$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: i6XCQWmdJJ4sL8wknkFB9mwCKr6EI0m3+soMhL56gPo= Subject key identifier: 49:5E:E8:DD:A4:BD:53:CD:18:23:2F:E9:26:FB:9A:BB:0D:16:05:EA Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019D39782ACC97023C34C1870C549211E4DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 1681 Signing time: Sun 29 Mar 2026 12:01:09 +0000 Manifest this update: Sun 29 Mar 2026 12:01:09 +0000 Manifest next update: Mon 30 Mar 2026 12:01:09 +0000 Files and hashes: 1: 1-W964s-KtZyiNamSbJ6IP1jbFT4.roa (hash: tyUpzznYouv+Rmk3/StqHsUEFXC/JRLOGyGTS4NNP4Y=) 2: GStnKDxU2VExQ_xcPN4egFEKjLo.roa (hash: siSBOiPXXJh3GCU5grMPMkb/iUn8KcQ7coKcPhWce6E=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: y556GRfVYpR8iCsls7rYndowBRZ4k5+QeLiyI6SPdQM=) 4: KzDc8QsMTzvMJxQ96GJ3yCoLi_U.roa (hash: Xkhd86uGm3VF/evalHU0tYC3SzwGKBs1H4sASP/73Pg=) 5: RKeJP9iEvuDf3LggtuJwNO7uQEk.roa (hash: +VIR5z/XQ5Qx7TTNzGJldp0pk9LFlEUwye6JlD69ltQ=) 6: RMWLa9nYNadgqj8fRvJ7gt0vmRY.roa (hash: YPSVWQ4p2Yzt69XO4XRgEZdOa23MUm2U51FrUJbQeG0=) 7: VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa (hash: zTpZ/xLPhwOsaGOqgGhoR4AJouaTmVoH7QdVIfFBLJc=) 8: WkDZDOXBWr9x5TExAfjLxWKxbkU.roa (hash: YkRBfAeJDTqNqtEqsLxdtIzJ8woFGgTRSv1hmR+uNQ4=) 9: mju1GTQPLsJiestxJWXcq-E1Bo0.roa (hash: 95gpW7g+cVKJk4QbRN0p3aXkVNHoQsAxKOBXvYSCcxk=) 10: qJD08TGqbLXdbWVjPMA7B5pGkPI.roa (hash: Kx7++AsdN5bNJwCWFiOZcN26zdxHM+ZF2tTRAsBHsXQ=) 11: rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa (hash: vhHXEQRDhmmcuNgaQBq7IXJimIzM9H1G1xvHCsunoqk=) 12: xewkVdgaX0V36_1yEpoUi8m7v6c.roa (hash: kF/BrgELi4+Am7OL4A+u/VI4R7I6POdHlx4gpQyUi6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:78:2a:cc:97:02:3c:34:c1:87:0c:54:92:11:e4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Mar 29 12:01:09 2026 GMT Not After : Mar 30 12:01:09 2026 GMT Subject: CN=495ee8dda4bd53cd18232fe926fb9abb0d1605ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7f:4c:a9:14:55:ee:e6:33:79:92:17:62:55: 95:3c:ef:fe:e1:71:55:67:08:ce:83:53:33:cc:bd: d3:82:d4:03:96:cc:4d:17:3b:34:83:cc:01:11:40: da:71:9a:bd:60:1e:e5:59:0c:7f:c1:4a:4c:56:93: 6b:eb:0b:d4:ed:65:d9:f7:b8:29:57:a7:64:d3:64: 53:0b:14:0e:34:83:c6:60:10:40:8b:3d:53:22:1c: 60:64:3c:8c:7d:59:78:64:c2:fb:43:5d:f0:f8:46: c7:8d:0c:02:6c:ab:83:19:5a:5d:e8:76:17:80:17: 50:98:3d:b6:0b:55:e1:53:4b:73:49:96:ed:62:78: 0a:0d:86:5e:6d:aa:9f:61:a5:22:6e:46:0b:9a:5c: 29:a1:22:cf:aa:bc:8f:e2:5f:ff:a5:4d:0e:3e:e7: 