$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: yIRkujcRta/oTbYsGLr/43uSoiT8PiYYCFC7He2inZQ= Subject key identifier: 85:F7:1A:3B:E0:DD:79:49:41:E7:55:2A:35:77:09:CF:25:88:68:8F Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019CAC0FFD413FB42A49C19A70D6C2CF0878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0E4B Signing time: Mon 02 Mar 2026 01:00:54 +0000 Manifest this update: Mon 02 Mar 2026 01:00:54 +0000 Manifest next update: Tue 03 Mar 2026 01:00:54 +0000 Files and hashes: 1: 3vLLEawWlFzGv5JsfUPDtZBDJGY.roa (hash: PavOw4v6+T14FuM5j33PYH4PD5HZoqWe5pgCu1sHQTM=) 2: AHtaW66JMITwcArnsmCRwFXXsoI.roa (hash: ZcCP5/OLK7h3hkYbytBpwMfpzhJ4QDRnFvoryxgp3QU=) 3: GlceivHp-TV4Q9crmL9mrMBEglg.roa (hash: fi9rQQg/AghEIXY2rzjh9Ngdd5xXBUgGLZxXNH+o2gI=) 4: LXdVZsghVBzvzoaxQRbvjkVx8jQ.roa (hash: NF23Tpd0XzXu/8VnH1fo4lwK7GUHlQSNd4PIlBQQqXM=) 5: SqqfV0cqdsmTEBKuOvF0JJEbDoo.roa (hash: bMcPfDE84mvLVznq47OZBYkUC9R902MrAMG5aI6NhzY=) 6: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: UKLBPv8NOqzo6bL9VN6pF1M4As79euu5Lo8AI8jtdQ8=) 7: fLKffdmk_A9Snr8RhFbOZjjywPY.roa (hash: IiagzZLO/ENGlk4BhZMQEHdxX+qkJzXcYKWPS2YP1/k=) 8: hxoGXcKSbBJ2PWCa3J0fMHiuDsU.roa (hash: 7Q+LWc6VgpTopv5k3/peiGrLhiln8d4FJvX1XgGREac=) 9: m4ddTK804isbAZwCK7aJ6EBhPpU.roa (hash: 7StX8F57GxKb2pQJDMDon9e+sgj78negT0fCwKTunA8=) 10: yHzr1mLOyq97cMlnkU_QbvILd_k.roa (hash: A7tEKpefOfoVMYMfFB/0vDiWMTh6ZA+ebsPXTsPnyck=) 11: ziPECi56XWvOBSk7jFhCDI6bu7M.roa (hash: GtmGk+9Vj+/ONt8GKGTxXSgpLCYGnOP8KSMdgsMgpmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:0f:fd:41:3f:b4:2a:49:c1:9a:70:d6:c2:cf:08:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Mar 2 01:00:54 2026 GMT Not After : Mar 3 01:00:54 2026 GMT Subject: CN=85f71a3be0dd794941e7552a357709cf2588688f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:f1:18:1e:b8:ba:56:d8:d4:89:ec:0d:26: c4:e3:7c:22:a0:b9:3d:e2:22:29:b9:ca:52:86:b2: 3c:a7:7c:3e:33:c0:a7:c0:c4:e9:7e:f7:bb:b3:9a: 90:89:83:62:8b:1e:23:cb:ad:61:38:2c:10:fe:ee: 31:98:6f:5f:b3:10:12:fb:7b:c8:cd:29:ff:68:73: 20:f9:b3:c1:61:e8:f6:b4:c8:0d:9a:3e:23:e4:90: 14:bc:79:bf:48:23:ab:f7:5e:79:aa:ef:36:8c:4c: 76:16:6f:d0:5e:b8:e6:01:0a:46:d2:b8:7f:f4:f3: 8f:25:aa:f2:78:ba:e9:e5:c2:35:8f:29:56:88:ea: b0:4f:f6:0b:62:e3:56:f2:70:27:29:4f:b1:93:3c: 70:17:8b:33:af:86:93:f6:1f:0d:f1:47:39:a8:f8: 60:26:68:b4:7f:83:75:65:da:1a:48:86:ce:f6:bf: 