$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: DpKtagpMVHy/GiUfDyeczoLZHtug9NuNhIuUlKr0wsQ= Subject key identifier: 6D:19:AD:BA:29:8D:41:48:C6:D6:B2:57:47:BD:29:52:4A:A8:C7:7B Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019D38D2B72390D3D329204F2B4ABCAF7C30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 165E Signing time: Sun 29 Mar 2026 09:00:26 +0000 Manifest this update: Sun 29 Mar 2026 09:00:26 +0000 Manifest next update: Mon 30 Mar 2026 09:00:26 +0000 Files and hashes: 1: 6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa (hash: oIH5kZRy4QQWIkNsi+TOmhTdqOjqPl4X4VEu5ZY7rrc=) 2: 6yY85OHD-46vFhP-wtPZWs3MeCY.roa (hash: hOno4SiXgMirUzFVpAXsEoPlI4QIn/ikV8WWQvXsoXg=) 3: 8McrGRfEqcovWnRSpklEmiBGADA.roa (hash: xszqUKxiKaCx1G5C+PDbNWuR86U3w6LgZy01FF25iiY=) 4: BooqKG4SsYSQxh6PGW72NBqbtuw.roa (hash: TU0xZxrNhYVeehRBPFf+LnBXvIDYoAVW0L6Hmfayq5M=) 5: Dib_4B7-59g2qlFon4U52XelorA.roa (hash: 7rKsJnSr5QX2uVe31jye987BgbcYNd7z/lfjZmUFdDY=) 6: J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa (hash: PhWWvX6X2tLUSE0WxzAfwrSrZ7vyehY98guTk5gmtdI=) 7: Td85PzLGixLgYgdBT3GS17rfwTQ.roa (hash: ZtLYgrcf2o9oO80ckMCQ8oe+MvEY9qGa8/wSqJ2K4VY=) 8: bpUtIFcpj0wFmx0CClP1L0TgIfY.roa (hash: JpwXWXow0nu1gKjNId4RQPrmV9a8gFVj5DrvmpBJ7Ac=) 9: dkSZC1vcgEsyqm56yAJmonI1P1E.roa (hash: Wn8sFewfyDAMaX3VNG1l/GCgIijws7/FwmZlH3//5Vk=) 10: eH8mEFUxJaD15bIkdrb0eoEm43Q.roa (hash: iVNXmnAd/Aq9qGpFjFCXba0ETiSTvXsmOGBSWpVw4y4=) 11: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: /SpvoG2gjKlDmFP6SU4J+77gxaxlE9Hi21RG95sRM7g=) 12: vJiRTEd6tTiZDm_JR7rLwIox0zw.roa (hash: IYF63rRulzFNBpbGnH/dDmLviCvKmUvwCJNoi515Gao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:d2:b7:23:90:d3:d3:29:20:4f:2b:4a:bc:af:7c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Mar 29 09:00:26 2026 GMT Not After : Mar 30 09:00:26 2026 GMT Subject: CN=6d19adba298d4148c6d6b25747bd29524aa8c77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:4a:5e:f4:7c:38:31:8d:42:dd:f4:72:0a: 9f:b6:b7:71:63:eb:a1:fb:e9:73:d2:8c:23:89:68: c1:6a:5a:b0:4f:23:55:36:0c:b1:ac:e7:27:ad:22: ea:68:ad:7c:4b:1e:b0:43:b0:83:5f:5d:11:e4:b8: ed:e5:f2:88:a1:e0:8c:55:13:e3:a2:8f:3a:fd:39: e0:8a:f3:6f:ed:fa:bf:a9:4a:de:3a:c1:41:7f:ab: 63:df:4d:58:b3:fc:74:c1:48:67:16:62:bf:cc:17: 8c:0b:8a:79:fe:a0:23:3e:15:58:b6:7c:23:93:6e: a7:9e:56:74:23:c8:a3:ca:cf:03:f2:2b:c1:a8:d7: 6a:ac:8e:59:26:90:eb:7d:96:f2:5b:45:b2:56:d4: ef:d6:0f:c8:5d:86:4b:f6:f1:cd:c2:33:ea:1a:9f: 