$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: NPxaInHSq029PcH2S+aoSQrNA7h3Z7mgv+DLF84tSL4= Subject key identifier: 09:5C:35:6C:21:EC:A6:03:26:3F:E4:91:CC:6A:F2:47:A1:D6:58:5D Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019CAB3424E72A46DC91579A8251E8F68375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 1874 Signing time: Sun 01 Mar 2026 21:00:46 +0000 Manifest this update: Sun 01 Mar 2026 21:00:46 +0000 Manifest next update: Mon 02 Mar 2026 21:00:46 +0000 Files and hashes: 1: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: 5uq8zyZS+4eAGn+h4qEkEA4uBc5f6R/72LJy8pI5smo=) 2: 6wXcfaNHNIKPsPI9yxLfZE8Q_jQ.roa (hash: ECXhCTN51hl1ngcmROyprePwXkJAyAbxEBIgymRFGBA=) 3: 9Y15TiSyn2wNGdw4h-rBMbyFaAc.roa (hash: 72P6b2id8MZPAK23i1WaqWGaegThFlPqZ6DtT05Xwkc=) 4: 9qGo67yr4HRrxBkAO69NOfH1xyM.roa (hash: 9kV8qye+hDokGEdQvc6wx6xFhzWb+QDG85qAmFrrRNc=) 5: HBS5CYoNWOXobGPomOlaeFTG4h8.roa (hash: D7vH7TbSVaq4pp/oo4dyUnQisHAJ6z4gW2NLDiuh3AQ=) 6: IHMW0iOLCaPimXteCXKckZiuXok.roa (hash: eKTeqM0561BoLTc+G0Vfml+zBr4iHbl5NUyAYC+RQzM=) 7: TBEAu5KKSTnnuwJ2g_Z91zWbXKA.roa (hash: smnw3toc9NIJXiN4piIx54U4f4Mbs+Yue06OIF7Ed2g=) 8: ZAW9hLoDnVp80PJK59uzMqseMQg.roa (hash: zROFGa57szBUE/hPHlcNo31U/nC8cbg/ehhEeCGDUB4=) 9: fAkVmSuP4C8Tt3ysLgXTuPqL4JM.roa (hash: new7s/Zw+Z3LxE1g27Tl/cjYXZW77+lOLNDzxaXxgPs=) 10: gi6Xytn9Iu0GHoS2bz8-D2_xuYw.roa (hash: zRXOYl9PkTzrkMP8UCwOsXf5eAi2L1/FabDUe5aeP6I=) 11: nLhpxF_vYMtPztaP2Ob2bwrsO-c.roa (hash: X8qVQYMo7q02YZkTCY5KKMS/PXISC65xUOcTfDXBI/8=) 12: r9Onf1Z5MTGo6HQvvK-yrmEpNLw.roa (hash: MdZ3nuj2R7EYy2YZK3WtRbRVVeyc+IpvGV7gP3oPGfI=) 13: udGl8isNJxExRSIhiZ2jjvucC5s.roa (hash: 46OQaBoVhzlHfO3MZlMA5GIChgYIIijufkFgTDDBkM8=) 14: xR-uNlcwaXq95_WLOZVSHPtWfsg.roa (hash: wbICW+uS9aypVREci9aQAEMY15M6aAuzi/Y5YFPee8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:24:e7:2a:46:dc:91:57:9a:82:51:e8:f6:83:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Mar 1 21:00:46 2026 GMT Not After : Mar 2 21:00:46 2026 GMT Subject: CN=095c356c21eca603263fe491cc6af247a1d6585d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:96:f7:25:4b:87:17:69:f2:ee:cf:84:91: 6e:d8:f6:47:58:12:e8:06:54:e0:d6:a2:2e:d0:25: 1b:1a:e9:ec:e2:c6:77:57:e1:c9:4c:7c:93:a6:24: 46:ba:00:14:02:95:10:81:8c:17:de:5b:99:a0:32: 57:26:1b:3a:f1:00:a7:a7:37:57:f8:54:92:f1:8f: ce:24:fd:3d:72:93:3e:a5:c0:0a:44:ee:8b:76:fb: c1:34:53:a1:10:b8:16:49:5f:5b:ad:16:59:20:4b: 91:45:2a:02:48:e6:16:3a:18:75:e4:77:7d:92:cd: 82:53:52:75:eb:7e:f3:2f:36:ca:97:17:50:7c:39: 