$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: TgoKeac54cl97NZppFDx/quQ3OhGvcmmNke5ETMK1do= Subject key identifier: E9:B0:33:DB:17:4D:58:6C:FE:6D:64:60:A4:FB:36:CE:AA:7F:88:AB Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019D3AC1E6E535670A50DED2FC9B13F82B72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0C42 Signing time: Sun 29 Mar 2026 18:01:19 +0000 Manifest this update: Sun 29 Mar 2026 18:01:19 +0000 Manifest next update: Mon 30 Mar 2026 18:01:19 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: QP9CNlQFuVB9wS0BW21smKX3lBU.roa (hash: dwNtwT/3EY1R/q2zrzRe6Xma12Bkc4BEFlUrU3pbm+Q=) 9: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: nsxEpFWc6cOeruM/Nz0efeUUhdsW0Qt4w7YnPBzhMpI=) 10: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: fzxoNfiPUD7xeSSlqYVskKUZ9gQ.roa (hash: XjcQQ4lJaJtOIDs0K1l+gH5MfloiUUpBeoZaPEDBX6c=) 14: imTf8No1ZINbCYJNVjvMbyKdYDc.roa (hash: v7b/CtSyIh4Qh/63ZcyMa4HLHKrxYzw4yW2zbhrt2aQ=) 15: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 16: jdhRRSqw1KV-OBkZuUAJ-tCWDik.roa (hash: PZnlHT69L4VcU/X0HEwE+Wn3yCWoZ+g03Z4fHifOKPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 16:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:3a:c1:e6:e5:35:67:0a:50:de:d2:fc:9b:13:f8:2b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Mar 29 18:01:19 2026 GMT Not After : Mar 30 18:01:19 2026 GMT Subject: CN=e9b033db174d586cfe6d6460a4fb36ceaa7f88ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:25:be:3a:9d:cd:98:91:89:04:41:8b:2b: 0a:e3:64:8c:88:4f:31:07:2f:b2:f9:e5:7d:90:05: cb:ec:49:dd:a0:d2:3a:b3:49:f0:96:bd:14:cf:96: ef:fb:07:a1:be:bc:69:93:71:1b:47:6c:69:74:45: 91:c4:9d:40:04:03:b3:13:fd:d0:30:bd:87:4f:9c: a5:79:eb:78:c1:98:0f:b9:79:06:82:32:9e:d8:f4: 72:b2:d6:48:4f:a2:05:c0:c9:57:b7:96:4d:d0:f6: d8:ce:23:fd:6c:72:4e:e7:2e:c3:31:53:77:91:3e: 6c:60:3c:3e:3d:04:d6:e0:0a:db:2e:86:41:4a:f1: af:4c:3c:58:b8:51:30:fd:28:dd:96:37:c2:78:6f: d6:cf:d0:5d:90:9c:e1:c5:67:48:ef:40:e1:fa:8e: f8:11:a8:d0:24:3f:33:4f:d8:c9:6b:33:77:85:43: 17:d8:77:df:a8:d6:75:37:ab:47:db:df:02:cb:cf: 93:6d:1f:31:79:b6:1b:13:09:32:18:9b:9a:65:0c: ca:fd:3e:d6:5f:02:74:dd:16:43:b3:2c:d1:56:d1: c9:3f:b8:9c:c1:a9:76:97:13:8e:ab:53:4e:54:63: 17:ae:7a:99:1a:8a:27:6e:f7:ca:2d:a0:38:cb:d1: ab:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B0:33:DB:17:4D:58:6C:FE:6D:64:60:A4:FB:36:CE:AA:7F:88:AB X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b1:20:da:3d:35:8c:ed:27:3b:2a:62:8c:33:f8:bf:4c:59: 91:c1:ce:4c:d9:b1:c3:70:34:1a:d6:db:d3:a7:28:82:98:d9: 66:25:c4:56:29:4c:46:9c:0f:07:9b:44:ca:eb:94:29:51:fd: 59:05:1d:96:ff:01:b0:a6:4b:13:b7:2e:b1:78:4d:f7:81:08: 82:5d:8b:dc:77:df:73:42:95:2c:56:e5:6d:af:10:08:ef:6e: 9b:a8:1b:ea:8c:04:89:eb:93:6b:04:e9:e4:c8:ee:18:db:85: b1:11:a1:b6:fd:0f:21:14:f6:3d:a3:03:f4:02:ca:aa:0a:d8: 48:34:f5:2f:db:b0:cf:1c:cd:22:b7:cc:3a:4e:93:a5:11:1c: 58:e2:eb:41:cf:1e:24:95:72:a8:44:25:13:5c:95:1c:31:f5: e4:96:18:f0:01:a1:d0:21:bc:1f:3e:c2:df:70:4c:8c:7e:93: 7e:20:5b:ab:1b:cf:25:4c:dc:d7:d6:71:29:50:ac:61:3d:a8: ad:eb:49:de:95:e0:86:bf:24:15:ab:c6:9f:c1:23:e2:d4:0d: bb:df:44:c3:91:af:e1:c8:3b:a4:f8:c1:59:3c:0d:a7:a6:f0: 1b:62:bb:86:84:22:f8:4f:f6:6f:ca:92:b0:27:05:ca:45:36: 40:eb:d1:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ06weblNWcKUN7S/JsT+CtyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMzI5MTgwMTE5WhcNMjYwMzMwMTgwMTE5WjAzMTEwLwYDVQQD EyhlOWIwMzNkYjE3NGQ1ODZjZmU2ZDY0NjBhNGZiMzZjZWFhN2Y4OGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpwlvjqdzZiRiQRBiysK42SMiE8x By+y+eV9kAXL7EndoNI6s0nwlr0Uz5bv+wehvrxpk3EbR2xpdEWRxJ1ABAOzE/3Q ML2HT5yleet4wZgPuXkGgjKe2PRystZIT6IFwMlXt5ZN0PbYziP9bHJO5y7DMVN3 kT5sYDw+PQTW4ArbLoZBSvGvTDxYuFEw/SjdljfCeG/Wz9BdkJzhxWdI70Dh+o74 EajQJD8zT9jJazN3hUMX2HffqNZ1N6tH298Cy8+TbR8xebYbEwkyGJuaZQzK/T7W XwJ03RZDsyzRVtHJP7icwal2lxOOq1NOVGMXrnqZGoonbvfKLaA4y9Gr2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmwM9sXTVhs/m1kYKT7Ns6qf4irMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7Eg2j01 jO0nOypijDP4v0xZkcHOTNmxw3A0Gtbb06cogpjZZiXEVilMRpwPB5tEyuuUKVH9 WQUdlv8BsKZLE7cusXhN94EIgl2L3Hffc0KVLFblba8QCO9um6gb6owEieuTawTp 5MjuGNuFsRGhtv0PIRT2PaMD9ALKqgrYSDT1L9uwzxzNIrfMOk6TpREcWOLrQc8e JJVyqEQlE1yVHDH15JYY8AGh0CG8Hz7C33BMjH6TfiBbqxvPJUzc19ZxKVCsYT2o retJ3pXghr8kFavGn8Ej4tQNu99Ew5Gv4cg7pPjBWTwNp6bwG2K7hoQi+E/2b8qS sCcFykU2QOvREw== -----END CERTIFICATE-----Generated at Sun Mar 29 20:24:35 2026 by rpki-client