10:c6:86:32:8e:3e:42:aa:3c:24:65:8f:ea:13:15: 4f:9d:5d:62:82:7d:79:ae:74:4b:35:31:9a:a4:15: 37:84:94:4d:ce:c8:94:c1:03:c5:e6:31:3a:4d:af: 62:0d:8f:aa:c3:40:7a:be:e5:07:ab:f1:c4:ad:2e: 3b:f1:4c:7b:38:a8:8b:f2:bc:ed:fc:dc:23:3b:07: 27:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F7:1A:3B:E0:DD:79:49:41:E7:55:2A:35:77:09:CF:25:88:68:8F X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:93:46:27:93:47:c2:d5:a6:fb:a2:60:eb:a8:26:5e:73:68: 63:a7:5e:f9:9d:46:b2:dd:40:f8:35:99:b2:18:a9:b1:d7:35: ee:79:4d:5f:32:77:68:a4:9a:69:59:b6:c6:a2:e1:c0:59:86: b5:9e:03:7f:16:b5:c5:cf:bf:a1:32:06:8a:d7:b5:60:0e:76: e4:76:90:a8:8f:fd:89:6e:23:26:41:c0:d5:49:f9:ba:f7:cf: eb:ae:a4:aa:d6:0f:e7:88:d7:64:e9:db:7f:44:3e:dc:15:04: c3:63:01:bb:77:50:16:f8:87:d6:42:70:7e:9f:3f:a1:2e:bc: f8:fa:b5:6b:8a:51:ea:ee:60:e8:84:60:83:9f:f8:39:44:c3: 28:d6:17:4b:6e:9f:db:df:2e:f4:37:50:b9:f6:9c:9e:b2:c6: 7a:07:52:81:b2:b3:7d:02:fc:f2:4f:9b:cd:56:ac:40:11:0c: 7e:0e:23:a5:ef:b3:2e:36:6b:67:c9:60:fd:75:9d:78:39:db: 0c:1f:00:33:91:a1:9b:a5:cc:ab:72:39:cb:dc:3e:3e:da:37: 1d:2e:47:10:95:8d:5d:08:62:7b:b4:76:db:da:76:a0:8e:1d: 46:61:aa:a1:c6:8b:28:f2:59:f3:cf:a8:85:96:f1:29:06:be: d8:92:d1:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysD/1BP7QqScGacNbCzwh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjYwMzAyMDEwMDU0WhcNMjYwMzAzMDEwMDU0WjAzMTEwLwYDVQQD Eyg4NWY3MWEzYmUwZGQ3OTQ5NDFlNzU1MmEzNTc3MDljZjI1ODg2ODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwvxGB64ulbY1InsDSbE43wioLk9 4iIpucpShrI8p3w+M8CnwMTpfve7s5qQiYNiix4jy61hOCwQ/u4xmG9fsxAS+3vI zSn/aHMg+bPBYej2tMgNmj4j5JAUvHm/SCOr9155qu82jEx2Fm/QXrjmAQpG0rh/ 9POPJaryeLrp5cI1jylWiOqwT/YLYuNW8nAnKU+xkzxwF4szr4aT9h8N8Uc5qPhg Jmi0f4N1ZdoaSIbO9r8QxoYyjj5CqjwkZY/qExVPnV1ign15rnRLNTGapBU3hJRN zsiUwQPF5jE6Ta9iDY+qw0B6vuUHq/HErS478Ux7OKiL8rzt/NwjOwcn2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIX3Gjvg3XlJQedVKjV3Cc8liGiPMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZNGJ5NH wtWm+6Jg66gmXnNoY6de+Z1Gst1A+DWZshipsdc17nlNXzJ3aKSaaVm2xqLhwFmG tZ4Dfxa1xc+/oTIGite1YA525HaQqI/9iW4jJkHA1Un5uvfP666kqtYP54jXZOnb f0Q+3BUEw2MBu3dQFviH1kJwfp8/oS68+Pq1a4pR6u5g6IRgg5/4OUTDKNYXS26f 298u9DdQufacnrLGegdSgbKzfQL88k+bzVasQBEMfg4jpe+zLjZrZ8lg/XWdeDnb DB8AM5Ghm6XMq3I5y9w+Pto3HS5HEJWNXQhie7R229p2oI4dRmGqocaLKPJZ88+o hZbxKQa+2JLRfA== -----END CERTIFICATE-----Generated at Mon Mar 2 06:05:29 2026 by rpki-client