$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: PyTq9bk4jTmQ6P4A/ZD6/noGO4XoYwWklX0vxbN1v6o= Subject key identifier: 8A:29:83:94:D4:0B:DA:64:0C:63:4A:BD:27:DC:93:19:10:FA:96:B2 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 019D09D569EA74050EA6CAC4E31452ADD107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 0E93 Signing time: Fri 20 Mar 2026 06:01:14 +0000 Manifest this update: Fri 20 Mar 2026 06:01:14 +0000 Manifest next update: Sat 21 Mar 2026 06:01:14 +0000 Files and hashes: 1: 02DR5VqiImR1ELzoMhmN2MgdJEw.roa (hash: A46KCkLXFpYgdMenUrWnd1pDGxM359G65Rk9wVjYrCI=) 2: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: VrRaPoMvf4/4GCddXTKGcXqoocAOqSg5VnyHozQUCl0=) 3: 66ry_Oqrn2z2VQi36erLm_YTas8.roa (hash: 8++6k+ANwssYLtGuRElIJ17chl0LvEvv8esMVg7kfIE=) 4: 8P-jAkBcMOaRIUETkZOwY2giLXE.roa (hash: JFv+n+pyR4z+68wZuOFM0scuNRmrUJ1Wb5COfkBUH5E=) 5: JrRi-0qoMFLhRr6cb92PJhrDFOQ.roa (hash: IOBcBMl3KD2AdRrtTbfJnBEtnt8xxIivFvb7gPSo8iM=) 6: KpUnWVUlULWTTS0J2TLqceBjzCk.roa (hash: 76AJtOxzTxnr9dKExR5Nj079cdfCs06aPInHb2LSvtc=) 7: Xpfmc5Pj6g7rym3j_1LXYJ9AL1s.roa (hash: MovlI65q4mVYc3DNO4AqCJ9iCuS7hY789BB33mIixAc=) 8: b2A87lKXZV-LA0ZGDO4bCLP_qZk.roa (hash: fj4a7LJXRs7D1MouPdKAx8xun8DGteQiIPGE+YxQovY=) 9: eqwxW_73SsfybtamGFjU8BT6lss.roa (hash: eZIEEacqr0QeRaw//AWmV7fNo+uhUfn87QEEoeHj8N4=) 10: fHiLAjeGI5fzHUJT-wjG-vUQaUc.roa (hash: b2nJsInyFTD4R4jnJKV9oymyFGug4tERm9L1VVzvdQU=) 11: gcxp-EWnfFLHMrONlRoutn-Z7U8.roa (hash: pfCAICQ/vVikMpFdMBXvwM28HdJs0Hi4u8HPJ1KDTPI=) 12: grRv1zK274iLycaoK-Nbqjw_x1k.roa (hash: QLP5kOYkk4bXScipk9r7CnpegfUS+YnmqDjmg8xa35o=) 13: l1LATFY_vdostbB9Lz5ULV3obQg.roa (hash: g5dMlB8SMZ/AEHbTJXc8VAsuZMEmjzmc7YnjTo/UDz8=) 14: lmwUE6-sNDETCNSEMoLU5Q6laJU.roa (hash: 8qCzxJz2lk/vBKmrmfwaSNgolO5upfvcwLUosHTaWSo=) 15: pMRzd49PJuC_a8isaKVdx-y6R6E.roa (hash: vS6bWVrCBd2U3yUpSsw/bcztmwQtyHAUDWfNv8cokkA=) 16: yeEWbOYgX_Oncu1Rzgm_LkCjWSg.roa (hash: SuLBsAyJ9wMKUX8JJrXZ9GO0IIZWlW+vtwNA4dWtXb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:09:d5:69:ea:74:05:0e:a6:ca:c4:e3:14:52:ad:d1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Mar 20 06:01:14 2026 GMT Not After : Mar 21 06:01:14 2026 GMT Subject: CN=8a298394d40bda640c634abd27dc931910fa96b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0b:3c:18:aa:4d:8e:85:61:7b:c2:00:45:2d: 0b:73:24:ba:c3:99:32:aa:dd:8e:f4:12:c7:c2:c6: 48:c9:bf:f4:e1:2c:70:c1:80:f1:8c:18:76:f1:bf: 41:47:2c:01:c0:91:59:06:bf:a7:37:62:65:35:79: 9e:86:e6:f3:09:4a:8a:40:ab:32:ec:e1:27:11:e6: bc:d1:61:bc:70:a1:53:ba:32:6b:19:62:87:3c:29: 22:e2:da:0e:7c:57:88:21:9e:e2:a2:95:80:f5:d6: