$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: qmfa0BrmQPpc88oNBfds1HCTOGZUcbQW0GBdkv+tSxo= Subject key identifier: 1A:51:67:92:C2:FA:51:EB:F7:A4:C8:80:9C:9C:8F:AB:CF:9B:18:27 Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 019D37C069902462B480A8F5A31BC745E386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 18E4 Signing time: Sun 29 Mar 2026 04:00:49 +0000 Manifest this update: Sun 29 Mar 2026 04:00:49 +0000 Manifest next update: Mon 30 Mar 2026 04:00:49 +0000 Files and hashes: 1: 9q3EYdZ3lfMQxLLXWr1Lu4GLDoA.roa (hash: 83WLeeOeZ990Jlz8T0MeqEiLs0USK5cXzUu6OTKmBQA=) 2: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: HSZk0mpigIEAReU4tORNYtPGsRQT+Xp9iT8yA4BWpdA=) 3: Ot4Snb7Zi4C3emPyzdbqir7P8wg.roa (hash: 5vVU8CpinnMNDApjLeGdIl2Z5WpD2a99HQpSOKcpVyA=) 4: _qBNAwK4OK7Gc8Mq1Ci80h09-HY.roa (hash: t56c+2Ht/FaNSMyC1mKhu0HZAUXfDcSUi9DNTN8F9N8=) 5: anqzHj_RBxYK0oKafgD2zP99QsI.roa (hash: ERFHbW67bqTT3uEBCgeFptdUh/X+KRt4341hnCHBYhg=) 6: k2VMFVozqPnYzXV1s0yW14brgu0.roa (hash: iUK8Oo0pMp3EC1NmFi93MB7dSsN9F4/PHcovJ6wIZ64=) 7: kQ0io2PNAP5BY8r7GxffYcQFx9o.roa (hash: 3jWAN8RtvcrXSZtLqgReLIQU9lIS3iNu48aFnlNqCkE=) 8: mkpUVZc-vUGm02tucPpx4ITb8yc.roa (hash: 7oJEAu9SY+cshxiGPE3FgFiCATL9zFHbwSfgmHPiX+8=) 9: qEghLoN1iiF0goU1gVxwFrySfFg.roa (hash: 3jYy81C5LnlKfMQ1I0vpC9e8jd+RkWb8kU2Np75bx8o=) 10: sXYVzlN949bYEOpO7zS9qQzV3hI.roa (hash: e9BBGZUNUZ1LbqXnLLn0ySZ711mfMA/MI8l0i6//fJw=) 11: v4-hkrmpo-sqeCMeJ_vYE4rWpjo.roa (hash: 0SUNe2XwpLFI11Ihhq2d2WPppOz2Dt6w1G3PnhDPFVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:c0:69:90:24:62:b4:80:a8:f5:a3:1b:c7:45:e3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Mar 29 04:00:49 2026 GMT Not After : Mar 30 04:00:49 2026 GMT Subject: CN=1a516792c2fa51ebf7a4c8809c9c8fabcf9b1827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:48:0c:e6:1d:71:97:ac:e5:78:d1:4d:63:44: d9:1c:b8:66:ba:9d:8b:eb:3d:dd:5f:15:15:d3:4f: 3f:29:9d:6e:ff:a2:55:ee:77:59:7b:f6:cb:7a:21: 12:c6:e6:c5:aa:ca:c8:eb:c7:97:8c:ff:08:38:59: 88:91:25:0c:ec:ec:e2:af:12:e0:76:38:40:ac:71: 96:4a:cb:f0:9f:6c:9b:43:81:a9:39:20:9e:eb:3f: da:3a:b6:00:05:a7:b3:fb:a2:c2:63:ba:00:05:7f: ac:ad:8a:34:56:19:bc:79:92:66:2c:8f:4b:6d:ac: 6d:80:e1:67:a9:7e:c1:f5:79:a4:63:18:c7:53:23: 4d:64:d2:01:1c:6a:a3:87:41:48:06:ff:22:57:6d: e2:00:27:47:04:6a:70:50:a1:c0:4a:4d:97:ae:fa: 86:87:b6:ed:97:b1:9a:b5:b3:ab:9c:42:20:cb:2c: 