$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: GnzMk8wv5HICxUjDJiprz+0eit+9MvBLzmiZhDGk4nU= Subject key identifier: 3F:94:D0:E4:02:63:E9:11:94:DF:ED:38:D3:2E:2D:5F:C8:65:E4:2E Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019D39E56CEE85CF41BDD14C45F5BBA31EAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0D91 Signing time: Sun 29 Mar 2026 14:00:30 +0000 Manifest this update: Sun 29 Mar 2026 14:00:30 +0000 Manifest next update: Mon 30 Mar 2026 14:00:30 +0000 Files and hashes: 1: 0C3-RBDeBEJHq-GMCpkbepyqeas.roa (hash: R8WsGdih9UgzIgy88xBMPJbYD5HZmR7kpCNGX1pKVbQ=) 2: 1BUsNPvxh-nEaW12HiIotyTOmeE.roa (hash: Eb+LrSVeh6nCpX6RDLUkP/OBvISRkTfhNDgbqOiV4vY=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: XrMDWycPl/rJ6s5qsmc7ScNdLfZc4ffngscvhEhurtk=) 4: ARSSC9zHIGL8uPCTzOB-i0uK97g.roa (hash: xCWcyeUZ+Gey9KypecDF2UwLJVOuDsCEWO1xuzT51Jc=) 5: DNw48YVZHSvMBEUuvya7j6ydIIE.roa (hash: GQAHxbg19rDLpPVxP7BsuOIaocVhRmeV7czR8XW3KEM=) 6: Hc1-eWA2FbYrQtAUjfotRVnvebo.roa (hash: +wyBxaU8SXxYP9llfsxrS9RJyhJbGb3UqzpK5s4+GG4=) 7: SkR9OA9_dcUyBRQNQpyR0J3fL7U.roa (hash: ZkaVuswuFGESnBKz9fl3MI+QLEQQbxe2PSzXDPH+HoU=) 8: Yi680tyzJGfIAumOzsiKpDqyZ-g.roa (hash: k3JeaICryRPO3kOoypJyQPVZrn3TdIMe/T4lvOZb9yo=) 9: fJW7EYfD-50gKtZxv7Uhc3IrH24.roa (hash: w436OnY6qjYWmprn/yHiq2hzXNy8k69Hv/EWXbmw8n0=) 10: kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa (hash: CrMe+KpHmjRar77RkffCDnmY1XQPJsNcEG8vS6cPsZI=) 11: mFW4zADWbotzoU0wzEidrSWH-UQ.roa (hash: v8M/uk7P0Ux+9wY32sSP1YJp6v/XbIvApRLKBpQlUaU=) 12: o0J93e2ynPAO_ooBBrsbWpkJmVk.roa (hash: 9+ceM91NO20zNjq2ssN5ZXrUJuK961JXQqmxnpqcpFM=) 13: qIXOSdQAmM-9W59tIvFrjCOacag.roa (hash: t9/LH8Ao84MhMXwBIeg/CGYXSM84XUqQW9CXizDPd2g=) 14: scmHvFPvVyV9IKgskiPXIFZZliA.roa (hash: x+i//mSRz34wAqe4SEf89qg0Z8YDvymsxjLahBkl1LM=) 15: tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa (hash: Ptc+FGC+cpAZyzLKTVYPy89IR+7KjxXcG3j40Vai/9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:e5:6c:ee:85:cf:41:bd:d1:4c:45:f5:bb:a3:1e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Mar 29 14:00:30 2026 GMT Not After : Mar 30 14:00:30 2026 GMT Subject: CN=3f94d0e40263e91194dfed38d32e2d5fc865e42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:86:4c:4b:a4:ed:02:00:bf:63:3f:32:1a: bc:4f:8a:fc:e4:57:6c:6f:de:7f:36:68:c5:d8:5b: 48:da:95:b8:92:0e:05:a7:db:8a:79:c4:7a:38:36: f3:b4:9f:e1:6f:2a:66:9a:16:f2:44:4f:87:5f:0d: 54:2b:d7:ac:89:c4:dc:01:c6:00:be:82:44:b2:d9: 03:44:28:01:80:9c:e7:ef:eb:ca:10:a8:d1:d2:4d: 79:be:3f:66:f7:e1:bc:39:28:42:9b:03:c1:b7:90: 62:0d:df:12:1c:e3:ff:3a:c2:2a:43:97:7e:38:01: 