$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json) Hash identifier: H5dKCHleylCDeSOTTrMKX+oIsKWYlzlqvMaCls6qGL4= Subject key identifier: 16:96:51:B3:BA:EF:1C:7C:7E:44:94:6A:9B:99:70:33:55:1C:76:BC Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019D1980227E7C196C1F328FF073339192F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft Manifest number: 188D Signing time: Mon 23 Mar 2026 07:02:00 +0000 Manifest this update: Mon 23 Mar 2026 07:02:00 +0000 Manifest next update: Tue 24 Mar 2026 07:02:00 +0000 Files and hashes: 1: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: E/w7fg4X85CjwWnguQM1qBj0U4kGjzDtPBfluquSfXM=) 2: B2_FH3MtZlTaOE61buYvXBJKW2E.roa (hash: 55aVAj571Q8/h0HvcQ8YQch6oVhSxMht9hvb0pWG9xs=) 3: EEeXG249QHXtZie6S6hEWpfPs0c.roa (hash: j08Df977nprNp/2GNZ8F6Ri2LTHGQNefm3+Va3aCg1U=) 4: MGuxpogPtwMAFTldHDnEUIBskKY.roa (hash: aRVSa83OdI8eRXcO3WQLPs6YeURGIYliffVNH5moLlY=) 5: OKgmTupzmnhPk0hOIeK3giJ9QaM.roa (hash: vJ5CbfHEFcPbyEC4jXFH5FpTTJogOrELHCnjQEMwhv0=) 6: UuScKKPZU-rxDshW6inBZKRJIH0.roa (hash: oIb88lrmIIDaodPcRGV8PcCWp69cVR7+uTDhUXF8D0A=) 7: ZW_uWUofk0PVk5ZvUH4CXwMQf9k.roa (hash: nMPGS72S0ymOk8yKU1XMgfQYFC4FprUwCeSnvYRogMM=) 8: g_sMt-IMPWFoRArZv0JnssQdxVE.roa (hash: i/F8rrQv+RNHw3Z6W9+3AF4oOHslAP0uqvWz8gg4Un0=) 9: tNc2jSWdykqlG-PkB4v9MVhio4k.roa (hash: k9a+KYr8wPbQKXd8Zqw2THkgTe3lauXtnm8eqnhZ3Nk=) 10: yn0AIXSmQUy2ZdVLfREbNPEMx98.roa (hash: 0/gDR8MJ30pXw1A6bmuJms9g1333tYlKxF2lIJS3jtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 24 Mar 2026 07:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:19:80:22:7e:7c:19:6c:1f:32:8f:f0:73:33:91:92:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Mar 23 07:02:00 2026 GMT Not After : Mar 24 07:02:00 2026 GMT Subject: CN=169651b3baef1c7c7e44946a9b997033551c76bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:34:c8:7d:b7:d3:07:21:4d:51:4d:a7:f9:22: ea:7f:f5:eb:81:03:30:1f:d6:f3:75:40:f8:9c:bc: d6:f1:d9:a9:a1:34:1b:79:d7:ff:2b:35:48:a4:bb: b7:96:af:66:83:f1:54:49:3c:c7:95:62:fe:7b:9e: 44:46:41:e2:ed:c6:bc:62:2a:d5:52:0d:80:bc:f4: 6c:fe:b0:d4:94:ae:31:8d:db:93:fb:50:31:27:63: 52:a2:a9:b3:3c:99:b9:8f:4e:77:e1:26:cb:5c:ea: 62:64:f7:c2:6b:a5:84:0a:b9:15:77:26:03:da:69: e8:5e:89:9d:5a:b3:5f:7e:f7:49:5d:49:a5:fe:c8: 23:9b:15:3f:e6:b5:60:49:bc:7c:6a:dc:c0:f6:48: dc:2c:47:0a:aa:6e:2a:f8:12:ae:28:ef:51:12:4a: ae:5f:a5:67:6b:28:c3:66:a4:b4:4a:67:72:f9:ff: