$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: 22fOpgoObCzkdcLh156KSScnEOnyWZxkD8Gu5+ILRxY= Subject key identifier: 0E:23:B7:80:F7:BE:7D:27:28:6B:C6:F1:A1:62:F2:CF:68:0B:0C:27 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019CAB3499134DD3AADC99276E89D2B88E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 1896 Signing time: Sun 01 Mar 2026 21:01:16 +0000 Manifest this update: Sun 01 Mar 2026 21:01:16 +0000 Manifest next update: Mon 02 Mar 2026 21:01:16 +0000 Files and hashes: 1: 5tvSeHfT9tQJaY_leFHXuR2yBH0.roa (hash: OssF5KxzdAdA0MRGmFSLEWiP4GOcYF7Td/3FVSiYLEA=) 2: 6rl9pxoMmUQpPP2eQ3Do4fMG-lE.roa (hash: o4FN53RDpAXUNhoW3sb4VAO0VRQ9liUUBpHijBIfQ8U=) 3: AdzOgeWlUtmYaTonB2c5IBwaPls.roa (hash: aw2r5oEHfzTNQGoJBf1uD5gPLejQUcUMLKJrBTyN7J4=) 4: IO4uIW0UIpJOr_RrZ7FJv-NSiAg.roa (hash: 56B95Qp7N2Mi/chLAavTbgyoP/5p8XnoFgB+sRTHGCg=) 5: Mq1u4qOomlUhefV0SWNzTRUmwps.roa (hash: +L1VEPPNNBt0OXhwf9f0heC994bRdJErni2gxksz1MM=) 6: NMfbsowFqcogPMg6cAeG3w9cjq0.roa (hash: uFoj7c/4SsWRnxgjbLgJrGS7fytT/Dv79U+edW6MDx8=) 7: Nc3Qv6HWCUL0coHdhzehCvqorjQ.roa (hash: 1cr7/XMm8bJJ1VGTZJBo+emXZtefD8zXujejZu9BwnE=) 8: RiJbycN_HnEaFdxBy-0QqogHp9w.roa (hash: HrWeheuaH2PNBF70Yz5xTkWSf+oor2QnLluzhSuwnU8=) 9: deTEkBZi5H7AIejV16ysjHwAbxY.roa (hash: l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=) 10: f36wSuri4isgGvRNSVH6JQhVoXQ.roa (hash: yoPRFfkeY6wwCb2HhFYtsNc5bsYeGXcwftlwYv52l3Q=) 11: hPDJ7bwWMVeeA66R-Nm66UMAI3I.roa (hash: S6FoRCGZ+2A7ou0QqZgDgmiPo527/Z9rU6I1qlBMQXY=) 12: mw0ptyQXS_rQimhsWLBxrIMccPE.roa (hash: 8O7ly3SBnz0h35pVqWxNg0DDS4HP88WIX5FZqzyiReA=) 13: pGPZirCKZzbNWc11cAMZui5y53g.roa (hash: x16id1SP+uWE4b9i/PFLiuYNReYseV++lthZDwFfk5U=) 14: pKSlP4qI-iIWoFFAgY7hZYUI5lE.roa (hash: fJiLeKrrQ0jkNTOG3gU1SfB8kCZt5PRpsv9OHklxoM8=) 15: qltZRt6yv2xmd-YFzKK4-T95t70.roa (hash: ouYg4rusjDVFIksWY2y+Jv/jtKdXu+HEE/CHgFLthz4=) 16: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: cbJcfuha/AynlrYihFdjtxhD4NfjByp6cvAnSh7PGOQ=) 17: sQ8qQg5RChJp9JsfMBZ7VZwT8WE.roa (hash: obNWII8S7VxaHifOdhDpl8/q/V3M1i4VuliV8Z+MBow=) 18: xEZpztI8Y0E6cyemzVq5Z-wuhOo.roa (hash: u+3SjeAOl+6UrQqTlnssUl6vP9Yo7S40vvVos+ddEsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:99:13:4d:d3:aa:dc:99:27:6e:89:d2:b8:8e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Mar 1 21:01:16 2026 GMT Not After : Mar 2 21:01:16 2026 GMT Subject: CN=0e23b780f7be7d27286bc6f1a162f2cf680b0c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d8:69:83:49:42:03:cc:e6:3e:4f:8e:50:35: 5e:ba:33:f2:3b:c1:b4:48:33:d6:b0:d0:ba:49:d6: 90:39:69:3a:06:15:f6:23:de:59:a9:b4:dd:8b:f7: 63:29:36:5f:02:20:5f:62:37:2b:16:30:1c:c9:ea: c2:8d:09:5a:d5:4c:49:41:c8:c6:da:2c:13:26:8f: 