$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: x//E23ldVbHmOIO38G2CqJkOiELJf1z64UTv8wj4tmw= Subject key identifier: 48:02:1C:56:8A:9E:13:87:AD:01:B2:42:0A:C5:8B:61:1F:3E:72:C3 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019D2F98A837986279EB1DC215497C21D748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1893 Signing time: Fri 27 Mar 2026 14:00:26 +0000 Manifest this update: Fri 27 Mar 2026 14:00:26 +0000 Manifest next update: Sat 28 Mar 2026 14:00:26 +0000 Files and hashes: 1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=) 2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: y9JaEiNeOXNJ31MtlT/Nh7nAf4x+n+QIHM9nvBYxSao=) 3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=) 4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=) 5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=) 6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=) 7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=) 8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=) 9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=) 10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=) 11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=) 12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=) 13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2f:98:a8:37:98:62:79:eb:1d:c2:15:49:7c:21:d7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Mar 27 14:00:26 2026 GMT Not After : Mar 28 14:00:26 2026 GMT Subject: CN=48021c568a9e1387ad01b2420ac58b611f3e72c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a2:e3:d2:1b:58:53:b9:09:bf:44:e2:9b:ac: 9b:53:04:a6:e5:97:6c:ce:41:a8:a5:e2:30:58:ed: 54:ef:6e:b7:a3:2f:02:ca:b5:96:f1:d7:ce:ed:68: fb:8c:18:49:0c:ca:7b:80:bb:cb:27:a1:75:04:99: f7:6f:36:c4:50:fd:1f:6a:18:b0:5b:8c:6f:4e:5f: 7d:d5:61:c7:ec:86:61:53:81:d8:f5:b7:85:0f:d9: 3b:82:d6:bc:71:6b:6b:92:28:2c:3d:6a:a6:49:ef: b7:8d:42:42:42:fa:30:aa:08:76:1d:c0:44:07:57: 9b:c5:a7:d3:cc:5b:26:7d:1f:97:2c:30:62:75:6d: 8d:76:ea:87:ba:34:29:f8:80:f3:f1:68:48:8e:68: 48:94:f6:02:9e:af:93:d6:76:c5:11:9b:f2:41:eb: 21:a4:aa:ca:dd:7b:a1:5c:35:ef:bb:ec:e4:d0:d9: 92:29:d3:80:30:a8:f5:d0:8b:e2:36:22:12:95:83: 17:9e:2a:b8:a5:b5:8a:97:c2:8a:e4:a6:3d:ab:dd: fa:fb:d2:ed:ad:85:7a:b1:74:f6:a4:06:a8:38:f2: 78:fe:bc:7d:5c:05:da:f4:81:a3:bd:b0:9c:bc:cc: aa:76:f0:ae:34:ed:f3:b4:c4:7c:d6:3a:a5:55:54: 4e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:02:1C:56:8A:9E:13:87:AD:01:B2:42:0A:C5:8B:61:1F:3E:72:C3 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e2:13:bc:c8:0c:da:28:22:28:73:58:6b:dc:d4:4e:e9:4d: 7e:bf:42:11:08:bb:5a:33:63:05:1a:ce:99:37:49:ca:f9:0f: f1:74:ab:ad:07:d5:56:ed:40:15:0b:10:ed:3f:22:85:52:23: 02:7f:ce:d5:02:d0:8c:e1:0e:b5:59:78:46:91:af:90:25:23: e0:6a:eb:4c:59:8f:42:ed:38:88:b8:ad:06:c2:a9:60:bb:79: 4d:72:e8:0a:5f:9a:17:1a:55:07:e3:96:b2:ca:bd:54:d6:36: 3f:f0:fd:e9:80:1d:7e:d5:f2:92:b2:a7:45:88:8e:a8:3f:59: fa:83:63:ad:27:ec:91:56:85:f3:34:4e:0a:b9:37:9c:3b:a3: a5:72:5e:72:d8:f8:99:7b:0b:ee:54:5a:0e:48:4d:b8:80:27: 4b:95:c0:c8:a4:83:7d:42:9e:29:30:5b:17:4b:2e:4e:fd:fe: a9:0b:1f:a1:42:9c:31:d1:c6:92:b1:c3:69:8f:b7:95:77:5c: 88:ae:93:2d:5c:79:4a:0d:1d:e8:88:0a:36:23:ff:ee:a5:a4: aa:6c:0c:d8:0c:9d:52:11:fd:73:1f:69:29:88:c8:2e:a1:56: 4d:dd:17:fb:11:5a:2a:6f:72:25:e2:0f:40:7a:5e:19:b6:c7: d8:5a:fa:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0vmKg3mGJ56x3CFUl8IddIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwMzI3MTQwMDI2WhcNMjYwMzI4MTQwMDI2WjAzMTEwLwYDVQQD Eyg0ODAyMWM1NjhhOWUxMzg3YWQwMWIyNDIwYWM1OGI2MTFmM2U3MmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aLj0htYU7kJv0Tim6ybUwSm5Zds zkGopeIwWO1U7263oy8CyrWW8dfO7Wj7jBhJDMp7gLvLJ6F1BJn3bzbEUP0fahiw W4xvTl991WHH7IZhU4HY9beFD9k7gta8cWtrkigsPWqmSe+3jUJCQvowqgh2HcBE B1ebxafTzFsmfR+XLDBidW2NduqHujQp+IDz8WhIjmhIlPYCnq+T1nbFEZvyQesh pKrK3XuhXDXvu+zk0NmSKdOAMKj10IviNiISlYMXniq4pbWKl8KK5KY9q936+9Lt rYV6sXT2pAaoOPJ4/rx9XAXa9IGjvbCcvMyqdvCuNO3ztMR81jqlVVROAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgCHFaKnhOHrQGyQgrFi2EfPnLDMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuITvMgM 2igiKHNYa9zUTulNfr9CEQi7WjNjBRrOmTdJyvkP8XSrrQfVVu1AFQsQ7T8ihVIj An/O1QLQjOEOtVl4RpGvkCUj4GrrTFmPQu04iLitBsKpYLt5TXLoCl+aFxpVB+OW ssq9VNY2P/D96YAdftXykrKnRYiOqD9Z+oNjrSfskVaF8zROCrk3nDujpXJectj4 mXsL7lRaDkhNuIAnS5XAyKSDfUKeKTBbF0suTv3+qQsfoUKcMdHGkrHDaY+3lXdc iK6TLVx5Sg0d6IgKNiP/7qWkqmwM2AydUhH9cx9pKYjILqFWTd0X+xFaKm9yJeIP QHpeGbbH2Fr6cg== -----END CERTIFICATE-----Generated at Fri Mar 27 22:25:48 2026 by rpki-client