$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json) Hash identifier: qfybKXsHBrtyfxFKNy0w5JjGZurhhPgLqWgFmkfFb9g= Subject key identifier: 7F:39:12:C4:46:3E:81:28:59:79:CA:30:AD:A0:22:84:9C:FD:26:06 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019CA8D8AEF2D239C26CBB2AC1EE7E7DBCE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft Manifest number: 163F Signing time: Sun 01 Mar 2026 10:01:38 +0000 Manifest this update: Sun 01 Mar 2026 10:01:38 +0000 Manifest next update: Mon 02 Mar 2026 10:01:38 +0000 Files and hashes: 1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=) 2: A_tEVik7EkSJhTC7T2FJIfD4hWE.asa (hash: 68EPop8TjMmm4peaii/vw95NHeqqlpJpXRJzZBSJs7g=) 3: DdZL2Ei2USqI1D8JQatISOxbCY0.roa (hash: A+x4OgPFDFV1yfcXqtt93yKXONOhfjjQIV2HOaMfwnQ=) 4: H2Gc0qKN46gAjUldVFBNpV93Xk4.asa (hash: KSarBkAjc6GXQsV+kmM1pcYpqDoYggEF4OpcfqU5XxI=) 5: HOso74W1VokYtKvyq7cUzsjtneE.asa (hash: XkgHTIUgOHbFT9e9eq8+M1TVv1ndaqq7zAajOmv3wN8=) 6: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=) 7: RatTcANG4U3IM7MOV2hXua2pFMs.asa (hash: USM3oAd7uLAkywhJUjv79wjdyCIZfb2jA72kwTjAHbY=) 8: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=) 9: b-VQSWuLpLV93gdEDV9Lftl-uXw.asa (hash: Em1YerFm1QMulEXhz/0NYeLEV5IMD8Fh+85COdjHx64=) 10: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=) 11: cszYTkQVDcY76z8Av8ncweFdHcQ.asa (hash: xNxgKjmWZqB0F8LoHh9M3iOQxo1YlNVcpRWSs0jkU1w=) 12: fU0ZQGxEIbYd-Y96okGNTpozeFs.asa (hash: sffo6lZCXVJqfJc7Hp2QR59SPfkJdF9crEZwTQ2dkII=) 13: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=) 14: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: U36wZTfa988pPu4Nw/d8pYbU2FbI5+WUP2G0YzCORO8=) 15: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=) 16: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=) 17: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=) 18: zdQE3nljteAvytR7FrZorPU0jyc.asa (hash: 7eznpWbdCzFgvZgA9g8kyOLAHMzeIfPZoCln8oZBAvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:d8:ae:f2:d2:39:c2:6c:bb:2a:c1:ee:7e:7d:bc:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Mar 1 10:01:38 2026 GMT Not After : Mar 2 10:01:38 2026 GMT Subject: CN=7f3912c4463e81285979ca30ada022849cfd2606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:b5:52:96:d0:6a:bd:4e:ff:cf:7a:90:db: ee:08:d2:af:17:88:bd:2e:c4:45:a5:84:c3:92:ab: e3:08:15:0d:c6:ed:20:1a:e5:a9:7a:b5:ad:e2:be: 1e:ad:64:47:43:09:ec:63:59:1d:ad:74:2b:65:ef: 0d:d1:bc:70:71:21:b6:39:a3:c9:a6:d7:80:c7:73: 57:3c:24:d2:28:70:36:d4:f1:20:ac:a5:d3:be:3e: d5:70:3a:ec:7e:3e:bb:1a:b7:93:18:2a:92:f9:13: 7e:27:bc:1e:44:0a:ef:4d:ae:e6:4a:c3:e4:e6:58: 