$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: NAtl3I4w8nqFNgLxba/bzCp3S+uOEFvInqZP+EO4b1c= Subject key identifier: ED:5F:65:CE:DE:F9:03:EB:F1:29:A4:B2:9D:5B:B2:7C:3E:74:CB:DC Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 019D37C0BECA645E7983FB0031F73B5EB2B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 1087 Signing time: Sun 29 Mar 2026 04:01:11 +0000 Manifest this update: Sun 29 Mar 2026 04:01:11 +0000 Manifest next update: Mon 30 Mar 2026 04:01:11 +0000 Files and hashes: 1: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (hash: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8=) 2: 8lzOqg36QfNkeg8Q6Az_2mhb-pY.roa (hash: W0oPaRSAv7Mlqt/bxzWLXb0GBYOFj3ar/XeEXfhCbx8=) 3: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (hash: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik=) 4: iy1Tvz9vWB_OyKw6kX0SPKuwaMg.roa (hash: f91SOkfNEhx8xn/tAVUdyzoJrhGRQTUbnnTsdxKuQ64=) 5: qI_-6h3iudeXwj_KCEW7jVNBeSs.roa (hash: VCf8NA7/YCd9pNMoP3NeZ5lHDYrKSJzJ143pwqaxHAQ=) 6: t636B7CqAadftoFod7ybUNJhQPo.roa (hash: 181NFYC4u/sBirqlh2IrjbcRctznL7BS4orIUETkT5g=) 7: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: WBo9q0Fl6kxZwdAhiycENCN99kfqAR9k9N1vy6r4F4I=) 8: ws_lvviOWiUn6-n1_mvWXNHp31I.roa (hash: 3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=) 9: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (hash: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE=) 10: z-6izIL2te2yW3BZT-W-LC6HIiI.roa (hash: g0guTuEhCvQ3u37wIf97G7PMhPvKG3UAOrfC4DGjbl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:c0:be:ca:64:5e:79:83:fb:00:31:f7:3b:5e:b2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Mar 29 04:01:11 2026 GMT Not After : Mar 30 04:01:11 2026 GMT Subject: CN=ed5f65cedef903ebf129a4b29d5bb27c3e74cbdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bf:18:6f:b1:44:00:20:e6:75:eb:01:5a:4e: 38:af:54:5e:e8:39:d3:35:2a:db:38:7c:16:94:c7: 9e:f5:a6:04:39:34:0b:21:85:ad:2a:8a:da:0f:28: 0b:db:d3:1e:9b:fa:c9:07:6c:25:d2:47:c9:d4:61: c9:26:0a:9a:05:79:f9:04:d2:27:87:53:fe:20:8b: 7c:b1:b9:9f:c8:54:0a:6c:0a:63:54:9e:4e:ef:70: 8f:0f:a3:09:5c:04:7a:26:d4:c6:8a:55:63:af:6e: 34:32:5a:c9:0f:97:f3:c7:64:f8:73:cf:0c:8e:8a: c3:48:29:dd:c0:7f:32:90:bc:9a:4a:f1:af:ee:42: e2:ca:26:5c:fd:d0:c6:e0:5c:c4:99:79:63:0a:4f: 8c:c6:6d:18:4c:90:a9:9e:ba:b1:1a:f0:49:aa:a7: 6d:aa:62:5a:51:5f:80:9b:77:4d:74:23:cc:9c:6e: 