$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: pfp6+6m4p0z/4AJNAnqEGON0z1zElH/PbrkNN1sgkZU= Subject key identifier: 12:78:6B:9D:FB:C8:24:AD:40:CE:5A:69:76:55:76:22:00:98:5E:77 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019CDF58663584947FB4057D4DD356A2FEE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 153D Signing time: Thu 12 Mar 2026 00:00:38 +0000 Manifest this update: Thu 12 Mar 2026 00:00:38 +0000 Manifest next update: Fri 13 Mar 2026 00:00:38 +0000 Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=) 2: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=) 3: 7mvF9myTKlEKYunZpLTQD5KEFrY.roa (hash: 1UIT2TzCE1FlQDr/AW6XvHwVdir3xpnco3QCOUshSZI=) 4: F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa (hash: jxUQ0KKcc1cvSdaRZ9vh81k1iQSpuyreVGWce3iIfz4=) 5: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=) 6: O1GW4ziuKGxF3aTFCKn2xqIz0NE.roa (hash: ScOFNBiJmWWMmbvpEIy/O/H23s5tvByR/NPpUmMp9Tg=) 7: Z3nS0nqVZ-vslxx54klnYbz02l8.roa (hash: dO6OHSX+aPL7qnM4VP6WsbVvNbzWQqrh27kk5gBnp4w=) 8: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=) 9: aBJGwoNtwjYYCfL_vY3KC-5KRiw.roa (hash: qe/bdX+L1Ag/Xhut7yjVu6KrdVE0BnulRsPIthNL1pg=) 10: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=) 11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: pmEW5O23ywGL8rY+1iqtgVRHdYn6QKFdBCrN8aXF/VY=) 12: roVhJvLE3W-3AVNXrvbfZb_XPPo.roa (hash: 6LQ91r1uUm0MXEXzntSjw9cSGp9nmQGmFVNHFHmb1Zw=) 13: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=) 14: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:df:58:66:35:84:94:7f:b4:05:7d:4d:d3:56:a2:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Mar 12 00:00:38 2026 GMT Not After : Mar 13 00:00:38 2026 GMT Subject: CN=12786b9dfbc824ad40ce5a697655762200985e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:33:38:17:69:c4:71:e4:2f:48:e9:13:d5: 8c:fc:52:68:28:04:53:95:dd:41:3f:2e:cc:4b:1b: b3:79:d5:04:92:e1:f4:a4:76:d0:79:08:da:b2:da: 09:e1:27:cb:a2:f7:2c:39:10:a2:5b:9d:66:8f:8d: a3:98:65:0a:a0:2f:97:6a:1a:f7:e3:a5:1d:68:fc: e2:c8:93:db:5a:be:50:fd:dd:a7:b3:69:13:e0:9f: 3d:69:d8:e1:07:bd:85:32:14:b2:b8:a7:04:d5:4c: 38:0d:cb:43:0c:90:80:03:c9:c4:00:ad:15:6b:e9: 30:dd:c9:1f:25:7a:66:ca:05:00:3c:cb:58:72:b5: 48:38:ff:98:9b:81:95:32:ed:c9:d6:57:97:ca:bb: 30:d3:e8:5a:6c:f1:7c:cb:9f:6f:2c:e7:1f:4c:53: 60:e0:2f:a5:cd:a4:a1:19:48:d4:b6:14:2f:d0:da: