$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: v27KxXbQFzZzHNrYsD15ek5tWEnat/KD+vCyTpOD2P8= Subject key identifier: 7A:40:2A:46:BD:49:D1:C9:EA:52:8F:0A:48:1C:BB:95:FD:5E:34:0C Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019CA9B3BC3421862C84E8B5E7EE5FBEF5B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 0523 Signing time: Sun 01 Mar 2026 14:00:54 +0000 Manifest this update: Sun 01 Mar 2026 14:00:54 +0000 Manifest next update: Mon 02 Mar 2026 14:00:54 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: WNM8P/BtAg/4AqIPhA6WvO0CGKZtn+Ilh73tV8rVe0A=) 2: 4FvrTlxGhcdz6JszhweukK-HXp4.roa (hash: vyQEyyYQodDDsgXdHyrJ4jLSuzaa1xOpp48GTtDNY8I=) 3: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 4: F1V0wynnOSlQInBaxuhzJDgcy9k.roa (hash: CX2eKYxqSZgkOz1N9A39C2K0ZG5W0zjtqHz0CSxsQVI=) 5: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 6: KpPJD-1MgTPINo40sCf6r7Pg44U.roa (hash: WsEMDdkoE+VeXF9NdximWFcXsnk76ydby7UNHuoOk5U=) 7: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 8: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 9: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 10: ZVUX-ukmxmMuSmBaOHN4VXarmdk.roa (hash: v4YUjhuoNj8kXmli1Rh7WdYmfXPmnvN9UdaKmw/4lRw=) 11: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=) 12: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 13: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:b3:bc:34:21:86:2c:84:e8:b5:e7:ee:5f:be:f5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Mar 1 14:00:54 2026 GMT Not After : Mar 2 14:00:54 2026 GMT Subject: CN=7a402a46bd49d1c9ea528f0a481cbb95fd5e340c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:43:03:47:85:8c:99:83:c4:81:34:a5:07: 19:32:07:18:8a:d6:ae:77:f0:39:12:10:cb:8b:0a: fd:54:f4:d3:03:0b:d8:0b:82:62:9d:33:19:4d:d8: f6:ee:2b:ab:9a:35:b8:2e:52:43:3b:3c:6a:c0:ab: af:de:6e:1b:ca:bd:8b:d0:c4:22:10:45:f6:15:c4: 66:49:50:7c:ec:2c:02:18:bd:f1:4e:ee:13:ab:5c: 16:d6:18:27:4f:40:0c:aa:0b:ee:8b:f3:df:1a:92: df:03:4f:8f:24:ed:e6:68:22:fb:30:5d:e4:71:c5: 82:af:0d:ea:3e:a0:b1:ea:e0:10:83:ae:34:74:d2: c9:f2:59:7c:3e:e4:8b:41:52:05:0a:64:ad:4f:d7: 6d:a8:43:a4:58:e6:3a:f2:51:ba:89:c2:b6:9b:ef: 48:55:b4:c4:51:fc:e6:65:bb:4c:0f:f9:12:d2:99: ea:73:ab:ba:0a:0f:84:48:bc:76:37:b6:c7:82:d4: 21:b8:ad:16:09:5e:4d:7d:ee:d3:4e:87:c5:28:89: 80:7d:76:72:5d:4c:88:e6:ba:b8:49:9b:33:f4:40: 9e:47:82:16:7e:19:6c:2f:eb:9c:9d:a4:f9:bb:f9: 96:46:15:01:10:c8:dc:26:d7:7c:b7:26:d1:d5:01: 2b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:40:2A:46:BD:49:D1:C9:EA:52:8F:0A:48:1C:BB:95:FD:5E:34:0C X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ac:c9:84:1c:34:4b:23:99:f5:43:45:28:1f:71:13:b1:97: 01:f5:19:fd:40:75:8a:cb:82:12:cb:5b:50:4b:40:c5:90:3d: da:99:19:c7:21:58:1e:d5:25:3c:d6:65:13:67:87:c1:71:38: 87:e9:75:83:4a:78:34:fa:5c:a3:21:a1:f1:61:c3:4b:3e:84: d1:41:d7:0c:78:c1:18:9e:19:48:8d:10:22:9a:b6:73:db:ec: 23:7d:fc:d0:43:81:e8:ec:8b:99:b6:f9:18:e1:dd:78:f1:24: a3:8d:26:8f:0b:9a:2a:03:f4:5e:d9:4a:a9:44:dd:41:ac:b5: 52:c0:d1:88:85:93:14:0d:a9:49:17:12:ef:03:5f:80:80:ac: 35:dc:d6:69:cd:e4:79:5f:13:d6:ef:91:7d:6d:f7:37:6d:d1: 41:7b:31:e2:24:bf:67:10:9d:e1:80:87:46:9e:0f:d6:7f:5e: 32:cd:d7:bb:02:a4:74:93:89:a5:06:51:4d:bc:f9:9b:aa:da: 39:7b:22:8c:f4:7c:6c:4c:05:e6:b4:ba:75:43:22:0b:99:42: 70:e2:9b:1e:8d:96:bc:a7:db:05:57:0f:3c:6f:4d:07:21:36: 93:c8:5c:36:1f:01:b0:14:ef:70:e2:ea:41:a0:2b:64:f9:e3: 7c:b5:5c:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyps7w0IYYshOi15+5fvvW0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwMzAxMTQwMDU0WhcNMjYwMzAyMTQwMDU0WjAzMTEwLwYDVQQD Eyg3YTQwMmE0NmJkNDlkMWM5ZWE1MjhmMGE0ODFjYmI5NWZkNWUzNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1JDA0eFjJmDxIE0pQcZMgcYitau d/A5EhDLiwr9VPTTAwvYC4JinTMZTdj27iurmjW4LlJDOzxqwKuv3m4byr2L0MQi EEX2FcRmSVB87CwCGL3xTu4Tq1wW1hgnT0AMqgvui/PfGpLfA0+PJO3maCL7MF3k ccWCrw3qPqCx6uAQg640dNLJ8ll8PuSLQVIFCmStT9dtqEOkWOY68lG6icK2m+9I VbTEUfzmZbtMD/kS0pnqc6u6Cg+ESLx2N7bHgtQhuK0WCV5Nfe7TTofFKImAfXZy XUyI5rq4SZsz9ECeR4IWfhlsL+ucnaT5u/mWRhUBEMjcJtd8tybR1QEr+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpAKka9SdHJ6lKPCkgcu5X9XjQMMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqzJhBw0 SyOZ9UNFKB9xE7GXAfUZ/UB1isuCEstbUEtAxZA92pkZxyFYHtUlPNZlE2eHwXE4 h+l1g0p4NPpcoyGh8WHDSz6E0UHXDHjBGJ4ZSI0QIpq2c9vsI3380EOB6OyLmbb5 GOHdePEko40mjwuaKgP0XtlKqUTdQay1UsDRiIWTFA2pSRcS7wNfgICsNdzWac3k eV8T1u+RfW33N23RQXsx4iS/ZxCd4YCHRp4P1n9eMs3XuwKkdJOJpQZRTbz5m6ra OXsijPR8bEwF5rS6dUMiC5lCcOKbHo2WvKfbBVcPPG9NByE2k8hcNh8BsBTvcOLq QaArZPnjfLVclg== -----END CERTIFICATE-----Generated at Mon Mar 2 01:15:17 2026 by rpki-client