$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: VYlzJWBtJmnCXxfpIE5GyghOfIkKNLuFTwO64nPie5k= Subject key identifier: 5C:6E:92:3B:B8:07:95:2A:4D:4A:27:F1:D5:90:6D:F0:05:C7:3F:DB Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019CA97D83BB453EC0401885472C837FAD5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 185A Signing time: Sun 01 Mar 2026 13:01:40 +0000 Manifest this update: Sun 01 Mar 2026 13:01:40 +0000 Manifest next update: Mon 02 Mar 2026 13:01:40 +0000 Files and hashes: 1: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=) 2: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=) 3: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=) 4: FQSV18p_T_droUZh08zoIA9Ax8A.roa (hash: znhD3qntwxP0GJzV41Y9fLTZXvTyllhrzmb59F4/qY4=) 5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=) 6: QWGsJlARLoXD3dTifaZvCAad7X4.roa (hash: Qzx6/bGY/9F07uNBPAulRDJPcAim/44VXRU8uq17XTM=) 7: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=) 8: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=) 9: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=) 10: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: rfp9q6ozfjI0uvnmb+hXu2xL7cp8BdbdveuyOD8kPW4=) 11: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:7d:83:bb:45:3e:c0:40:18:85:47:2c:83:7f:ad:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Mar 1 13:01:40 2026 GMT Not After : Mar 2 13:01:40 2026 GMT Subject: CN=5c6e923bb807952a4d4a27f1d5906df005c73fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:66:a6:ec:0f:47:a6:53:14:ae:f6:97:1f:a8: e5:48:90:9b:69:8e:02:6f:06:3c:b2:0f:12:06:39: 38:43:97:85:07:c7:7d:98:b9:61:56:28:57:66:1c: a6:67:d0:72:d5:f5:9b:4e:0d:2a:86:bb:93:de:83: 5b:be:c4:b3:55:d9:96:e7:53:ec:2e:c6:7b:87:74: 88:1d:a4:81:00:82:d1:ae:59:84:b3:31:2f:65:df: 03:fd:10:14:83:cd:81:3b:62:29:39:44:46:03:da: a7:b2:af:f3:6f:0f:9d:42:4e:c8:89:c0:d5:b6:31: 7b:e9:8a:2d:86:af:b5:dc:b4:50:2d:53:79:8c:6e: ef:f6:00:1d:51:10:5f:78:c3:fb:57:4f:38:36:be: ef:f1:dc:b3:e9:6a:ae:cb:8b:96:df:1c:c8:33:88: d2:ed:a3:3f:e3:90:87:db:eb:c1:83:58:76:17:5a: 87:86:c0:0a:49:b6:44:a2:2d:27:90:d6:df:86:95: 69:21:f7:b6:6c:e5:7d:79:5d:45:01:db:53:0e:6a: 59:13:df:d4:8a:98:a4:65:12:a3:ca:24:74:08:ef: 14:b8:7b:eb:7b:d5:2b:5a:d7:de:bf:87:e8:20:87: 09:20:5b:df:a2:f0:a1:a6:d9:06:fd:22:35:f0:a8: c6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6E:92:3B:B8:07:95:2A:4D:4A:27:F1:D5:90:6D:F0:05:C7:3F:DB X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0f:3e:d9:dd:be:ea:29:50:f3:20:c1:e4:3f:da:12:f2:4c: a5:65:71:39:12:8e:2f:e0:ec:29:30:c1:b7:c9:72:65:b5:71: ae:c7:f6:b0:42:05:2f:22:10:27:6a:d4:ce:c4:99:bc:11:9b: fe:f1:e5:3f:a8:58:3a:03:96:cf:30:ac:38:90:f1:2c:f1:ce: e7:c8:aa:e2:07:e6:35:b5:2e:a9:39:96:92:1b:b3:96:ab:16: ec:ef:7d:1b:da:5c:45:a6:9f:ac:ef:d5:82:27:2d:e9:ce:74: d6:8a:ad:48:2a:d8:6e:9c:ce:4b:5c:7a:9a:ea:ec:15:da:fd: 76:ec:74:8a:96:25:2e:92:89:1d:f6:e1:49:88:45:3e:ff:78: e0:61:5d:6f:7c:62:37:50:2b:99:1d:a1:7e:66:b2:10:36:a2: e5:00:ba:6c:c4:eb:c3:79:f2:8d:4a:c0:c9:e6:67:aa:a8:e9: 64:7a:0c:38:14:46:ee:af:9c:4e:ab:88:73:4a:60:7a:0e:7c: 51:9b:c1:6a:fa:18:76:23:ff:ee:ed:9f:54:6b:3f:4e:c4:85: 5a:5c:31:08:1e:8d:17:dc:75:16:b3:f4:01:43:98:b6:d6:23: c3:62:f5:8b:40:df:b8:cd:a4:65:3c:a7:39:5e:b2:4e:2f:68: f0:67:f7:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypfYO7RT7AQBiFRyyDf61cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwMzAxMTMwMTQwWhcNMjYwMzAyMTMwMTQwWjAzMTEwLwYDVQQD Eyg1YzZlOTIzYmI4MDc5NTJhNGQ0YTI3ZjFkNTkwNmRmMDA1YzczZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmam7A9HplMUrvaXH6jlSJCbaY4C bwY8sg8SBjk4Q5eFB8d9mLlhVihXZhymZ9By1fWbTg0qhruT3oNbvsSzVdmW51Ps LsZ7h3SIHaSBAILRrlmEszEvZd8D/RAUg82BO2IpOURGA9qnsq/zbw+dQk7IicDV tjF76Yothq+13LRQLVN5jG7v9gAdURBfeMP7V084Nr7v8dyz6Wquy4uW3xzIM4jS 7aM/45CH2+vBg1h2F1qHhsAKSbZEoi0nkNbfhpVpIfe2bOV9eV1FAdtTDmpZE9/U ipikZRKjyiR0CO8UuHvre9UrWtfev4foIIcJIFvfovChptkG/SI18KjGBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxukju4B5UqTUon8dWQbfAFxz/bMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApA8+2d2+ 6ilQ8yDB5D/aEvJMpWVxORKOL+DsKTDBt8lyZbVxrsf2sEIFLyIQJ2rUzsSZvBGb /vHlP6hYOgOWzzCsOJDxLPHO58iq4gfmNbUuqTmWkhuzlqsW7O99G9pcRaafrO/V gict6c501oqtSCrYbpzOS1x6mursFdr9dux0ipYlLpKJHfbhSYhFPv944GFdb3xi N1ArmR2hfmayEDai5QC6bMTrw3nyjUrAyeZnqqjpZHoMOBRG7q+cTquIc0pgeg58 UZvBavoYdiP/7u2fVGs/TsSFWlwxCB6NF9x1FrP0AUOYttYjw2L1i0DfuM2kZTyn OV6yTi9o8Gf3/A== -----END CERTIFICATE-----Generated at Sun Mar 1 16:28:51 2026 by rpki-client