dd:43:13:32:50:5a:c2:bc:17:eb:49:a0:3b:42:99: bc:36:df:c1:85:0e:1b:a7:b8:46:81:0f:6b:72:b0: 43:61:8b:41:5d:40:e6:25:65:5e:ab:d3:af:b0:ea: e2:4d:ed:8c:9a:b9:88:cb:22:e0:af:80:00:8d:50: e7:09:f5:d0:82:a4:5e:d5:f9:62:68:4c:5a:c7:bc: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:96:51:B3:BA:EF:1C:7C:7E:44:94:6A:9B:99:70:33:55:1C:76:BC X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d3:09:e8:72:dd:74:9f:75:df:d6:09:8c:de:51:b3:f6:61: e3:72:18:08:e6:93:f9:b9:15:41:ad:3f:6d:92:97:8e:20:99: 8f:9c:ff:a1:3c:21:32:c6:2a:9d:61:16:81:3e:e2:69:06:07: 2e:55:f6:d4:ce:48:6f:cf:64:41:7f:73:f6:a2:1d:4b:21:79: 86:b4:09:76:c8:ec:dd:8b:1d:30:ca:ce:7c:97:2d:b5:0e:7f: ad:2b:43:e9:fc:e5:ea:6e:72:8e:13:c6:b0:79:7c:1a:76:f9: 59:a3:4b:ae:7d:4c:ea:65:8d:3a:b9:79:4c:4b:7e:d2:7d:22: c5:51:fd:0d:2e:82:bf:ed:a0:36:9e:77:77:ad:93:8f:ba:d6: 63:f3:e1:1d:e8:f4:fa:85:21:0d:ff:03:dd:92:e5:38:a2:e8: 1a:ea:ac:36:06:6f:15:85:00:fc:6c:ed:48:2a:b9:c6:5a:b1: a3:f9:f6:24:59:d4:62:39:3e:d8:7c:eb:7a:f0:42:1c:dc:23: e4:da:de:fc:a2:4d:e3:9e:95:b8:1e:ea:24:6d:cf:a3:b4:d2: 67:65:dd:f7:07:28:d4:a3:fc:28:d1:15:95:4c:da:09:d0:97: 24:a2:99:83:5a:c1:ed:b5:ee:d4:4e:7d:30:eb:57:83:99:16: 85:70:ae:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ZgCJ+fBlsHzKP8HMzkZLzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjYwMzIzMDcwMjAwWhcNMjYwMzI0MDcwMjAwWjAzMTEwLwYDVQQD EygxNjk2NTFiM2JhZWYxYzdjN2U0NDk0NmE5Yjk5NzAzMzU1MWM3NmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DTIfbfTByFNUU2n+SLqf/XrgQMw H9bzdUD4nLzW8dmpoTQbedf/KzVIpLu3lq9mg/FUSTzHlWL+e55ERkHi7ca8YirV Ug2AvPRs/rDUlK4xjduT+1AxJ2NSoqmzPJm5j0534SbLXOpiZPfCa6WECrkVdyYD 2mnoXomdWrNffvdJXUml/sgjmxU/5rVgSbx8atzA9kjcLEcKqm4q+BKuKO9REkqu X6VnayjDZqS0Smdy+f/dQxMyUFrCvBfrSaA7Qpm8Nt/BhQ4bp7hGgQ9rcrBDYYtB XUDmJWVeq9OvsOriTe2MmrmIyyLgr4AAjVDnCfXQgqRe1fliaExax7wGowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaWUbO67xx8fkSUapuZcDNVHHa8MB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9MJ6HLd dJ9139YJjN5Rs/Zh43IYCOaT+bkVQa0/bZKXjiCZj5z/oTwhMsYqnWEWgT7iaQYH LlX21M5Ib89kQX9z9qIdSyF5hrQJdsjs3YsdMMrOfJcttQ5/rStD6fzl6m5yjhPG sHl8Gnb5WaNLrn1M6mWNOrl5TEt+0n0ixVH9DS6Cv+2gNp53d62Tj7rWY/PhHej0 +oUhDf8D3ZLlOKLoGuqsNgZvFYUA/GztSCq5xlqxo/n2JFnUYjk+2HzrevBCHNwj 5Nre/KJN456VuB7qJG3Po7TSZ2Xd9wco1KP8KNEVlUzaCdCXJKKZg1rB7bXu1E59 MOtXg5kWhXCuBQ== -----END CERTIFICATE-----Generated at Mon Mar 23 11:46:31 2026 by rpki-client