$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: fFUNf7Y1uOnwLpMidsDf++4fufXuKm7BmvmDsvEW2/U= Subject key identifier: D8:73:A0:2D:69:6F:63:58:C3:57:FB:B0:AF:A9:AC:F6:60:48:FA:6B Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019D37F77755EDFFA8888B2CD16161B5275C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 0387 Signing time: Sun 29 Mar 2026 05:00:57 +0000 Manifest this update: Sun 29 Mar 2026 05:00:57 +0000 Manifest next update: Mon 30 Mar 2026 05:00:57 +0000 Files and hashes: 1: 0hivjmx3zESdF4O-A2SSYqLGRzk.roa (hash: shH0/H2kUggaPw7GkO5zNoGa7K6ORDulOONVmqwNyzg=) 2: 34ts3PIYYIFWGi911YLJC_MNTy0.roa (hash: 4pjAppUY+fw8yDaAV/Qux+rVoBRiKl+Kw/H8kkGtDI4=) 3: 3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa (hash: 92O5pIZ5W4yGOk4rHe6wXslYmPaUdiXeWtRLQm4goss=) 4: 4BsASipyNhMfne7kcDB1nUMHv4U.roa (hash: gNxM9v4Ci9bVQzz6zMSsl4HxARtJa2mrpaEAF1ssvBc=) 5: 51oAIofJkFXpGxq0u0pMpGIor0Y.roa (hash: luFon6hTssLT0GVFCEnyosU6nzOcK0/WHgWU8mcIjfk=) 6: 6v6eeI5cY68j_2oFbpbr5jPTgdU.roa (hash: zqirwLCXgdjJFeXHZFQIYNjwkSF+pg6w51CqhX494MQ=) 7: HHVyXzUcc_YIy8baKZaV2Y45k38.roa (hash: ndUe7viQWWyFXFChfyWy877/Y7Q3qjUplP6K/mFzfDE=) 8: SodBob46gHvkE9f0X3aM1jnjv_0.roa (hash: USjt5jELYEu1iaW09TQw060b9YelZ/w0+6LrYh++vTo=) 9: bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa (hash: JYxMnFiCRaisfCjM99QzlqqTlxpJrwkoJa68usH9YxI=) 10: cHAy_4A-CMasQbGFupRjCXJRveA.roa (hash: Z5sX4UD5pwFqxzXI/4DJgcahhJVYCnCAo+Vk4S1WDik=) 11: fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa (hash: sPu4yXxTGRc2nkq1SBHu8c/xRYRB8YjHSE2w/qhSkXw=) 12: kEgukI4x5ATV385AVFHglji0HH0.roa (hash: 7W67j4OKnAJPYfKA7VB2yMPYazX4qvOU73e4/HvQ//o=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: kR/FVV4ooEtH/A8NiiYuVXubBTRzXmM2qzMTo3axM/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:f7:77:55:ed:ff:a8:88:8b:2c:d1:61:61:b5:27:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Mar 29 05:00:57 2026 GMT Not After : Mar 30 05:00:57 2026 GMT Subject: CN=d873a02d696f6358c357fbb0afa9acf66048fa6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:8b:3f:4b:ef:3b:d8:7b:36:38:40:e8:60: c7:05:16:19:9a:71:82:5c:78:2b:1d:7a:d7:ba:65: 0c:3d:c9:6f:46:32:08:0e:ce:92:e9:a1:40:39:e7: f8:1e:c7:fb:31:d3:19:64:c0:e0:e3:6d:8c:80:b2: 70:46:7d:03:03:0a:b8:af:0e:5e:81:64:60:52:0c: b8:a6:b4:ef:9c:1a:4c:85:cb:64:b9:d0:ca:3a:76: 93:77:67:01:c7:6f:b9:c9:da:6b:9a:d3:65:e3:5f: fc:f5:ca:5a:6d:92:d8:57:06:10:72:c5:78:c4:05: 2b:ca:25:e1:aa:bb:be:e1:75:08:e6:1a:ca:44:ed: 2b:b4:6f:6f:d8:09:66:80:f6:84:27:1f:03:69:9f: bd:9d:12:38:26:a2:a0:b3:d9:07:b2:7a:92:d4:14: a4:50:11:07:57:43:ea:c3:2b:51:49:a8:f5:62:f9: f0:8c:9b:32:1f:e8:38:20:b3:af:9c:84:2d:0f:1c: d2:fa:c9:f4:d1:f0:4e:e7:08:45:8e:22:9a:31:10: d7:9d:e5:18:f7:5b:ef:f3:12:36:27:10:c4:cf:8f: 2f:a3:6a:00:74:8f:86:03:5d:66:ff:61:58:15:3b: 50:df:a6:2e:fb:3f:42:c1:56:ff:b4:ff:20:f1:3e: f8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:73:A0:2D:69:6F:63:58:C3:57:FB:B0:AF:A9:AC:F6:60:48:FA:6B X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f0:02:40:e2:4a:4f:09:57:7e:65:f3:d5:ba:ee:17:44:38: ff:ac:63:09:1a:60:8d:57:1f:f1:b0:97:49:c8:f4:b3:42:3c: 06:0d:d7:40:9e:e6:0d:b2:2c:53:8c:12:db:10:bf:84:31:f3: 83:86:43:d2:28:99:30:6b:c2:58:5f:44:28:0f:a7:34:64:b0: e2:1f:fe:eb:d7:e3:63:90:8b:3f:bb:31:ea:4b:ab:99:84:98: c9:2d:6c:4f:8b:8c:45:9a:f6:d3:34:45:18:de:70:ba:93:aa: a1:1a:bf:0f:f1:94:c8:1f:e9:f7:4c:43:eb:75:bc:ae:35:71: 1a:e2:43:56:99:58:3d:3e:9f:15:f9:3b:0f:e9:94:c7:08:a0: 6b:cb:2c:9a:4b:de:d0:8f:e6:71:f7:a9:58:22:c6:0d:32:56: a1:db:a4:2d:8e:23:1c:51:9c:ec:80:33:ce:85:a6:95:88:dc: a0:8b:12:e6:68:cc:24:5b:8c:52:65:2f:22:8f:05:3d:50:54: 57:48:bc:56:7d:7e:04:ab:d9:f4:a6:59:b6:02:a7:bd:ff:8c: 21:99:0e:b0:7b:eb:ee:11:32:89:b6:7f:2b:0b:ab:21:5c:ac: 3e:d5:c7:26:6d:ab:ba:48:00:34:ba:0f:7c:e4:0b:8f:ff:5c: 41:44:54:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0393dV7f+oiIss0WFhtSdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwMzI5MDUwMDU3WhcNMjYwMzMwMDUwMDU3WjAzMTEwLwYDVQQD EyhkODczYTAyZDY5NmY2MzU4YzM1N2ZiYjBhZmE5YWNmNjYwNDhmYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AiLP0vvO9h7NjhA6GDHBRYZmnGC XHgrHXrXumUMPclvRjIIDs6S6aFAOef4Hsf7MdMZZMDg422MgLJwRn0DAwq4rw5e gWRgUgy4prTvnBpMhctkudDKOnaTd2cBx2+5ydprmtNl41/89cpabZLYVwYQcsV4 xAUryiXhqru+4XUI5hrKRO0rtG9v2AlmgPaEJx8DaZ+9nRI4JqKgs9kHsnqS1BSk UBEHV0PqwytRSaj1YvnwjJsyH+g4ILOvnIQtDxzS+sn00fBO5whFjiKaMRDXneUY 91vv8xI2JxDEz48vo2oAdI+GA11m/2FYFTtQ36Yu+z9CwVb/tP8g8T74PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhzoC1pb2NYw1f7sK+prPZgSPprMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPACQOJK TwlXfmXz1bruF0Q4/6xjCRpgjVcf8bCXScj0s0I8Bg3XQJ7mDbIsU4wS2xC/hDHz g4ZD0iiZMGvCWF9EKA+nNGSw4h/+69fjY5CLP7sx6kurmYSYyS1sT4uMRZr20zRF GN5wupOqoRq/D/GUyB/p90xD63W8rjVxGuJDVplYPT6fFfk7D+mUxwiga8ssmkve 0I/mcfepWCLGDTJWodukLY4jHFGc7IAzzoWmlYjcoIsS5mjMJFuMUmUvIo8FPVBU V0i8Vn1+BKvZ9KZZtgKnvf+MIZkOsHvr7hEyibZ/KwurIVysPtXHJm2rukgANLoP fOQLj/9cQURUXA== -----END CERTIFICATE-----Generated at Sun Mar 29 15:01:08 2026 by rpki-client