$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: RGkwxjzbMacM1zVb9CKDUuYo4cNSWB7XvrONSTFxfQM= Subject key identifier: 40:F5:E6:B2:ED:BB:51:FA:8E:87:F9:43:56:3D:AB:41:A9:98:55:CD Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019D394149AD8FF64A65B07195F8F5C3A51F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 1898 Signing time: Sun 29 Mar 2026 11:01:13 +0000 Manifest this update: Sun 29 Mar 2026 11:01:13 +0000 Manifest next update: Mon 30 Mar 2026 11:01:13 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: 1MQE1FGrjBoTzgiekqZcVPgKoXPFtGXu+txmmwBEwU4=) 2: 8cM6v3_NRAZ3FP_fGe0mwmajY0k.roa (hash: UZQldaFo6xwnQkumeQ30d5+3aDGt7jMCik6EMuRJupg=) 3: AA4leRD0fxCP27pMiyTWgt1l_rg.roa (hash: 7SvYjkQmEnHNW0Fizpa0BEm4+FNoAcLpGmBVskPF0pY=) 4: AnJCTd7AgRSldDmx71BvWIQlsjc.roa (hash: VFBhkSbr4RUTAOsdzP+CuaTF7y4EenVQsmWrwQQVwpM=) 5: D9vysDJ6akM7Z66wywlmqWF3jxM.roa (hash: +6sSHR1vJhbnSV1+bNKy86Yi96WvoRkEvwudcBXDAQg=) 6: ES-7aSo6ovYXFf1ggrOgufF4HXU.roa (hash: oBAEPOe3qVf8emRhcuSX1FU4S9ycxaYKQRzrtaIuUZQ=) 7: dBEozjZ87taP7CwFVSXV3w6pkxQ.roa (hash: Q0IadO2WrRqgDE01zeYb4r27Fa+c+ppGgdLscaUKNKk=) 8: kLGlFczsrbvI1LLNYABL3V31uw4.roa (hash: PyJOpPlpidMPg9tlr0wrxczB6f3WILsayIOfBgsOza4=) 9: lIxr1Y2g6tW4Go6HwrrCY4g1GhU.roa (hash: qocUAMn7M/1zyYPDlsc7BcT51RuGObx2kW5wM3NnVyE=) 10: rDXd_OZlN4Uiv52rfRn8xHDUy80.roa (hash: 91Ja2DiUDudi8VvOpGDDJuXajBkTzaFVadsjPhZfAy8=) 11: xVvAeAbjAnywjqQvLFjnqGabFzo.roa (hash: MHe3EjYa15PyEjrwN5cSdo1Ogd8ywELYCfO8/S46e2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:41:49:ad:8f:f6:4a:65:b0:71:95:f8:f5:c3:a5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Mar 29 11:01:13 2026 GMT Not After : Mar 30 11:01:13 2026 GMT Subject: CN=40f5e6b2edbb51fa8e87f943563dab41a99855cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:88:d0:bf:d3:e4:3c:f8:3d:c1:9f:d3:0a: 17:2c:ce:e0:84:c9:b9:6b:db:8c:f7:b2:ec:1b:a9: ca:f4:0d:6e:65:a5:83:0b:c3:a7:47:f7:ab:de:f8: 04:af:aa:be:ee:5c:89:41:3c:48:27:fb:8a:1a:8c: b4:94:40:e5:0e:7d:ec:7e:96:cb:6e:90:39:9e:4e: b9:68:34:e5:d2:59:cf:3c:08:81:32:5c:1c:ac:b3: 6d:3f:f3:b9:23:26:90:0e:4c:19:12:19:51:e9:eb: af:8a:0c:9e:41:f0:dd:4e:d6:99:71:5b:9f:7a:71: 78:ab:48:7f:37:99:21:3b:92:2f:97:e7:9e:42:8b: d7:37:4e:90:ae:ff:8a:47:68:0c:84:1e:7e:4e:14: 1e:57:2a:5d:61:b6:88:cf:56:b4:0c:e3:94:e8:b2: 2c:d8:99:3e:bf:f6:bc:d2:b6:00:0b:0a:6d:b5:e7: 8d:22:95:b7:7c:dd:d3:3c:0f:c4:4f:4e:f3:31:d1: 