93:ef:a0:d3:c1:ee:e0:6e:fe:01:40:83:e3:3e:c2: 21:82:58:33:50:5d:11:68:1e:15:96:e1:2b:a9:3b: cc:b0:f7:b0:2d:ea:8a:0d:5e:c0:38:3f:98:88:98: d7:af:44:de:d5:00:ff:e0:1f:40:13:f1:27:45:cb: fc:e5:d6:a7:87:76:6d:d3:a9:dc:25:ae:f0:d8:39: 8e:f7:ce:a8:93:94:94:88:ff:9a:b7:e5:37:1e:0d: 14:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5E:E8:DD:A4:BD:53:CD:18:23:2F:E9:26:FB:9A:BB:0D:16:05:EA X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f7:3f:4e:76:e1:20:64:39:73:54:1d:a2:df:dd:29:62:83: c6:3b:dc:22:c6:84:59:6e:9e:d3:20:56:c5:da:33:c2:50:3a: cc:81:eb:db:04:9d:2d:36:83:fb:cf:26:c2:7e:90:3d:ee:a0: 12:dc:5d:3d:7d:d5:09:27:3f:ab:d7:2f:69:49:c2:4b:95:b7: 4a:79:da:24:c1:52:8c:05:75:b4:d6:75:d7:2b:6c:6a:a0:c8: b3:cb:59:05:21:c9:24:94:06:ad:1f:16:08:a7:86:d1:8d:68: 56:9b:4a:c4:04:11:85:c8:03:5e:fa:db:fd:77:bd:c7:82:2a: 99:3e:6d:e8:6e:d3:a0:5d:5f:6c:57:97:ac:0d:78:8a:a2:66: dd:d0:af:bd:a8:1a:b3:04:59:a6:de:b3:92:2b:30:ec:e3:7e: a2:0a:c5:ea:6a:ae:c1:dc:e3:6d:77:e7:b5:d0:a2:b7:d2:5f: a8:91:1e:76:b4:14:e9:8b:7b:4c:b1:e4:f0:ff:b0:e9:38:8b: bb:80:7f:d4:6b:f8:24:f8:5b:20:78:a7:08:3c:01:f3:ae:59: 3d:ce:fa:f6:4c:9a:48:0c:93:b4:15:13:6b:2c:c3:cb:dc:92: eb:75:92:7c:a4:4d:e2:10:99:49:57:19:08:d1:79:23:11:4a: 13:d3:b7:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05eCrMlwI8NMGHDFSSEeTcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYwMzI5MTIwMTA5WhcNMjYwMzMwMTIwMTA5WjAzMTEwLwYDVQQD Eyg0OTVlZThkZGE0YmQ1M2NkMTgyMzJmZTkyNmZiOWFiYjBkMTYwNWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh39MqRRV7uYzeZIXYlWVPO/+4XFV ZwjOg1MzzL3TgtQDlsxNFzs0g8wBEUDacZq9YB7lWQx/wUpMVpNr6wvU7WXZ97gp V6dk02RTCxQONIPGYBBAiz1TIhxgZDyMfVl4ZML7Q13w+EbHjQwCbKuDGVpd6HYX gBdQmD22C1XhU0tzSZbtYngKDYZebaqfYaUibkYLmlwpoSLPqryP4l//pU0OPueT 76DTwe7gbv4BQIPjPsIhglgzUF0RaB4VluErqTvMsPewLeqKDV7AOD+YiJjXr0Te 1QD/4B9AE/EnRcv85danh3Zt06ncJa7w2DmO986ok5SUiP+at+U3Hg0UNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEle6N2kvVPNGCMv6Sb7mrsNFgXqMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavc/Tnbh IGQ5c1Qdot/dKWKDxjvcIsaEWW6e0yBWxdozwlA6zIHr2wSdLTaD+88mwn6QPe6g EtxdPX3VCSc/q9cvaUnCS5W3SnnaJMFSjAV1tNZ11ytsaqDIs8tZBSHJJJQGrR8W CKeG0Y1oVptKxAQRhcgDXvrb/Xe9x4IqmT5t6G7ToF1fbFeXrA14iqJm3dCvvaga swRZpt6zkisw7ON+ogrF6mquwdzjbXfntdCit9JfqJEedrQU6Yt7TLHk8P+w6TiL u4B/1Gv4JPhbIHinCDwB865ZPc769kyaSAyTtBUTayzDy9yS63WSfKRN4hCZSVcZ CNF5IxFKE9O3Sw== -----END CERTIFICATE-----Generated at Sun Mar 29 19:51:29 2026 by rpki-client