$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft File: X-U8C_w8j7VrgRkTFxREQ-DinSU.mft (raw, json) Hash identifier: +M81LQ7XA2OUq5fWoPzNvgbO9o/ar63GfskNNqKCWKk= Subject key identifier: E3:36:15:A7:2A:BE:C8:11:83:C6:87:14:A5:BF:40:95:6F:91:C9:BC Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Certificate serial: 019D2E4F9CD793D54287B2A93F089AD3E212 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft Manifest number: DD Signing time: Fri 27 Mar 2026 08:01:02 +0000 Manifest this update: Fri 27 Mar 2026 08:01:02 +0000 Manifest next update: Sat 28 Mar 2026 08:01:02 +0000 Files and hashes: 1: 0fI4wmdGOQ1kLuvv1qHiK0C--L8.roa (hash: Z+X5uR9flAhy3leFkC+AcvzMmGH3LvnP56qA4XdH7UM=) 2: 3VIMZ8DX4eUWXSvminbUlyeNEUw.roa (hash: SSpv+TbecMgtO944rstKTobME07WfytXg2M37HTXj78=) 3: 4o_2rckGb0lZykFjdgjM4uq91NM.roa (hash: ttRNQDcCTeyqvWO8DNEI6Ins9g9GZIFUUbB3iwA2QyE=) 4: F48haJ2H_k3DeYlChLBOz7cW17E.roa (hash: biY7BtRxv+gbBOGOV7n8I87u8jvEs3wti0HPY5wJoaU=) 5: HlmZWhQKKZe7LbyNd19F5rOhw9c.roa (hash: Jouu85rdzqcnP2F6Q7QfLS0eE3v/NY3xgKHeYPAUq20=) 6: HqnftrYyJ1yAgfQwEdd5tsHdCfE.roa (hash: jbicct1WtkpH6m3I8jzSkrKJ8f1H+aOQwTwlTyII9Ss=) 7: KdCMLhhg2r8eMBKwq8Ds2bmqX7Y.roa (hash: efAG/Ph6arJLhBGmrTyKEVKSnEt8hq/UMiJWsX3vnIE=) 8: QPDNMv8lX7bUt4nPdwHeA5HfnUQ.roa (hash: k6bNCAHfEq3x6Q2sathuq/6NaJan2lkjLan8SrtjCpQ=) 9: UvPg35Yq3xMNtEBqghSE5VE5mj8.roa (hash: 9QZpYhxGtro9euVy7VMeIu9Apq5BDEIjw+5OY/rh3BA=) 10: X-U8C_w8j7VrgRkTFxREQ-DinSU.crl (hash: FASWORB6Zl/WaDy+3qyCXjAZIR/D2HzEkrXcfZha740=) 11: XNxe3vKUfc2mnoWqox5hdUzD4Yo.roa (hash: HP4Xiz8TLDUV4ayqkQKwJotOB1HZtnv9lMiJdjw+vlA=) 12: ZfXj0Cs-w3tqd3nR2H1CQe4DSjk.roa (hash: R+MPHlzGGciK9ag+NGwWU+mFvTI8dUefoBQsCIk0KTk=) 13: _1Ym3DQxPSAkKurGfjBzXK9MOhQ.roa (hash: kfNgZpEzaJm8FQ0NeRkgxhzR9ojmXch13nfc7Vaxlfg=) 14: _k8DEzrDGMjX2okhJZaU2LT2oz8.roa (hash: iuLXJjc5QDiQTjCx5usBxr4B2lgrFRO7LDfUsbNnhrk=) 15: bgaW-821yLoSyNN-uIV8dLZ09Fk.roa (hash: cVScBzeCdeTPlvYnxP+yGRvQaD/vw3vWP67W4LQOLvo=) 16: g87odO6LKbYtUQhiItIdJuDDOv0.roa (hash: ablxnUHmYfcNIwf2Jd68koMELTWUoB6TggOKa1sqdjM=) 17: j0uoN5YBgi_2OLXJRM1IqthbMEQ.roa (hash: QPkEQUvlMIbZJ7e0t7t/pBbggGpASfcrKRBQTf261vE=) 18: lrweZiSjlgHqgBNyk5JF5iC3jsU.roa (hash: +2TCUIQ339e21cgXf4PNZFT2eloz8XQMUvYOW8cr1IU=) 19: m7L8GdBSJuHsneaCtMC9pI2g3BE.roa (hash: 3YAZliRjuOyVqU2J+wnklyVi5UbfdetsxH5GTzeE2T4=) 20: xYl79rBUbdELQ6AMKSEtQnCQIN8.roa (hash: vQsd/qfiOWnQHHvOpAt49QM2u+39QxYO3Pw3tI/6McE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2e:4f:9c:d7:93:d5:42:87:b2:a9:3f:08:9a:d3:e2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Validity Not Before: Mar 27 08:01:02 2026 GMT Not After : Mar 28 08:01:02 2026 GMT Subject: CN=e33615a72abec81183c68714a5bf40956f91c9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:79:1d:63:59:1c:97:5b:6d:81:f2:ad:23: 64:e6:fd:77:4a:90:a2:8f:08:7f:d2:8c:79:91:f6: f8:cf:85:a4:09:18:d9:47:f1:34:23:4f:8c:0b:2c: e8:3e:e0:19:5f:18:57:cf:1b:cb:c7:4c:3b:2e:cb: 