$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json) Hash identifier: 9i5dY761e5RTcay+EL64WFyoELdKlO8gzOVO5MiKMZE= Subject key identifier: 37:2B:09:3D:F5:75:BD:FE:C0:23:41:29:D8:92:A5:50:98:88:E6:A8 Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Certificate serial: 019D1F4B08608224B2B9ABAE0F0B390EBAA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft Manifest number: 1905 Signing time: Tue 24 Mar 2026 10:01:44 +0000 Manifest this update: Tue 24 Mar 2026 10:01:44 +0000 Manifest next update: Wed 25 Mar 2026 10:01:44 +0000 Files and hashes: 1: 5OGPGzofiEFa09GnFOAn5hhvk48.roa (hash: h2LTT9rBOO/bxXO9EO5NFwg/fB9HG26CM4uymezMPKI=) 2: HzkOKarS86MDQLlSBspsfYKZtUY.roa (hash: dF5VOyKP9r0Ab/BEFUBb+lquv8b+vxHoc9l8zjdlwMM=) 3: IPMiCKDGg-4bycZ4wSrvvc3HolI.roa (hash: Up0dPWNya84ceqWIOnzBSjlOj2l1pRl6VXrPutXxbZ4=) 4: OyXa5XHUgsJSBsdbc3Qrhq4QU1Y.roa (hash: Gyfd0tsIEQsaZgvjHA4zwq5b2ZqvTwYd6Np55tiRmHQ=) 5: P_IQf465IziNUba5nDDuA9mYb2E.roa (hash: NtF/MIHSktYf3HQG++BY9SW33um7HsSxglhUDmVhaCg=) 6: THhHEbJLNflyjg0CGgDKLOWHmNw.roa (hash: hE5im+TYFFs2d+KHjtsfg9PpKV6WFy0Jtd49aeuY6Po=) 7: e7Lvz7EuGDsmNFIhRbwvynj9xTY.asa (hash: ns2I70ZkX4z8+mK5f+FUnkH52JTj0mfI9C5qd0rPQ1g=) 8: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: ILxbDU9dz8E84jMPs3y+CKeFPPLVrXg4MZXcgF/ECig=) 9: vREpqPygKpqEUBRK1WP9YRnHT1U.roa (hash: aIOz9LGkgfShAFeGoLvJK3zSpzEcpe5gJpmAOuZIS1I=) 10: xbEhOdTGtK79EP0Hua6zp2g53GY.roa (hash: UhufiohNKNchaGiqQq0NBGvPLk1S1fa3tNlXBIgXEyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 25 Mar 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:1f:4b:08:60:82:24:b2:b9:ab:ae:0f:0b:39:0e:ba:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Validity Not Before: Mar 24 10:01:44 2026 GMT Not After : Mar 25 10:01:44 2026 GMT Subject: CN=372b093df575bdfec0234129d892a5509888e6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ce:13:0d:83:80:04:27:17:9a:cf:bf:95:f0: e9:4b:08:79:77:5a:43:5c:3e:e3:17:50:39:fa:26: 23:36:1c:3d:7c:1a:e2:4d:7a:38:84:31:c3:36:4e: 83:cc:2a:b4:61:80:ac:eb:43:a7:5f:4b:95:ca:33: ca:dc:a7:bb:fb:0b:1b:ac:d0:a9:97:1f:d8:a4:66: df:01:41:f0:53:73:70:91:86:d3:e4:f7:0b:4e:ba: 66:c9:82:d2:fe:90:8f:13:60:f0:bb:df:75:ab:df: 1d:87:c5:5a:6d:20:82:89:22:c5:44:7e:ff:67:8e: 6a:c9:d6:3d:66:e0:f6:e2:4b:7d:b6:30:c2:f3:fe: f7:ac:b3:74:69:6e:f8:11:11:9a:b0:53:2a:ac:f5: 33:92:bf:8d:d9:5c:5a:19:9b:1f:78:bc:8f:2d:d3: d3:10:a4:2f:53:68:a5:ce:bd:b8:bb:b3:4a:96:40: 0a:a2:28:47:0a:df:dc:03:e5:f4:14:2b:ed:7c:ff: 