64:da:84:2d:e5:13:3f:08:51:ba:2e:49:3b:38:8f: 47:4f:39:4a:c6:b1:d5:3a:b8:34:f3:01:bc:90:aa: 6b:26:c5:9a:4b:14:50:44:9b:0a:9d:bb:52:b3:77: 54:51:ae:01:02:e2:5d:ae:fd:e8:9c:f4:51:f9:b9: e4:56:e1:02:8c:f9:05:45:a2:4c:2d:af:d5:fe:1a: b8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5F:65:CE:DE:F9:03:EB:F1:29:A4:B2:9D:5B:B2:7C:3E:74:CB:DC X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:14:ad:1e:a7:a4:64:74:c9:0a:81:eb:e4:2d:d1:9f:f0:cc: b4:51:a2:38:1b:74:cc:74:35:b0:cf:d4:c7:1e:52:f9:3e:33: 27:26:8f:d2:42:8b:db:ec:cb:4f:7f:07:63:c7:8d:47:c0:25: 81:b5:ec:f2:e0:25:3c:8e:47:69:bf:13:e8:00:fe:01:b9:dc: f3:78:d1:6b:7b:4b:0b:33:e9:85:c3:6c:5d:e0:c2:04:92:e2: 61:69:fb:ff:5f:d6:6c:27:be:cb:a1:5a:cf:9d:ba:17:bf:60: d0:e9:02:fd:55:ec:b3:91:17:50:b2:18:cc:be:f5:ed:b1:c1: d5:a3:35:8e:d4:41:c2:c3:58:05:dd:87:59:a8:66:cd:13:2e: f1:cc:1f:f5:37:ed:38:3c:75:9b:4d:44:8a:e0:80:6c:8a:75: aa:23:99:82:5c:9a:2e:b0:c9:0e:f2:27:43:52:46:f7:62:a4: 91:e1:dd:83:93:83:1b:a1:09:60:49:99:7e:3f:81:57:d6:e7: 18:95:22:bf:26:e8:d9:40:79:47:39:ca:fd:e8:db:c4:0d:1c: 5e:a0:71:d9:80:3d:bc:db:b4:7c:24:40:9d:83:a3:93:0c:77: cf:1e:4d:5c:c1:1b:b9:dd:09:58:9c:89:e3:15:8c:4a:21:3a: 97:9a:8c:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ03wL7KZF55g/sAMfc7XrKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjYwMzI5MDQwMTExWhcNMjYwMzMwMDQwMTExWjAzMTEwLwYDVQQD EyhlZDVmNjVjZWRlZjkwM2ViZjEyOWE0YjI5ZDViYjI3YzNlNzRjYmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA178Yb7FEACDmdesBWk44r1Re6DnT NSrbOHwWlMee9aYEOTQLIYWtKoraDygL29Mem/rJB2wl0kfJ1GHJJgqaBXn5BNIn h1P+IIt8sbmfyFQKbApjVJ5O73CPD6MJXAR6JtTGilVjr240MlrJD5fzx2T4c88M jorDSCndwH8ykLyaSvGv7kLiyiZc/dDG4FzEmXljCk+Mxm0YTJCpnrqxGvBJqqdt qmJaUV+Am3dNdCPMnG5k2oQt5RM/CFG6Lkk7OI9HTzlKxrHVOrg08wG8kKprJsWa SxRQRJsKnbtSs3dUUa4BAuJdrv3onPRR+bnkVuECjPkFRaJMLa/V/hq4CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1fZc7e+QPr8Smksp1bsnw+dMvcMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxStHqek ZHTJCoHr5C3Rn/DMtFGiOBt0zHQ1sM/Uxx5S+T4zJyaP0kKL2+zLT38HY8eNR8Al gbXs8uAlPI5Hab8T6AD+Abnc83jRa3tLCzPphcNsXeDCBJLiYWn7/1/WbCe+y6Fa z526F79g0OkC/VXss5EXULIYzL717bHB1aM1jtRBwsNYBd2HWahmzRMu8cwf9Tft ODx1m01EiuCAbIp1qiOZglyaLrDJDvInQ1JG92KkkeHdg5ODG6EJYEmZfj+BV9bn GJUivybo2UB5RznK/ejbxA0cXqBx2YA9vNu0fCRAnYOjkwx3zx5NXMEbud0JWJyJ 4xWMSiE6l5qM4Q== -----END CERTIFICATE-----Generated at Sun Mar 29 13:46:35 2026 by rpki-client