$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: qGttZheQG/6BXu/TBxWIk8tbqp8tEL2n5rjXTVtvZ5I= Subject key identifier: A1:7F:37:1B:12:72:D2:F4:87:2C:F5:19:22:13:0A:D4:AA:56:AB:95 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019D1835BD11DBD80E007A17251B389A1841 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 190D Signing time: Mon 23 Mar 2026 01:01:08 +0000 Manifest this update: Mon 23 Mar 2026 01:01:08 +0000 Manifest next update: Tue 24 Mar 2026 01:01:08 +0000 Files and hashes: 1: 1-UMvRKVvD5QzsC1RJIFAioK-mEs.roa (hash: cY/EkTeqSslspKNTMCfMPqb7ocfNcYNdxMAXgd+AwHE=) 2: 1-d5kx5qhsdcXTQ6LfdE9sIqb1es.roa (hash: SGIsX6Mvd8sx49+iI/8SLNHNRb2rZpZ8MC5HnpSmZVU=) 3: 1-ujynZWH9--RNNC5_Uk-oM46YWY.roa (hash: Z97zfAIXnGKGU4beYEDjMrYWLoViOMxIYSMPQ34jGYc=) 4: 3yh-cYJ83qkN3q-7nEdcSlIj_20.roa (hash: dzEvA83A9jCVdqMsmWHuaDF5o7orRdQLIGhwCqyVCPI=) 5: 459DwuTQ4u0L5Vb8ymCw0jAhBow.roa (hash: R0D1GwtAzqy7rVtSGPweXeDbIoiclk2OGprKctUsxyE=) 6: 4eivQ2nDLeDdl1fAIHvWW6YvmGo.roa (hash: bAX+3N2k8RlvVykaPe2LmehMRssiIT2G4C0pgs5YX9k=) 7: 5hLk4CzA74yVnJ8R2Lz9mlfqzdI.roa (hash: 5TCFaKhrSo2pvg2qnUOf/Mpxm8y6kaDaGlkmH+sSYm0=) 8: AlXg91UMAygxLeoq_VpzKVSK-zI.roa (hash: eUqHFEnUoHvc5mCAUj3SUrBYfTcyscIn0nZYAYnkeo8=) 9: BxGrV8A6iDDKjqHMu12FNwL2n3Q.roa (hash: pM719+JyUQctGBU4zyYhSazZkgZQIBOvLFuwl/fwC1A=) 10: PrN6TL7TtAeV1Kzfy5uz84FNxCQ.roa (hash: WU2WteFRJR30574R62tbwvUvfmw2wupr5nuVewCjZe8=) 11: ROZhmusy1NDknUF5aPaZGu5NXA4.roa (hash: UAuXcLj79aVhKSKK569wYuvrITgWR3uMrjyjPiEXMnE=) 12: VCCai5hKE4XyQWqFov6fc3xa1aY.roa (hash: 34+FtDd+on4O39KtLYdqjlzggjPjtmx3Bfdph3/yB80=) 13: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: WRnytRmb9IZvo/3Yznv+p2O9hWKyAktErTVi7Enk3Qw=) 14: hCfYHkk0WVWAVNiGnZaMduxS2MM.roa (hash: sHk1k6gDs5FjVUXp9YDHQ14y++c+/P5klSoklKCCrLU=) 15: uWmLk5k2zxERG5iAn6QzDWqDfPs.roa (hash: pll+MttvkQdtFZD9rTubFBhF/TVVXiRM3xiehM6Bwxg=) 16: x--VU7ZbGYFtGJI4ezWE-LDaQNI.roa (hash: zVsZGJ3VSfQ6Ddsl5FH2swWgU1UOjj4mJWMcxek3/Sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 24 Mar 2026 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:18:35:bd:11:db:d8:0e:00:7a:17:25:1b:38:9a:18:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Mar 23 01:01:08 2026 GMT Not After : Mar 24 01:01:08 2026 GMT Subject: CN=a17f371b1272d2f4872cf51922130ad4aa56ab95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:48:69:be:b4:1f:a9:b3:f1:db:e1:27:84:67: 81:a5:b4:52:45:8c:b0:95:24:6b:0c:49:4a:09:a8: 47:4f:2e:d2:94:9f:2d:67:5f:5f:bd:b1:53:38:f4: 9b:4b:7d:91:e1:39:de:39:e1:66:cf:cd:94:78:b6: 88:a0:60:9b:b7:5f:8c:a3:78:eb:eb:5f:00:3f:27: 86:9d:88:8d:53:72:bd:88:d6:dd:e4:92:ad:38:18: 6b:3e:41:bb:7d:38:fb:c3:fd:f7:4f:5f:77:ed:21: 