$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: PYYSj/I/Fh4M6UnPitQRmz9Sl+ulbh12tM5wjHMgsP4= Subject key identifier: 2F:67:D2:12:1E:17:A3:4B:3C:09:1D:3D:6B:14:66:8C:16:0D:7E:12 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019D3977F1481016E19BD08758F7E9AE1921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 189B Signing time: Sun 29 Mar 2026 12:00:54 +0000 Manifest this update: Sun 29 Mar 2026 12:00:54 +0000 Manifest next update: Mon 30 Mar 2026 12:00:54 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: AhKpajhyI9Vbn0gVW47fbTTKqgXBn3RWxpHwOBPJn8o=) 2: 6mvUdK2sJwETz4cqi4djiQKdMUQ.roa (hash: buR6ykljG7LAqYhxUka9PO0/x3h8cTppZNDgptnhgrU=) 3: GAkBUkP8O44HfA6UaUDucppg-zQ.roa (hash: H7w0TIFmG05ogbUF44/87E8bKqO7AppZ4RVUKMn1LjM=) 4: TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa (hash: gXAZNWfcjeZpPsYrp9FhwN0x/FJK/I6F7O8+Py5tCqI=) 5: cYgMOmj6u6TwRZVxPY0GRuR_57c.roa (hash: PFEwcIm0GvfowU+QS3ePDAQm79limgzxJJZAQhsXoQM=) 6: gq-wS1-FKcHhFx26F3VsD_Kp72Y.roa (hash: TF4H2aT6JRXNsprJBLWhkIJdEFblvAAuKU3lRYmbao8=) 7: n8m0xVPUJ7sSm50Su5RRDOcBypY.roa (hash: gyRmAMA/LaYNtHFV0LdlYDTpgJV5V6CTCcVfo5PwA40=) 8: vdMRJ5aeJMjPnWdXFF9CeJUbNPU.roa (hash: MD01V65vyHAdTu6f2/Lr5HRyugzVDjKE7/qB7jMnsR4=) 9: zkxMCcGoaYzw6MrkLQogXuC04_I.roa (hash: 7Y4R/zBLEg3xanLWgu8jUnFDOXWl73uX33xCHdArZKE=) 10: zt_YvrwgG8U0qs9ZxDXsKeZ9EVw.roa (hash: t0BRGsA3yMu+tS9ODb23oVtqY4JggUZywQTE6WaROKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 08:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:77:f1:48:10:16:e1:9b:d0:87:58:f7:e9:ae:19:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Mar 29 12:00:54 2026 GMT Not After : Mar 30 12:00:54 2026 GMT Subject: CN=2f67d2121e17a34b3c091d3d6b14668c160d7e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:44:78:9b:0c:39:1e:3f:0a:16:49:38:04:c4: 75:39:bd:77:38:72:4b:39:9d:9c:55:59:61:ba:f3: 5a:c0:9e:36:a2:c0:4b:58:be:4f:7f:2d:fe:ff:7e: a6:d8:c6:78:1c:86:53:8e:23:99:1a:0a:4a:db:c8: 71:56:3a:55:cf:79:13:62:a7:c1:57:0a:ae:70:d0: 4f:1d:45:53:2d:e6:e7:71:63:04:70:78:1c:09:0b: cc:9d:ce:a2:84:c5:22:53:1c:d3:0c:f3:3e:e2:ca: 89:80:34:64:c7:2e:5a:bf:56:c1:9d:5d:ff:12:04: 7d:3f:23:12:d4:2b:02:6e:b1:80:a1:51:8f:cb:b1: 6c:bc:4f:dd:9b:1f:19:bd:66:1c:95:64:eb:40:73: 15:25:f4:c4:71:e2:2f:bf:25:e3:50:e5:85:6e:35: a1:23:a2:94:a9:6e:d1:c6:49:9b:90:01:f0:6a:9d: cd:3b:60:66:eb:af:48:8b:89:5d:2a:64:fb:72:f0: 