$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: +NW9Rrw0IqZfrqVp4OqVEC8NLrNa/Qfr5U7oiNgQIsc= Subject key identifier: A1:4B:97:D6:DE:DA:10:2D:62:8E:9A:EF:60:88:47:3D:89:5A:ED:36 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019CABA2264CF7F8F3B61780FB80FB1319C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 18E2 Signing time: Sun 01 Mar 2026 23:00:56 +0000 Manifest this update: Sun 01 Mar 2026 23:00:56 +0000 Manifest next update: Mon 02 Mar 2026 23:00:56 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: KR6NGAlVifxYhvuPOY/RB/4De4Itv3kjfHo4HIT+68Y=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 6: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 7: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 8: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 9: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 10: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 11: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 12: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 13: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 14: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 15: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 16: KE8wPpi49xiO7rZJQ7uhlqOLLHw.roa (hash: 2TxPIJ9ZSPXuWkn0jdm0N4HJMJsSy4jeH/o6WF6Nqr8=) 17: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 18: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 19: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 20: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 21: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 22: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 23: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 24: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 25: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 26: e7ZRCUtIh9dNd1c2dQgbzZ1PkIE.roa (hash: ola1jxgSJVggUzsMIQQgKUN+JxfJCKNy5d2i98vKYBs=) 27: fEH6GXoroSfAEDj0z55rGNitKMU.roa (hash: Zmq+V4G0nlMIUgVrJqMNAD4Dj5EQvHd5LCZ6hw/cQJg=) 28: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 29: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 30: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 31: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 32: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 33: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) 34: t4VzSYm8jZxHXra8a1gQU_oCZrg.roa (hash: nhJnac8mfQfMue/8D0r8n0jxVEck6bnRlVwo/77WvNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:a2:26:4c:f7:f8:f3:b6:17:80:fb:80:fb:13:19:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Mar 1 23:00:56 2026 GMT Not After : Mar 2 23:00:56 2026 GMT Subject: CN=a14b97d6deda102d628e9aef6088473d895aed36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:56:f5:2b:ca:02:d5:d3:1a:a4:5b:41:45:37: 2a:50:8f:cf:c7:45:0a:12:41:bc:81:b8:81:36:eb: e6:92:dd:4a:e8:7e:10:4f:63:ed:3c:e7:d9:17:f8: 85:e8:93:3b:c3:4f:79:9b:cc:34:95:0c:f0:a2:30: b6:f7:ca:a4:f5:69:51:28:89:3e:eb:d9:9d:5d:bf: cb:89:00:88:2f:e6:63:68:44:c1:bf:5d:c9:e0:35: be:90:72:09:6d:7f:b0:a1:3c:09:4b:fd:0f:3d:1d: d7:d5:ea:1b:28:bd:20:74:b5:3b:90:a7:40:fd:ff: 58:19:ab:2d:44:25:17:ed:5b:34:5c:da:92:56:b0: 10:84:54:21:75:8f:44:63:54:c3:cc:9f:9c:7b:b6: 91:9e:4b:60:6d:6e:46:90:65:b0:f5:e1:8a:53:6d: 69:87:4e:fb:d3:ec:4f:d6:b6:4b:33:a3:ab:2f:b5: f9:68:27:48:17:9c:dd:ea:6e:bc:58:48:fc:ad:04: 60:30:72:67:e5:c0:af:24:be:48:b2:50:db:7b:11: 16:45:bd:96:e2:d5:81:08:30:b2:dd:9d:a7:85:b2: 17:f1:b1:28:5d:cb:13:9a:7a:44:d0:56:87:f9:0b: 13:a3:36:3a:90:c8:78:91:50:7f:ed:b3:03:e2:1a: 20:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4B:97:D6:DE:DA:10:2D:62:8E:9A:EF:60:88:47:3D:89:5A:ED:36 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ab:78:f9:d1:a2:55:e3:5f:fb:cf:fc:e5:03:b1:95:3e:9d: 59:94:36:71:36:0b:22:59:4d:3c:27:47:77:bb:f1:47:c4:81: 84:b6:d8:38:d7:74:b4:08:f1:6d:f2:cc:01:3c:4c:df:98:e5: 3f:65:59:fc:9a:5f:ad:8f:68:90:8d:56:79:57:7b:a3:9b:45: db:35:db:a7:b4:af:40:fa:ad:44:50:41:bd:15:6a:86:ba:2b: 5d:f3:a1:f6:20:34:d6:45:fb:41:8d:5d:55:67:23:90:79:d0: 17:13:78:00:33:ba:f7:43:de:95:0f:da:e5:4d:d1:c3:4f:11: 7e:a2:e4:ea:68:2c:bd:8b:64:f9:3b:15:8b:40:6d:a4:56:db: b9:f6:9d:2b:be:ed:f6:24:ce:0b:27:47:b8:de:6e:a3:1c:1a: 69:0c:ed:fa:fd:8a:8e:1d:ce:08:2c:44:72:db:be:89:31:c4: 44:65:67:28:00:0f:32:bf:01:f4:9b:80:ab:a5:66:20:4f:3d: 2a:90:5c:e5:1c:59:e9:d1:94:3d:99:2d:06:4b:b9:cb:67:b7: db:dd:0c:6b:d1:f2:1c:c3:8b:e5:37:1e:0b:85:7a:d7:6b:bb: 85:b4:16:ad:be:bb:a0:1b:60:0f:1a:98:3d:70:d0:58:af:f0: 30:48:d7:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyroiZM9/jztheA+4D7ExnHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMzAxMjMwMDU2WhcNMjYwMzAyMjMwMDU2WjAzMTEwLwYDVQQD EyhhMTRiOTdkNmRlZGExMDJkNjI4ZTlhZWY2MDg4NDczZDg5NWFlZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVb1K8oC1dMapFtBRTcqUI/Px0UK EkG8gbiBNuvmkt1K6H4QT2PtPOfZF/iF6JM7w095m8w0lQzwojC298qk9WlRKIk+ 69mdXb/LiQCIL+ZjaETBv13J4DW+kHIJbX+woTwJS/0PPR3X1eobKL0gdLU7kKdA /f9YGastRCUX7Vs0XNqSVrAQhFQhdY9EY1TDzJ+ce7aRnktgbW5GkGWw9eGKU21p h0770+xP1rZLM6OrL7X5aCdIF5zd6m68WEj8rQRgMHJn5cCvJL5IslDbexEWRb2W 4tWBCDCy3Z2nhbIX8bEoXcsTmnpE0FaH+QsTozY6kMh4kVB/7bMD4hog7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFLl9be2hAtYo6a72CIRz2JWu02MB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuKt4+dGi VeNf+8/85QOxlT6dWZQ2cTYLIllNPCdHd7vxR8SBhLbYONd0tAjxbfLMATxM35jl P2VZ/JpfrY9okI1WeVd7o5tF2zXbp7SvQPqtRFBBvRVqhrorXfOh9iA01kX7QY1d VWcjkHnQFxN4ADO690PelQ/a5U3Rw08RfqLk6mgsvYtk+TsVi0BtpFbbufadK77t 9iTOCydHuN5uoxwaaQzt+v2Kjh3OCCxEctu+iTHERGVnKAAPMr8B9JuAq6VmIE89 KpBc5RxZ6dGUPZktBku5y2e3290Ma9HyHMOL5TceC4V612u7hbQWrb67oBtgDxqY PXDQWK/wMEjX+g== -----END CERTIFICATE-----Generated at Mon Mar 2 04:04:15 2026 by rpki-client