$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: ILH4k3rkPQ6CjEQdlcxL/N2+tpIQgKqrpTTCtmWptkg= Subject key identifier: 89:62:14:6F:B2:43:A9:2F:BE:77:2F:EB:A2:C3:43:EC:07:45:37:DE Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019D0FD758EE8B4D188E4487B8972D6491B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 18F5 Signing time: Sat 21 Mar 2026 10:01:04 +0000 Manifest this update: Sat 21 Mar 2026 10:01:04 +0000 Manifest next update: Sun 22 Mar 2026 10:01:04 +0000 Files and hashes: 1: 0i_tJFCQkW4BL4d6bXm4WAypJS8.roa (hash: 61MZ18IZL5EgLoB9w4TH7mfQX+7U0VC5x9A0388yn8A=) 2: 0mDShmyQKUp4YdL7Ak2fOwf_ln4.roa (hash: cmEc3xEggewJFYU5aqtKVs0Q4v5k0w3JZFkx4qlV9Wc=) 3: 1-JP0PPtCDIK_UNysSaQZClIqsZk.roa (hash: sfCZXINYiH/YUUcCfwXIvxbn90PofsIEnjQBdiFjFFQ=) 4: 37FmBErOCRsxKQZqtKw_TpsXPeg.roa (hash: dk2f7f5Kg/P6nbGtUsTcUoKtykQN93quUzHoHrPlbUA=) 5: 4rdTxE4U8SWi3axBDMycJ1e2dVc.roa (hash: Xdko31FAcZqa8CKzUmvaPLbn8FzZeXlJr3Mz2L3FEGY=) 6: 59Sth-R3BuV9Hjri6g95SVuIU_8.roa (hash: rE2f8KGpsTiN9qUjtXDjk/27rrXTQHhiM7ABCMeYpTI=) 7: 9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa (hash: GdwVnVj0Er6zQr8pOtzRgza7jVJzxa5V5nFDEZ8imc8=) 8: CA3XMZSRf-G3ODjblICPF-EIxj8.roa (hash: VyF40sc+pRDppM7qNwDKdKVxboVcpPNc0TqHKAIYGnE=) 9: DlbWkC5JlObpaQbh5pYrcOuhUDo.roa (hash: 5ZY0b/IjheGn0WGAGieSGsGNwfBNcd9Ekci2Iu3Ck4M=) 10: LKaOQokfTIgkWBs2UdoqCTA22vc.roa (hash: cUUhEOlVftW9+j+XpaAsAph0Rp9J2xVMMProgn5lBRE=) 11: LNX9e0qM1FUUPu7JPg66r69yK3k.roa (hash: 4hdxVQWJPFAuhVTEnkZxRAKzt32xutYmv7LRrS+WM4M=) 12: LXHUHSO9WQWL1yjZx_1oGkRxSgI.roa (hash: HOm4ChKdSMnn++SpgwP+q1pIqlQSDcmq1lnjp8gr6/k=) 13: P4odDKYu1lCKx-0-6xh-2d3gFVU.roa (hash: pJx8PCnMcEoTQpCvLj2jXwglNIUY3fH2OwKcEuhWXsg=) 14: QGcED9nMBFNEcLIYKfsWpbPgFeo.roa (hash: ZoZ5qhejcJ2eD+U6g8CGcswJ1q+2gIH8nSKoh9/Kbps=) 15: T0yNiTnMr7rQj6L4yFcQz5luZuc.roa (hash: qkIXR7MhpFqaBJh+vVhJ5yECXOO2wVNGqePTqIktFFM=) 16: WtbHisRdncnw4HB-C-Q2nOatpCk.roa (hash: 3wmWRlMXTcqOjL6bnR/KTtOAF4ruJh0llk95iowxjzE=) 17: Yu_uuzMGePwC0icaYNERVoH0Cfk.roa (hash: PATzSiQXd51zhFdnNpl0DeghvMrZihxoQe+PXsEdhqA=) 18: Z4tsMasr475PZDRWvm4ex7ESXO8.roa (hash: x1q/+0sH/c43tTyBJa6b3wh2hl1q14JnzKQuZGqEr1I=) 19: Z5QikMa7UwGfn8uO2JzMrRFXYnY.roa (hash: U7DHGYIkh2PVaJpwB3Rs6rnlNqHm+IBWFv5Y36W7frQ=) 20: _Z4F7M-QmFI0Z18UQdlG6FBfQ7o.roa (hash: qJW2rDHAQqCfDrhYBEnMSMAxF6KCHBOPVWkKVY8Nuv8=) 21: b9yPzny7g7NzZoMSg-I0-4xYJRQ.roa (hash: oex26xfzNOy0QvV3r0CTF5Po3sMUSsRDc+0RGORVsd4=) 22: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: v9hvgF8B1RY88jszUPIBTA1DiVpZ3mdvduts3ZAdvqk=) 23: doMjCvh-T_oVkJKD3Y7qOZoudQA.roa (hash: O0rnzXZPufM0mBq+veKdhSLIRnUWNnJekiSLuJW+WPg=) 24: f8cXMfB8GmIppgsZFcI-OCvQxNk.roa (hash: C/qkMAbaZbD1CDux6NhG+NBRCWcc4xbDi8mJQpA9u78=) 25: fW59nKWFAAcX3FkGdJCNC4LY0lU.roa (hash: QrZ99mG5ipIB8lihFmB86+BQ62v5THWSecfMtXAd/Vk=) 26: hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa (hash: /DoibVc0zt1dXzmqKhW2/HUrHirpTFgRWlWufv4zCoY=) 27: iTv_taBhSWWSwucljCvdm_j4RW8.roa (hash: GE2aWALIL/q/9QPvVk6yJa+XbND+dNPP+iVv+vbA798=) 28: iqkz-oFIpTUAukJ-q0KYzZGnhbY.roa (hash: 4JwiIgby6A2ltqK6a4PhfhVkPMKWfaYDYeB6aMX/De4=) 29: jxE-bqQIw7U79IbBizQW2pIQJjM.roa (hash: s23hU/sL0N2hE6GCP2WlFxNdJxuwnkbuT42NWpGSIOw=) 30: kepdZXENoY0lFOiOd2VYC5Jt8PU.roa (hash: bBmIVbb4z4z4JQQlPc3j4zkDZyWk/Dmtse596NYk1Vs=) 31: mz3LKflSaCjzbLbt50UYZRI14QU.roa (hash: R+3MLAMskLr07qEIftdxyai6y/lFHGIWJS1jtU8VQFw=) 32: q4er2ti9h_W7MKRTNBtj0R5wg8I.roa (hash: Y7raLSBcr0F4VthCcXXBIhwj7MwB/MaClEuc9miqnEI=) 33: rTAcqrsLjdQzWLiPeTE0J8tFjHs.roa (hash: kpmFc9kxITW5Y/O6sK7eQ8xr12ovnarFA8jerArDTmw=) 34: sLY3G1xdCHy9saTyO6qv4H647-I.roa (hash: /DGNJIVWB/YvwBgoQBpym5udAedp+k63mdUlTFq/BSw=) 35: sa0irmG5fTuP-s-e7ehVBplCJx4.roa (hash: 7SZESPqbjMHr+1YpDP1XwHSl42AkB6k/wkqvHyEDf5U=) 36: wA9ChWaX9aTjQjNN5mYeaC542Nc.roa (hash: uwS9DbntInTGgRyBcScvO12ZNTWYbWh0ii3LNRApI90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0f:d7:58:ee:8b:4d:18:8e:44:87:b8:97:2d:64:91:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Mar 21 10:01:04 2026 GMT Not After : Mar 22 10:01:04 2026 GMT Subject: CN=8962146fb243a92fbe772feba2c343ec074537de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c8:d4:e6:3a:48:f4:67:67:7f:21:cd:42:1e: 2c:6d:d6:5c:33:53:cc:16:65:2d:d6:60:dd:10:12: 92:09:74:81:a3:7a:85:d2:51:7b:84:07:b6:9e:66: 7b:bc:f4:02:ea:f9:c3:72:d7:82:14:18:61:1e:6d: b8:1f:0e:b7:6f:28:50:15:de:da:ab:e5:09:3d:b8: 31:bd:f9:20:54:e3:57:e4:66:72:a3:72:c8:94:ba: 9f:0d:a6:e0:b9:ba:40:ee:8b:f0:4d:df:1a:de:52: 6c:98:69:bb:68:39:1e:c7:b6:fa:ee:3c:8d:c9:b7: 09:b3:72:ea:30:68:1d:e8:f5:b9:82:8f:30:dc:ad: 9d:92:4a:3c:41:c1:fa:1a:9a:df:73:f5:f8:4d:22: cd:0e:68:aa:be:c9:ca:62:73:84:9f:e5:8e:5e:9b: e8:5c:47:75:6c:0e:c6:59:f9:80:37:b6:09:35:b6: e5:da:46:63:de:9e:d5:87:76:c7:da:19:99:b7:3b: 