ad:dc:80:a1:97:54:fb:5b:12:40:a2:1b:c8:a1:bc: b2:61:99:16:ac:17:1e:7d:67:80:09:18:69:06:71: 5d:4c:34:86:9c:2a:2f:0c:e0:c9:9a:84:38:fb:36: 08:5a:ef:67:65:f1:fe:d2:43:28:f3:7f:bf:bf:6d: 54:98:62:0d:23:36:20:34:75:26:36:d0:ff:ae:a2: 89:fc:84:50:b3:11:fb:f9:0e:09:41:c9:51:b3:9d: f3:b8:73:71:fd:54:bf:89:13:5f:43:ff:18:be:80: 05:0a:32:12:f8:ef:f7:14:25:2e:28:68:ba:70:9b: bc:89:90:87:af:4c:be:c7:55:53:7d:91:11:4e:b6: 32:c3:c3:7c:58:b9:96:43:27:5b:8f:ee:2a:bf:73: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:29:83:94:D4:0B:DA:64:0C:63:4A:BD:27:DC:93:19:10:FA:96:B2 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0e:0f:86:d4:f5:76:4b:9b:dd:02:b1:1c:22:a1:de:32:90: d9:d5:45:b7:73:32:d5:cb:8e:19:6c:76:a8:f5:98:54:5a:59: 1d:85:87:e7:43:31:4a:f7:b9:6f:95:2e:cd:eb:41:eb:31:4b: 70:7e:74:9b:8f:bc:3a:0f:72:c7:86:53:fb:b2:58:65:bc:7e: 57:28:03:17:14:4e:13:ef:06:f0:36:7b:10:4e:a2:e2:a7:42: 5a:60:83:c9:50:82:c7:74:a5:ff:91:6a:84:49:4a:df:37:c1: 6d:77:ff:cc:d2:89:63:6f:9a:83:2b:d5:9e:38:f9:2e:c9:ee: 90:6a:c1:82:ae:ed:72:ff:01:5a:a8:73:33:23:46:63:d4:a8: 8b:62:c8:a3:0f:40:d0:d0:9f:6a:42:9d:41:89:ab:32:c5:f3: 7e:87:b9:38:e1:c3:13:c4:fc:a4:7d:bb:d3:fa:c1:6c:d7:e2: 08:e5:a9:9b:af:67:53:1d:9d:dd:e6:e7:1a:9a:f5:b4:1a:0f: d7:a1:c8:03:29:8f:be:36:28:6f:d9:c1:14:aa:8c:8f:ab:bb: d8:aa:89:a9:2e:ea:dc:05:26:ff:c4:31:31:18:84:31:2d:b6: f2:4b:60:94:97:85:cc:63:60:ca:24:bf:09:38:79:89:ed:3e: 72:bf:1d:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0J1WnqdAUOpsrE4xRSrdEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjYwMzIwMDYwMTE0WhcNMjYwMzIxMDYwMTE0WjAzMTEwLwYDVQQD Eyg4YTI5ODM5NGQ0MGJkYTY0MGM2MzRhYmQyN2RjOTMxOTEwZmE5NmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gs8GKpNjoVhe8IARS0LcyS6w5ky qt2O9BLHwsZIyb/04SxwwYDxjBh28b9BRywBwJFZBr+nN2JlNXmehubzCUqKQKsy 7OEnEea80WG8cKFTujJrGWKHPCki4toOfFeIIZ7iopWA9dat3IChl1T7WxJAohvI obyyYZkWrBcefWeACRhpBnFdTDSGnCovDODJmoQ4+zYIWu9nZfH+0kMo83+/v21U mGINIzYgNHUmNtD/rqKJ/IRQsxH7+Q4JQclRs53zuHNx/VS/iRNfQ/8YvoAFCjIS +O/3FCUuKGi6cJu8iZCHr0y+x1VTfZERTrYyw8N8WLmWQydbj+4qv3NZRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIopg5TUC9pkDGNKvSfckxkQ+payMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALg4PhtT1 dkub3QKxHCKh3jKQ2dVFt3My1cuOGWx2qPWYVFpZHYWH50MxSve5b5UuzetB6zFL cH50m4+8Og9yx4ZT+7JYZbx+VygDFxROE+8G8DZ7EE6i4qdCWmCDyVCCx3Sl/5Fq hElK3zfBbXf/zNKJY2+agyvVnjj5LsnukGrBgq7tcv8BWqhzMyNGY9Soi2LIow9A 0NCfakKdQYmrMsXzfoe5OOHDE8T8pH270/rBbNfiCOWpm69nUx2d3ebnGpr1tBoP 16HIAymPvjYob9nBFKqMj6u72KqJqS7q3AUm/8QxMRiEMS228ktglJeFzGNgyiS/ CTh5ie0+cr8dlA== -----END CERTIFICATE-----Generated at Fri Mar 20 08:33:54 2026 by rpki-client