$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: FCOekHijqO9ABBcTCP3Uj+4la0j/eS6qU6I3JC6Hqec= Subject key identifier: C1:0C:FB:D0:2F:48:D8:87:74:11:1F:97:36:57:7E:D4:DA:B4:AA:BF Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019D3AC1E03FDFCDB61979B6EF818A535D3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 18CD Signing time: Sun 29 Mar 2026 18:01:17 +0000 Manifest this update: Sun 29 Mar 2026 18:01:17 +0000 Manifest next update: Mon 30 Mar 2026 18:01:17 +0000 Files and hashes: 1: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (hash: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8=) 2: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (hash: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ=) 3: 2RHKEFUbX-V0Mf6y31Iq5dGlemY.roa (hash: 22aNA0RqHM/lo1ZuXKI24lPSyNZYgt9FvnHMilKuHJY=) 4: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (hash: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg=) 5: C58HKVenwwmbh1jkwoeqIUWdglo.roa (hash: dbM/VaOE1y6PqBg/KjdbXvgt9ovsuviuBnEC3nra0Jo=) 6: GEKxvGic2KzXVJsj3dcok72CGco.roa (hash: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw=) 7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: fe3OjOGxo7bbL7DrDGUWvQM+Y5LVL4BrkMdPZ8IKCnA=) 8: S4ZdWdrpb3qYx-e6gRNqyxS9XXU.roa (hash: HWieGKn5oMIm/cd+NltvfFL1DEkHDM7h4JKc/BDbryw=) 9: TN_g4sfmmPrHK_oZ30J7gNWtpIY.roa (hash: m5dgi6YlmiEMbhGuQK1tT2ie/bg//bcOLn6xqpAH6Zs=) 10: U_DCEtPw_hUMwrzj8r6wUIXBPig.roa (hash: zOV0/cSp312KHscfdmAUHtLOyMQW+m7fH0EzuAciKbU=) 11: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (hash: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk=) 12: XVl9Jn76mWQ8ncaJ_wDuumCSFsA.roa (hash: Hs6XsuXHPXeVRFbGDUcPFLc6y5U4gwmlkZ/AR7/NeXE=) 13: XuBKY0oAARsXVXjq7u8JeDvNOcU.roa (hash: vlWZjrm0v836+Ch01+GkfQiIKmv/HzSaOumEGtSwczo=) 14: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (hash: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA=) 15: k_MSpCKVnChWzSccoFJBjl40Vo8.roa (hash: VdSgjLWna9h9svrbMMSXJmkEe/+wqNq0RNqZ0DwPUZc=) 16: nkcD404rwM-bjy3W1eqAGIf4-jM.roa (hash: c+Jt4XtXipvJeR1ev/pkQCOQCvUzFmWnznkD8NrTMoI=) 17: pWHrs5rw_KgbSRJAL6KONruKqFc.roa (hash: AB3huwEj/N+euzlEzjByisO3oP/M0v+P+iouNnZD7xs=) 18: unZltpWjHIJfFpLIwg4b58uUsuU.roa (hash: hb7AVSL7Cg4MYbwSNaPjN4NWBI4LlWAD7QoGarhaIFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 16:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:3a:c1:e0:3f:df:cd:b6:19:79:b6:ef:81:8a:53:5d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Mar 29 18:01:17 2026 GMT Not After : Mar 30 18:01:17 2026 GMT Subject: CN=c10cfbd02f48d88774111f9736577ed4dab4aabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:93:29:0f:3e:2d:0a:e2:80:9a:76:1f:78:f1: b9:19:1c:f9:55:04:cf:e5:92:13:09:ae:33:f1:90: b4:fe:4d:44:d9:ec:26:19:3a:a1:12:5c:b7:1f:da: 