58:93:86:6c:e5:bd:77:7c:3a:e6:a0:59:e4:80:23: 54:b9:2c:a1:7d:45:d5:b8:92:c9:42:ed:f8:d9:82: 67:f9:12:17:92:36:e2:a1:5c:a5:c2:83:fe:e5:1a: 03:db:87:08:89:57:62:24:ea:f6:2d:a3:6c:a6:f9: f4:dc:89:1f:3e:65:4f:49:66:fc:7b:5d:a1:79:93: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:51:67:92:C2:FA:51:EB:F7:A4:C8:80:9C:9C:8F:AB:CF:9B:18:27 X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:10:cf:a6:f2:d3:c5:08:d7:3c:20:80:46:b2:51:23:33:74: 66:41:22:f8:5c:58:51:ea:b3:84:d4:eb:fe:d7:86:40:96:8a: 9b:8f:ee:aa:0d:eb:17:c1:df:96:55:26:19:ed:a9:d1:e6:f0: f4:aa:e6:5a:bf:5d:4d:6a:91:83:9e:84:bf:59:39:2b:ff:c0: bb:4f:18:b0:13:6a:ea:19:0a:02:f3:a2:d1:4b:25:ce:16:b2: 7c:71:30:90:84:a5:12:1b:ba:03:0c:e9:ed:a7:d6:a8:15:a3: 77:62:5e:8a:7d:a5:c7:0c:5b:65:2c:b8:04:ef:18:73:5f:c4: 0f:99:b1:e0:96:37:8a:a7:a6:8f:52:c2:ec:64:99:fa:25:bd: b8:f6:d9:a6:c4:09:bb:70:0f:01:6a:99:e2:cd:38:bf:6d:e9: 1f:6d:9e:45:f6:25:a5:63:bf:ff:f5:20:a4:58:9c:ca:90:ba: 97:80:8f:b8:6b:4d:0c:da:6f:07:15:2a:c7:eb:1e:be:1a:74: 20:07:6b:3c:db:71:06:7d:d9:f9:f2:64:69:3c:f0:0b:7a:d6: e6:bc:bb:ca:af:d8:a7:ef:f7:5f:59:3c:59:19:87:a2:36:1d: 81:49:7e:24:d0:67:3a:a7:ec:b5:15:81:92:24:e5:bb:f3:af: 9c:12:c0:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ03wGmQJGK0gKj1oxvHReOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjYwMzI5MDQwMDQ5WhcNMjYwMzMwMDQwMDQ5WjAzMTEwLwYDVQQD EygxYTUxNjc5MmMyZmE1MWViZjdhNGM4ODA5YzljOGZhYmNmOWIxODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kgM5h1xl6zleNFNY0TZHLhmup2L 6z3dXxUV008/KZ1u/6JV7ndZe/bLeiESxubFqsrI68eXjP8IOFmIkSUM7OzirxLg djhArHGWSsvwn2ybQ4GpOSCe6z/aOrYABaez+6LCY7oABX+srYo0Vhm8eZJmLI9L baxtgOFnqX7B9XmkYxjHUyNNZNIBHGqjh0FIBv8iV23iACdHBGpwUKHASk2XrvqG h7btl7GatbOrnEIgyyxYk4Zs5b13fDrmoFnkgCNUuSyhfUXVuJLJQu342YJn+RIX kjbioVylwoP+5RoD24cIiVdiJOr2LaNspvn03IkfPmVPSWb8e12heZM4uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpRZ5LC+lHr96TIgJycj6vPmxgnMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhDPpvLT xQjXPCCARrJRIzN0ZkEi+FxYUeqzhNTr/teGQJaKm4/uqg3rF8HfllUmGe2p0ebw 9KrmWr9dTWqRg56Ev1k5K//Au08YsBNq6hkKAvOi0UslzhayfHEwkISlEhu6Awzp 7afWqBWjd2Jein2lxwxbZSy4BO8Yc1/ED5mx4JY3iqemj1LC7GSZ+iW9uPbZpsQJ u3APAWqZ4s04v23pH22eRfYlpWO///UgpFicypC6l4CPuGtNDNpvBxUqx+sevhp0 IAdrPNtxBn3Z+fJkaTzwC3rW5ry7yq/Yp+/3X1k8WRmHojYdgUl+JNBnOqfstRWB kiTlu/OvnBLABA== -----END CERTIFICATE-----Generated at Sun Mar 29 11:25:50 2026 by rpki-client