$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: DOP0X1CR0l68pL0Ts5LInqhVhOcLBND+4O9CuDleI3g= Subject key identifier: EF:E7:95:2C:39:AD:2D:74:A1:19:C4:64:DE:50:BB:A9:CA:9B:34:54 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019D39410D99C5E3241A83D99E39BFBF1C5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 18D6 Signing time: Sun 29 Mar 2026 11:00:57 +0000 Manifest this update: Sun 29 Mar 2026 11:00:57 +0000 Manifest next update: Mon 30 Mar 2026 11:00:57 +0000 Files and hashes: 1: FDadFeqXdB-4hSls4tkk3SxPK0c.roa (hash: vYzxw+U9C6N8QQp+gQ4+C6IjpNypmXaiCUE3aon4FxA=) 2: MfgRriYJp7m_VcqdOdfAbTb2DNo.roa (hash: KLVx3gQAbv0plQDb9I4VjnfX1uzxg36H8GHKeOJlzFY=) 3: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=) 4: QqOOXG2U8KmftWPIGkmnz-He-1I.roa (hash: 9H7M4l3KUWpTvpSo8NQDnFUn85s8Qh4futzKFfEpRME=) 5: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=) 6: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: jnPymSKCRbtdyxJ6KXr/gsVx4MSFR13KO5oegDb3mtE=) 7: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=) 8: kT2l4aAekYpUQWufDkupbupuegk.roa (hash: rw2rc2iNkA7LVF7/4CAp2ausXlmtVnPSsdvSUBErb28=) 9: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=) 10: o6MpHL8yV-krGyep73H6gsRAx8s.asa (hash: L1E71NWbjV6huTp1t3AtPjE427jqHBJJESkb1c/dD1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:41:0d:99:c5:e3:24:1a:83:d9:9e:39:bf:bf:1c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Mar 29 11:00:57 2026 GMT Not After : Mar 30 11:00:57 2026 GMT Subject: CN=efe7952c39ad2d74a119c464de50bba9ca9b3454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:58:9b:54:be:27:a7:47:12:5d:a8:7e:99: 71:dc:17:38:38:85:d3:f6:8c:8f:a6:42:0f:65:cb: f4:cd:0c:f9:53:df:9b:14:0c:c9:8b:f4:e7:40:59: ca:70:6d:5f:a5:a2:93:e0:68:3d:a1:6d:21:14:ef: 5d:a6:71:92:e7:3a:e7:17:a1:9b:19:02:c8:eb:34: 19:91:b8:2a:40:b5:47:b4:6c:c9:5c:a6:b6:4a:19: 64:cd:e3:96:15:4b:64:c5:0a:b4:23:79:b8:ce:2e: 33:69:d6:2d:0c:8d:48:74:7c:8d:d1:ed:d3:f3:08: 39:87:78:17:c0:95:dc:ed:52:49:70:e6:0e:17:a0: 49:72:d9:88:02:14:53:bc:19:eb:4c:15:72:c7:3e: b2:b0:90:96:27:7c:a6:38:d9:e8:11:86:0a:d9:2c: 0a:f8:b1:29:b6:c4:8b:b5:2c:ca:49:69:f1:30:83: c9:8b:d1:70:58:8b:8f:c1:a6:fd:37:fa:33:5c:cb: 98:1a:9d:88:7a:8e:57:73:56:26:6e:28:a0:3f:3d: 54:78:30:e5:fb:d8:e7:f9:55:de:11:33:7f:48:75: 16:c6:89:41:ba:aa:fa:83:55:0d:69:a4:1f:eb:6c: 08:7c:1f:15:97:fd:c6:a7:78:3c:cc:93:6f:10:14: 39:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E7:95:2C:39:AD:2D:74:A1:19:C4:64:DE:50:BB:A9:CA:9B:34:54 X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4f:44:0a:a9:13:7a:ba:12:ad:4b:e9:ca:29:bc:51:18:02: ec:96:f6:f4:7d:8c:55:47:e7:6d:a4:18:a0:d2:a3:29:d4:14: 8d:5d:a4:eb:d3:67:3a:29:39:30:fe:94:ab:c0:e2:8b:e6:42: cf:ae:e1:0e:ec:90:6a:1b:ac:6f:61:ff:44:b2:d1:ae:f6:91: 7f:80:01:31:8c:ef:3e:97:28:68:28:34:2a:9e:54:60:35:99: d2:e0:c3:7f:67:7c:36:ae:5e:c5:54:b6:d0:b1:57:2d:6b:bb: 4b:27:83:41:9c:45:3d:be:b9:da:56:1b:50:7a:96:e3:b3:48: 92:5b:09:ee:fa:4b:12:ac:95:c7:72:27:ef:24:6b:23:2c:13: 7c:34:3e:de:04:5e:aa:73:06:89:a4:c6:67:44:d2:30:d3:04: 9c:5c:dc:15:33:a5:7d:28:09:72:a5:18:fc:99:65:5d:16:9b: ad:de:ae:9a:70:f6:5a:ee:36:09:9b:fe:15:d7:2a:2d:4e:01: bf:d0:d6:db:28:39:64:b4:4d:dd:15:fa:b3:b0:92:87:50:32: 3c:77:6c:46:2f:95:54:0c:4c:4a:45:70:9f:78:cb:ab:bc:0d: 55:0e:87:7e:82:bc:b9:5c:c6:8b:bd:79:a9:2b:b1:30:b6:88: 68:b9:fc:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05QQ2ZxeMkGoPZnjm/vxxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjYwMzI5MTEwMDU3WhcNMjYwMzMwMTEwMDU3WjAzMTEwLwYDVQQD EyhlZmU3OTUyYzM5YWQyZDc0YTExOWM0NjRkZTUwYmJhOWNhOWIzNDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkpYm1S+J6dHEl2ofplx3Bc4OIXT 9oyPpkIPZcv0zQz5U9+bFAzJi/TnQFnKcG1fpaKT4Gg9oW0hFO9dpnGS5zrnF6Gb GQLI6zQZkbgqQLVHtGzJXKa2ShlkzeOWFUtkxQq0I3m4zi4zadYtDI1IdHyN0e3T 8wg5h3gXwJXc7VJJcOYOF6BJctmIAhRTvBnrTBVyxz6ysJCWJ3ymONnoEYYK2SwK +LEptsSLtSzKSWnxMIPJi9FwWIuPwab9N/ozXMuYGp2Ieo5Xc1YmbiigPz1UeDDl +9jn+VXeETN/SHUWxolBuqr6g1UNaaQf62wIfB8Vl/3Gp3g8zJNvEBQ5zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/nlSw5rS10oRnEZN5Qu6nKmzRUMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnU9ECqkT eroSrUvpyim8URgC7Jb29H2MVUfnbaQYoNKjKdQUjV2k69NnOik5MP6Uq8Dii+ZC z67hDuyQahusb2H/RLLRrvaRf4ABMYzvPpcoaCg0Kp5UYDWZ0uDDf2d8Nq5exVS2 0LFXLWu7SyeDQZxFPb652lYbUHqW47NIklsJ7vpLEqyVx3In7yRrIywTfDQ+3gRe qnMGiaTGZ0TSMNMEnFzcFTOlfSgJcqUY/JllXRabrd6umnD2Wu42CZv+FdcqLU4B v9DW2yg5ZLRN3RX6s7CSh1AyPHdsRi+VVAxMSkVwn3jLq7wNVQ6HfoK8uVzGi715 qSuxMLaIaLn8tw== -----END CERTIFICATE-----Generated at Sun Mar 29 19:53:48 2026 by rpki-client