$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: zdlXnJqrc5vtMoRdfq63SJFQYQlXYx5xKGWaRJBlUBk= Subject key identifier: 15:81:2F:4A:DF:1B:A6:E8:F7:07:20:47:F8:E8:91:61:21:C8:1B:36 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019D3B2FEE9DDC33D4D22D2124258A765C5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 1A9E Signing time: Sun 29 Mar 2026 20:01:30 +0000 Manifest this update: Sun 29 Mar 2026 20:01:30 +0000 Manifest next update: Mon 30 Mar 2026 20:01:30 +0000 Files and hashes: 1: 75dR-cehxGPRjcfL78Gkb98ifxM.roa (hash: bnepiSdPwXX7m3LncvOOLQdp+VDPBt7lfnKaKeAzVyQ=) 2: 95yHmKNzNlaPkfhztjEjNjbClRE.roa (hash: BQKtvkdp6u39o4nJJYhl6XsDP1w1yD+LKlufqt8njhI=) 3: BAW400X5Cp3GNyjjsyWRzyNaFgg.roa (hash: GB/H4O93w5LLUQkpbn36ChcZqhyQGrlT9Iz0jJ/HcgQ=) 4: Qcy7H8pptHALc_HRlSPBrAjHQFk.roa (hash: c34mSfwg8wGcF0HxnO7HpnD3dUE7IsUJP/VVpFraSK8=) 5: Qtf5F9ucUa9WlYqI7LvBuxEYnRs.roa (hash: OXjlkamXcYzF43Cud75tu/YjQHgZmklUqcJzwAF1XGM=) 6: R4_SJs76nKZn0cSBV0Fo8ieHskA.roa (hash: c/IdymIEHuxEUxv3cqvY3uKO7Hvs1Km9DwMMsG6LoKE=) 7: YXmTCTbpKSFbSlq06tikXeR5yjM.roa (hash: bTeAPWMnuRlE1iuV8G+ltD+aKezdlcucu0xXk0jbOXQ=) 8: a6Erf_tnT8pMndq3WnrW7H4B990.roa (hash: 9x4c63CxJ5UoigQePJxkpntm40rkErQOAY2jQ4vUfMc=) 9: bsp6BDSIWkrxR6u3xicw9RBKbtM.roa (hash: KBNbBNVVMKDz24iMEiDHeH6Ud37u/sKie2hM0HuZtdo=) 10: flbEyQC4Je2o45JHPaZs38scw3M.roa (hash: C5EnxoY1f75kHw5DfJypo3Zs8chAySL0y9StdKnIiY8=) 11: gCJ11xRpXYuuTIBFGGCZMoDz4zU.roa (hash: 2ejthbbSiGWzvnDRD4RyBPTLsVVX1AibHnvI5hPXIK0=) 12: knLrELnamRbYKI_hmZ4VPtqQHec.roa (hash: KpZhnOp+uvDR1vqjA12HnP6hCAQUJOuMRCA2L33u3s8=) 13: qFHjepGd1W1NeOB2M_HnT_9NnkI.roa (hash: qeCuA+kLoBoYh5DPSa7sfbtMwdjrN2PNoIXoYyFRFww=) 14: rPTkfN1rgRyIfayPkg0QiFD8BqY.roa (hash: z1iu4KCEExKtTbmnPgeoKnKyyRCZUHHcWmuMUjgjDto=) 15: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: EnyrUMqGw1AAL5YzWHEOGx4Eufh/mLK1SZ4xiemprqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 16:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:3b:2f:ee:9d:dc:33:d4:d2:2d:21:24:25:8a:76:5c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Mar 29 20:01:30 2026 GMT Not After : Mar 30 20:01:30 2026 GMT Subject: CN=15812f4adf1ba6e8f7072047f8e8916121c81b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:f2:77:4e:df:0a:44:f2:dc:83:dd:75:a7: 44:37:f1:fa:29:63:bd:d8:16:f0:6e:e5:d2:41:b4: a1:3a:30:a3:d6:98:6c:81:20:a4:00:9e:39:8e:be: c1:83:52:c4:be:ec:d7:7a:45:d8:d1:b0:c0:b5:15: 59:1e:7b:a6:2a:3f:1f:ae:c4:c7:62:ac:ea:cb:0f: 1f:3f:6a:06:86:13:6b:fb:b9:21:f1:e4:b7:ac:50: 8d:3a:c2:4e:50:ad:b1:f3:67:2e:f3:b8:d7:17:fd: 98:d2:57:69:d6:52:a5:c2:12:5f:d8:8f:e6:75:c8: 