4b:4c:62:ba:19:b0:6d:bf:14:a3:6d:c5:d6:e8:f1: 60:65:bb:62:7b:f2:7c:08:3e:11:0b:56:6f:eb:6a: 7e:69:63:73:20:6e:77:ea:a4:11:48:0f:03:b4:18: a0:9e:da:8f:84:bb:43:e1:72:41:c0:df:bd:ab:32: a1:aa:10:da:9b:45:f5:c8:52:c5:32:e1:96:4d:4f: 58:e9:b1:1e:da:a8:b3:97:0b:66:07:b9:57:cc:ed: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:19:AD:BA:29:8D:41:48:C6:D6:B2:57:47:BD:29:52:4A:A8:C7:7B X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b4:51:de:07:92:2f:b7:47:4e:4b:96:f9:ba:8e:60:b7:ce: b6:38:b0:14:ff:48:f6:4f:52:0c:4c:65:55:68:cb:59:b5:cd: d6:90:aa:da:a9:00:8f:c7:e5:42:b0:f2:2d:f1:b1:fa:91:02: b5:85:ec:1b:93:25:24:db:e6:dc:36:de:6b:30:32:87:ab:d9: b4:87:9e:e7:ff:1f:e1:48:21:4b:b5:53:3d:ce:ff:1b:f7:1b: ff:46:00:9b:4b:63:a7:9c:b6:98:d0:a6:ee:8f:d4:4e:8a:25: fe:02:fa:21:69:1c:a1:17:4f:34:dd:ee:49:37:c5:e9:70:02: 79:f7:d9:f9:72:e1:81:8e:99:21:6c:28:ff:42:57:c7:53:f8: 99:0e:c4:5b:4d:03:90:99:cc:19:a1:d0:31:3d:e7:b6:77:10: fa:29:8f:62:a1:ba:ce:b0:7a:b4:4d:a9:23:8e:7c:b1:65:60: 1d:f2:c8:0c:66:33:a0:ba:82:bb:38:ea:4c:38:b7:af:a1:90: fa:64:82:f6:9b:b7:15:0d:08:ab:c7:24:8e:08:4e:ca:2d:f1: b0:e3:3e:51:09:1e:ac:ed:7e:7d:f2:67:78:6b:51:16:71:b1: 9b:30:3d:d3:bd:e8:e1:ac:84:ec:80:28:bd:0b:bc:c4:09:41: a7:e3:c4:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ040rcjkNPTKSBPK0q8r3wwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwMzI5MDkwMDI2WhcNMjYwMzMwMDkwMDI2WjAzMTEwLwYDVQQD Eyg2ZDE5YWRiYTI5OGQ0MTQ4YzZkNmIyNTc0N2JkMjk1MjRhYThjNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVhKXvR8ODGNQt30cgqftrdxY+uh ++lz0owjiWjBalqwTyNVNgyxrOcnrSLqaK18Sx6wQ7CDX10R5Ljt5fKIoeCMVRPj oo86/TngivNv7fq/qUreOsFBf6tj301Ys/x0wUhnFmK/zBeMC4p5/qAjPhVYtnwj k26nnlZ0I8ijys8D8ivBqNdqrI5ZJpDrfZbyW0WyVtTv1g/IXYZL9vHNwjPqGp9L TGK6GbBtvxSjbcXW6PFgZbtie/J8CD4RC1Zv62p+aWNzIG536qQRSA8DtBigntqP hLtD4XJBwN+9qzKhqhDam0X1yFLFMuGWTU9Y6bEe2qizlwtmB7lXzO0egwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0ZrbopjUFIxtayV0e9KVJKqMd7MB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbRR3geS L7dHTkuW+bqOYLfOtjiwFP9I9k9SDExlVWjLWbXN1pCq2qkAj8flQrDyLfGx+pEC tYXsG5MlJNvm3DbeazAyh6vZtIee5/8f4UghS7VTPc7/G/cb/0YAm0tjp5y2mNCm 7o/UTool/gL6IWkcoRdPNN3uSTfF6XACeffZ+XLhgY6ZIWwo/0JXx1P4mQ7EW00D kJnMGaHQMT3ntncQ+imPYqG6zrB6tE2pI458sWVgHfLIDGYzoLqCuzjqTDi3r6GQ +mSC9pu3FQ0Iq8ckjghOyi3xsOM+UQkerO1+ffJneGtRFnGxmzA9073o4ayE7IAo vQu8xAlBp+PEfg== -----END CERTIFICATE-----Generated at Sun Mar 29 11:27:10 2026 by rpki-client