$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: ojqdzI4MobIoBC7nBwMzE8gjVoVEyuJfUrS5sxn+Zk0= Subject key identifier: 3D:E8:7B:71:9F:0E:52:7E:2D:01:5E:70:3C:93:C2:31:54:8A:0E:33 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019CA9B3C2D53DBF7C1002615B1730CDF71E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 18E1 Signing time: Sun 01 Mar 2026 14:00:56 +0000 Manifest this update: Sun 01 Mar 2026 14:00:56 +0000 Manifest next update: Mon 02 Mar 2026 14:00:56 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: 61jK33l6aOnFC3y537J/SsRbU1Kf+vEpCt+ejoaqGw4=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 6: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 7: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 8: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 9: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 10: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 11: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 12: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 13: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 14: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 15: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 16: KE8wPpi49xiO7rZJQ7uhlqOLLHw.roa (hash: 2TxPIJ9ZSPXuWkn0jdm0N4HJMJsSy4jeH/o6WF6Nqr8=) 17: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 18: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 19: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 20: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 21: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 22: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 23: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 24: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 25: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 26: e7ZRCUtIh9dNd1c2dQgbzZ1PkIE.roa (hash: ola1jxgSJVggUzsMIQQgKUN+JxfJCKNy5d2i98vKYBs=) 27: fEH6GXoroSfAEDj0z55rGNitKMU.roa (hash: Zmq+V4G0nlMIUgVrJqMNAD4Dj5EQvHd5LCZ6hw/cQJg=) 28: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 29: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 30: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 31: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 32: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 33: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) 34: t4VzSYm8jZxHXra8a1gQU_oCZrg.roa (hash: nhJnac8mfQfMue/8D0r8n0jxVEck6bnRlVwo/77WvNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:b3:c2:d5:3d:bf:7c:10:02:61:5b:17:30:cd:f7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Mar 1 14:00:56 2026 GMT Not After : Mar 2 14:00:56 2026 GMT Subject: CN=3de87b719f0e527e2d015e703c93c231548a0e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:f3:07:4d:0b:50:20:9e:2e:a0:aa:9b:e0: 8b:2e:6e:f6:4a:92:39:38:7e:54:c4:b3:d3:48:9c: 50:4e:50:0b:99:11:32:53:e7:e8:7f:13:b2:1b:a6: 1b:59:1b:7e:c4:4a:8f:0e:99:0b:da:10:ef:6a:eb: 89:2d:3b:32:9f:a6:75:f6:be:bf:c2:d5:d7:3e:38: 6f:5d:c1:60:a5:9d:d5:45:79:a5:aa:9b:4b:c1:3f: 8b:76:90:d2:aa:a4:86:60:8e:0d:6c:41:e9:2b:7e: 8c:1e:6d:bd:bf:e9:b2:97:f8:23:c3:91:57:77:fd: 3e:99:8c:33:ae:33:5d:a8:43:f8:ab:7e:23:9c:dc: e4:9a:3d:34:dc:22:a8:8f:96:7d:64:1f:5a:72:62: 18:5d:50:65:38:09:64:ee:ee:8c:da:1a:6a:9d:35: 6c:44:bd:49:3c:15:46:91:23:76:52:8e:6b:b7:34: a8:7a:d5:8e:21:05:41:08:24:18:ab:79:59:8e:f7: 74:08:6c:41:45:4b:62:b0:fb:0d:bb:31:7d:84:28: f2:9f:19:be:ff:04:de:b6:e2:7e:56:5b:9b:8e:50: e9:a5:7b:dd:ef:0f:96:c3:a5:8b:0a:e9:a9:c3:c0: 06:2e:f9:12:6f:12:54:27:b1:e7:2c:43:cd:26:a2: 4a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E8:7B:71:9F:0E:52:7E:2D:01:5E:70:3C:93:C2:31:54:8A:0E:33 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ca:33:3b:e3:18:2c:e5:8a:a9:ed:cb:a5:c7:6e:b5:b0:3b: a8:a6:b5:ea:f2:5f:2c:32:63:0e:74:71:4f:8e:69:0b:95:4c: cc:6e:fd:bd:35:60:ee:88:c2:6f:66:e8:9c:13:9e:61:de:60: 32:c1:1c:bc:f7:6d:70:48:b6:3c:ee:85:34:24:85:9b:1b:80: 31:80:6f:28:db:7b:f3:91:d7:02:45:b6:34:d9:79:89:dd:22: 05:60:ca:fd:58:9a:00:3b:2a:f2:76:01:5e:5b:50:49:72:10: 34:3c:0a:a7:3a:76:d2:11:db:a8:f9:63:01:23:8b:0c:5e:87: 4b:45:05:fd:21:73:99:26:22:37:b2:eb:d4:f2:b1:53:42:84: d4:1c:ef:d1:f9:51:65:18:e8:95:37:e4:52:d4:02:53:29:b7: 9b:44:39:7d:28:61:75:d3:aa:e5:5d:29:86:29:a0:79:a4:06: 47:57:e7:fc:e9:e1:d2:ef:5b:ae:3f:da:7e:de:2e:87:71:c7: f8:3d:9f:0b:9c:ab:66:11:fb:f4:a2:34:e6:c3:61:5b:df:3f: 50:d5:3a:50:d9:99:4b:77:e4:d8:10:21:26:e4:59:00:64:cf: 52:43:e0:92:75:b7:bb:d1:b4:7a:0e:a9:39:2d:7f:0e:0e:16: 2f:28:62:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyps8LVPb98EAJhWxcwzfceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMzAxMTQwMDU2WhcNMjYwMzAyMTQwMDU2WjAzMTEwLwYDVQQD EygzZGU4N2I3MTlmMGU1MjdlMmQwMTVlNzAzYzkzYzIzMTU0OGEwZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAjzB00LUCCeLqCqm+CLLm72SpI5 OH5UxLPTSJxQTlALmREyU+fofxOyG6YbWRt+xEqPDpkL2hDvauuJLTsyn6Z19r6/ wtXXPjhvXcFgpZ3VRXmlqptLwT+LdpDSqqSGYI4NbEHpK36MHm29v+myl/gjw5FX d/0+mYwzrjNdqEP4q34jnNzkmj003CKoj5Z9ZB9acmIYXVBlOAlk7u6M2hpqnTVs RL1JPBVGkSN2Uo5rtzSoetWOIQVBCCQYq3lZjvd0CGxBRUtisPsNuzF9hCjynxm+ /wTetuJ+VlubjlDppXvd7w+Ww6WLCumpw8AGLvkSbxJUJ7HnLEPNJqJK6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3oe3GfDlJ+LQFecDyTwjFUig4zMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcozO+MY LOWKqe3LpcdutbA7qKa16vJfLDJjDnRxT45pC5VMzG79vTVg7ojCb2bonBOeYd5g MsEcvPdtcEi2PO6FNCSFmxuAMYBvKNt785HXAkW2NNl5id0iBWDK/ViaADsq8nYB XltQSXIQNDwKpzp20hHbqPljASOLDF6HS0UF/SFzmSYiN7Lr1PKxU0KE1Bzv0flR ZRjolTfkUtQCUym3m0Q5fShhddOq5V0phimgeaQGR1fn/Onh0u9brj/aft4uh3HH +D2fC5yrZhH79KI05sNhW98/UNU6UNmZS3fk2BAhJuRZAGTPUkPgknW3u9G0eg6p OS1/Dg4WLyhiNQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:43:44 2026 by rpki-client