25:7a:57:f8:b9:9d:f5:6e:30:33:10:53:64:fc:02: 81:18:3a:07:c9:0e:d5:e9:04:54:03:7d:e5:f4:da: d5:ca:99:10:19:39:08:84:2a:bf:84:c0:19:f0:2e: 81:b0:22:31:45:aa:ff:99:58:01:c3:f6:27:24:fe: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:62:14:6F:B2:43:A9:2F:BE:77:2F:EB:A2:C3:43:EC:07:45:37:DE X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f7:ed:d2:cf:57:35:16:de:b6:48:f9:85:2b:cf:5c:41:1d: 37:d2:4e:d0:e4:7e:b7:2c:db:2d:6a:f3:9b:c2:55:34:5d:65: 59:34:a9:46:bf:f4:3f:dd:5d:af:2f:03:81:73:1d:ec:97:1f: 12:31:5a:4e:0b:5a:d3:42:04:74:50:aa:ff:92:cb:16:70:f3: 27:8c:67:0f:27:17:34:7d:6c:7b:7f:f7:cd:aa:ab:7c:a5:16: 62:5b:76:c0:25:9f:b9:95:7a:d7:66:d7:9d:ef:73:70:08:5e: d9:b7:0f:66:df:ed:29:78:a8:65:d6:0c:f3:38:5d:65:63:c8: 77:a8:dd:a8:a3:21:09:0f:f9:c3:08:6a:00:b3:61:6d:7b:b4: 15:ed:87:74:f9:2b:d6:f5:96:22:de:a6:40:bd:ff:71:1d:9f: 13:4e:55:92:c9:3f:ec:12:11:e0:41:d7:fe:bc:a9:33:58:b6: 37:32:1d:71:e6:7e:c5:f0:04:92:c5:47:cc:04:87:ad:ab:06: ec:8d:93:ed:65:bd:59:7b:54:0a:29:f6:22:8b:73:3b:50:da: 03:a5:57:c0:cb:e8:06:11:da:9e:af:2a:11:38:a8:b7:1d:39: d9:22:fd:03:dd:90:91:66:67:1d:d2:ad:e4:25:56:43:5a:cc: 90:a0:00:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0P11jui00YjkSHuJctZJGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMzIxMTAwMTA0WhcNMjYwMzIyMTAwMTA0WjAzMTEwLwYDVQQD Eyg4OTYyMTQ2ZmIyNDNhOTJmYmU3NzJmZWJhMmMzNDNlYzA3NDUzN2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8jU5jpI9GdnfyHNQh4sbdZcM1PM FmUt1mDdEBKSCXSBo3qF0lF7hAe2nmZ7vPQC6vnDcteCFBhhHm24Hw63byhQFd7a q+UJPbgxvfkgVONX5GZyo3LIlLqfDabgubpA7ovwTd8a3lJsmGm7aDkex7b67jyN ybcJs3LqMGgd6PW5go8w3K2dkko8QcH6Gprfc/X4TSLNDmiqvsnKYnOEn+WOXpvo XEd1bA7GWfmAN7YJNbbl2kZj3p7Vh3bH2hmZtzslelf4uZ31bjAzEFNk/AKBGDoH yQ7V6QRUA33l9NrVypkQGTkIhCq/hMAZ8C6BsCIxRar/mVgBw/YnJP5urQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIliFG+yQ6kvvncv66LDQ+wHRTfeMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfft0s9X NRbetkj5hSvPXEEdN9JO0OR+tyzbLWrzm8JVNF1lWTSpRr/0P91dry8DgXMd7Jcf EjFaTgta00IEdFCq/5LLFnDzJ4xnDycXNH1se3/3zaqrfKUWYlt2wCWfuZV612bX ne9zcAhe2bcPZt/tKXioZdYM8zhdZWPId6jdqKMhCQ/5wwhqALNhbXu0Fe2HdPkr 1vWWIt6mQL3/cR2fE05Vksk/7BIR4EHX/rypM1i2NzIdceZ+xfAEksVHzASHrasG 7I2T7WW9WXtUCin2IotzO1DaA6VXwMvoBhHanq8qETiotx052SL9A92QkWZnHdKt 5CVWQ1rMkKAAKQ== -----END CERTIFICATE-----Generated at Sat Mar 21 18:45:33 2026 by rpki-client