$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: 2CEuBhEXNs6rJjd19aX/tubU9SC/2/9I4pSyr5P6Oxw= Subject key identifier: 48:4A:2C:28:86:85:C8:89:1B:A5:00:A3:2F:4C:7D:C4:A3:C9:83:64 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019D099E816FA3386EE44B8CF193DCE60938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 183F Signing time: Fri 20 Mar 2026 05:01:15 +0000 Manifest this update: Fri 20 Mar 2026 05:01:15 +0000 Manifest next update: Sat 21 Mar 2026 05:01:15 +0000 Files and hashes: 1: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=) 2: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=) 3: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=) 4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=) 5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=) 6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=) 7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=) 8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=) 9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=) 10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: fd2xl662SHYm5NLarcaGcIpq8+PE4VtLqQp+Fk41G/s=) 11: dbO5CKnLQTTJh3eDR9I8bGXedlY.roa (hash: tPxsmGUbFFDCPaVcd/ukZ/6WBXMPRTeyul9lkIVarMA=) 12: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:09:9e:81:6f:a3:38:6e:e4:4b:8c:f1:93:dc:e6:09:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Mar 20 05:01:15 2026 GMT Not After : Mar 21 05:01:15 2026 GMT Subject: CN=484a2c288685c8891ba500a32f4c7dc4a3c98364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:96:6a:88:b3:2d:b4:c6:87:36:d2:1b:39: 97:4a:4b:6a:2a:c4:96:8e:c4:6b:a8:ff:d8:da:65: df:be:37:59:69:54:b2:75:14:99:17:1a:94:1e:a5: f4:fd:d5:f6:11:f0:d6:8d:58:ee:3e:ae:41:ae:4e: b2:d8:81:a0:5f:c4:88:f1:82:d1:dc:bf:d8:81:3d: e0:6b:d4:f3:fc:d5:da:98:61:e4:82:e7:de:8b:09: 16:f3:ef:61:ed:39:bd:ee:16:6c:41:a9:31:68:47: 7f:7f:20:5e:b9:6c:40:d9:72:22:40:85:78:0b:76: b5:e5:ad:93:81:ce:e8:86:92:e5:68:d1:44:c5:be: 8c:81:e9:16:91:ce:78:3c:db:3f:62:4f:de:a4:43: ef:dd:21:33:95:c8:73:23:dd:9f:5d:15:53:4e:91: 6b:64:86:4a:4b:70:14:4f:29:4e:2a:80:7f:5c:e0: 54:6e:aa:dc:f3:49:a1:9e:23:3e:de:85:b2:aa:d9: 11:6a:b1:4d:1a:82:71:9a:6a:c8:d9:51:e4:e3:ea: ea:e4:fe:65:12:e7:93:67:90:33:6d:02:9f:4a:14: 69:6d:10:b7:1f:5f:aa:ea:a8:3c:3b:dc:d5:b7:25: d9:e1:a6:f5:4c:72:2a:bb:70:2b:38:a0:c3:84:bc: 21:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4A:2C:28:86:85:C8:89:1B:A5:00:A3:2F:4C:7D:C4:A3:C9:83:64 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a8:cf:c3:b0:a1:60:41:cd:3c:43:31:ef:1b:a8:1c:b6:19: 69:25:09:1d:74:ea:8f:c8:b8:0f:38:a5:94:a9:14:fc:95:32: a9:25:bd:fe:e1:69:c6:60:b0:2a:99:2b:19:90:e9:1f:ba:f7: c2:2d:bf:95:fa:8d:70:8a:cf:bc:26:3c:e6:87:86:4e:84:d8: 28:41:d1:ab:f9:ca:5f:84:08:3a:01:ac:0f:1b:d0:7f:1e:66: e8:25:87:9b:bc:6c:3a:39:5c:45:eb:0b:cf:13:ed:46:94:f7: 2a:85:ba:59:e8:37:cf:b0:4c:41:0e:0f:ca:47:06:b4:ca:a4: 96:ad:de:d9:0a:59:7e:e0:e4:c4:9d:a0:a6:d5:c5:44:09:9b: fd:18:94:f3:d5:ea:5d:49:5c:3f:bb:37:81:26:91:49:f7:e4: 22:c4:25:ff:e0:9f:a0:b3:b6:c0:53:5f:aa:ad:da:a0:11:3e: 8c:bb:37:1a:23:b5:c0:b2:7a:39:b0:83:21:18:4a:fa:6a:58: c9:a6:31:c4:ab:7d:47:74:35:5d:e6:4c:a7:8d:5e:3b:b8:62: cd:a8:12:bc:30:3c:96:82:b6:4d:43:a9:71:93:47:25:2c:cc: 3b:07:52:a9:b0:ef:81:63:35:ef:23:36:e1:81:3d:0f:1a:8d: 51:24:a2:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0JnoFvozhu5EuM8ZPc5gk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwMzIwMDUwMTE1WhcNMjYwMzIxMDUwMTE1WjAzMTEwLwYDVQQD Eyg0ODRhMmMyODg2ODVjODg5MWJhNTAwYTMyZjRjN2RjNGEzYzk4MzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr12WaoizLbTGhzbSGzmXSktqKsSW jsRrqP/Y2mXfvjdZaVSydRSZFxqUHqX0/dX2EfDWjVjuPq5Brk6y2IGgX8SI8YLR 3L/YgT3ga9Tz/NXamGHkgufeiwkW8+9h7Tm97hZsQakxaEd/fyBeuWxA2XIiQIV4 C3a15a2Tgc7ohpLlaNFExb6MgekWkc54PNs/Yk/epEPv3SEzlchzI92fXRVTTpFr ZIZKS3AUTylOKoB/XOBUbqrc80mhniM+3oWyqtkRarFNGoJxmmrI2VHk4+rq5P5l EueTZ5AzbQKfShRpbRC3H1+q6qg8O9zVtyXZ4ab1THIqu3ArOKDDhLwh9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhKLCiGhciJG6UAoy9MfcSjyYNkMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqjPw7Ch YEHNPEMx7xuoHLYZaSUJHXTqj8i4DzillKkU/JUyqSW9/uFpxmCwKpkrGZDpH7r3 wi2/lfqNcIrPvCY85oeGToTYKEHRq/nKX4QIOgGsDxvQfx5m6CWHm7xsOjlcResL zxPtRpT3KoW6Weg3z7BMQQ4PykcGtMqklq3e2QpZfuDkxJ2gptXFRAmb/RiU89Xq XUlcP7s3gSaRSffkIsQl/+CfoLO2wFNfqq3aoBE+jLs3GiO1wLJ6ObCDIRhK+mpY yaYxxKt9R3Q1XeZMp41eO7hizagSvDA8loK2TUOpcZNHJSzMOwdSqbDvgWM17yM2 4YE9DxqNUSSi6A== -----END CERTIFICATE-----Generated at Fri Mar 20 12:03:40 2026 by rpki-client