$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: PxmDiYxcyQxnNhbhm9B41YmUsxAevvs6SBeK11WEYj4= Subject key identifier: 0B:2D:4C:2E:25:70:74:46:A8:67:B5:97:39:1B:CB:94:1E:B6:FF:6D Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019D367761722592467D708F3782197AA555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0CCF Signing time: Sat 28 Mar 2026 22:01:26 +0000 Manifest this update: Sat 28 Mar 2026 22:01:26 +0000 Manifest next update: Sun 29 Mar 2026 22:01:26 +0000 Files and hashes: 1: 7Y5_pXpXkGXQz6r3Ag8VuuKYS-E.roa (hash: PcU8D+QmugZnXWhyt6suY1+91eR4RbUDaup9F17x2j0=) 2: DBuCDMr-eMpkAR_hikUInL2urKQ.roa (hash: kBMh2uve9H6ZGJ+wBBoi4Snq4VxIhSy8cm7vuFkDv3U=) 3: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: 5nVzsmleH5QuKJe1cGpH+4qnI0lHByM21XSq2PIp2io=) 4: K5IYR-8yKQNbaVCfxNruHxfgy8M.roa (hash: k9/AfvQ6thbh49E8qXhYlNeBQ66bqOlH2PyeFk773uY=) 5: S6miaNucSa6NeEC_GGS4tq2izFo.roa (hash: 8+03nZylwUV80dXnpI8qfIF5rMZUoFiALmnLIt2o7b8=) 6: SMhGdBkdywnevpYEWhKr1IzaM4M.roa (hash: m3kf4ZVSNKzUhBPVSBlYDUaNyUcw0siodBs/T4U83BA=) 7: gPl4qnviZ8X01lQ5Z0ysSwANF8I.roa (hash: 3PftaD58PWAe1nqPJMST42Vt40zBG+AVvzxMfB6cylU=) 8: iVDK6PCtMfpuZKgZWoFycnHMVRw.roa (hash: GeJfT/LpcdK0hbYcqcrlMnAuUaNLyo2x8WoLR5cuzUY=) 9: ohLWgfGRLPEKw04h0DLfOIlNhog.roa (hash: K98aaZcn2W9HA9Zia29dMsLJX/i+ewGU4FK1Pvj0Z10=) 10: w9-s1rg8ZZyOOyxtduxCw6s1Z18.roa (hash: SjJ+kgcVTjrARPsmt0o25UIbqtkMvNHn5HJI2G5k1Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:36:77:61:72:25:92:46:7d:70:8f:37:82:19:7a:a5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Mar 28 22:01:26 2026 GMT Not After : Mar 29 22:01:26 2026 GMT Subject: CN=0b2d4c2e25707446a867b597391bcb941eb6ff6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a1:8b:10:5c:60:ff:c7:d1:24:e0:ac:28:91: c0:e3:79:d4:4d:9a:50:75:14:cc:e1:16:4f:a4:f0: bc:00:af:a7:73:09:9b:71:62:15:3f:30:a4:83:7f: 62:82:d8:cc:ce:2a:80:19:e3:60:94:d6:e1:df:b3: 0e:cf:fc:d4:43:87:22:6b:a6:d8:83:b8:7a:0b:0b: 98:c3:f6:d7:48:4e:b6:9f:87:ff:3d:de:6d:84:f3: db:0b:1b:a3:bc:96:ad:aa:dc:95:da:cd:84:c1:e6: 28:a9:fe:a7:57:7a:0e:eb:35:33:b8:e4:3e:a1:89: ce:10:95:49:4a:d5:cd:48:c6:9b:73:8e:2d:ef:1e: b2:1c:56:31:db:27:17:6b:4a:e3:0b:dd:53:dd:9a: 86:2c:6b:a2:f5:73:49:bd:ab:eb:6d:6d:f8:06:cf: 67:08:a9:4a:2a:14:3c:5b:00:36:7a:78:7f:75:f7: 11:6b:c9:19:c0:db:48:b8:b1:70:a4:04:8b:94:a3: 