23:c6:1e:fa:a2:2e:b2:95:f1:ce:09:66:c8:ec:cd: 74:49:7c:f0:35:ab:6b:48:4f:fc:c4:34:d9:70:0d: 83:e9:b8:ff:9d:32:20:c1:47:eb:4a:28:92:b4:b1: cb:0b:6c:db:b3:3b:72:4f:db:e5:8a:cf:bf:c3:0f: 87:ec:4a:15:4d:29:b7:bf:b6:3f:5b:c1:e6:af:c2: 3c:df:5f:c2:35:b7:91:08:ab:a4:49:08:44:e5:e5: a2:f4:21:d0:3b:25:70:97:e2:00:ec:c1:05:f8:80: d4:f8:2e:fa:4c:e0:26:51:a5:ea:87:0e:02:4b:81: d2:90:c7:fb:df:e7:e6:10:a2:50:83:7f:12:d2:e0: f4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:81:2F:4A:DF:1B:A6:E8:F7:07:20:47:F8:E8:91:61:21:C8:1B:36 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:80:31:3f:58:67:5e:0a:51:1c:44:e0:2e:42:cc:cb:55:9e: b1:60:07:88:5a:ee:8c:48:2c:2c:66:fd:be:e8:ca:5e:c5:d9: 0a:ca:fb:2c:21:97:06:be:60:47:31:27:55:e1:60:52:21:0c: 35:68:4c:29:46:a0:62:da:a4:18:38:29:77:c4:eb:6f:32:91: 3d:35:96:a8:e7:0e:17:aa:f3:bb:17:05:78:67:95:c5:86:b5: 26:5a:3b:ea:43:3c:49:32:4b:f8:d2:da:cf:09:37:75:c6:41: 7f:5d:22:77:c7:cf:81:06:82:12:4b:a7:f5:77:ec:e4:86:21: 83:e1:6d:23:4e:52:02:74:3b:71:53:17:2b:86:e3:b6:70:b8: 31:93:36:5b:b9:81:93:85:be:d1:eb:84:6d:45:e9:45:f3:fa: c3:88:f7:d0:af:5f:68:12:8a:7c:27:8f:c3:2a:1f:78:1e:b8: 9b:ec:15:b4:92:44:8a:f0:2a:58:1f:84:e4:a9:c6:3d:b3:78: 33:0f:5a:de:29:00:e0:0c:21:bd:0f:2b:48:43:17:c3:58:ab: dc:cc:c5:e7:2d:5c:bf:c4:6e:e2:b7:ba:be:be:a9:d2:dc:22: 3c:f5:08:a3:43:2b:66:62:db:d5:61:68:e8:64:d2:62:33:7e: 42:25:06:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ07L+6d3DPU0i0hJCWKdlxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwMzI5MjAwMTMwWhcNMjYwMzMwMjAwMTMwWjAzMTEwLwYDVQQD EygxNTgxMmY0YWRmMWJhNmU4ZjcwNzIwNDdmOGU4OTE2MTIxYzgxYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbXyd07fCkTy3IPddadEN/H6KWO9 2BbwbuXSQbShOjCj1phsgSCkAJ45jr7Bg1LEvuzXekXY0bDAtRVZHnumKj8frsTH Yqzqyw8fP2oGhhNr+7kh8eS3rFCNOsJOUK2x82cu87jXF/2Y0ldp1lKlwhJf2I/m dcgjxh76oi6ylfHOCWbI7M10SXzwNatrSE/8xDTZcA2D6bj/nTIgwUfrSiiStLHL C2zbsztyT9vlis+/ww+H7EoVTSm3v7Y/W8Hmr8I831/CNbeRCKukSQhE5eWi9CHQ OyVwl+IA7MEF+IDU+C76TOAmUaXqhw4CS4HSkMf73+fmEKJQg38S0uD0jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWBL0rfG6bo9wcgR/jokWEhyBs2MB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIAxP1hn XgpRHETgLkLMy1WesWAHiFrujEgsLGb9vujKXsXZCsr7LCGXBr5gRzEnVeFgUiEM NWhMKUagYtqkGDgpd8TrbzKRPTWWqOcOF6rzuxcFeGeVxYa1Jlo76kM8STJL+NLa zwk3dcZBf10id8fPgQaCEkun9Xfs5IYhg+FtI05SAnQ7cVMXK4bjtnC4MZM2W7mB k4W+0euEbUXpRfP6w4j30K9faBKKfCePwyofeB64m+wVtJJEivAqWB+E5KnGPbN4 Mw9a3ikA4AwhvQ8rSEMXw1ir3MzF5y1cv8Ru4re6vr6p0twiPPUIo0MrZmLb1WFo 6GTSYjN+QiUG4Q== -----END CERTIFICATE-----Generated at Sun Mar 29 23:43:14 2026 by rpki-client