0a:3a:29:a9:ac:b8:fc:28:94:ab:6d:91:a1:c0:e9: 43:38:58:7c:97:c7:22:ff:50:0c:86:dc:16:0b:0f: 16:a0:45:c7:86:2c:fa:02:16:21:49:6b:91:66:6e: 38:ad:9c:bf:a2:b3:3a:42:e1:ea:5c:8a:e9:1b:ad: f7:31:94:c9:0f:93:29:82:5f:bd:dc:8d:23:eb:fa: 4c:47:78:91:6e:78:cc:b0:fc:ef:44:17:e6:33:6c: e6:95:75:b0:5a:cf:00:84:58:0f:ce:e1:58:07:bd: 12:40:8f:80:f2:8d:e7:6f:82:2b:70:c3:85:dc:89: 90:6c:ad:08:7e:ed:2c:ca:0e:87:b7:88:14:2b:5a: 7f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:94:D0:E4:02:63:E9:11:94:DF:ED:38:D3:2E:2D:5F:C8:65:E4:2E X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:18:31:b6:83:d2:2f:56:fa:df:95:6a:55:3f:0a:11:9a:ff: 5d:ed:d3:47:01:61:7c:ac:b1:59:36:c8:86:58:4f:a2:65:44: bf:77:e5:33:2d:45:d6:20:7e:a7:13:cd:38:c5:e5:1b:cd:3c: 64:14:5b:02:75:9f:f8:71:89:18:4f:df:0e:2d:1a:8f:e1:57: 04:1e:63:d8:50:6d:32:85:97:5f:9b:b0:9f:64:7e:24:92:8e: 8c:0f:08:f7:1d:ff:69:84:77:64:2f:87:8c:6b:10:b7:c8:86: 16:40:34:00:a2:a1:b6:0d:b1:ad:03:bd:c8:87:40:ed:3a:49: 22:62:09:8c:7d:25:d7:4b:ff:b2:0d:bd:90:1f:58:9e:a5:96: 73:26:79:03:2b:5e:01:52:82:a0:1f:bd:d6:50:75:e8:93:24: 74:07:ea:5b:cb:7c:1f:79:5c:d3:4f:d6:ff:c6:12:3e:1f:7b: f1:ea:46:1d:bc:9a:d5:a4:24:3e:a3:b4:21:d6:45:47:c8:a9: 36:c2:4a:cd:00:de:a6:34:30:2e:99:d5:e7:20:2f:2d:07:b9: aa:d6:fb:16:b6:57:13:06:85:aa:6c:59:16:86:84:04:9d:30: c2:2d:6b:73:a9:69:10:62:a6:d2:dc:aa:3b:60:30:17:52:41: e0:8a:63:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ055Wzuhc9BvdFMRfW7ox6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMzI5MTQwMDMwWhcNMjYwMzMwMTQwMDMwWjAzMTEwLwYDVQQD EygzZjk0ZDBlNDAyNjNlOTExOTRkZmVkMzhkMzJlMmQ1ZmM4NjVlNDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR6GTEuk7QIAv2M/Mhq8T4r85Fds b95/NmjF2FtI2pW4kg4Fp9uKecR6ODbztJ/hbypmmhbyRE+HXw1UK9esicTcAcYA voJEstkDRCgBgJzn7+vKEKjR0k15vj9m9+G8OShCmwPBt5BiDd8SHOP/OsIqQ5d+ OAEKOimprLj8KJSrbZGhwOlDOFh8l8ci/1AMhtwWCw8WoEXHhiz6AhYhSWuRZm44 rZy/orM6QuHqXIrpG633MZTJD5Mpgl+93I0j6/pMR3iRbnjMsPzvRBfmM2zmlXWw Ws8AhFgPzuFYB70SQI+A8o3nb4IrcMOF3ImQbK0Ifu0syg6Ht4gUK1p/vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+U0OQCY+kRlN/tONMuLV/IZeQuMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThgxtoPS L1b635VqVT8KEZr/Xe3TRwFhfKyxWTbIhlhPomVEv3flMy1F1iB+pxPNOMXlG808 ZBRbAnWf+HGJGE/fDi0aj+FXBB5j2FBtMoWXX5uwn2R+JJKOjA8I9x3/aYR3ZC+H jGsQt8iGFkA0AKKhtg2xrQO9yIdA7TpJImIJjH0l10v/sg29kB9YnqWWcyZ5Ayte AVKCoB+91lB16JMkdAfqW8t8H3lc00/W/8YSPh978epGHbya1aQkPqO0IdZFR8ip NsJKzQDepjQwLpnV5yAvLQe5qtb7FrZXEwaFqmxZFoaEBJ0wwi1rc6lpEGKm0tyq O2AwF1JB4IpjMQ== -----END CERTIFICATE-----Generated at Sun Mar 29 19:51:18 2026 by rpki-client