71:95:64:d9:06:5f:6b:88:35:c6:2f:8a:39:1a:8e: b9:75:38:22:b9:52:39:68:d8:c2:c2:9b:4e:77:34: 23:db:76:fe:55:db:96:51:0a:54:53:07:03:ed:6d: e1:77:77:fa:91:fd:1f:bf:a3:a6:6a:af:33:78:a7: 21:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:67:D2:12:1E:17:A3:4B:3C:09:1D:3D:6B:14:66:8C:16:0D:7E:12 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ef:b1:ba:70:2a:17:12:8c:2f:71:f9:ea:a4:63:30:fa:51: 83:3f:38:f9:dc:58:31:f5:a5:4b:d2:8a:11:be:45:0c:8d:8e: 00:7d:49:52:77:3e:b8:7c:e8:3b:34:1d:b5:3d:8e:51:c5:4b: c0:1f:67:aa:02:7b:fe:54:23:e4:e9:1f:08:ee:43:3f:45:db: c0:22:d5:79:fa:67:52:57:a1:ec:ac:1e:61:9f:ed:74:ae:69: aa:6a:1b:22:34:13:c7:61:cb:dc:57:44:ef:5c:f8:38:da:4a: dc:bb:bc:56:b3:0e:bb:71:df:3c:82:d9:98:d3:f9:98:35:4f: 75:40:24:07:01:e2:12:64:41:80:cb:fa:bf:c3:25:5c:cb:05: 0f:93:e9:b3:c9:d6:7d:74:80:67:91:68:91:5b:cf:78:89:cf: d0:bc:af:e0:61:c5:89:6b:8a:80:dd:5d:7e:bb:3c:b9:a1:aa: 90:61:db:d6:3e:81:37:fa:6e:2f:1b:6d:c6:6e:14:2e:22:d8: 3d:41:26:b7:51:84:f1:5a:e9:73:9e:74:38:5b:e8:f5:b4:4e: b1:15:4d:81:90:0b:70:8e:63:97:63:80:35:46:ef:42:01:90: 96:01:41:76:56:68:bb:7a:30:af:3b:5e:55:78:a1:86:ec:87: 55:af:81:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05d/FIEBbhm9CHWPfprhkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjYwMzI5MTIwMDU0WhcNMjYwMzMwMTIwMDU0WjAzMTEwLwYDVQQD EygyZjY3ZDIxMjFlMTdhMzRiM2MwOTFkM2Q2YjE0NjY4YzE2MGQ3ZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ER4mww5Hj8KFkk4BMR1Ob13OHJL OZ2cVVlhuvNawJ42osBLWL5Pfy3+/36m2MZ4HIZTjiOZGgpK28hxVjpVz3kTYqfB VwqucNBPHUVTLebncWMEcHgcCQvMnc6ihMUiUxzTDPM+4sqJgDRkxy5av1bBnV3/ EgR9PyMS1CsCbrGAoVGPy7FsvE/dmx8ZvWYclWTrQHMVJfTEceIvvyXjUOWFbjWh I6KUqW7RxkmbkAHwap3NO2Bm669Ii4ldKmT7cvBxlWTZBl9riDXGL4o5Go65dTgi uVI5aNjCwptOdzQj23b+VduWUQpUUwcD7W3hd3f6kf0fv6Omaq8zeKchtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9n0hIeF6NLPAkdPWsUZowWDX4SMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOO+xunAq FxKML3H56qRjMPpRgz84+dxYMfWlS9KKEb5FDI2OAH1JUnc+uHzoOzQdtT2OUcVL wB9nqgJ7/lQj5OkfCO5DP0XbwCLVefpnUleh7KweYZ/tdK5pqmobIjQTx2HL3FdE 71z4ONpK3Lu8VrMOu3HfPILZmNP5mDVPdUAkBwHiEmRBgMv6v8MlXMsFD5Pps8nW fXSAZ5FokVvPeInP0Lyv4GHFiWuKgN1dfrs8uaGqkGHb1j6BN/puLxttxm4ULiLY PUEmt1GE8Vrpc550OFvo9bROsRVNgZALcI5jl2OANUbvQgGQlgFBdlZou3owrzte VXihhuyHVa+Bqg== -----END CERTIFICATE-----Generated at Sun Mar 29 18:49:12 2026 by rpki-client