68:f3:d4:35:21:9a:87:2a:4e:5d:fa:4a:33:df:96: f2:3a:49:0f:21:99:b4:7a:8a:05:4c:40:cb:db:17: cb:11:a6:56:52:97:db:b6:eb:5f:0a:0c:1a:e6:2e: 32:24:df:4f:2d:bb:91:0e:55:64:da:43:55:e1:25: 88:c3:aa:77:b5:4c:18:62:64:11:a8:9c:22:9d:4a: 44:d8:f5:01:e4:8e:53:66:c6:58:74:d2:96:07:f5: 7b:d1:f5:fd:74:fd:8f:5f:87:dd:38:5a:06:42:ac: d5:a3:f2:fd:47:b3:6d:3f:0c:5a:da:8c:d4:85:e1: 3e:cd:b7:17:49:3d:55:24:24:8f:4d:55:6e:5b:81: 64:94:3e:25:06:e0:0d:83:bb:8c:b8:6e:a5:e9:44: 06:32:16:51:bf:1a:73:25:26:6b:ad:85:62:1b:e8: 95:69:d0:fe:2b:3d:bc:77:bb:4a:63:e5:30:8b:b6: b7:28:d2:56:e9:33:e6:92:81:95:56:ff:8a:d8:be: ce:44:d5:12:8b:b9:d6:f6:8b:33:69:b5:96:eb:7c: 55:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0C:FB:D0:2F:48:D8:87:74:11:1F:97:36:57:7E:D4:DA:B4:AA:BF X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:02:da:d9:1f:b5:f7:1d:0f:0d:b3:d5:28:0e:cf:6d:2b:19: 36:df:82:48:c9:b8:12:de:4b:24:9e:bb:ee:51:a7:91:02:1a: f5:21:9e:b3:15:85:5a:ed:e4:91:b5:df:20:60:c7:9e:f1:df: a6:2e:75:95:0d:ed:b1:8d:3f:03:a6:3b:b6:5a:51:60:fb:e8: 6a:71:04:c0:3d:7c:71:51:21:a1:e0:0d:ea:3f:70:f3:37:a8: 83:8d:07:3a:24:39:33:ed:0e:b6:b7:5e:42:37:ac:d9:c3:51: a8:e9:d9:e6:e8:ce:53:86:fc:30:92:93:c9:60:e6:c6:d0:d4: 6d:f9:ec:7e:74:40:51:53:da:96:a4:34:b7:95:b1:f4:5a:6e: 9e:c8:27:99:14:69:77:c5:2e:cc:af:ce:ea:94:5d:da:47:bc: 11:9b:11:3a:07:ff:80:b8:ad:17:ea:9f:b7:c6:87:d3:f4:69: cd:2b:f1:70:bf:b6:c3:79:5e:31:1c:a8:f8:75:50:d5:1f:03: dd:aa:83:3f:e9:c8:c3:0e:50:9e:4d:9d:d8:6a:8a:dd:f0:be: f5:04:26:3d:74:2b:c6:12:5d:32:ad:d5:6d:a4:e6:86:90:59: d6:ae:78:3a:01:1d:4d:83:b0:b7:36:b6:90:d3:10:e6:9a:34: 76:ba:74:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ06weA/3822GXm274GKU109MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwMzI5MTgwMTE3WhcNMjYwMzMwMTgwMTE3WjAzMTEwLwYDVQQD EyhjMTBjZmJkMDJmNDhkODg3NzQxMTFmOTczNjU3N2VkNGRhYjRhYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpMpDz4tCuKAmnYfePG5GRz5VQTP 5ZITCa4z8ZC0/k1E2ewmGTqhEly3H9po89Q1IZqHKk5d+koz35byOkkPIZm0eooF TEDL2xfLEaZWUpfbtutfCgwa5i4yJN9PLbuRDlVk2kNV4SWIw6p3tUwYYmQRqJwi nUpE2PUB5I5TZsZYdNKWB/V70fX9dP2PX4fdOFoGQqzVo/L9R7NtPwxa2ozUheE+ zbcXST1VJCSPTVVuW4FklD4lBuANg7uMuG6l6UQGMhZRvxpzJSZrrYViG+iVadD+ Kz28d7tKY+Uwi7a3KNJW6TPmkoGVVv+K2L7ORNUSi7nW9oszabWW63xVZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEM+9AvSNiHdBEflzZXftTatKq/MB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQLa2R+1 9x0PDbPVKA7PbSsZNt+CSMm4Et5LJJ677lGnkQIa9SGesxWFWu3kkbXfIGDHnvHf pi51lQ3tsY0/A6Y7tlpRYPvoanEEwD18cVEhoeAN6j9w8zeog40HOiQ5M+0Otrde Qjes2cNRqOnZ5ujOU4b8MJKTyWDmxtDUbfnsfnRAUVPalqQ0t5Wx9FpunsgnmRRp d8UuzK/O6pRd2ke8EZsROgf/gLitF+qft8aH0/RpzSvxcL+2w3leMRyo+HVQ1R8D 3aqDP+nIww5Qnk2d2GqK3fC+9QQmPXQrxhJdMq3VbaTmhpBZ1q54OgEdTYOwtza2 kNMQ5po0drp0fA== -----END CERTIFICATE-----Generated at Sun Mar 29 22:45:30 2026 by rpki-client