$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft File: gfpI9AvIRUDEa9I76bkIl6oYT00.mft (raw, json) Hash identifier: rf+/vxTWWDyHPrTk/vxL/w2VZhXz6lUHa5UUoZ50IgI= Subject key identifier: 6B:7D:F1:90:05:8B:51:EF:BA:64:10:F5:CD:C2:35:30:5F:D6:D2:9E Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 019D39417631B3BAA8F2A8C94E244270D407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft Manifest number: 1794 Signing time: Sun 29 Mar 2026 11:01:24 +0000 Manifest this update: Sun 29 Mar 2026 11:01:24 +0000 Manifest next update: Mon 30 Mar 2026 11:01:24 +0000 Files and hashes: 1: 1-vE35X7cA95yo4co5xI4LRsygqE.roa (hash: GArZfb9HlabGHSj6lQqBP09tmUxt9yZTyafscM2AVng=) 2: 8F-O76TUkmlsiOgCnmM_6nJTd4g.roa (hash: Jg+vMGJ/IvxZ8SnVP3JTyVdc1ply2v1uAg9EFIKmJK4=) 3: FTIPS48Za-3OrX5WFeE1aDhy1I0.roa (hash: JfooxlcoS4oq09eFTznhIKolKx+OEbrJm7ESIobakUg=) 4: Fh-Fpr_uHjcMFD06n24XprpSG1M.roa (hash: FmZcmk95+iBFV9lKN3BmY/9kElMyaU+AZ6vmkOB1orM=) 5: H_-983GgKYxhkkt3nnpQcnHg30Y.roa (hash: Vd3cVl32ciW8wDwlKvX6dteoTksKbjaVlUmvnCCj7EU=) 6: KQlwkPmpk1DLGUyeI2rVK9lNE7E.roa (hash: bwKf8d6A05QgLcfG48aYiSBWbkKSxoVtSdwZtCZpE+U=) 7: Oqt--JM-bQkAEwluYF_VbCJNXBk.roa (hash: qgtHHT2LrCzQJdNXo2JdjcQzzNmHNGHV0c6PUoEL78k=) 8: bCNLowmF60GtTgq9MrPewL3-uQM.roa (hash: 6XTgGY9inLGGmIYKO2xERVTl3h4QMDusQwowddy15I8=) 9: ejTvaV2blN9QenSFLNnrpBZq49g.roa (hash: Y7jff0ticwpNpSgfsyRoCcnLBtZbRBWqW7cbBoyiVCM=) 10: gfpI9AvIRUDEa9I76bkIl6oYT00.crl (hash: 0ebE6+aiC/uFQ673CoaQvLo1TDDeG5SfPHe5FFoQ15A=) 11: nq6pDF5PCk2N9cPjSjfM50wXO9w.roa (hash: G1Ywhcu+WSXWGvbw/G0u1TXbTpmgtQzLkStG8DNuRus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:41:76:31:b3:ba:a8:f2:a8:c9:4e:24:42:70:d4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: Mar 29 11:01:24 2026 GMT Not After : Mar 30 11:01:24 2026 GMT Subject: CN=6b7df190058b51efba6410f5cdc235305fd6d29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:b2:b9:db:a7:99:01:c2:b0:9e:b4:3d:6d: 0d:51:91:bc:af:cf:e4:67:7e:e8:30:de:f3:dc:de: a3:b2:83:bc:cd:80:4e:9c:83:bd:f2:3b:7b:f3:4d: bf:2f:98:09:42:e5:fe:78:c4:f6:63:a8:cb:2a:37: ea:9f:a2:6c:7a:4d:5a:ca:f1:2d:da:73:9c:de:be: fa:42:c4:13:8d:68:04:bd:c7:a2:ac:62:17:12:09: 17:88:ce:1f:52:7e:7b:f3:10:7e:8b:ec:ab:b7:ba: 09:ff:f3:41:21:7f:7d:3d:c5:ae:46:34:b6:d0:58: 62:86:13:6a:47:4d:3e:92:a5:03:3a:4f:e7:18:e9: 0c:94:52:6a:b7:3b:c5:b6:13:31:50:48:44:fa:3c: f5:97:f7:43:5c:78:ec:17:c9:b8:f7:d9:09:05:d5: 