$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: O2eKdgNuOoWp8fJt35UFr6M7T1etTFKsUGJupj2s4Rs= Subject key identifier: 14:C4:E4:92:63:6D:3B:88:48:6E:FF:F8:5C:F6:01:36:7B:68:D3:64 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019D12D8BB0C347A7567D8B622FCC7D66FB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 0798 Signing time: Sun 22 Mar 2026 00:01:26 +0000 Manifest this update: Sun 22 Mar 2026 00:01:26 +0000 Manifest next update: Mon 23 Mar 2026 00:01:26 +0000 Files and hashes: 1: 1-fHKEGdQzHKJnoO-QxMVY_4pRE8.roa (hash: zDRe41xbopOMDmDagY2NOiL9+JF7qRmR3ODp2uFdORY=) 2: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (hash: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=) 3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 4: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=) 5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 6: FsWz95bjpsQz09qkc-hQos-M0m8.roa (hash: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE=) 7: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=) 8: IjZEx1eHpkQjZ-ES_Rg9N95_Zzg.roa (hash: 5Sm4tdW+S9NYYEZ3KZhaD241AoDsBp/MjQHfJVYoRSk=) 9: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=) 10: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 11: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=) 12: SqsOc_l_Byw8A63bMs7bGr5Csfk.roa (hash: yDuYEQpT9u0kVYnoDL0S45vkKwdy3kU/Xh9r8KwY0Mg=) 13: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 14: WuFVi91PLw1PUGyRssd2Q6yHyks.roa (hash: w4KZzG/sU1/9RMrXZYTWNuUrYY4VCLIF4AOLDV1SBW0=) 15: YhLDm5Ce0BvL20OlK_DJ3XluMvQ.roa (hash: a/DUt7th7DoduXNQ3o8GbpNtKAw3KBcPk7la6IbcmHQ=) 16: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 17: d3URZqZU61DXU8Pxx8p7KdaQhTk.roa (hash: 0sFhnZDT3nptAp7FfkP3V+TkjPROY/IHl0rud0LuY7A=) 18: dCfpsPGaI9EPpHHA1tpX3ncah84.roa (hash: YD3gFKPk43fuccQT39vfRFDnBr8rg/N4oAVZTnznPYE=) 19: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 20: dgjOJkYm4NlEFuZKaTram-N8Vb8.roa (hash: wElcUk2Te+VUa7w+wZq9RrDpV/vAw/zGNdVK9LHKC0Y=) 21: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: mqyf0izttCPrsFHcAo3fgF0PBIN+YpYfeCmKtHGaBzk=) 22: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=) 23: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=) 24: mLwRQPJNPNyFW9b_cs3RSw90Ej0.roa (hash: lGalA+fhuk3zaDb/hTVS4G3SDG2yM8uu4pBXLLe2M9c=) 25: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:12:d8:bb:0c:34:7a:75:67:d8:b6:22:fc:c7:d6:6f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Mar 22 00:01:26 2026 GMT Not After : Mar 23 00:01:26 2026 GMT Subject: CN=14c4e492636d3b88486efff85cf601367b68d364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f5:43:4b:0f:cf:e0:7b:f7:44:1b:e7:28:c1: 1d:bc:2c:69:c7:0c:ef:2b:90:2b:d3:b3:5d:a6:12: 3a:f3:0b:3c:44:d8:9e:b2:6b:96:42:a8:51:8c:7e: