.roa (hash: 85eWZxYsHFwXWd/YsiQWTMazT60hSpQui9cmEWNnT5M=) 6: R3e8EP6U572NIEwLXcwI5IO-_Gc.roa (hash: IMUABkpJVknPlYeXsWWkw4ZBUgDiuzIM8ni8AxR0Udc=) 7: T9-vW3KXUqDV-hHkYIlU0h63B7k.roa (hash: GVI+BtriLywrqwYg8b8nOqyUDiKVbNRN2/cPik19wB8=) 8: ZrXDV17uXjinizgfrrPqhQ0dhJM.roa (hash: GN0pZ4GDE0j/JncpGXJQ21uu5AQ3wwUlO2eU3eTfsns=) 9: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (hash: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc=) 10: fT61awwkD08cT0v6ICZahtW3HFI.roa (hash: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE=) 11: gndzUxO1CNccN-YEVyYR7nMztTA.roa (hash: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc=) 12: quYwTy2Sx7ur2wpLvrH2k8ViBR0.roa (hash: CanNYtzvyyEfG5PGl0aRHd7fPV6d8E0XKcJaLB/U+p8=) 13: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (hash: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Mar 2026 16:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:fc:87:bd:e0:62:12:27:f2:ff:e4:e0:50:ce:bc:d6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Mar 17 16:01:19 2026 GMT Not After : Mar 18 16:01:19 2026 GMT Subject: CN=da43091a6f662c3af1dd11f840772628cb836ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:08:b1:73:37:05:69:f1:8f:67:0d:c5:ce: d9:bf:a4:63:a3:27:4d:dd:71:92:d9:c2:1f:99:2a: 59:94:69:16:d3:8d:40:c0:0d:15:9b:99:c3:61:e3: 84:59:41:c1:05:0a:21:a6:cf:cf:f0:bf:c6:23:1a: 36:a8:ea:24:c0:c3:b0:f5:02:5f:62:4e:67:93:f1: 75:80:5b:35:8b:4c:b0:0e:37:d0:51:34:fe:7f:28: e6:ac:15:3e:25:0b:7b:40:c7:2d:40:dc:02:2b:a8: fc:62:f2:5e:5a:29:70:f1:10:c0:11:fb:67:31:86: ad:25:ee:76:2d:6a:6c:c3:24:73:de:3a:37:c6:b8: 0f:d4:f5:0b:f1:dd:a7:94:b3:01:9f:8c:a9:34:9f: b6:73:09:13:5e:65:c8:2b:45:36:70:35:59:c5:dc: a3:59:fb:cb:04:af:23:37:81:db:f8:a0:b3:63:c9: 92:1f:4b:71:25:bb:20:56:0e:d7:75:79:ab:60:a0: 12:74:88:aa:77:1f:bf:fb:00:00:4d:c6:d0:24:b1: d4:e3:18:f2:20:fb:98:5f:d6:af:85:f9:32:b4:3c: 32:b4:07:0d:aa:8e:ef:62:51:25:98:58:78:10:f7: c8:4f:9f:21:07:26:96:21:52:07:01:c5:60:86:85: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:43:09:1A:6F:66:2C:3A:F1:DD:11:F8:40:77:26:28:CB:83:6D:DF X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:5d:41:1e:0f:6c:10:c1:07:69:6f:e2:c3:f9:a5:1e:70:fc: 79:04:b1:bd:56:a0:01:37:6b:1b:9a:97:f0:4c:6b:b4:8b:9a: d7:d8:d1:eb:98:5c:ad:cb:3b:50:2a:bf:70:d3:cc:e4:44:f9: 31:52:dc:22:48:d9:19:57:8d:ad:7e:8a:5c:b3:6d:9b:67:16: e8:f6:4b:0a:2e:b7:0d:8d:79:bc:8e:63:94:0d:95:2d:f2:73: ab:19:a2:52:d1:90:fb:d3:e6:9b:fb:fe:c2:d9:4c:dc:e6:80: c0:dd:9f:41:31:e0:94:8f:17:60:4e:39:cb:bb:27:0d:02:53: 16:cd:e6:70:f6:7a:f8:96:06:06:ca:ff:8f:bc:a0:d9:8f:ba: 13:b7:46:69:b0:4b:64:c5:ff:ab:1c:0d:5d:ca:c9:9e:00:78: f7:3a:ca:62:1f:e7:bc:b0:cb:8f:f0:49:95:b9:80:63:69:ff: 48:eb:a5:9c:fa:03:4b:fe:67:c7:36:29:2c:88:44:f5:92:82: 98:70:e4:73:22:85:eb:eb:31:84:05:81:18:99:1d:a4:70:93: 08:c5:09:7c:d0:ac:0f:6c:92:f6:3e:33:43:6b:f0:cd:b9:10: be:29:79:73:c3:b7:dc:b6:d9:b4:0a:ad:c8:23:1a:dd:7a:f6: 57:3d:ff:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZz8h73gYhIn8v/k4FDOvNaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwMzE3MTYwMTE5WhcNMjYwMzE4MTYwMTE5WjAzMTEwLwYDVQQD EyhkYTQzMDkxYTZmNjYyYzNhZjFkZDExZjg0MDc3MjYyOGNiODM2ZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg8IsXM3BWnxj2cNxc7Zv6RjoydN 3XGS2cIfmSpZlGkW041AwA0Vm5nDYeOEWUHBBQohps/P8L/GIxo2qOokwMOw9QJf Yk5nk/F1gFs1i0ywDjfQUTT+fyjmrBU+JQt7QMctQNwCK6j8YvJeWilw8RDAEftn MYatJe52LWpswyRz3jo3xrgP1PUL8d2nlLMBn4ypNJ+2cwkTXmXIK0U2cDVZxdyj WfvLBK8jN4Hb+KCzY8mSH0txJbsgVg7XdXmrYKASdIiqdx+/+wAATcbQJLHU4xjy IPuYX9avhfkytDwytAcNqo7vYlElmFh4EPfIT58hByaWIVIHAcVghoXewQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpDCRpvZiw68d0R+EB3JijLg23fMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1V1BHg9s EMEHaW/iw/mlHnD8eQSxvVagATdrG5qX8ExrtIua19jR65hcrcs7UCq/cNPM5ET5 MVLcIkjZGVeNrX6KXLNtm2cW6PZLCi63DY15vI5jlA2VLfJzqxmiUtGQ+9Pmm/v+ wtlM3OaAwN2fQTHglI8XYE45y7snDQJTFs3mcPZ6+JYGBsr/j7yg2Y+6E7dGabBL ZMX/qxwNXcrJngB49zrKYh/nvLDLj/BJlbmAY2n/SOulnPoDS/5nxzYpLIhE9ZKC mHDkcyKF6+sxhAWBGJkdpHCTCMUJfNCsD2yS9j4zQ2vwzbkQvil5c8O33LbZtAqt yCMa3Xr2Vz3/ZA== -----END CERTIFICATE-----Generated at Tue Mar 17 23:15:47 2026 by rpki-client