89:f8:d5:1e:01:fe:a8:bd:87:6c:f4:c4:96:61:a5: 99:71:e7:91:b8:11:74:f8:50:c2:43:64:52:2c:b1: 57:38:e9:c2:65:61:e9:cd:c3:35:7b:23:68:e6:9c: b3:ae:12:06:8a:3c:18:c2:85:19:23:67:6b:d7:e6: 9a:2d:c3:30:55:6a:6f:1b:e0:3a:dd:5e:5d:a7:75: 8e:67:bf:bf:4b:32:93:00:99:bd:6e:a6:e0:dd:c0: 1f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7D:F1:90:05:8B:51:EF:BA:64:10:F5:CD:C2:35:30:5F:D6:D2:9E X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bd:4b:52:2c:ec:31:84:79:83:9c:92:51:fd:72:7e:a3:46: b2:83:a9:13:51:7b:3f:cc:d6:b6:ba:48:28:a6:4d:44:cc:65: 28:6b:a8:fb:4d:ea:cf:2e:40:0b:85:43:c9:92:05:89:ca:e3: 93:14:d0:cf:24:03:4b:0e:b5:40:6f:cc:23:76:ea:f0:31:2f: 55:e2:1f:d3:1b:af:be:d5:1a:c0:37:b0:a9:63:ea:65:20:94: 6e:10:cb:95:99:63:55:42:ed:76:fb:45:87:02:14:8c:d0:ae: 9a:cb:56:0c:cd:cf:8c:fb:6d:2d:74:b0:af:8c:59:12:d6:6e: 1d:d9:dd:02:9c:24:3e:ba:71:45:c3:11:26:88:45:f2:cb:b9: 9f:29:f2:fb:c0:60:ff:64:e8:86:b0:d1:7d:55:5e:d6:49:09: 8f:4b:50:f9:b9:1c:a8:c3:a0:39:b2:d4:a0:11:a9:9e:14:57: ed:d9:b4:88:eb:ca:1b:56:60:d4:b9:3e:39:30:fe:0d:87:60: 3f:d1:cd:0f:90:04:43:4a:1d:20:dd:79:3d:aa:19:37:fe:db: e3:03:c1:a7:9b:be:42:0b:dc:7b:31:c9:6c:c3:36:c0:18:69: e2:85:6c:e0:ef:e8:71:4a:e2:67:f2:86:aa:0a:e5:65:07:5a: a7:0e:c1:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05QXYxs7qo8qjJTiRCcNQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjYwMzI5MTEwMTI0WhcNMjYwMzMwMTEwMTI0WjAzMTEwLwYDVQQD Eyg2YjdkZjE5MDA1OGI1MWVmYmE2NDEwZjVjZGMyMzUzMDVmZDZkMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a+yudunmQHCsJ60PW0NUZG8r8/k Z37oMN7z3N6jsoO8zYBOnIO98jt7802/L5gJQuX+eMT2Y6jLKjfqn6Jsek1ayvEt 2nOc3r76QsQTjWgEvceirGIXEgkXiM4fUn578xB+i+yrt7oJ//NBIX99PcWuRjS2 0FhihhNqR00+kqUDOk/nGOkMlFJqtzvFthMxUEhE+jz1l/dDXHjsF8m499kJBdWJ +NUeAf6ovYds9MSWYaWZceeRuBF0+FDCQ2RSLLFXOOnCZWHpzcM1eyNo5pyzrhIG ijwYwoUZI2dr1+aaLcMwVWpvG+A63V5dp3WOZ7+/SzKTAJm9bqbg3cAfOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGt98ZAFi1HvumQQ9c3CNTBf1tKeMB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjb1LUizs MYR5g5ySUf1yfqNGsoOpE1F7P8zWtrpIKKZNRMxlKGuo+03qzy5AC4VDyZIFicrj kxTQzyQDSw61QG/MI3bq8DEvVeIf0xuvvtUawDewqWPqZSCUbhDLlZljVULtdvtF hwIUjNCumstWDM3PjPttLXSwr4xZEtZuHdndApwkPrpxRcMRJohF8su5nyny+8Bg /2TohrDRfVVe1kkJj0tQ+bkcqMOgObLUoBGpnhRX7dm0iOvKG1Zg1Lk+OTD+DYdg P9HND5AEQ0odIN15PaoZN/7b4wPBp5u+QgvcezHJbMM2wBhp4oVs4O/ocUriZ/KG qgrlZQdapw7BkQ== -----END CERTIFICATE-----Generated at Sun Mar 29 12:53:04 2026 by rpki-client