48:21:b3:c2:3e:ea:fd:14:bf:ed:7b:50:4a:62:f4: ce:ca:f1:17:d4:05:43:9d:fd:e4:72:07:4b:54:9c: e3:31:98:79:94:61:54:e6:b3:cd:ef:af:7a:ab:92: 47:b6:fb:1a:dc:dd:cb:b7:2b:8d:15:6a:8d:d8:e6: 60:ca:9e:09:d3:11:d2:05:44:1d:96:4b:48:7d:29: ca:8c:1f:4c:52:2b:c2:ad:0d:00:7b:64:b5:db:7f: 29:fd:5c:20:a7:f1:02:d5:31:68:d5:0d:65:08:3f: ec:43:38:76:3f:b8:ee:36:55:bd:47:52:70:9a:90: 35:2c:ff:ff:8c:bd:9e:b9:30:ea:1f:ea:80:6a:7e: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:39:12:C4:46:3E:81:28:59:79:CA:30:AD:A0:22:84:9C:FD:26:06 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:bc:15:f1:49:8f:20:7e:e8:ef:a1:3f:36:b5:55:c9:ea:e3: c3:89:a5:55:ad:2c:9e:85:46:bb:0e:7a:ca:1c:a6:41:1d:f7: 0a:41:d3:5c:e7:dd:9a:7f:8c:ac:44:23:40:c0:8b:a9:55:a4: 3e:e6:01:b6:3d:98:5b:b0:5d:93:06:28:99:ce:5c:a9:38:b0: 25:97:55:2e:1a:69:3e:57:8d:e4:71:2d:5c:9f:15:17:3c:49: 05:83:e9:40:56:3e:f7:67:28:c3:e7:ff:79:80:98:3d:af:b3: 23:c0:56:3d:84:3b:e6:5c:47:af:0d:c0:31:6e:d8:7e:f9:ca: 50:67:d9:37:99:b0:56:ff:11:da:c9:1b:c5:95:59:3b:77:27: 19:b6:c7:f7:6e:f9:fb:8f:f8:a5:9f:83:e9:22:4f:35:54:1f: 27:f2:f6:17:4b:2f:e8:a3:ae:9e:30:58:f5:7a:2c:b5:e1:ac: a9:ba:77:11:7e:df:89:51:bb:d3:f5:a8:39:79:d0:fc:aa:13: 73:8e:4c:c2:85:e0:1b:ce:ae:f5:8d:ba:d8:af:53:2a:b9:99: 40:63:0f:c8:dd:cd:0f:61:1f:65:43:ef:2c:f4:fd:e2:7c:d8: 2c:56:49:0a:7e:b2:2d:a7:20:34:d5:13:3a:65:08:32:fb:5e: e4:5c:8f:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyo2K7y0jnCbLsqwe5+fbziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwMzAxMTAwMTM4WhcNMjYwMzAyMTAwMTM4WjAzMTEwLwYDVQQD Eyg3ZjM5MTJjNDQ2M2U4MTI4NTk3OWNhMzBhZGEwMjI4NDljZmQyNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnha1UpbQar1O/896kNvuCNKvF4i9 LsRFpYTDkqvjCBUNxu0gGuWperWt4r4erWRHQwnsY1kdrXQrZe8N0bxwcSG2OaPJ pteAx3NXPCTSKHA21PEgrKXTvj7VcDrsfj67GreTGCqS+RN+J7weRArvTa7mSsPk 5lhIIbPCPur9FL/te1BKYvTOyvEX1AVDnf3kcgdLVJzjMZh5lGFU5rPN7696q5JH tvsa3N3LtyuNFWqN2OZgyp4J0xHSBUQdlktIfSnKjB9MUivCrQ0Ae2S1238p/Vwg p/EC1TFo1Q1lCD/sQzh2P7juNlW9R1JwmpA1LP//jL2euTDqH+qAan7AnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH85EsRGPoEoWXnKMK2gIoSc/SYGMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLwV8UmP IH7o76E/NrVVyerjw4mlVa0snoVGuw56yhymQR33CkHTXOfdmn+MrEQjQMCLqVWk PuYBtj2YW7BdkwYomc5cqTiwJZdVLhppPleN5HEtXJ8VFzxJBYPpQFY+92cow+f/ eYCYPa+zI8BWPYQ75lxHrw3AMW7YfvnKUGfZN5mwVv8R2skbxZVZO3cnGbbH9275 +4/4pZ+D6SJPNVQfJ/L2F0sv6KOunjBY9XosteGsqbp3EX7fiVG70/WoOXnQ/KoT c45MwoXgG86u9Y262K9TKrmZQGMPyN3ND2EfZUPvLPT94nzYLFZJCn6yLacgNNUT OmUIMvte5FyP+A== -----END CERTIFICATE-----Generated at Sun Mar 1 20:17:55 2026 by rpki-client