$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json) Hash identifier: cgzjpHC0SjfEFTrPnMtcIm5OlIdI1LqSf5bG5aFXgpw= Subject key identifier: CA:43:98:FD:C1:C9:AF:71:FD:02:44:46:58:28:FC:5A:73:88:21:75 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019CA94582C7E507E78DEE62912F06256141 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft Manifest number: 137E Signing time: Sun 01 Mar 2026 12:00:30 +0000 Manifest this update: Sun 01 Mar 2026 12:00:30 +0000 Manifest next update: Mon 02 Mar 2026 12:00:30 +0000 Files and hashes: 1: 0-d96R17ltUSy8fr0RUugwI-BVw.roa (hash: T+9pJSDxipOo4VQ90dksmKw5tDBPPo/BiqzTM/apWGc=) 2: 1RkuJiMIA6c-YKXkOiXgVUr3tk0.roa (hash: VMbTIDUnS0rJprZQrwM8fOUQBhB/Ygv1jHJEt/ApBqE=) 3: 6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa (hash: NZX54zdIf0Wm5ZnYmNdMli+Cz2MVmUZnuyAev1D/9/E=) 4: 94VCH5-yUsBwicojbjgImHgRoJA.roa (hash: JkHlAtKE0WPUSQeAnVh91wdkspZbKJDK7LSBm6EyhHc=) 5: BFdJc-7yBxarSw_UwCSCI2_nZzY.roa (hash: Mfwh/Ri4oMFWHDOwaf0KLrBxq/7lyDjZHbminSO7kww=) 6: FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa (hash: JZ21wYzfPfkSwGCQh1OtjrZna2xAaeFagGp1aClwZy0=) 7: GQwQ4NJBvyg0S5cirOINdsK2QUo.roa (hash: hPCA2eD/WAsZM79tgjhqtOTZx90myfRAeK+dN2Vg5Wo=) 8: GWOMCgc6frfuXzWmR3iYp-MVmSA.roa (hash: Anj9LGw2xp0TmbMPDVVyvGqohtYkFBACqEE6N9Y1dWM=) 9: KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa (hash: FJXGRBaEUrnNNyE8GBPLymN44URpQA1gYBmnWCwP478=) 10: Opa484uAlsVB9CtOuyZoIiqmIy8.roa (hash: 6u4ASe0ldiNjEJ3vKFZgisfLG676P+RimGMZcC3Ur7M=) 11: Tx9FMpngkKKRbOgn_YsDb4v7X18.roa (hash: BOevx6RbQLerHQQRMHC1Yu0hT6Exer/t3dYk9fLXFik=) 12: XpQW9Vko4NnnhhqSe6YnUmv4WzE.roa (hash: 1hl0BmRk0nZLkQjPQnXw86SjORpjVK0UnQhzFB2uADI=) 13: YjIsM4Uno7ILYs53JtLji9bmdRM.roa (hash: T20Rm6nai402HDN+LFukerdCiUhxMnqEcLW4G63DHyI=) 14: _QfreQ9EqD9ss46rDX_UENkjJZk.roa (hash: zfUdwflwTagWZ9n75pKYGfQVwgMmnMON42g7fWb4fZ4=) 15: c585sEb31KrksO5MlyuNt-hfuHU.roa (hash: fJ78hp+mIYgaOdDbv0g//N4rP8oKIJRANU6rLFZmpT4=) 16: e0CW_4oZRrryGAZlyRnhpcoXNPo.roa (hash: 7QHbtai0zkaLG8Cn4EhJepZwZsFysU2qR4KGXEevHnE=) 17: kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa (hash: yP3N4xFcOT8W3j9k2ZJ+fBiTsgbDKcU1wngastwJJcc=) 18: qOxZbeQcH3nmMujSCPVKvHl_hII.asa (hash: ASwjCTML65AJz8INpKtIJ9HsxUbvMPMUPCfyNp/UqwE=) 19: qu9muxyupj11J0vkCGd6UL4_YU8.asa (hash: ma8CUett5NKo6WA/WUa9lgNux61RUdveClhcObpC3iI=) 20: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: JzFXIyTb39gqZTkrqjlYeTviEUmI9HppJMdyISuKNEI=) 21: xIYF8mI26v6vzxb3X_nxcD6q9Q8.roa (hash: f2x35r/ZRXZy2klzCvK8jZiQ1j2C+y+64vR3ljojbc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:45:82:c7:e5:07:e7:8d:ee:62:91:2f:06:25:61:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Mar 1 12:00:30 2026 GMT Not After : Mar 2 12:00:30 2026 GMT Subject: CN=ca4398fdc1c9af71fd0244465828fc5a73882175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:31:62:3d:9b:2d:41:3d:17:46:c0:82:32: bf:0d:1e:de:14:78:7b:f1:11:0f:17:7b:ee:83:ab: 97:cc:a0:04:f9:a1:f2:ad:50:c3:2a:7a:ec:61:02: e0:26:06:a9:21:b8:b6:90:dd:64:dc:9f:fd:16:9a: ea:a4:76:a8:97:26:32:ff:d4:08:e3:93:c0:74:a0: 3b:f1:40:76:2e:bf:79:66:28:16:7d:77:45:f9:11: b3:ab:09:2e:34:9d:40:9f:72:ea:4b:7f:82:35:59: 9f:d6:fc:68:26:6b:54:1a:87:86:6e:f7:71:21:a7: 8b:a6:fa:a3:c9:5a:30:bf:34:2c:b6:33:3a:f7:81: ba:64:2b:5c:83:8a:c1:2c:ce:1b:b0:d4:87:9e:5b: 02:7e:ad:c5:9d:5c:9a:c4:6f:bd:18:de:a9:a7:56: f0:cc:fe:55:ff:a1:5b:c1:a2:6c:72:f8:6d:65:31: 7f:7e:61:94:41:6b:4e:1a:15:de:b2:2c:b6:da:8d: c5:76:b3:12:41:f5:26:cb:f9:7d:13:0f:26:64:47: 89:df:a0:ed:e2:f7:80:e4:01:78:07:91:3f:de:bf: 1b:ec:37:fd:78:4a:66:c0:3d:d7:67:50:c1:ba:29: 54:ca:30:4b:cb:70:fc:d1:51:5c:9c:b9:69:a3:ab: e9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:43:98:FD:C1:C9:AF:71:FD:02:44:46:58:28:FC:5A:73:88:21:75 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:98:ba:b7:74:1a:88:d5:ab:58:e5:17:45:67:9f:5b:20:28: bd:a7:65:34:4c:7d:c4:08:05:30:11:b2:11:74:33:33:56:eb: a1:11:74:b3:0e:10:07:ce:df:8c:e4:37:80:8a:f8:7c:ac:85: a1:ef:ab:a7:9b:54:43:3a:07:85:41:1f:21:25:e1:de:f8:15: 36:d0:d1:0c:30:85:1b:f4:c9:1a:1f:2f:bb:2b:c7:a3:86:49: f7:02:27:fe:4a:c9:f3:fa:bc:50:e5:1e:5a:df:50:10:65:95: f2:92:cb:cd:86:2e:15:71:e1:73:28:ef:c9:40:87:79:d7:29: c4:74:72:d5:de:38:27:5d:75:a2:8c:6a:fe:71:4e:81:78:f9: f2:92:c0:22:cf:15:6b:66:a4:1d:58:de:f9:76:96:1a:94:fc: 6a:78:82:93:f0:12:f7:e1:80:3d:d3:b8:4d:7c:e7:02:b2:0d: 33:60:48:4c:4b:4c:9a:09:37:18:47:da:5a:8f:38:4f:66:cb: 7b:1e:08:49:77:69:26:30:6f:95:e2:79:c0:eb:e7:3a:0b:fb: 76:51:63:78:3a:19:28:17:cf:e8:a6:66:51:e1:87:52:e2:66: 24:0d:a1:4f:d8:76:63:72:1f:e6:e8:11:fd:a1:ed:78:46:86: 94:7c:25:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypRYLH5Qfnje5ikS8GJWFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwMzAxMTIwMDMwWhcNMjYwMzAyMTIwMDMwWjAzMTEwLwYDVQQD EyhjYTQzOThmZGMxYzlhZjcxZmQwMjQ0NDY1ODI4ZmM1YTczODgyMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGAxYj2bLUE9F0bAgjK/DR7eFHh7 8REPF3vug6uXzKAE+aHyrVDDKnrsYQLgJgapIbi2kN1k3J/9FprqpHaolyYy/9QI 45PAdKA78UB2Lr95ZigWfXdF+RGzqwkuNJ1An3LqS3+CNVmf1vxoJmtUGoeGbvdx IaeLpvqjyVowvzQstjM694G6ZCtcg4rBLM4bsNSHnlsCfq3FnVyaxG+9GN6pp1bw zP5V/6FbwaJscvhtZTF/fmGUQWtOGhXesiy22o3FdrMSQfUmy/l9Ew8mZEeJ36Dt 4veA5AF4B5E/3r8b7Df9eEpmwD3XZ1DBuilUyjBLy3D80VFcnLlpo6vp/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpDmP3Bya9x/QJERlgo/FpziCF1MB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJi6t3Qa iNWrWOUXRWefWyAovadlNEx9xAgFMBGyEXQzM1broRF0sw4QB87fjOQ3gIr4fKyF oe+rp5tUQzoHhUEfISXh3vgVNtDRDDCFG/TJGh8vuyvHo4ZJ9wIn/krJ8/q8UOUe Wt9QEGWV8pLLzYYuFXHhcyjvyUCHedcpxHRy1d44J111ooxq/nFOgXj58pLAIs8V a2akHVje+XaWGpT8aniCk/AS9+GAPdO4TXznArINM2BITEtMmgk3GEfaWo84T2bL ex4ISXdpJjBvleJ5wOvnOgv7dlFjeDoZKBfP6KZmUeGHUuJmJA2hT9h2Y3If5ugR /aHteEaGlHwl6g== -----END CERTIFICATE-----Generated at Sun Mar 1 16:29:16 2026 by rpki-client