$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: E6Hl9JnssP60U9TDICCKtClxn8EkSPDLPUEHbwVAVTQ= Subject key identifier: 24:42:8F:D1:06:C5:B2:66:7B:6D:04:35:28:E0:96:96:C3:1D:53:BF Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019CE1EBE184E149E16BE56E869AE779836C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0A96 Signing time: Thu 12 Mar 2026 12:00:58 +0000 Manifest this update: Thu 12 Mar 2026 12:00:58 +0000 Manifest next update: Fri 13 Mar 2026 12:00:58 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: /rHqGhALiaF2JOjZCj4vsNfD0AcqTYuEJ3Q7ANc4poI=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: LZ_m2waZIs7_F9DFpQeDZwKSqaI.roa (hash: AswbWRxQk3rPm90PMBMeMwOGoat0R8hOqCGqrGPRnek=) 8: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 9: P12Bd5VdoMxJk2YYVATcG1-aLsk.roa (hash: tMed7m101KjSKZGY84e4m62zANDxSX8qjIVWkfIG7SI=) 10: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 11: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 12: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 13: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 14: k4m5uF6d86bKxXryYJZgXjvW8I0.roa (hash: H2jNyKD+HmfBkpz7JaRABFyLsbIlNp19F4CUBAdQu10=) 15: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 19: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e1:eb:e1:84:e1:49:e1:6b:e5:6e:86:9a:e7:79:83:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Mar 12 12:00:58 2026 GMT Not After : Mar 13 12:00:58 2026 GMT Subject: CN=24428fd106c5b2667b6d043528e09696c31d53bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:76:46:f8:99:eb:d0:2e:c5:38:23:ec:f3: c3:b5:a2:84:15:12:fc:ff:6f:52:70:7d:b2:ae:75: 03:e4:e6:d6:72:d5:45:05:b8:41:7a:ec:83:53:24: 5d:0e:e9:6f:e5:e5:20:0f:93:56:9b:b3:f2:91:17: ad:e1:c4:39:00:ff:22:ad:40:0e:cc:9e:c9:ee:77: c2:75:02:8b:78:c8:fd:f9:4a:f5:3c:ce:87:32:d2: de:ae:d6:d3:7c:d7:66:19:dc:3f:ef:fe:2a:2e:a5: ef:3f:8a:eb:ca:d2:42:59:a4:c3:68:63:3c:fc:eb: b9:9a:60:d3:45:52:37:3c:9d:3c:20:15:ce:97:11: 84:8b:3b:ff:be:24:53:ff:f5:73:5a:e0:22:27:b8: ec:f8:d4:e5:45:6d:83:00:b9:a6:0e:74:e8:c5:93: 26:7e:bb:52:01:fe:7b:04:c3:1f:35:29:af:49:45: 7e:2b:43:fe:aa:5b:61:75:a0:c1:48:5e:65:71:ee: b3:cb:1e:c1:73:3d:e2:17:f0:fc:94:fd:9a:2f:e6: 9b:5f:46:e1:54:b3:2c:a2:a4:ce:ff:d7:6c:36:74: 38:ab:98:ae:ca:aa:f0:3b:f7:99:6d:3f:8c:ad:b9: 8b:47:36:c3:2d:c8:29:79:47:7d:0e:2d:45:b8:26: 1b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:42:8F:D1:06:C5:B2:66:7B:6D:04:35:28:E0:96:96:C3:1D:53:BF X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ee:5a:d7:60:63:d2:21:0e:dd:b4:91:fb:6e:0e:b6:d2:a9: e1:93:8c:75:0e:9e:d4:bf:80:9e:bd:eb:4a:81:dc:32:39:d5: 20:ec:31:4b:c1:6f:01:a0:f7:6f:ff:06:6c:52:c2:66:58:b2: 5a:95:a3:9f:03:b7:af:bf:62:53:b8:f9:e9:9a:01:a1:ec:58: 8f:ff:4c:33:90:1b:8d:74:63:9b:aa:89:ed:ec:cb:ea:2e:47: 54:18:a1:20:4e:61:af:bb:58:2c:86:ab:7c:01:a0:b2:08:fe: 58:9e:66:7c:49:71:9c:ff:cd:ba:46:95:d7:ba:81:77:15:0f: 66:80:ef:cc:d1:66:7d:59:fb:9f:d4:d3:3e:14:28:bc:3f:30: 98:53:09:4b:8f:93:fa:52:5a:e0:fe:74:77:58:4e:b2:68:47: 97:4d:39:0a:b0:12:fa:f7:c1:0e:be:ef:66:a7:47:d7:b5:33: 59:66:f8:e1:93:fb:4b:e0:47:89:60:58:e5:9e:dc:61:2f:8e: 05:ab:25:b3:1f:14:2a:24:4e:a5:8c:c3:fa:bb:0c:2f:2d:cb: cd:5f:41:45:29:c8:b1:49:93:3e:d1:71:62:d8:1e:00:4b:8a: 2b:c6:d4:02:5a:ad:88:65:5b:fb:52:1f:93:17:11:51:ef:ed: 67:a7:0b:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzh6+GE4Unha+VuhprneYNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMzEyMTIwMDU4WhcNMjYwMzEzMTIwMDU4WjAzMTEwLwYDVQQD EygyNDQyOGZkMTA2YzViMjY2N2I2ZDA0MzUyOGUwOTY5NmMzMWQ1M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MB2RviZ69AuxTgj7PPDtaKEFRL8 /29ScH2yrnUD5ObWctVFBbhBeuyDUyRdDulv5eUgD5NWm7PykRet4cQ5AP8irUAO zJ7J7nfCdQKLeMj9+Ur1PM6HMtLertbTfNdmGdw/7/4qLqXvP4rrytJCWaTDaGM8 /Ou5mmDTRVI3PJ08IBXOlxGEizv/viRT//VzWuAiJ7js+NTlRW2DALmmDnToxZMm frtSAf57BMMfNSmvSUV+K0P+qlthdaDBSF5lce6zyx7Bcz3iF/D8lP2aL+abX0bh VLMsoqTO/9dsNnQ4q5iuyqrwO/eZbT+MrbmLRzbDLcgpeUd9Di1FuCYbeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRCj9EGxbJme20ENSjglpbDHVO/MB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXO5a12Bj 0iEO3bSR+24OttKp4ZOMdQ6e1L+Anr3rSoHcMjnVIOwxS8FvAaD3b/8GbFLCZliy WpWjnwO3r79iU7j56ZoBoexYj/9MM5AbjXRjm6qJ7ezL6i5HVBihIE5hr7tYLIar fAGgsgj+WJ5mfElxnP/NukaV17qBdxUPZoDvzNFmfVn7n9TTPhQovD8wmFMJS4+T +lJa4P50d1hOsmhHl005CrAS+vfBDr7vZqdH17UzWWb44ZP7S+BHiWBY5Z7cYS+O Baslsx8UKiROpYzD+rsMLy3LzV9BRSnIsUmTPtFxYtgeAEuKK8bUAlqtiGVb+1If kxcRUe/tZ6cL0g== -----END CERTIFICATE-----Generated at Thu Mar 12 17:09:23 2026 by rpki-client