8d:27:75:36:af:f5:81:ea:fa:0c:3f:c7:8c:43:3f: a6:02:ca:91:2c:de:ba:45:4f:86:c3:38:95:2e:a2: 3d:d1:c9:95:e3:c4:73:2f:ee:f4:fa:a0:f2:f6:23: ee:14:f6:d4:ad:96:eb:ce:76:3d:d3:63:b1:c2:d1: 1c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2B:09:3D:F5:75:BD:FE:C0:23:41:29:D8:92:A5:50:98:88:E6:A8 X509v3 Authority Key Identifier: keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:3a:c5:97:5f:f1:bb:e8:c8:fe:ea:d2:76:30:e5:b4:9b:7a: 96:62:b4:3f:a0:d3:80:14:b3:86:cc:df:fc:f8:c1:c7:e4:e7: 28:52:4f:f2:02:5d:0f:df:2a:d3:e7:81:74:de:66:85:d6:d6: 8a:ef:a5:f5:71:09:8e:91:80:d5:63:63:e6:44:32:bd:55:a9: dc:ac:ac:a0:8a:9e:90:77:58:87:96:26:90:1f:6b:49:d3:1d: 57:59:0a:1f:b3:b0:c0:46:9a:c0:12:1b:c5:d7:e1:c5:ab:62: 41:3a:b6:e3:5b:6c:be:48:2a:06:cd:b7:79:52:42:d7:40:39: 5d:9f:67:6b:9e:34:54:f5:0e:4c:5a:e5:af:25:a1:c1:47:84: 99:61:61:a3:ce:e1:91:e9:4e:8d:fb:b8:39:11:e3:32:49:ac: 3d:57:38:e5:62:64:a3:bf:5b:43:13:62:11:21:d1:49:a0:63: 29:94:f6:39:41:f8:4c:e4:3c:75:28:0b:80:11:06:e7:e3:27: 9c:fa:47:a7:d3:50:5f:18:89:dc:f1:45:6d:8e:55:16:eb:43: 71:28:05:a8:20:a0:d4:16:98:0c:8d:b6:48:30:e0:93:c1:4b: 9e:dd:3b:b9:e0:70:b7:92:37:03:77:03:a8:54:03:45:2e:7a: 32:9a:37:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0fSwhggiSyuauuDws5DrqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5 N2I5ZDAwHhcNMjYwMzI0MTAwMTQ0WhcNMjYwMzI1MTAwMTQ0WjAzMTEwLwYDVQQD EygzNzJiMDkzZGY1NzViZGZlYzAyMzQxMjlkODkyYTU1MDk4ODhlNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz84TDYOABCcXms+/lfDpSwh5d1pD XD7jF1A5+iYjNhw9fBriTXo4hDHDNk6DzCq0YYCs60OnX0uVyjPK3Ke7+wsbrNCp lx/YpGbfAUHwU3NwkYbT5PcLTrpmyYLS/pCPE2Dwu991q98dh8VabSCCiSLFRH7/ Z45qydY9ZuD24kt9tjDC8/73rLN0aW74ERGasFMqrPUzkr+N2VxaGZsfeLyPLdPT EKQvU2ilzr24u7NKlkAKoihHCt/cA+X0FCvtfP+NJ3U2r/WB6voMP8eMQz+mAsqR LN66RU+GwziVLqI90cmV48RzL+70+qDy9iPuFPbUrZbrznY902OxwtEc2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcrCT31db3+wCNBKdiSpVCYiOaoMB8GA1UdIwQY MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt NzU1MTgwOWNiNzMxLzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczrFl1/x u+jI/urSdjDltJt6lmK0P6DTgBSzhszf/PjBx+TnKFJP8gJdD98q0+eBdN5mhdbW iu+l9XEJjpGA1WNj5kQyvVWp3KysoIqekHdYh5YmkB9rSdMdV1kKH7OwwEaawBIb xdfhxatiQTq241tsvkgqBs23eVJC10A5XZ9na540VPUOTFrlryWhwUeEmWFho87h kelOjfu4ORHjMkmsPVc45WJko79bQxNiESHRSaBjKZT2OUH4TOQ8dSgLgBEG5+Mn nPpHp9NQXxiJ3PFFbY5VFutDcSgFqCCg1BaYDI22SDDgk8FLnt07ueBwt5I3A3cD qFQDRS56Mpo3Kw== -----END CERTIFICATE-----Generated at Tue Mar 24 18:17:31 2026 by rpki-client