9f:2b:79:24:54:de:d0:79:93:39:5e:ed:dc:44:fc: e0:bf:1b:54:eb:bd:90:eb:90:5a:28:1e:37:00:a9: 01:fb:a1:2b:7a:10:cd:29:02:3a:ff:41:11:d2:7f: 13:eb:ca:b0:8e:84:73:7d:53:13:67:97:c7:0d:47: bf:29:d6:ee:24:d9:fd:10:26:45:7b:5f:33:8d:0e: 66:5c:0e:46:5d:65:41:81:12:20:ea:ca:20:f0:a4: 0b:1c:48:af:8b:dc:f6:27:81:a1:20:a1:b4:21:75: 68:78:a9:62:ad:d4:38:45:f0:dd:aa:22:95:c4:c8: 77:25:87:a9:68:7f:98:67:4e:e5:6b:2b:bd:0e:43: 36:34:f5:76:16:1f:76:88:d3:0d:d7:71:38:7c:c1: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7F:37:1B:12:72:D2:F4:87:2C:F5:19:22:13:0A:D4:AA:56:AB:95 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:54:42:a6:7a:59:25:e3:5e:ed:ad:e9:ce:24:8e:b4:85:37: c6:70:47:4c:a0:1a:5f:e4:f2:a6:bc:94:ed:00:5b:a8:ea:f4: b2:5c:7c:9c:e9:d5:1c:57:5a:b3:c0:ee:bb:00:8a:98:88:b5: 90:64:85:76:d2:b5:17:94:67:d2:0a:aa:10:b4:d6:f7:f8:56: ba:f1:81:5a:ef:92:2d:38:c8:1b:58:70:1e:f8:31:00:72:2e: 78:eb:0c:32:bd:66:6e:12:be:b9:78:91:03:02:03:20:1d:3d: b6:8f:b1:a0:8a:8d:52:3d:b5:48:37:01:f1:87:f3:35:c8:10: 52:a4:45:47:64:ab:25:cf:55:d9:dd:8d:a9:a3:0e:81:5f:a4: 7d:ec:55:2f:14:67:e7:cf:13:91:f2:18:c2:74:7c:63:64:d4: e0:27:53:d1:4e:4e:5d:18:21:e5:05:82:fe:50:df:db:94:63: 9d:52:9a:45:29:30:89:a7:93:b8:7d:dd:f7:d9:a4:b5:ef:cd: 89:f7:c9:7a:dc:c9:3a:75:41:de:75:93:63:0b:d1:ca:d0:86: 8e:3d:9b:ce:15:31:22:e7:b3:fb:43:00:67:32:a3:21:d5:5a: 83:a7:2f:4b:31:cf:fd:41:af:82:64:9d:93:65:d9:a9:44:eb: 8c:3d:d8:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0YNb0R29gOAHoXJRs4mhhBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMzIzMDEwMTA4WhcNMjYwMzI0MDEwMTA4WjAzMTEwLwYDVQQD EyhhMTdmMzcxYjEyNzJkMmY0ODcyY2Y1MTkyMjEzMGFkNGFhNTZhYjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0hpvrQfqbPx2+EnhGeBpbRSRYyw lSRrDElKCahHTy7SlJ8tZ19fvbFTOPSbS32R4TneOeFmz82UeLaIoGCbt1+Mo3jr 618APyeGnYiNU3K9iNbd5JKtOBhrPkG7fTj7w/33T1937SGfK3kkVN7QeZM5Xu3c RPzgvxtU672Q65BaKB43AKkB+6ErehDNKQI6/0ER0n8T68qwjoRzfVMTZ5fHDUe/ KdbuJNn9ECZFe18zjQ5mXA5GXWVBgRIg6sog8KQLHEivi9z2J4GhIKG0IXVoeKli rdQ4RfDdqiKVxMh3JYepaH+YZ07layu9DkM2NPV2Fh92iNMN13E4fMGAWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKF/NxsSctL0hyz1GSITCtSqVquVMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1RCpnpZ JeNe7a3pziSOtIU3xnBHTKAaX+TypryU7QBbqOr0slx8nOnVHFdas8DuuwCKmIi1 kGSFdtK1F5Rn0gqqELTW9/hWuvGBWu+SLTjIG1hwHvgxAHIueOsMMr1mbhK+uXiR AwIDIB09to+xoIqNUj21SDcB8YfzNcgQUqRFR2SrJc9V2d2NqaMOgV+kfexVLxRn 588TkfIYwnR8Y2TU4CdT0U5OXRgh5QWC/lDf25RjnVKaRSkwiaeTuH3d99mkte/N iffJetzJOnVB3nWTYwvRytCGjj2bzhUxIuez+0MAZzKjIdVag6cvSzHP/UGvgmSd k2XZqUTrjD3YWg== -----END CERTIFICATE-----Generated at Mon Mar 23 08:56:06 2026 by rpki-client