26:02:b4:30:c7:0f:2a:76:05:1c:46:66:d0:93:9e: bc:a7:e1:a8:31:9c:39:21:bc:fe:b2:d2:d8:67:93: 00:f6:46:9f:e6:ba:44:07:62:08:a4:eb:72:09:d8: 7b:ef:32:0b:b1:fd:55:58:e0:1d:e4:7f:07:75:a6: a8:13:4f:d2:da:c4:4a:4f:94:3c:06:c6:b3:69:15: 9e:db:27:0a:4f:e8:5b:c0:80:5e:02:69:2f:69:b8: 6e:89:08:d3:82:02:b0:31:cd:ee:52:7e:a5:9c:09: fd:b8:60:9a:87:74:c3:11:7f:bc:ce:e3:df:ec:35: 6d:ee:61:35:35:c6:a9:a2:bf:68:84:14:51:56:94: e4:69:34:70:e5:57:41:65:8c:09:76:94:9d:22:36: 9e:d6:00:fd:76:61:3c:3d:05:e9:6e:da:ed:16:e1: a2:bc:40:d6:71:b5:d6:e0:bc:d2:f3:59:5d:1a:e0: dc:0c:cb:7c:0d:64:c1:0e:bb:5f:b0:1e:0a:67:04: 59:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:36:15:A7:2A:BE:C8:11:83:C6:87:14:A5:BF:40:95:6F:91:C9:BC X509v3 Authority Key Identifier: keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:62:2d:32:f2:ea:58:57:0e:11:26:05:e6:a9:dd:85:a1:48: e5:41:18:f0:d1:a4:f7:52:d1:97:c5:68:b7:90:b9:e6:7b:1f: cf:0a:c9:f6:fb:cc:d4:ca:3d:c9:39:7b:cd:11:b0:7b:6f:60: c9:60:5e:38:e1:7f:5e:35:4b:2a:da:eb:89:f9:09:ec:0c:2e: c7:13:02:82:9c:ad:35:76:e8:9f:f2:91:3e:61:c4:71:a2:57: 0b:b8:bf:6a:bf:75:0e:e9:57:14:12:80:ff:8b:18:60:b7:32: b2:b0:a6:b0:b1:cf:2d:53:38:8b:10:38:6a:69:a6:99:35:58: 61:13:e5:ba:74:5b:d0:60:73:c5:c3:b3:7e:6a:24:5f:0b:b6: 79:b7:f3:ad:af:3a:65:84:63:19:a9:5f:61:c3:45:d8:5f:f3: 25:fe:07:ae:30:d4:4f:a3:36:2d:be:83:e0:b4:a4:04:e8:af: 8c:87:d3:a3:d8:47:0f:e4:dc:f3:8d:95:cd:53:b1:11:26:01: 53:e2:a4:a0:5d:7d:d4:74:a1:71:c3:55:76:88:20:e2:2a:30: 99:9e:b4:be:7a:95:9e:ac:9c:8d:f2:d5:a4:a0:95:63:36:5a: 61:73:5a:c8:0e:48:7a:c0:d6:4c:1e:f7:9c:a5:a3:bb:59:a6: f6:e8:5b:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0uT5zXk9VCh7KpPwia0+ISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl MjlkMjUwHhcNMjYwMzI3MDgwMTAyWhcNMjYwMzI4MDgwMTAyWjAzMTEwLwYDVQQD EyhlMzM2MTVhNzJhYmVjODExODNjNjg3MTRhNWJmNDA5NTZmOTFjOWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwd5HWNZHJdbbYHyrSNk5v13SpCi jwh/0ox5kfb4z4WkCRjZR/E0I0+MCyzoPuAZXxhXzxvLx0w7LssmArQwxw8qdgUc RmbQk568p+GoMZw5Ibz+stLYZ5MA9kaf5rpEB2IIpOtyCdh77zILsf1VWOAd5H8H daaoE0/S2sRKT5Q8BsazaRWe2ycKT+hbwIBeAmkvabhuiQjTggKwMc3uUn6lnAn9 uGCah3TDEX+8zuPf7DVt7mE1Ncapor9ohBRRVpTkaTRw5VdBZYwJdpSdIjae1gD9 dmE8PQXpbtrtFuGivEDWcbXW4LzS81ldGuDcDMt8DWTBDrtfsB4KZwRZAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM2FacqvsgRg8aHFKW/QJVvkcm8MB8GA1UdIwQY MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct NWNmNTZlZTQzNWIzLzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWItMvLq WFcOESYF5qndhaFI5UEY8NGk91LRl8Vot5C55nsfzwrJ9vvM1Mo9yTl7zRGwe29g yWBeOOF/XjVLKtrrifkJ7AwuxxMCgpytNXbon/KRPmHEcaJXC7i/ar91DulXFBKA /4sYYLcysrCmsLHPLVM4ixA4ammmmTVYYRPlunRb0GBzxcOzfmokXwu2ebfzra86 ZYRjGalfYcNF2F/zJf4HrjDUT6M2Lb6D4LSkBOivjIfTo9hHD+Tc842VzVOxESYB U+KkoF191HShccNVdogg4iowmZ60vnqVnqycjfLVpKCVYzZaYXNayA5IesDWTB73 nKWju1mm9uhb+Q== -----END CERTIFICATE-----Generated at Fri Mar 27 16:08:34 2026 by rpki-client