87:7b:a6:bc:95:1c:af:0e:46:ff:58:21:ee:be:cf: 10:dc:de:33:5c:17:78:4c:32:ca:93:23:c8:ba:11: fa:3f:3c:09:37:07:72:43:9f:bf:e9:65:3c:03:21: 4e:91:bd:47:27:70:56:ca:a6:f5:f7:4e:ef:76:3a: 71:aa:20:d9:81:5e:3c:4c:ff:84:6d:aa:09:bb:9a: b1:b2:bc:aa:15:ee:c9:8c:75:ff:01:a3:b7:84:f3: 7c:dd:b3:e6:9d:90:56:6c:58:95:89:7e:ba:c5:1d: 5b:dd:0d:28:78:bf:60:be:18:11:fb:bb:75:42:43: ce:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5C:35:6C:21:EC:A6:03:26:3F:E4:91:CC:6A:F2:47:A1:D6:58:5D X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ab:c0:c9:bd:07:c8:24:5e:75:4d:bb:9c:21:c5:15:79:ca: 97:4b:45:49:9d:f1:e5:83:54:9c:9a:d9:42:8d:6c:3b:b5:94: e2:c2:41:50:6c:a3:fc:9b:aa:37:8f:72:71:03:56:ed:f3:bd: 1d:c8:b7:3d:5a:ca:cc:65:2f:57:a8:43:cb:d7:d1:45:ee:27: 9c:2d:aa:63:ba:19:8e:c4:2c:04:df:da:c8:21:24:21:f6:2f: ee:a7:06:6a:c0:a8:c3:29:7d:c4:5c:d0:95:50:52:a1:c7:da: dc:34:3e:6e:c1:d0:d3:9c:cf:c5:89:d0:93:5a:3b:5c:94:04: fd:2a:f9:05:35:73:31:81:ff:41:98:6e:b5:a6:79:c4:f3:f5: 7e:7a:46:02:8b:3f:8a:94:d2:2d:6e:24:08:b9:bd:07:ba:e7: 59:c0:89:08:5c:d2:a5:bb:17:dc:a4:cc:1a:0f:66:97:d5:2b: e8:a8:5c:d0:13:a4:92:f8:6b:7b:61:30:fe:fa:52:e9:23:02: 1c:b2:18:cf:96:15:ad:f7:3f:55:82:e7:5d:09:c6:4c:3b:4d: 00:23:d7:a0:ed:e9:63:ee:ed:a4:d6:6e:2f:9a:24:6a:a2:19: b1:95:91:23:f0:3f:3d:eb:3c:e5:da:ff:b8:3d:21:28:c5:cd: c2:c7:64:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNCTnKkbckVeaglHo9oN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMzAxMjEwMDQ2WhcNMjYwMzAyMjEwMDQ2WjAzMTEwLwYDVQQD EygwOTVjMzU2YzIxZWNhNjAzMjYzZmU0OTFjYzZhZjI0N2ExZDY1ODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfuW9yVLhxdp8u7PhJFu2PZHWBLo BlTg1qIu0CUbGuns4sZ3V+HJTHyTpiRGugAUApUQgYwX3luZoDJXJhs68QCnpzdX +FSS8Y/OJP09cpM+pcAKRO6LdvvBNFOhELgWSV9brRZZIEuRRSoCSOYWOhh15Hd9 ks2CU1J1637zLzbKlxdQfDmHe6a8lRyvDkb/WCHuvs8Q3N4zXBd4TDLKkyPIuhH6 PzwJNwdyQ5+/6WU8AyFOkb1HJ3BWyqb1907vdjpxqiDZgV48TP+EbaoJu5qxsryq Fe7JjHX/AaO3hPN83bPmnZBWbFiViX66xR1b3Q0oeL9gvhgR+7t1QkPOZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlcNWwh7KYDJj/kkcxq8keh1lhdMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATavAyb0H yCRedU27nCHFFXnKl0tFSZ3x5YNUnJrZQo1sO7WU4sJBUGyj/JuqN49ycQNW7fO9 Hci3PVrKzGUvV6hDy9fRRe4nnC2qY7oZjsQsBN/ayCEkIfYv7qcGasCowyl9xFzQ lVBSocfa3DQ+bsHQ05zPxYnQk1o7XJQE/Sr5BTVzMYH/QZhutaZ5xPP1fnpGAos/ ipTSLW4kCLm9B7rnWcCJCFzSpbsX3KTMGg9ml9Ur6Khc0BOkkvhre2Ew/vpS6SMC HLIYz5YVrfc/VYLnXQnGTDtNACPXoO3pY+7tpNZuL5okaqIZsZWRI/A/Pes85dr/ uD0hKMXNwsdkrA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:33 2026 by rpki-client