$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft File: DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json) Hash identifier: X2OeX0T6yTg/Vi6HlDJed3jRY+6eaWCvIjjOaNp/jok= Subject key identifier: D0:E7:78:A5:84:36:62:7C:59:74:6B:C2:6B:2C:3E:FE:32:7E:9A:7E Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019D0D43D89AA6AE168DAAD8589EB99EA3A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft Manifest number: 0713 Signing time: Fri 20 Mar 2026 22:00:43 +0000 Manifest this update: Fri 20 Mar 2026 22:00:43 +0000 Manifest next update: Sat 21 Mar 2026 22:00:43 +0000 Files and hashes: 1: 0kFTRKOE3jWGCAoyPfo6VNl6gNY.roa (hash: il4KXb3o4UsVQZBTVvlrB+YuKW6gXafGwP3odHFQM4k=) 2: 5tXe2zaXfL98ChLUpwIlPPTOuRE.roa (hash: ShHgB4u3INcSmktKgFCjUMgFfMb0blhwlxT/bc+3fno=) 3: 7dxEnT1CfSxLe7_sqKtwcYTqKsM.roa (hash: QclYUg3Wd/a2IKDACLA5HXN28WB2Yrc+C32YeqYRisk=) 4: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: eHgrb/0KfVwi5DZ7WOs8PZkA24b1kP2d7qWRGVj/AmU=) 5: D_vjqcKu-RrA1L9-NPBKRQy6u2w.roa (hash: +7JpMBrIwFcMPab0ahGtI2QPpD0AvXli50PzvLVY2SU=) 6: Gay3j7r5bMuL1O3lqGZJU_WbCJA.roa (hash: 8Z1yEawpjvuXMIl7aRVa0CurHKu9yij+BtnWRFN4QL4=) 7: HxYp59riIlza87eFARnMPYgySWE.roa (hash: IbWFXF9QrKF/nXu4+XYR7TDUvfZ6vCunnlKcD+Se6xU=) 8: bfjrc-oiggd1qo6rctoBZsBjqBA.roa (hash: gT8ybax2ALNt41GPsw02TSXazlNeSoaU2pZJZ58CxTY=) 9: g3PUuxT97-2LGmkkTBgCaocYVWg.roa (hash: /KrGqJkYBaCgIBkGaUCAjARF0qYURlZ9ybA5ulV03vI=) 10: gy_RIzTwo_3ivq0rBuKmnXuwaM4.roa (hash: tCWSNQOzb9A+PPchWiIZ5rJnBeXKzzZ8nzXvj/Dyy5Y=) 11: l1qkD1UHfYzvtKuyKTFqrAuBuJk.roa (hash: wqochz5uJYEA3/x5B74StT9Oudun8ct7ysc34E1IoCU=) 12: magE7Oqvt4vQBy0S0W-6ngBkDPE.roa (hash: lje+xFMlOYI2U2KnAHNmX1xI+2awOlplYxa8y2jo/S0=) 13: qkZl7Y-BYCeOqsF0aqXUQW2Tb-o.roa (hash: TT9/IX2KAPFGUSpknMRY3cYrPyMlNfpuIfjw0qp1tbc=) 14: qlU76BiFhhJCVY5gi0gNecZGDlk.roa (hash: NkyRc+BbNdv9c7mt+XYquTnIBQnCB74+gBL3MZGFCYU=) 15: shZLeP93q7Ys5DpcrI5h25NqIQA.roa (hash: k13Nsp++ZTLCP5D6TVriaqfsI1RaaCVT9H9M0b27unE=) 16: vcGSAq_UFOrKcbjq8gwdxfB1Ibo.roa (hash: 3NDxRub2Y5A+FcimvidA2GMSTgfLKOnltwEtyfMEJ1E=) 17: yB_CfrIGe_rOQ30-OH4e0E-bsAk.roa (hash: VN5DLkVVpohVvi5e8W8Tot76S9TCt+6OKSkdhXkpmYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 22:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0d:43:d8:9a:a6:ae:16:8d:aa:d8:58:9e:b9:9e:a3:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Mar 20 22:00:43 2026 GMT Not After : Mar 21 22:00:43 2026 GMT Subject: CN=d0e778a58436627c59746bc26b2c3efe327e9a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:05:79:f1:73:83:dc:2b:01:e3:bb:d4:64:f8: 45:e6:9e:c4:b8:6f:1d:35:cb:15:b7:d2:32:5d:c4: a0:0f:3f:d7:68:c9:18:a6:09:35:53:6d:4d:f2:11: 52:6e:a6:3f:a5:79:01:df:1d:22:69:51:8d:8d:e8: 0b:8b:1f:d7:a7:49:01:b4:a6:19:a4:8c:71:77:b7: a0:0f:62:e3:ab:dd:38:e1:32:f7:03:81:d7:4b:56: 0b:81:21:fd:1b:4c:6e:7e:ad:45:72:c2:6e:64:7e: 5e:64:97:7f:1c:9e:ae:43:c2:87:3b:b1:80:a5:0d: 70:20:c5:18:f0:9f:38:c9:55:e5:ea:35:fd:88:36: f2:28:fe:84:14:f9:07:f1:46:81:93:89:05:81:ae: 5e:53:bf:f1:4d:7c:68:04:eb:23:07:da:c5:d9:6e: b0:d6:a1:7e:40:73:30:22:f6:5c:b0:7a:ab:07:91: 09:0e:10:0d:02:05:97:87:31:20:23:6a:38:56:48: e6:92:34:e5:79:99:c5:cf:3b:d2:ca:77:32:e2:f6: ef:66:bc:ae:7e:9c:3c:6b:64:b7:e2:22:86:7a:0c: df:ea:8a:89:05:1f:15:23:69:ee:42:42:e2:b7:5f: 89:ad:bb:37:59:36:c7:2a:dc:e9:8c:b8:64:d9:29: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E7:78:A5:84:36:62:7C:59:74:6B:C2:6B:2C:3E:FE:32:7E:9A:7E X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d1:f2:99:c9:32:69:f9:42:95:a0:00:b5:81:84:89:db:ab: 37:51:fc:55:c4:95:b5:ad:3b:e3:65:0c:c3:6a:8d:8f:4f:0a: ce:70:0d:5c:70:ca:e9:4c:ce:6a:88:46:b3:7c:0c:12:99:93: 24:89:21:e1:13:ce:b1:c1:e9:de:b0:62:e4:c1:ba:85:65:f5: 82:7b:98:4f:cb:bb:1a:76:00:7c:aa:a6:16:41:26:57:cd:a6: b8:73:7f:fe:a0:bc:2c:04:0f:7a:62:34:70:fd:42:aa:c0:f2: dc:02:15:08:4a:5f:1d:5e:2e:a4:eb:2c:0b:79:c0:1d:32:63: f1:46:c7:af:b7:21:66:03:11:ca:c9:cd:20:6c:e4:0a:f7:c0: d5:6f:35:6d:29:82:be:0b:c0:33:4e:81:e4:ef:91:82:4c:e7: db:bc:53:f4:d1:71:f2:d8:d6:ec:cb:31:f4:f7:8d:f9:bd:39: 89:2a:8e:a6:9d:33:c9:21:58:55:2c:35:2c:1f:f2:51:82:29: 08:a4:77:ee:5e:41:a1:2f:2f:de:f6:af:48:2b:fe:0c:57:5c: 0a:53:52:c4:f8:16:54:d7:7e:1a:11:f3:3f:d8:09:e3:7e:fb: f1:1e:76:fc:7b:18:ee:57:f0:76:cc:2f:71:77:cf:30:88:24: 71:b7:43:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0NQ9iapq4WjarYWJ65nqOhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjYwMzIwMjIwMDQzWhcNMjYwMzIxMjIwMDQzWjAzMTEwLwYDVQQD EyhkMGU3NzhhNTg0MzY2MjdjNTk3NDZiYzI2YjJjM2VmZTMyN2U5YTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAV58XOD3CsB47vUZPhF5p7EuG8d NcsVt9IyXcSgDz/XaMkYpgk1U21N8hFSbqY/pXkB3x0iaVGNjegLix/Xp0kBtKYZ pIxxd7egD2Ljq9044TL3A4HXS1YLgSH9G0xufq1FcsJuZH5eZJd/HJ6uQ8KHO7GA pQ1wIMUY8J84yVXl6jX9iDbyKP6EFPkH8UaBk4kFga5eU7/xTXxoBOsjB9rF2W6w 1qF+QHMwIvZcsHqrB5EJDhANAgWXhzEgI2o4VkjmkjTleZnFzzvSyncy4vbvZryu fpw8a2S34iKGegzf6oqJBR8VI2nuQkLit1+Jrbs3WTbHKtzpjLhk2SlTUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDneKWENmJ8WXRrwmssPv4yfpp+MB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNHymcky aflClaAAtYGEidurN1H8VcSVta0742UMw2qNj08KznANXHDK6UzOaohGs3wMEpmT JIkh4RPOscHp3rBi5MG6hWX1gnuYT8u7GnYAfKqmFkEmV82muHN//qC8LAQPemI0 cP1CqsDy3AIVCEpfHV4upOssC3nAHTJj8UbHr7chZgMRysnNIGzkCvfA1W81bSmC vgvAM06B5O+Rgkzn27xT9NFx8tjW7Msx9PeN+b05iSqOpp0zySFYVSw1LB/yUYIp CKR37l5BoS8v3vavSCv+DFdcClNSxPgWVNd+GhHzP9gJ43778R52/HsY7lfwdswv cXfPMIgkcbdDsg== -----END CERTIFICATE-----Generated at Sat Mar 21 09:03:02 2026 by rpki-client