$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json) Hash identifier: kw/nW2cgRLsaidESvDBrsPd0bHSuACIb5XDaOBMsTKA= Subject key identifier: C0:7F:50:61:DA:A4:6B:C0:9D:98:FD:CF:F3:FB:C0:85:9D:1D:08:5E Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 019CEB5CA7831738993A6663467DF9A7812C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft Manifest number: 18A8 Signing time: Sat 14 Mar 2026 08:00:43 +0000 Manifest this update: Sat 14 Mar 2026 08:00:43 +0000 Manifest next update: Sun 15 Mar 2026 08:00:43 +0000 Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: tWdXCZTHv6w3yqbBzqT7M4hTjOwh3aWmwCyDx6RpG30=) 2: 1-n7EdeFX20C6cFMyJ6Y5HWVMQU4.roa (hash: suKN0U6xP/FTkPKNJxFCA4VBUPU7v0a/LfB27Kibl1k=) 3: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (hash: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=) 4: 5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (hash: UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=) 5: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (hash: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=) 6: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (hash: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=) 7: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (hash: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc=) 8: C0VnbFyJGyh-3dXIXN-FVbbzva4.roa (hash: nupbKfiMh1Vbm5eU6VpPOjsRTYtweNUnX1ebsHaK4hQ=) 9: GnQ9nonV43lnZNoCG-ecdWqOLDk.roa (hash: 5lmMKt+idSdfaSrOW6fzEjOhALbxhOPcgnKdUuSF0JY=) 10: HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa (hash: BGn13AFdqwObLZ5mjHyJ0u9f6CC1n+u2Nsk2L6TLrao=) 11: T4WKqnzx21YB7DT_1vKAo3UszP8.roa (hash: 6mK+AjkLTQZ9KoVljBzw+UhhF/AIqKZ8gcyABfwrr5U=) 12: W-cWYMFcdHDS1yv5jkAVjyp5ho4.asa (hash: QdAC+W0wfurd2BssKpz9U5P9YKTKUM6ZjHzLGg+JdOA=) 13: Wh6JdWbFf767tpcWkFtr8UJXLgM.roa (hash: W1BnQBZwaWYQKobp/KfvfGYFyHPluWWlI7Hmrj6OUg0=) 14: cQJLykBOqMGgV5KV9rcPZr-_U1Y.roa (hash: aOQV+i/NapnfOnLvAQ3Zr9czxxA22kZuub947U3fZRw=) 15: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (hash: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo=) 16: fyxZLGtBW9e59RZ3aEwSKlhWT4w.roa (hash: itxLmMXkodUFbwqD5SmQmqHBd8MyF3lpLKdM1WEIZu0=) 17: oOmWYS79EfLZM1YUVX02Dm8sbCI.roa (hash: UMtyOefWK95ZFcwkFudLsDtrliJckAkSIFBXdWfp+zQ=) 18: odS4gJ1H-haIP2hfRvP__EIClnA.roa (hash: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ=) 19: pHgh0geILg2H9c8tNXl-coocbok.roa (hash: MiAWsYu39mO81MmSrazkuF8uttZJWXsnb0YqEMhZmqc=) 20: xLvL2DDHdDsFuu0LWe_ArfxkZOU.roa (hash: jEvpZaWRUr0vww6k+sw/ZzVTbY8rHX3wan18IH9TsyY=) 21: yUTvxSoxh0P1X3qi3W3GEmQmupg.roa (hash: YggGVCBvHEr/or8wxjiqlTzxSxsrR2x9hxdT1duIBFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Mar 2026 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:eb:5c:a7:83:17:38:99:3a:66:63:46:7d:f9:a7:81:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Mar 14 08:00:43 2026 GMT Not After : Mar 15 08:00:43 2026 GMT Subject: