$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: m+ePmuMpIuDsXbGonv5PtCOidPb9NCUdJIKzn8+GV+o= Subject key identifier: 4E:05:20:47:32:B5:3E:96:7A:AB:2B:66:25:F2:B0:70:3E:5A:77:08 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019D38D2B268953D8108D7113E52548D4B7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 18B5 Signing time: Sun 29 Mar 2026 09:00:25 +0000 Manifest this update: Sun 29 Mar 2026 09:00:25 +0000 Manifest next update: Mon 30 Mar 2026 09:00:25 +0000 Files and hashes: 1: 3Uhad0KFSfjXI_TbydoftNMdE3g.roa (hash: j9tyqYt4el5e/EHBRQPaMKBm+kYVSqQDGKdC5+GV1fw=) 2: EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa (hash: BrnZ+O7PpPP2CgQz6l0MWy62IQSvfZEBI+G8ayJnLRE=) 3: GCKLMhjEZ4tgpahsAAW0b7v-pbY.roa (hash: vfauSOW8KSxhKm84diH34kDOUYgfp1RoadLmCV5cdWc=) 4: W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa (hash: fb2PFmFnYQYmWpVf2HANiiXyOyVRMMcnLRhOHSluDkI=) 5: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: R1LEmqxr6C1wTBIYFfRnL/wscN6C8BhHt2021ErqJsc=) 6: fuQjo-R8V7RgupEifO88mUFsfq4.roa (hash: XgKKf+T/JHflu47fZ8lbK7Ea+coPaRrFsg001BzHny4=) 7: m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa (hash: RVNHVX31tSGpQABOxa6EqSIdwiAZEEfgy9G0c8Rv6CQ=) 8: njVUBNP2pawlmJYfjO-aqV7rHxg.roa (hash: KsrtTqSnlW3K+gpEPkMgT8sO+EsW0Fbd90twROTiMXk=) 9: qSxlathEcN6ZfWcqIYKI4rq_zNk.roa (hash: LYI2xAakIbFGxMC1GmxnDwbT1/w57IsHNS5Uguz6j68=) 10: tA_6j6gquShwOWQHuXqZmv-DGJ8.roa (hash: MBd1V9peNX1ONVT7gAUeTBj/y3gvMH+RO35qWdORDv4=) 11: xrlQxD2aCilEx5MBkW5ICdMkjmI.roa (hash: XyJhHEW8YK45zRLRx/h09ilca39SOfBBhQAfbZq7s3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:d2:b2:68:95:3d:81:08:d7:11:3e:52:54:8d:4b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Mar 29 09:00:25 2026 GMT Not After : Mar 30 09:00:25 2026 GMT Subject: CN=4e05204732b53e967aab2b6625f2b0703e5a7708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:15:9b:17:12:2a:21:16:05:67:7c:9a:0f:a9: df:e7:b8:29:17:0c:fd:9f:44:46:2d:65:b8:cd:ba: c1:ef:54:36:e1:7b:ce:dd:67:f4:41:06:15:73:2e: b3:f9:55:2c:5e:99:47:cf:39:31:66:32:5c:26:33: 50:0c:d6:58:66:49:87:d0:ba:e5:66:3f:f2:09:e7: 13:a8:37:e1:cc:fe:48:16:4d:76:32:f3:30:13:66: 28:89:91:95:58:3a:39:85:05:a9:41:75:14:83:2c: b1:fd:03:4f:a1:5d:72:52:bc:c6:62:14:a5:3a:9b: 9b:8c:a9:dc:61:33:ba:28:c2:61:74:7f:c7:6d:6f: 39:b6:a0:f2:6c:f4:80:aa:82:1b:fa:b4:74:89:17: 27:a6:b4:f9:1f:7d:65:4f:da:17:28:76:6b:c8:0e: 