7f:d9:f4:5b:d2:70:5f:6b:7e:03:ac:77:87:39:4c: f0:a2:df:01:db:6b:59:f7:28:44:68:01:3b:d8:0c: 24:87:1a:cd:7c:2c:1a:0e:0c:bb:18:fb:e7:35:64: 4f:db:48:03:0e:e8:d9:9d:1b:8d:97:04:67:68:86: f5:73:74:4c:e2:20:cd:ab:83:01:26:a3:8e:9f:fb: e9:e6:06:da:9f:c2:ca:71:8c:9d:03:68:af:d6:fe: 5a:2a:eb:ab:ae:41:ce:44:97:30:93:5b:a3:e5:5a: 07:1f:3d:3e:be:e0:f0:cf:61:5b:4c:ef:35:d1:dd: ef:1d:7e:4f:3c:7c:05:91:51:d8:68:fd:31:48:dc: e4:e1:91:4f:c0:56:3d:0d:8e:e2:55:0c:e3:c2:55: c7:0b:09:5d:36:20:27:2e:1f:4e:9d:8b:65:ee:0a: 96:b9:f4:10:fa:5e:25:bd:8b:e0:2a:68:3e:f0:e6: b6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:23:B7:80:F7:BE:7D:27:28:6B:C6:F1:A1:62:F2:CF:68:0B:0C:27 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:16:e0:d4:4a:c9:59:8c:05:bf:b2:6a:f2:87:0f:7f:e5:be: 6c:f6:f9:09:4d:35:54:f6:c7:db:10:3a:b3:7b:79:a7:af:5a: 96:35:d2:e6:68:c4:82:84:5f:d5:a0:ad:0b:97:fe:40:5a:60: 68:1e:a2:0a:f4:c5:7f:71:d7:3d:2a:1a:3d:33:9d:4f:25:c2: 72:5b:f5:06:28:95:f4:42:7a:a3:26:7f:41:93:b9:db:35:e7: f0:7d:4d:6a:e9:b4:1e:ad:45:6c:52:f1:9f:1e:4f:81:25:31: 7d:e6:f6:76:81:71:72:8f:52:c0:50:bf:d5:2c:03:d1:89:16: a9:d5:a7:94:a3:bd:83:ce:b7:7f:7f:df:b3:c3:be:c0:e2:20: 84:0c:bf:5e:20:9b:3f:a9:8c:74:17:c8:36:3e:38:57:cb:36: 93:6e:32:a5:9f:3e:43:da:a4:60:a8:0e:65:0c:04:5e:f9:8e: 68:2d:13:c0:38:bf:b3:93:3d:14:40:fc:f3:34:cc:97:b1:bf: 7f:1f:e5:ce:5a:00:c8:69:b4:0a:2e:96:49:a1:40:34:bf:38: e0:16:77:a8:41:87:b2:a4:0d:50:47:e9:05:ab:dc:ad:5f:b0: e6:9a:3c:dc:4d:63:09:f3:d8:01:b9:5c:e3:5d:9c:05:a0:f7: 41:27:5f:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNJkTTdOq3JknbonSuI6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwMzAxMjEwMTE2WhcNMjYwMzAyMjEwMTE2WjAzMTEwLwYDVQQD EygwZTIzYjc4MGY3YmU3ZDI3Mjg2YmM2ZjFhMTYyZjJjZjY4MGIwYzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79hpg0lCA8zmPk+OUDVeujPyO8G0 SDPWsNC6SdaQOWk6BhX2I95ZqbTdi/djKTZfAiBfYjcrFjAcyerCjQla1UxJQcjG 2iwTJo9/2fRb0nBfa34DrHeHOUzwot8B22tZ9yhEaAE72AwkhxrNfCwaDgy7GPvn NWRP20gDDujZnRuNlwRnaIb1c3RM4iDNq4MBJqOOn/vp5gban8LKcYydA2iv1v5a KuurrkHORJcwk1uj5VoHHz0+vuDwz2FbTO810d3vHX5PPHwFkVHYaP0xSNzk4ZFP wFY9DY7iVQzjwlXHCwldNiAnLh9OnYtl7gqWufQQ+l4lvYvgKmg+8Oa2ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4jt4D3vn0nKGvG8aFi8s9oCwwnMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBbg1ErJ WYwFv7Jq8ocPf+W+bPb5CU01VPbH2xA6s3t5p69aljXS5mjEgoRf1aCtC5f+QFpg aB6iCvTFf3HXPSoaPTOdTyXCclv1BiiV9EJ6oyZ/QZO52zXn8H1Naum0Hq1FbFLx nx5PgSUxfeb2doFxco9SwFC/1SwD0YkWqdWnlKO9g863f3/fs8O+wOIghAy/XiCb P6mMdBfINj44V8s2k24ypZ8+Q9qkYKgOZQwEXvmOaC0TwDi/s5M9FED88zTMl7G/ fx/lzloAyGm0Ci6WSaFANL844BZ3qEGHsqQNUEfpBavcrV+w5po83E1jCfPYAblc 412cBaD3QSdfdQ== -----END CERTIFICATE-----Generated at Mon Mar 2 08:02:43 2026 by rpki-client