CN=c07f5061daa46bc09d98fdcff3fbc0859d1d085e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:d1:0b:75:49:71:f7:f3:cc:75:9c:0f:12: 03:0b:9d:b2:20:f7:a5:97:f1:05:f0:98:12:c6:26: cd:36:e9:43:e9:be:c7:4c:f0:92:ce:a4:6b:80:d7: c5:f2:67:1d:5b:71:89:b3:49:af:a6:18:51:03:e2: 34:1f:02:05:2d:15:89:d0:6f:fd:52:87:b8:0d:e4: bd:e6:09:29:44:e1:b8:78:08:c8:88:fa:f5:d2:68: d6:fd:29:17:ea:30:f7:2c:05:59:7e:39:a3:32:d9: f4:48:a0:fb:89:f8:3a:de:f9:24:56:9d:64:e5:39: 60:c2:57:74:e0:ba:c0:0d:71:07:13:85:42:b1:78: c3:6f:bc:19:c4:4e:c6:96:8c:b8:71:1d:82:85:fb: 12:20:f4:dc:6f:58:a7:80:eb:98:0e:bc:2a:19:07: 15:bf:0f:ad:e6:c4:a4:f4:6e:86:b4:28:13:75:da: fd:61:17:fa:18:78:fe:90:3d:45:3b:d2:60:e2:c1: 85:ef:07:4c:4b:bb:33:d2:4d:ba:6e:d5:59:bf:06: 8e:01:3a:f4:69:64:77:02:cf:00:e5:b4:ff:11:47: 36:80:77:5f:02:65:96:3c:d5:99:1b:d9:b7:20:91: 3b:a6:04:b8:cb:04:9b:67:3d:e6:89:da:ca:88:16: 04:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7F:50:61:DA:A4:6B:C0:9D:98:FD:CF:F3:FB:C0:85:9D:1D:08:5E X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:86:8e:cb:10:43:e5:90:c9:9c:a0:df:dc:9b:ec:58:79:77: bc:40:3f:70:a3:e7:93:0d:90:2d:35:41:20:91:38:e2:32:1e: b6:c2:1e:29:aa:e9:7f:db:5a:73:07:33:d2:79:c8:12:f2:64: 3f:4f:ae:95:8c:b5:69:95:20:4e:ab:86:12:d5:fd:92:66:ce: 68:6e:e7:2e:d6:4c:1b:11:39:b9:d0:7f:01:5a:0f:59:f0:42: 82:c8:f1:4e:0f:26:89:14:7a:69:57:d3:48:ca:8a:a2:d8:3e: 54:30:14:13:43:60:1c:d6:e8:aa:20:1b:25:69:e7:b2:c4:bc: 70:29:f5:a3:91:f1:71:e4:0f:1f:d5:de:8e:d9:fc:2e:0e:ea: 3e:33:85:75:e6:a3:34:21:37:49:48:88:ae:95:9f:63:47:ed: fc:84:f3:a7:66:da:5d:de:ca:bd:29:db:78:26:e7:e0:ea:3c: c9:e5:64:44:44:ff:a9:c8:91:0d:49:b9:0a:3c:30:8a:a7:57: 5b:bc:fb:95:1f:24:8f:a5:73:7a:eb:67:e2:2c:a8:2b:26:aa: 31:79:71:e6:ff:83:68:ca:c6:0e:45:c1:6c:14:3c:6d:b1:28: cd:8d:ca:2f:b1:92:c5:9d:d4:b9:1d:b7:be:86:ec:cb:1b:48: 23:fb:98:ae -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZzrXKeDFziZOmZjRn35p4EsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjYwMzE0MDgwMDQzWhcNMjYwMzE1MDgwMDQzWjAzMTEwLwYDVQQD EyhjMDdmNTA2MWRhYTQ2YmMwOWQ5OGZkY2ZmM2ZiYzA4NTlkMWQwODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoarRC3VJcffzzHWcDxIDC52yIPel l/EF8JgSxibNNulD6b7HTPCSzqRrgNfF8mcdW3GJs0mvphhRA+I0HwIFLRWJ0G/9 Uoe4DeS95gkpROG4eAjIiPr10mjW/SkX6jD3LAVZfjmjMtn0SKD7ifg63vkkVp1k 5Tlgwld04LrADXEHE4VCsXjDb7wZxE7Gloy4cR2ChfsSIPTcb1ingOuYDrwqGQcV vw+t5sSk9G6GtCgTddr9YRf6GHj+kD1FO9Jg4sGF7wdMS7sz0k26btVZvwaOATr0 aWR3As8A5bT/EUc2gHdfAmWWPNWZG9m3IJE7pgS4ywSbZz3midrKiBYEvwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMB/UGHapGvAnZj9z/P7wIWdHQheMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4aO yxBD5ZDJnKDf3JvsWHl3vEA/cKPnkw2QLTVBIJE44jIetsIeKarpf9tacwcz0nnI EvJkP0+ulYy1aZUgTquGEtX9kmbOaG7nLtZMGxE5udB/AVoPWfBCgsjxTg8miRR6 aVfTSMqKotg+VDAUE0NgHNboqiAbJWnnssS8cCn1o5HxceQPH9Xejtn8Lg7qPjOF deajNCE3SUiIrpWfY0ft/ITzp2baXd7KvSnbeCbn4Oo8yeVkRET/qciRDUm5Cjww iqdXW7z7lR8kj6Vzeutn4iyoKyaqMXlx5v+DaMrGDkXBbBQ8bbEozY3KL7GSxZ3U uR23vobsyxtII/uYrg== -----END CERTIFICATE-----Generated at Sat Mar 14 16:18:18 2026 by rpki-client