6d:e3:7c:1b:c2:a0:ef:0e:3f:a6:6d:e3:69:2a:e1: 9d:67:19:c9:23:23:95:8b:6e:2f:77:af:a7:e3:37: 46:d5:ec:61:7c:a8:50:03:ae:d9:54:39:f3:e0:aa: 1b:c0:b3:c6:c6:5a:9a:70:58:5b:95:26:74:e0:aa: 0f:5d:c9:f0:d3:fe:0e:17:24:39:6d:7a:0c:12:38: ed:cc:57:82:67:b4:0c:8a:6a:77:04:b6:3c:57:22: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:05:20:47:32:B5:3E:96:7A:AB:2B:66:25:F2:B0:70:3E:5A:77:08 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:13:a5:b2:fa:19:7b:71:d8:b5:32:60:2a:2a:b5:e3:33:7a: 00:e2:2f:6b:7b:66:1c:e1:0e:2d:0b:03:6f:c3:d5:a0:4c:94: fd:ce:6c:35:31:27:35:18:bd:3c:4d:3a:79:21:c4:fb:22:4c: 18:49:a5:6a:ca:92:58:b4:ae:4d:4f:16:30:dc:fd:3c:87:6c: 7e:5e:b3:bb:da:70:d1:a8:e8:97:18:a4:cf:b7:fd:fc:4c:e7: 65:00:d0:dd:f9:f1:32:d2:f1:aa:ad:e9:b7:85:27:02:30:21: 16:ca:61:af:11:0e:36:6a:82:b4:c1:b9:ce:45:46:1d:55:87: f3:be:dd:94:75:1c:e0:ae:e5:22:da:89:4d:19:4a:ee:77:27: f3:16:aa:b4:f2:ce:04:ed:ec:ec:04:cd:0f:5b:93:ed:c5:43: b4:98:d2:67:66:70:5f:9f:63:35:60:0a:31:ac:1c:0d:50:a6: 5b:a3:41:46:b1:12:7d:d3:d9:d9:3c:7a:f7:3f:a4:ae:ad:22: f6:cf:03:ea:31:79:96:0d:6e:51:7b:53:1d:a4:a5:c4:18:6f: 16:f2:d7:30:2f:06:e0:0c:04:d4:5f:7a:39:9d:b7:7e:9b:c0: 5c:1e:a5:e4:89:56:b4:8d:c4:9c:1e:29:64:17:af:84:b8:0a: 06:06:c1:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ040rJolT2BCNcRPlJUjUt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjYwMzI5MDkwMDI1WhcNMjYwMzMwMDkwMDI1WjAzMTEwLwYDVQQD Eyg0ZTA1MjA0NzMyYjUzZTk2N2FhYjJiNjYyNWYyYjA3MDNlNWE3NzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BWbFxIqIRYFZ3yaD6nf57gpFwz9 n0RGLWW4zbrB71Q24XvO3Wf0QQYVcy6z+VUsXplHzzkxZjJcJjNQDNZYZkmH0Lrl Zj/yCecTqDfhzP5IFk12MvMwE2YoiZGVWDo5hQWpQXUUgyyx/QNPoV1yUrzGYhSl OpubjKncYTO6KMJhdH/HbW85tqDybPSAqoIb+rR0iRcnprT5H31lT9oXKHZryA5t 43wbwqDvDj+mbeNpKuGdZxnJIyOVi24vd6+n4zdG1exhfKhQA67ZVDnz4KobwLPG xlqacFhblSZ04KoPXcnw0/4OFyQ5bXoMEjjtzFeCZ7QMimp3BLY8VyKVGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4FIEcytT6WeqsrZiXysHA+WncIMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeROlsvoZ e3HYtTJgKiq14zN6AOIva3tmHOEOLQsDb8PVoEyU/c5sNTEnNRi9PE06eSHE+yJM GEmlasqSWLSuTU8WMNz9PIdsfl6zu9pw0ajolxikz7f9/EznZQDQ3fnxMtLxqq3p t4UnAjAhFsphrxEONmqCtMG5zkVGHVWH877dlHUc4K7lItqJTRlK7ncn8xaqtPLO BO3s7ATND1uT7cVDtJjSZ2ZwX59jNWAKMawcDVCmW6NBRrESfdPZ2Tx69z+krq0i 9s8D6jF5lg1uUXtTHaSlxBhvFvLXMC8G4AwE1F96OZ23fpvAXB6l5IlWtI3EnB4p ZBevhLgKBgbBJw== -----END CERTIFICATE-----Generated at Sun Mar 29 11:28:52 2026 by rpki-client