$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: 2rDSwWpu+TAb8iYrP0J6LeeqdL5sz446x06Tx3Gb5IA= Subject key identifier: 42:E3:85:D0:9F:23:6E:A2:1E:05:29:F6:2D:07:80:4A:7A:BD:C9:4B Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019CA8D89E471A150106C09978848D919BE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 183A Signing time: Sun 01 Mar 2026 10:01:34 +0000 Manifest this update: Sun 01 Mar 2026 10:01:34 +0000 Manifest next update: Mon 02 Mar 2026 10:01:34 +0000 Files and hashes: 1: 16Y1yxGLE6UIufa5rH9U3RXAvAs.roa (hash: hVmSptnLaPbenQ9xb8iMn2l1+6sGRbct+J+Pmp6z9tk=) 2: F4LdvSuBLKoy58NMp2qP4-TZx2U.roa (hash: BFVQu+JaHlGGz8F88qjrXCmVUp4qOhDziCZpUN8E7E0=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: aWz/pk4O8l+j6y8AMxr3y+pkOYJzWvKWjqgbG9wT3aA=) 4: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=) 5: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=) 6: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=) 7: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=) 8: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=) 9: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=) 10: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:d8:9e:47:1a:15:01:06:c0:99:78:84:8d:91:9b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Mar 1 10:01:34 2026 GMT Not After : Mar 2 10:01:34 2026 GMT Subject: CN=42e385d09f236ea21e0529f62d07804a7abdc94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:7c:db:c1:e1:08:9e:ec:2d:63:7b:b5:c3: e0:2a:cc:d5:74:e6:ec:ec:c6:de:fe:64:5e:be:cc: c8:3e:c0:68:95:f0:58:48:38:85:fd:d1:30:14:f4: ac:f0:91:97:d3:0d:c2:00:ac:36:5a:bc:fc:0d:dc: 21:1a:da:c6:58:8c:6c:46:9e:52:a8:b2:86:46:b6: 2b:02:71:2d:ca:3e:a3:d3:13:4d:c3:7b:be:dc:fa: f2:f5:45:fd:fa:ec:1e:31:22:0b:67:15:1a:4e:21: 97:21:dd:e0:b4:c8:7b:83:04:b0:83:01:a3:ae:70: 1a:94:52:dd:82:5e:0b:a8:a6:1f:1e:31:f6:f3:ca: 06:c2:df:d4:4c:17:2e:58:3d:ae:dc:44:f8:9d:49: 3e:6a:a8:9b:50:e2:16:04:45:eb:13:f4:b5:fa:ca: 79:bb:2e:48:f1:89:1d:b6:0e:ec:96:f5:cb:92:9d: 27:b7:73:7d:02:fb:63:c2:61:9d:3a:83:fd:a3:c5: 99:a7:f9:4d:61:93:b7:ee:c6:a1:3a:8f:f8:12:5a: 77:c6:03:da:be:18:22:8a:73:0f:1d:bb:bb:3e:df: 0a:99:d6:1e:c8:0a:27:2a:47:74:ac:31:0a:7d:cc: a6:95:ba:37:00:3a:c4:15:c4:40:a6:79:2f:cd:82: 09:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E3:85:D0:9F:23:6E:A2:1E:05:29:F6:2D:07:80:4A:7A:BD:C9:4B X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c0:dc:a2:ab:22:f0:26:c6:bd:74:54:6b:67:34:86:cf:83: a6:82:93:71:d4:c6:7d:2b:62:86:2c:6d:f1:c2:0f:4b:2c:fa: 07:2b:ea:b3:08:6b:d7:23:39:07:50:64:5a:ad:98:05:d4:78: 85:81:95:bd:85:b0:d1:0e:7b:ab:4a:fc:cb:93:1f:2a:d9:ab: da:3d:57:b9:cc:48:ba:13:b0:fa:a3:50:2d:5f:70:2d:11:7e: 81:01:bc:69:bd:b3:ab:19:97:b2:8d:8c:0c:bb:3e:24:44:aa: df:74:01:20:25:70:18:a8:f0:f4:9d:bd:19:ad:5a:09:dd:78: 18:0a:50:62:2c:54:5c:10:e1:23:6e:23:fa:f6:a1:59:f4:fd: e9:67:79:21:5a:38:bc:fb:2d:47:1e:b2:08:bc:d4:68:69:54: 91:b5:02:7d:17:22:2d:3b:4b:a5:bc:59:4d:9a:56:f4:6c:52: 66:6b:d9:8d:7f:c4:a3:7b:26:72:4f:37:da:ce:66:5e:83:1c: a2:27:47:09:0b:5d:02:cb:e8:55:11:50:71:33:c3:98:c3:af: 8f:42:e1:a0:cf:ce:a6:de:e5:86:d3:3e:47:e5:41:12:17:44: ef:be:cb:fc:9c:bb:77:bf:7d:c1:10:f5:26:34:e4:4e:a4:f1: 40:d1:f4:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyo2J5HGhUBBsCZeISNkZvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwMzAxMTAwMTM0WhcNMjYwMzAyMTAwMTM0WjAzMTEwLwYDVQQD Eyg0MmUzODVkMDlmMjM2ZWEyMWUwNTI5ZjYyZDA3ODA0YTdhYmRjOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBh828HhCJ7sLWN7tcPgKszVdObs 7Mbe/mRevszIPsBolfBYSDiF/dEwFPSs8JGX0w3CAKw2Wrz8DdwhGtrGWIxsRp5S qLKGRrYrAnEtyj6j0xNNw3u+3Pry9UX9+uweMSILZxUaTiGXId3gtMh7gwSwgwGj rnAalFLdgl4LqKYfHjH288oGwt/UTBcuWD2u3ET4nUk+aqibUOIWBEXrE/S1+sp5 uy5I8Ykdtg7slvXLkp0nt3N9AvtjwmGdOoP9o8WZp/lNYZO37sahOo/4Elp3xgPa vhgiinMPHbu7Pt8KmdYeyAonKkd0rDEKfcymlbo3ADrEFcRApnkvzYIJWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELjhdCfI26iHgUp9i0HgEp6vclLMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicDcoqsi 8CbGvXRUa2c0hs+DpoKTcdTGfStihixt8cIPSyz6Byvqswhr1yM5B1BkWq2YBdR4 hYGVvYWw0Q57q0r8y5MfKtmr2j1XucxIuhOw+qNQLV9wLRF+gQG8ab2zqxmXso2M DLs+JESq33QBICVwGKjw9J29Ga1aCd14GApQYixUXBDhI24j+vahWfT96Wd5IVo4 vPstRx6yCLzUaGlUkbUCfRciLTtLpbxZTZpW9GxSZmvZjX/Eo3smck832s5mXoMc oidHCQtdAsvoVRFQcTPDmMOvj0LhoM/Opt7lhtM+R+VBEhdE777L/Jy7d799wRD1 JjTkTqTxQNH0rw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:17:46 2026 by rpki-client