60:a4:6e:aa:e9:94:b0:98:89:ce:b4:d9:8d:8c:64: ad:60:4c:19:a5:08:1b:8c:61:57:6e:a5:f0:1b:0c: ad:9f:ca:80:a7:2c:a4:b2:47:b1:a4:61:c9:c1:62: 2d:88:7e:ed:25:e4:90:be:43:49:0f:d2:3e:d7:f2: 45:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2D:4C:2E:25:70:74:46:A8:67:B5:97:39:1B:CB:94:1E:B6:FF:6D X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:1c:f7:15:e4:f3:ce:2c:74:0c:fb:0c:e1:c2:50:e5:57:5a: d1:5c:aa:e2:25:58:5c:7c:46:a4:dc:ea:8a:26:bd:f2:e7:44: f1:86:27:2d:83:09:db:c2:db:3a:02:48:7a:c4:31:84:5c:97: 69:e2:d2:1e:f0:a1:c5:30:e9:2b:54:95:83:8a:f5:09:bb:65: 16:27:8b:0b:73:56:42:0a:3d:3c:11:b1:b5:d9:92:80:38:d6: d5:fb:c0:44:d7:dc:3f:5f:14:a1:94:dc:9b:95:58:d2:32:4d: f0:fd:cd:75:4e:3d:5d:43:ba:c1:1b:4a:ce:b3:56:2f:41:8f: a7:66:e6:d0:9b:b3:04:77:63:6f:d5:c5:07:89:bc:54:fb:fc: cc:e4:4a:e9:26:aa:97:15:6d:fd:cf:85:ce:09:cf:4f:64:99: 8a:22:b4:bd:26:af:5a:d9:5d:35:5d:c4:92:a5:e3:37:4e:4e: 6d:00:ab:66:92:54:54:34:01:36:3c:1a:27:37:8f:01:4d:eb: 44:4c:c3:33:06:ea:2c:53:0e:64:b1:de:af:db:b1:b2:52:54: a5:95:60:ef:72:c8:d5:aa:8a:fd:39:6e:c8:60:20:27:89:59: 1a:d6:4e:ab:35:a1:c1:f8:52:72:ea:7c:57:51:04:67:af:01: 22:e8:d2:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ02d2FyJZJGfXCPN4IZeqVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjYwMzI4MjIwMTI2WhcNMjYwMzI5MjIwMTI2WjAzMTEwLwYDVQQD EygwYjJkNGMyZTI1NzA3NDQ2YTg2N2I1OTczOTFiY2I5NDFlYjZmZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqGLEFxg/8fRJOCsKJHA43nUTZpQ dRTM4RZPpPC8AK+ncwmbcWIVPzCkg39igtjMziqAGeNglNbh37MOz/zUQ4cia6bY g7h6CwuYw/bXSE62n4f/Pd5thPPbCxujvJatqtyV2s2EweYoqf6nV3oO6zUzuOQ+ oYnOEJVJStXNSMabc44t7x6yHFYx2ycXa0rjC91T3ZqGLGui9XNJvavrbW34Bs9n CKlKKhQ8WwA2enh/dfcRa8kZwNtIuLFwpASLlKNgpG6q6ZSwmInOtNmNjGStYEwZ pQgbjGFXbqXwGwytn8qApyykskexpGHJwWItiH7tJeSQvkNJD9I+1/JF1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAstTC4lcHRGqGe1lzkby5Qetv9tMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBz3FeTz zix0DPsM4cJQ5Vda0Vyq4iVYXHxGpNzqiia98udE8YYnLYMJ28LbOgJIesQxhFyX aeLSHvChxTDpK1SVg4r1CbtlFieLC3NWQgo9PBGxtdmSgDjW1fvARNfcP18UoZTc m5VY0jJN8P3NdU49XUO6wRtKzrNWL0GPp2bm0JuzBHdjb9XFB4m8VPv8zORK6Saq lxVt/c+FzgnPT2SZiiK0vSavWtldNV3EkqXjN05ObQCrZpJUVDQBNjwaJzePAU3r REzDMwbqLFMOZLHer9uxslJUpZVg73LI1aqK/TluyGAgJ4lZGtZOqzWhwfhScup8 V1EEZ68BIujSIA== -----END CERTIFICATE-----Generated at Sun Mar 29 00:29:55 2026 by rpki-client