f5:42:cb:df:ca:ad:72:f5:f0:d2:be:20:14:a3:e6: ac:fa:e2:58:7f:5e:bf:9e:fe:a8:dc:3b:dd:21:4b: 25:46:76:11:5f:26:e5:49:13:81:d4:fa:36:8f:c4: 40:a1:40:6c:9c:52:d5:64:2f:6d:71:b7:34:6f:b4: 11:fd:89:e0:d6:64:89:84:5b:a0:78:80:98:7f:50: 85:d8:07:fb:84:a5:c3:44:88:85:dd:96:9a:55:dc: ab:8d:d2:fe:e1:cf:5c:85:b0:c1:93:10:b6:9c:f0: d5:9c:32:47:27:75:60:ac:6b:4a:02:83:f3:13:74: 29:c7:1c:f4:d1:17:e6:99:cc:e9:e0:4d:92:ff:ef: 89:88:e0:04:71:55:77:f9:b0:6e:05:3e:06:81:68: 90:22:45:25:dc:fb:94:91:80:60:d0:11:1b:b2:d7: c9:6d:89:03:39:8a:8f:00:47:02:79:b3:83:59:4c: 3c:67:b2:d8:f4:67:25:9c:eb:24:a5:e4:c0:25:36: 80:6b:d8:60:46:0b:57:50:17:b2:0b:a1:61:83:1b: 3d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C4:E4:92:63:6D:3B:88:48:6E:FF:F8:5C:F6:01:36:7B:68:D3:64 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c1:bd:94:75:b7:8e:93:c1:0d:9f:3e:02:51:c9:c0:e2:1c: 92:b2:ff:25:c2:dc:20:85:4c:88:83:72:82:55:6a:d8:8b:41: 01:70:c4:ba:a7:57:c8:c4:07:5d:9d:c9:50:96:08:77:89:ba: 96:e7:f8:b6:a3:19:73:b5:05:d9:d0:57:d9:20:8f:34:b2:d8: b8:58:2b:e5:8e:b4:8e:af:12:dc:02:09:23:66:26:ac:18:cc: 88:52:24:48:23:e8:c6:ff:fb:ed:ee:bd:8b:a5:d6:7f:46:d0: cb:8f:22:60:35:22:fb:98:8d:ec:d7:3b:f5:5d:b5:ee:4b:74: 4b:52:cd:0a:61:d3:b7:0d:f1:ff:6a:9d:b6:bc:37:7b:15:86: 6b:4b:13:69:07:1f:1b:c0:bd:2b:56:8e:13:ef:96:1d:79:f6: db:d2:a1:a1:a2:20:21:8d:b8:08:a7:0c:61:73:43:e8:c9:fb: b4:a3:3e:63:8f:2b:c2:58:e0:27:2b:21:d7:16:34:de:7c:de: bf:52:a8:0f:f9:c7:a2:99:fe:ee:4f:64:9a:39:ee:ce:04:8c: a4:6e:68:73:2c:92:0c:f5:63:1a:2c:84:bb:49:71:92:7c:a9: 1f:1a:f0:1c:ef:a4:52:47:1d:19:a3:29:8c:c6:40:f6:bc:9e: 25:d9:59:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0S2LsMNHp1Z9i2IvzH1m+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMzIyMDAwMTI2WhcNMjYwMzIzMDAwMTI2WjAzMTEwLwYDVQQD EygxNGM0ZTQ5MjYzNmQzYjg4NDg2ZWZmZjg1Y2Y2MDEzNjdiNjhkMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/VDSw/P4Hv3RBvnKMEdvCxpxwzv K5Ar07NdphI68ws8RNiesmuWQqhRjH71Qsvfyq1y9fDSviAUo+as+uJYf16/nv6o 3DvdIUslRnYRXyblSROB1Po2j8RAoUBsnFLVZC9tcbc0b7QR/Yng1mSJhFugeICY f1CF2Af7hKXDRIiF3ZaaVdyrjdL+4c9chbDBkxC2nPDVnDJHJ3VgrGtKAoPzE3Qp xxz00Rfmmczp4E2S/++JiOAEcVV3+bBuBT4GgWiQIkUl3PuUkYBg0BEbstfJbYkD OYqPAEcCebODWUw8Z7LY9GclnOskpeTAJTaAa9hgRgtXUBeyC6Fhgxs9tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTE5JJjbTuISG7/+Fz2ATZ7aNNkMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsG9lHW3 jpPBDZ8+AlHJwOIckrL/JcLcIIVMiINyglVq2ItBAXDEuqdXyMQHXZ3JUJYId4m6 luf4tqMZc7UF2dBX2SCPNLLYuFgr5Y60jq8S3AIJI2YmrBjMiFIkSCPoxv/77e69 i6XWf0bQy48iYDUi+5iN7Nc79V217kt0S1LNCmHTtw3x/2qdtrw3exWGa0sTaQcf G8C9K1aOE++WHXn229KhoaIgIY24CKcMYXND6Mn7tKM+Y48rwljgJysh1xY03nze v1KoD/nHopn+7k9kmjnuzgSMpG5ocyySDPVjGiyEu0lxknypHxrwHO+kUkcdGaMp jMZA9ryeJdlZBA== -----END CERTIFICATE-----Generated at Sun Mar 22 05:16:15 2026 by rpki-client