b5:90:b7:43:c7:19:97:29:ad:51:9a:3e:fd:03:5d: 95:9b:27:a9:dc:33:a6:15:de:15:59:81:74:25:f8: cd:7a:96:cb:62:36:c8:1b:63:72:44:e2:bd:f7:ca: e4:2e:97:00:70:82:71:51:4d:6a:a8:ef:b1:52:55: a4:03:93:32:26:b8:12:0d:a8:6b:42:e6:8d:da:f8: 81:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:78:6B:9D:FB:C8:24:AD:40:CE:5A:69:76:55:76:22:00:98:5E:77 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a0:c0:73:e0:b1:1c:2d:f0:f0:4e:0e:9b:5e:c0:32:e5:56: d7:7b:a6:03:c2:58:04:67:95:74:68:0f:53:d3:62:78:1f:9c: 25:53:bb:4a:a2:d5:49:96:72:0b:0b:28:da:68:dd:ae:39:ed: 2b:b0:ee:d4:6f:a8:a0:3d:97:42:38:bb:3a:8c:12:3b:18:a2: 34:ca:7a:0d:c8:9a:3d:7a:c2:05:9c:50:e3:7b:c0:d9:42:65: 0e:75:01:22:3c:57:60:9d:4b:ce:bb:cb:57:a5:f8:6d:36:66: 5e:e4:d3:b5:5c:63:4b:15:35:93:f1:9c:39:e8:8a:0b:55:a3: be:94:79:31:ce:ee:d6:9b:61:d7:c0:23:25:37:8d:24:a8:7d: 0d:ad:a9:7f:7a:74:14:94:dc:86:25:db:26:23:9e:4a:8a:53: bf:db:3f:c3:c5:1e:4f:fc:1e:04:96:ee:ba:89:3d:34:f9:6e: 7a:f8:bb:10:a9:62:ac:8e:15:82:f6:ae:05:7c:f8:46:4d:5e: 09:c4:bc:0a:0a:d3:21:6c:96:6b:8d:28:97:85:eb:83:42:00: 75:c8:61:cc:6c:14:92:64:f8:78:16:10:e5:f6:cc:56:59:92: af:c8:2c:24:17:e1:07:43:d4:8b:10:71:5e:b1:64:7d:10:9a: 9b:09:6c:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzfWGY1hJR/tAV9TdNWov7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMzEyMDAwMDM4WhcNMjYwMzEzMDAwMDM4WjAzMTEwLwYDVQQD EygxMjc4NmI5ZGZiYzgyNGFkNDBjZTVhNjk3NjU1NzYyMjAwOTg1ZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQwzOBdpxHHkL0jpE9WM/FJoKART ld1BPy7MSxuzedUEkuH0pHbQeQjastoJ4SfLovcsORCiW51mj42jmGUKoC+Xahr3 46UdaPziyJPbWr5Q/d2ns2kT4J89adjhB72FMhSyuKcE1Uw4DctDDJCAA8nEAK0V a+kw3ckfJXpmygUAPMtYcrVIOP+Ym4GVMu3J1leXyrsw0+habPF8y59vLOcfTFNg 4C+lzaShGUjUthQv0Nq1kLdDxxmXKa1Rmj79A12Vmyep3DOmFd4VWYF0JfjNepbL YjbIG2NyROK998rkLpcAcIJxUU1qqO+xUlWkA5MyJrgSDahrQuaN2viB9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJ4a537yCStQM5aaXZVdiIAmF53MB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6DAc+Cx HC3w8E4Om17AMuVW13umA8JYBGeVdGgPU9NieB+cJVO7SqLVSZZyCwso2mjdrjnt K7Du1G+ooD2XQji7OowSOxiiNMp6DciaPXrCBZxQ43vA2UJlDnUBIjxXYJ1LzrvL V6X4bTZmXuTTtVxjSxU1k/GcOeiKC1WjvpR5Mc7u1pth18AjJTeNJKh9Da2pf3p0 FJTchiXbJiOeSopTv9s/w8UeT/weBJbuuok9NPluevi7EKlirI4VgvauBXz4Rk1e CcS8CgrTIWyWa40ol4Xrg0IAdchhzGwUkmT4eBYQ5fbMVlmSr8gsJBfhB0PUixBx XrFkfRCamwlsCg== -----END CERTIFICATE-----Generated at Thu Mar 12 04:26:50 2026 by rpki-client