$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: Fzz7Pdfj0FSE4/SzHJe0dN02Q0P5/Ko4g+LxXujJHqg= Subject key identifier: 57:95:D7:10:6C:86:53:58:1A:40:61:4A:A0:D1:B1:92:7F:99:27:6D Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019D39AEEDF909942AC49B4361984E505ED2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 1754 Signing time: Sun 29 Mar 2026 13:00:58 +0000 Manifest this update: Sun 29 Mar 2026 13:00:58 +0000 Manifest next update: Mon 30 Mar 2026 13:00:58 +0000 Files and hashes: 1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=) 2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=) 3: hAy8VtAwci_v3cGOO19dEdefvMA.roa (hash: g1nY4ONoPi4/cXPph4hFcjnMaUzSfWsZYHkL3fHcL7Y=) 4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=) 5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=) 6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=) 7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: 6tbSG+jHMiaHXz3gFH9ljeyKYKJRPhTNNvROGa23iq0=) 8: suUbWGeNBw5ePtioMY9U94S7lSw.roa (hash: M06oDkMYsepjO/1pxSEeQ8cUvDUMgzU9aQtQ7cy78x8=) 9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=) 10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:ae:ed:f9:09:94:2a:c4:9b:43:61:98:4e:50:5e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Mar 29 13:00:58 2026 GMT Not After : Mar 30 13:00:58 2026 GMT Subject: CN=5795d7106c8653581a40614aa0d1b1927f99276d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ce:3a:69:48:b7:7e:94:99:b4:ef:b0:f9:2f: 55:53:90:71:35:ab:ed:b5:de:1e:13:58:af:0a:5c: c2:a5:c8:77:5e:85:84:d5:9c:b2:a2:d9:92:63:86: f3:e3:79:06:1c:2d:e2:d0:b3:f9:45:f5:9b:f7:f0: d2:95:0a:a9:ff:d7:c1:a5:3a:e8:d6:59:b3:7d:88: b8:80:12:ce:4c:44:fb:df:14:eb:17:6a:e0:21:e2: 21:6d:31:c8:ba:08:3e:e4:f1:87:77:dc:6d:56:9c: 54:a3:8a:1e:74:4e:f4:81:ff:ed:96:19:ba:be:cc: fb:50:11:f0:48:f0:3c:11:32:0f:71:cc:fb:3e:b4: 64:43:c7:6f:6e:56:ae:93:70:ea:a7:1c:e1:13:a9: 65:89:0e:1a:91:95:dc:a2:f4:74:d2:03:e1:3b:e5: 73:c0:f8:25:eb:fe:6d:cd:e6:2c:18:ed:01:de:0b: 00:6a:04:1d:f6:0e:c7:35:96:7d:8c:05:f9:fd:96: 14:f2:89:20:7f:09:55:9e:da:1f:04:be:c2:d1:6b: 36:a1:77:ef:c4:26:48:bc:d1:33:b9:7a:2a:d4:7e: a1:be:3f:6e:f9:78:57:65:61:44:09:16:bc:73:92: 4a:9f:ae:5a:25:80:0e:d5:fe:08:7e:75:80:6f:27: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:95:D7:10:6C:86:53:58:1A:40:61:4A:A0:D1:B1:92:7F:99:27:6D X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:35:84:38:28:aa:89:1a:82:5f:fb:53:34:00:95:ed:e0:f6: 0a:ad:ec:ad:bc:7b:03:e1:d2:25:4e:c9:eb:8f:93:76:e1:5d: 2c:86:ec:29:82:7e:2f:a0:df:0b:79:ba:86:b3:dc:eb:da:ba: 9a:49:99:ac:80:0d:49:aa:97:69:f7:7d:18:1f:54:d0:65:e6: 22:31:2b:5a:6d:90:aa:5e:b4:44:cd:0e:76:2c:d1:6e:cb:10: dc:72:39:19:39:b0:5e:dc:26:8e:25:51:d3:48:39:db:ab:d0: 46:84:6d:e5:93:01:ef:40:14:d1:61:92:17:0c:06:f2:7d:79: ca:60:4b:7b:51:cf:ca:4e:43:83:52:e7:73:84:3c:de:a0:f5: 85:e8:99:5a:21:17:8f:a8:23:6a:b5:48:9a:ee:7e:9f:a6:19: 8f:92:da:46:5f:ee:63:b7:e5:dd:2a:66:ff:c8:4d:6c:71:81: f1:ee:fc:12:12:2e:81:39:1c:cc:bb:c1:be:08:a9:d6:da:64: 68:45:dc:16:45:c0:84:4b:62:d4:ac:a1:e3:d8:4f:c9:3d:ba: c9:09:63:e9:6b:04:af:26:7c:8b:b9:20:23:a6:00:03:d2:b2: 42:39:6a:3f:16:6d:9b:ca:6d:fb:30:fa:ee:d3:dc:98:8c:4c: 83:18:0d:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05ru35CZQqxJtDYZhOUF7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYwMzI5MTMwMDU4WhcNMjYwMzMwMTMwMDU4WjAzMTEwLwYDVQQD Eyg1Nzk1ZDcxMDZjODY1MzU4MWE0MDYxNGFhMGQxYjE5MjdmOTkyNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6c46aUi3fpSZtO+w+S9VU5BxNavt td4eE1ivClzCpch3XoWE1ZyyotmSY4bz43kGHC3i0LP5RfWb9/DSlQqp/9fBpTro 1lmzfYi4gBLOTET73xTrF2rgIeIhbTHIugg+5PGHd9xtVpxUo4oedE70gf/tlhm6 vsz7UBHwSPA8ETIPccz7PrRkQ8dvblauk3DqpxzhE6lliQ4akZXcovR00gPhO+Vz wPgl6/5tzeYsGO0B3gsAagQd9g7HNZZ9jAX5/ZYU8okgfwlVntofBL7C0Ws2oXfv xCZIvNEzuXoq1H6hvj9u+XhXZWFECRa8c5JKn65aJYAO1f4IfnWAbyesWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeV1xBshlNYGkBhSqDRsZJ/mSdtMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTWEOCiq iRqCX/tTNACV7eD2Cq3srbx7A+HSJU7J64+TduFdLIbsKYJ+L6DfC3m6hrPc69q6 mkmZrIANSaqXafd9GB9U0GXmIjErWm2Qql60RM0OdizRbssQ3HI5GTmwXtwmjiVR 00g526vQRoRt5ZMB70AU0WGSFwwG8n15ymBLe1HPyk5Dg1Lnc4Q83qD1heiZWiEX j6gjarVImu5+n6YZj5LaRl/uY7fl3Spm/8hNbHGB8e78EhIugTkczLvBvgip1tpk aEXcFkXAhEti1Kyh49hPyT26yQlj6WsEryZ8i7kgI6YAA9KyQjlqPxZtm8pt+zD6 7tPcmIxMgxgNLA== -----END CERTIFICATE-----Generated at Sun Mar 29 16:39:26 2026 by rpki-client