$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: aaejzow7rT8g6jw/cgGldNXMnKM5ez2/ScMmfsquX6o= Subject key identifier: 89:45:9C:0E:7F:7B:E1:49:AC:F8:A6:CE:90:EA:4E:50:C1:49:49:E9 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019D382E9704B1C0DF135E9DBCDFA7C9040A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 18BD Signing time: Sun 29 Mar 2026 06:01:10 +0000 Manifest this update: Sun 29 Mar 2026 06:01:10 +0000 Manifest next update: Mon 30 Mar 2026 06:01:10 +0000 Files and hashes: 1: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: P2EiI83w6IubYi6v/li9x6TtTWz4ttaQ1aIcqegqdPs=) 2: 6wXcfaNHNIKPsPI9yxLfZE8Q_jQ.roa (hash: ECXhCTN51hl1ngcmROyprePwXkJAyAbxEBIgymRFGBA=) 3: 9Y15TiSyn2wNGdw4h-rBMbyFaAc.roa (hash: 72P6b2id8MZPAK23i1WaqWGaegThFlPqZ6DtT05Xwkc=) 4: 9qGo67yr4HRrxBkAO69NOfH1xyM.roa (hash: 9kV8qye+hDokGEdQvc6wx6xFhzWb+QDG85qAmFrrRNc=) 5: HBS5CYoNWOXobGPomOlaeFTG4h8.roa (hash: D7vH7TbSVaq4pp/oo4dyUnQisHAJ6z4gW2NLDiuh3AQ=) 6: IHMW0iOLCaPimXteCXKckZiuXok.roa (hash: eKTeqM0561BoLTc+G0Vfml+zBr4iHbl5NUyAYC+RQzM=) 7: TBEAu5KKSTnnuwJ2g_Z91zWbXKA.roa (hash: smnw3toc9NIJXiN4piIx54U4f4Mbs+Yue06OIF7Ed2g=) 8: ZAW9hLoDnVp80PJK59uzMqseMQg.roa (hash: zROFGa57szBUE/hPHlcNo31U/nC8cbg/ehhEeCGDUB4=) 9: fAkVmSuP4C8Tt3ysLgXTuPqL4JM.roa (hash: new7s/Zw+Z3LxE1g27Tl/cjYXZW77+lOLNDzxaXxgPs=) 10: gi6Xytn9Iu0GHoS2bz8-D2_xuYw.roa (hash: zRXOYl9PkTzrkMP8UCwOsXf5eAi2L1/FabDUe5aeP6I=) 11: nLhpxF_vYMtPztaP2Ob2bwrsO-c.roa (hash: X8qVQYMo7q02YZkTCY5KKMS/PXISC65xUOcTfDXBI/8=) 12: r9Onf1Z5MTGo6HQvvK-yrmEpNLw.roa (hash: MdZ3nuj2R7EYy2YZK3WtRbRVVeyc+IpvGV7gP3oPGfI=) 13: udGl8isNJxExRSIhiZ2jjvucC5s.roa (hash: 46OQaBoVhzlHfO3MZlMA5GIChgYIIijufkFgTDDBkM8=) 14: xR-uNlcwaXq95_WLOZVSHPtWfsg.roa (hash: wbICW+uS9aypVREci9aQAEMY15M6aAuzi/Y5YFPee8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:2e:97:04:b1:c0:df:13:5e:9d:bc:df:a7:c9:04:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Mar 29 06:01:10 2026 GMT Not After : Mar 30 06:01:10 2026 GMT Subject: CN=89459c0e7f7be149acf8a6ce90ea4e50c14949e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:4c:a9:f0:80:8c:e6:c6:81:ec:54:96:e0: b7:ad:27:68:a1:4c:b3:f9:2a:b4:11:9a:52:a7:12: 08:b7:42:44:98:08:eb:e0:a8:46:a7:f6:13:c9:45: cc:a7:31:59:85:c2:26:a5:5d:65:99:db:4a:41:1b: 79:34:e8:c0:8e:72:08:5a:90:c5:96:ba:0e:c5:fd: d1:2f:e9:66:ad:fe:80:3c:43:eb:62:20:d9:21:f5: da:18:1c:1b:b9:e8:9e:e2:42:f4:4e:d1:af:3f:17: 4c:bc:43:6f:4f:e7:42:99:d9:11:44:e6:d3:7e:b1: 3b:85:62:0c:f7:79:53:2c:c8:de:58:96:a7:d7:18: c8:5d:22:26:52:b2:4a:9d:a4:1f:a6:e3:46:c8:1b: 47:8e:4b:e6:48:cf:31:2c:1f:00:3e:1f:a4:14:17: 66:f3:fe:b3:e8:8d:86:85:6c:b8:82:ac:ea:9a:33: b8:27:54:ce:13:07:a5:92:f7:b4:c4:3e:50:61:8e: ad:5d:9d:05:8b:31:07:96:9c:5a:75:72:dc:3a:50: b0:3b:cf:9a:2a:a7:66:17:9a:4f:80:eb:52:d6:cd: 4d:b5:16:59:39:55:06:46:f1:ce:6b:da:21:db:dc: 1e:aa:69:e8:c4:80:60:3e:08:d0:93:b6:23:0d:f9: 6b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:45:9C:0E:7F:7B:E1:49:AC:F8:A6:CE:90:EA:4E:50:C1:49:49:E9 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:02:c6:6a:a7:0b:52:8a:6d:ed:d5:d0:a2:dc:f0:48:40:72: fc:5c:a6:93:6f:06:83:d4:50:48:63:e7:24:1c:a5:07:e9:25: 13:ae:e1:48:93:a0:60:4b:bd:05:84:87:ec:4d:6d:67:a9:a3: fa:9c:47:1d:f8:41:f4:31:bd:8d:71:f3:a5:39:6a:4e:4f:92: 51:76:16:17:31:10:a2:20:ed:bc:de:2b:ed:53:b8:47:97:99: 22:44:9a:10:48:7e:f1:c0:98:ad:ef:17:97:a0:be:6b:a8:1b: 2f:29:19:b2:0b:fb:23:66:2c:63:e6:26:d3:87:e1:9a:3f:9b: c6:1b:a5:6d:e0:b7:d8:80:aa:9f:8b:31:d9:23:66:68:90:9f: 56:ca:a9:eb:5a:db:43:96:bb:6a:69:98:13:c2:fc:09:bb:13: fa:4c:fe:0e:45:77:dc:74:34:4d:ce:20:81:29:dc:9c:79:de: 85:e9:30:6e:3f:2e:d5:29:09:7f:0a:b5:43:9d:72:70:1d:ca: c1:e4:2c:ed:bd:0f:04:47:1c:fd:cb:b2:64:6a:bc:49:86:f2: 8a:ae:c1:b0:a7:5e:fb:bb:05:8c:f7:eb:bc:91:a0:d1:27:35: cf:24:b3:4c:4d:49:ae:34:d2:a1:9f:eb:a4:05:28:50:a2:8b: a5:13:47:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ04LpcEscDfE16dvN+nyQQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMzI5MDYwMTEwWhcNMjYwMzMwMDYwMTEwWjAzMTEwLwYDVQQD Eyg4OTQ1OWMwZTdmN2JlMTQ5YWNmOGE2Y2U5MGVhNGU1MGMxNDk0OWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGpMqfCAjObGgexUluC3rSdooUyz +Sq0EZpSpxIIt0JEmAjr4KhGp/YTyUXMpzFZhcImpV1lmdtKQRt5NOjAjnIIWpDF lroOxf3RL+lmrf6APEPrYiDZIfXaGBwbueie4kL0TtGvPxdMvENvT+dCmdkRRObT frE7hWIM93lTLMjeWJan1xjIXSImUrJKnaQfpuNGyBtHjkvmSM8xLB8APh+kFBdm 8/6z6I2GhWy4gqzqmjO4J1TOEwelkve0xD5QYY6tXZ0FizEHlpxadXLcOlCwO8+a KqdmF5pPgOtS1s1NtRZZOVUGRvHOa9oh29weqmnoxIBgPgjQk7YjDflrhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlFnA5/e+FJrPimzpDqTlDBSUnpMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQLGaqcL Uopt7dXQotzwSEBy/Fymk28Gg9RQSGPnJBylB+klE67hSJOgYEu9BYSH7E1tZ6mj +pxHHfhB9DG9jXHzpTlqTk+SUXYWFzEQoiDtvN4r7VO4R5eZIkSaEEh+8cCYre8X l6C+a6gbLykZsgv7I2YsY+Ym04fhmj+bxhulbeC32ICqn4sx2SNmaJCfVsqp61rb Q5a7ammYE8L8CbsT+kz+DkV33HQ0Tc4ggSncnHnehekwbj8u1SkJfwq1Q51ycB3K weQs7b0PBEcc/cuyZGq8SYbyiq7BsKde+7sFjPfrvJGg0Sc1zySzTE1JrjTSoZ/r pAUoUKKLpRNH7g== -----END CERTIFICATE-----Generated at Sun Mar 29 13:54:38 2026 by rpki-client