$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: 2NFxg4w5j0HoF0IlY+022E3gOQGcTXOxxiRlF/f9g2w= Subject key identifier: DC:FA:66:60:1C:41:57:32:32:87:BA:6F:03:79:42:67:FC:76:90:40 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019D0D7A986D1119C60C651C612AA492C26F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 1091 Signing time: Fri 20 Mar 2026 23:00:31 +0000 Manifest this update: Fri 20 Mar 2026 23:00:31 +0000 Manifest next update: Sat 21 Mar 2026 23:00:31 +0000 Files and hashes: 1: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=) 2: C4GFPQJi7p8x697vDEqdYSForok.roa (hash: x37lAGnggrFkEEQihLvJsXhXtDeedMO3diP0XULMgKY=) 3: F0yBqDMqCNM0pe9rWG8uj3CbYkc.roa (hash: XCZ0JTvoTGZ62Q11PauRxwPTiRMvREV2N/LHqEFLe2w=) 4: FXRjYZvbpR4kI47t-xbWMZKIpXs.roa (hash: f82R7m8nlKkGC17z2MB1wjV2cD02/YvewqP02lzhH/g=) 5: GyehNP3GNMAkeXlLJEWyWCcQtzU.roa (hash: IpYqqZa4sTN+dmYx8FkURhFjGrU2UAuArFl+utDihPQ=) 6: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=) 7: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: FsuHMiJ14I95oHrbEAHb63awVzxmvc/gIYxLq5dOCMA=) 8: eoCcRd3DQ06osUmaj6wTPXbyx3M.roa (hash: Bag32wKiY/ZwSFfm1YHrZ2XH/ziquJ1Nmz4VoaY0zzY=) 9: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=) 10: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=) 11: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0d:7a:98:6d:11:19:c6:0c:65:1c:61:2a:a4:92:c2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Mar 20 23:00:31 2026 GMT Not After : Mar 21 23:00:31 2026 GMT Subject: CN=dcfa66601c4157323287ba6f03794267fc769040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e2:d9:2d:0d:76:43:31:7b:d8:9f:31:ec:4a: 79:79:f4:46:3f:c0:2b:42:e7:1e:0d:28:26:ec:67: fe:77:01:97:be:b4:cf:a4:09:8e:2b:18:bf:30:cf: 90:15:2c:7d:78:fd:9d:01:f4:c9:cd:33:ae:eb:98: 72:9e:65:7d:15:e1:e3:2d:a4:d3:31:f0:a4:88:56: 09:0d:4a:01:ce:00:fe:4e:b3:2c:1d:a9:5e:a3:6a: a1:c9:06:03:ec:aa:88:e7:01:e1:fd:0e:7d:49:b4: ad:83:20:1e:fd:1e:96:e7:c5:d9:4b:81:20:f8:ba: d4:0a:2e:60:e0:36:16:95:68:f4:48:91:7d:5d:05: 97:7b:8e:62:3f:74:b5:3a:9c:9e:fd:d6:53:27:4e: 6b:a5:d5:5c:00:0c:f7:c6:75:ce:a8:6d:21:95:95: 3b:cf:c2:8c:fe:40:ed:b8:4c:de:e5:28:6f:75:bf: c4:9d:9f:68:d9:c8:94:c6:76:1b:62:66:e5:91:df: 97:81:90:a9:da:19:c3:f5:25:d1:16:af:b1:fd:1a: 19:08:2d:11:80:b1:20:67:c7:05:fc:a8:2a:9e:a5: e8:4d:47:ba:58:1f:e0:7d:0f:c2:47:f1:7b:80:0d: b4:ca:79:cb:c1:a1:18:96:28:35:f2:c8:7e:e0:28: 56:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FA:66:60:1C:41:57:32:32:87:BA:6F:03:79:42:67:FC:76:90:40 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:30:7a:67:3a:d0:67:4b:f1:a0:8c:1d:28:e7:8e:d9:68:0e: 82:49:90:76:a6:dd:59:d5:48:fd:ae:ed:25:ef:52:23:da:71: b5:87:99:14:42:8d:77:95:0b:58:4a:0b:84:20:ad:24:7a:05: 45:02:5e:5e:6b:f5:33:94:fb:f1:78:34:7a:55:6c:71:88:0c: cf:36:13:82:a2:88:fa:08:22:70:5b:58:85:a3:12:1c:a6:35: e1:bc:85:7a:e8:5f:78:a8:6d:1c:50:63:bf:74:3b:20:67:31: cb:d1:a7:3a:be:cf:6d:4a:4d:c5:99:c0:4c:bc:3e:4d:63:da: 95:92:e8:18:fc:b9:03:97:00:ce:37:51:01:f5:70:7a:71:4d: 0f:86:9d:28:2c:36:23:d4:7b:e5:94:03:0b:e7:cd:1a:88:6c: 41:87:3f:70:27:23:b9:ff:d5:63:6e:27:e2:12:ca:43:4c:fb: 15:6b:bb:e4:06:9b:54:8f:ff:09:3e:01:20:00:6e:36:34:79: 0c:8d:29:1b:fe:c1:95:c5:64:23:a7:93:1b:cc:f6:3e:08:52: 61:62:cc:03:1b:86:7c:de:a2:f5:47:4e:e6:30:9c:ef:ce:6a: 00:d3:4e:06:db:b0:67:d3:bb:59:b2:95:97:80:1c:9d:43:7b: 25:f9:a3:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0NephtERnGDGUcYSqkksJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwMzIwMjMwMDMxWhcNMjYwMzIxMjMwMDMxWjAzMTEwLwYDVQQD EyhkY2ZhNjY2MDFjNDE1NzMyMzI4N2JhNmYwMzc5NDI2N2ZjNzY5MDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+LZLQ12QzF72J8x7Ep5efRGP8Ar QuceDSgm7Gf+dwGXvrTPpAmOKxi/MM+QFSx9eP2dAfTJzTOu65hynmV9FeHjLaTT MfCkiFYJDUoBzgD+TrMsHaleo2qhyQYD7KqI5wHh/Q59SbStgyAe/R6W58XZS4Eg +LrUCi5g4DYWlWj0SJF9XQWXe45iP3S1Opye/dZTJ05rpdVcAAz3xnXOqG0hlZU7 z8KM/kDtuEze5Shvdb/EnZ9o2ciUxnYbYmblkd+XgZCp2hnD9SXRFq+x/RoZCC0R gLEgZ8cF/KgqnqXoTUe6WB/gfQ/CR/F7gA20ynnLwaEYlig18sh+4ChWswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNz6ZmAcQVcyMoe6bwN5Qmf8dpBAMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzB6ZzrQ Z0vxoIwdKOeO2WgOgkmQdqbdWdVI/a7tJe9SI9pxtYeZFEKNd5ULWEoLhCCtJHoF RQJeXmv1M5T78Xg0elVscYgMzzYTgqKI+ggicFtYhaMSHKY14byFeuhfeKhtHFBj v3Q7IGcxy9GnOr7PbUpNxZnATLw+TWPalZLoGPy5A5cAzjdRAfVwenFND4adKCw2 I9R75ZQDC+fNGohsQYc/cCcjuf/VY24n4hLKQ0z7FWu75AabVI//CT4BIABuNjR5 DI0pG/7BlcVkI6eTG8z2PghSYWLMAxuGfN6i9UdO5jCc785qANNOBtuwZ9O7WbKV l4AcnUN7JfmjiQ== -----END CERTIFICATE-----Generated at Sat Mar 21 08:13:35 2026 by rpki-client