35:40:e6:14:1f:8b:ac:43:8a:ff:36:78:d6:f2:8e: 81:b5:d1:61:39:d2:8a:b7:14:03:3d:51:4b:b7:a2: 2b:3f:5a:0b:14:5d:83:46:8a:e2:51:8b:12:28:4d: e9:f8:73:25:1e:ca:ba:de:bd:36:f9:b0:dc:5c:95: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F5:E6:B2:ED:BB:51:FA:8E:87:F9:43:56:3D:AB:41:A9:98:55:CD X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:5b:e4:11:e5:d2:bf:80:67:9d:72:bc:16:42:f7:d4:0c:ac: f4:d0:39:18:08:28:01:32:cc:f0:59:1a:23:82:73:5d:74:1c: c2:60:83:4a:d3:e9:49:be:80:fd:26:b5:f9:63:98:49:26:0e: 00:c4:26:40:44:4c:e7:08:9f:c5:6d:5d:85:a6:e7:a0:57:88: aa:2b:0d:a1:0e:b0:15:1c:cb:55:78:e5:6f:b9:be:cc:ba:e4: ed:3a:8f:3c:2a:5f:16:ba:2b:df:bb:90:c5:c1:ab:28:19:98: f7:08:8d:51:75:2b:19:80:71:0c:b8:7d:48:6e:01:73:97:86: 59:48:ce:52:56:db:a4:2d:9a:cb:06:45:65:02:ac:9e:c9:73: c9:3b:d1:2c:f9:e0:19:23:9f:d0:b7:4b:d0:a3:1a:c6:4a:d8: c5:ae:ed:24:85:6b:de:b2:c6:5a:7b:64:d6:35:0e:da:92:ec: 13:0c:f8:c2:90:a9:6b:2e:bb:1a:25:22:2c:82:85:fd:5c:64: 6e:30:2d:f4:2e:cb:e8:85:95:ed:92:ea:f7:58:8a:84:ef:25: 01:51:f7:40:85:b5:80:b5:34:9f:5b:7d:6b:75:a9:60:89:f3: af:dd:47:98:02:64:4a:62:48:32:2c:27:10:2b:42:39:a4:af: 54:ff:f5:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05QUmtj/ZKZbBxlfj1w6UfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjYwMzI5MTEwMTEzWhcNMjYwMzMwMTEwMTEzWjAzMTEwLwYDVQQD Eyg0MGY1ZTZiMmVkYmI1MWZhOGU4N2Y5NDM1NjNkYWI0MWE5OTg1NWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31iI0L/T5Dz4PcGf0woXLM7ghMm5 a9uM97LsG6nK9A1uZaWDC8OnR/er3vgEr6q+7lyJQTxIJ/uKGoy0lEDlDn3sfpbL bpA5nk65aDTl0lnPPAiBMlwcrLNtP/O5IyaQDkwZEhlR6euvigyeQfDdTtaZcVuf enF4q0h/N5khO5Ivl+eeQovXN06Qrv+KR2gMhB5+ThQeVypdYbaIz1a0DOOU6LIs 2Jk+v/a80rYACwptteeNIpW3fN3TPA/ET07zMdE1QOYUH4usQ4r/NnjW8o6BtdFh OdKKtxQDPVFLt6IrP1oLFF2DRoriUYsSKE3p+HMlHsq63r02+bDcXJXT3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFED15rLtu1H6jof5Q1Y9q0GpmFXNMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFvkEeXS v4BnnXK8FkL31Ays9NA5GAgoATLM8FkaI4JzXXQcwmCDStPpSb6A/Sa1+WOYSSYO AMQmQERM5wifxW1dhabnoFeIqisNoQ6wFRzLVXjlb7m+zLrk7TqPPCpfFror37uQ xcGrKBmY9wiNUXUrGYBxDLh9SG4Bc5eGWUjOUlbbpC2aywZFZQKsnslzyTvRLPng GSOf0LdL0KMaxkrYxa7tJIVr3rLGWntk1jUO2pLsEwz4wpCpay67GiUiLIKF/Vxk bjAt9C7L6IWV7ZLq91iKhO8lAVH3QIW1gLU0n1t9a3WpYInzr91HmAJkSmJIMiwn ECtCOaSvVP/1jw== -----END CERTIFICATE-----Generated at Sun Mar 29 17:47:20 2026 by rpki-client