$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json) Hash identifier: OCIIf+ibrFnE+q1nXz7OP8B4NZT8V2CM6KEVMbafWvE= Subject key identifier: 2F:59:85:B9:36:C7:14:61:99:9D:8F:35:82:65:9C:B8:B0:F8:6F:72 Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 019D382DFC2D626717A4AA5C8D300F6CB65B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft Manifest number: 1896 Signing time: Sun 29 Mar 2026 06:00:30 +0000 Manifest this update: Sun 29 Mar 2026 06:00:30 +0000 Manifest next update: Mon 30 Mar 2026 06:00:30 +0000 Files and hashes: 1: 2bmFSMgy2P2oSH2qP7eO7iwn9Zg.roa (hash: cbsBP6OAzhAl2v8n1tj2ekwJ+n2ubBjhhjsuWSnOR4E=) 2: 5ey037UD9ZyYntlcFPrPEvGuXaE.roa (hash: bBm6Afecvoirc2fsYnSFihOCiwl7vHE/59eznix//pI=) 3: OFptjkhuAwnfpoG-xdeEpSFSkSk.roa (hash: 6I2xymsY2TCct0aRUnTx8wlYXR4RX1DMF26nGce7+SI=) 4: RARY0MBtXzXjlSGHoFlRPn0hCiQ.roa (hash: ZrgOfCyXMwUf2+1ETktXAnh/PpEp/4OLHDdKnDuqBVM=) 5: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: MpDorMwVFOEThIRRm+ab4sTUJzB5zQEe9RJF75uYk60=) 6: WeUArxTgJYE5pEvu8y3WAy8KECw.roa (hash: tVOg/TmoGx0sGC0wMVKhvr2pse+I41GeAtkpqDVblPU=) 7: YdySQzRwzr1x9j_7okaVtbW95io.roa (hash: F6lZddnRD5RuaNTuiMFziYuB8G6ouBIr6dnEC4YuELs=) 8: aE2McMJGZ3uuhPCVHbhKOJJyMlw.roa (hash: 2ll/Ac4ka+uhATeQQZ/AvlRcwkhwuYUDVQ0cKm3+8V0=) 9: b8Oq_Ep9sqtIpwsplH5dCJ8wBZQ.roa (hash: yip/O7IDuP+Zo5hNsAUSiWY1IjYOk73/VabwL0sOW0w=) 10: wgdfAkaNvBR-uQC-IHQic08CysM.roa (hash: Vy405aDprfo7kbIXKA3M0G30Bc5FdKZ0ssGRoDwVjX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:2d:fc:2d:62:67:17:a4:aa:5c:8d:30:0f:6c:b6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Mar 29 06:00:30 2026 GMT Not After : Mar 30 06:00:30 2026 GMT Subject: CN=2f5985b936c71461999d8f3582659cb8b0f86f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f6:07:eb:af:f4:52:fa:e0:e4:c1:94:92:57: ec:e3:c6:5f:b8:b4:24:cf:68:65:35:19:aa:1b:d1: 79:66:d7:2a:ec:01:15:54:76:76:64:24:a2:99:42: 56:ef:58:fc:65:39:1c:94:ea:56:c4:98:72:46:20: 2e:21:45:72:98:27:89:16:75:74:48:b7:4b:17:2c: 7e:64:1a:9e:a0:fb:57:64:80:30:7b:8d:8f:d0:65: ce:9f:b9:20:68:0c:f6:2e:9b:26:5a:cf:7d:46:21: 07:36:15:a4:18:1e:83:62:a4:60:12:28:ab:86:9c: 8e:ae:fd:c3:8d:8b:a8:73:49:36:48:af:71:9b:ad: d3:8d:23:1d:6c:47:47:96:74:8c:2e:77:37:86:c4: 53:38:d8:3b:f6:45:b5:33:4b:3d:f1:a0:6c:0a:7f: 58:9f:1c:92:03:65:a0:67:64:06:39:d6:bb:e2:64: c9:4d:23:b5:8e:0c:d8:04:39:d6:65:0e:70:05:d7: 1b:22:ce:19:67:28:bd:c0:87:7a:a8:4f:aa:ef:35: ab:cb:5f:f1:7d:30:a7:47:1a:c3:2f:57:d6:ea:aa: 16:26:cd:5e:36:da:8b:b5:fc:ad:ae:d4:4e:d1:6f: a0:ea:f1:28:b1:7f:28:2e:c4:3f:e5:b5:81:99:f6: a9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:59:85:B9:36:C7:14:61:99:9D:8F:35:82:65:9C:B8:B0:F8:6F:72 X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0c:95:fd:d6:ec:70:36:be:2b:cb:9d:6e:24:80:89:5c:6d: 43:c6:5c:71:4a:a7:f3:0f:35:fe:f6:04:a1:b6:a1:26:33:92: b1:aa:e6:c2:5b:3a:4f:c1:21:68:f9:bf:e0:d7:1d:af:08:7d: 6d:aa:e4:90:3f:50:67:94:61:e2:e1:c5:58:75:4e:57:e1:79: 8c:9d:09:45:3e:34:ce:2b:9b:45:6d:a6:04:7d:99:cd:fb:18: 30:ae:d3:2a:f2:17:19:a5:2b:6d:9d:2b:99:b7:1f:9b:ea:45: d2:cb:12:35:5f:20:d3:82:12:d0:44:d5:a7:f1:89:2e:05:f6: a0:ca:8f:4d:69:b4:54:60:df:e0:a6:93:10:6b:99:15:ef:10: a3:fd:b5:47:82:48:38:72:a5:d2:3e:3f:d3:10:76:1b:8e:61: 0a:32:9f:ff:c8:32:9f:2a:28:1f:c5:a6:bc:0a:0a:16:2b:77: f0:4e:73:5c:2e:95:46:dd:f0:a0:9b:cc:85:0d:af:d6:ce:4f: 94:cd:5a:18:8a:af:de:99:97:b6:44:6c:bc:f8:65:1f:82:1a: dd:d3:27:90:aa:4a:a8:a1:95:38:a1:be:43:07:13:2a:57:f6: b0:42:74:1d:74:b4:58:12:74:ea:ca:95:04:3f:47:bc:ce:03: c2:71:91:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ04LfwtYmcXpKpcjTAPbLZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjYwMzI5MDYwMDMwWhcNMjYwMzMwMDYwMDMwWjAzMTEwLwYDVQQD EygyZjU5ODViOTM2YzcxNDYxOTk5ZDhmMzU4MjY1OWNiOGIwZjg2ZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/YH66/0Uvrg5MGUklfs48ZfuLQk z2hlNRmqG9F5Ztcq7AEVVHZ2ZCSimUJW71j8ZTkclOpWxJhyRiAuIUVymCeJFnV0 SLdLFyx+ZBqeoPtXZIAwe42P0GXOn7kgaAz2LpsmWs99RiEHNhWkGB6DYqRgEiir hpyOrv3DjYuoc0k2SK9xm63TjSMdbEdHlnSMLnc3hsRTONg79kW1M0s98aBsCn9Y nxySA2WgZ2QGOda74mTJTSO1jgzYBDnWZQ5wBdcbIs4ZZyi9wId6qE+q7zWry1/x fTCnRxrDL1fW6qoWJs1eNtqLtfytrtRO0W+g6vEosX8oLsQ/5bWBmfapmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9Zhbk2xxRhmZ2PNYJlnLiw+G9yMB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQyV/dbs cDa+K8udbiSAiVxtQ8ZccUqn8w81/vYEobahJjOSsarmwls6T8EhaPm/4Ncdrwh9 barkkD9QZ5Rh4uHFWHVOV+F5jJ0JRT40ziubRW2mBH2ZzfsYMK7TKvIXGaUrbZ0r mbcfm+pF0ssSNV8g04IS0ETVp/GJLgX2oMqPTWm0VGDf4KaTEGuZFe8Qo/21R4JI OHKl0j4/0xB2G45hCjKf/8gynyooH8WmvAoKFit38E5zXC6VRt3woJvMhQ2v1s5P lM1aGIqv3pmXtkRsvPhlH4Ia3dMnkKpKqKGVOKG+QwcTKlf2sEJ0HXS0WBJ06sqV BD9HvM4DwnGRgQ== -----END CERTIFICATE-----Generated at Sun Mar 29 14:13:25 2026 by rpki-client