$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: O0bQMPZ+a/3VA3Fn/BKv/YIvk1PbsiAyTqq4GhL6L9o= Subject key identifier: 5E:8F:56:88:F7:2B:5A:73:F6:41:F1:28:15:59:F5:29:C3:1A:F0:13 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019CAF7E969AB5CADD9ABA082A9EE0D167C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 1255 Signing time: Mon 02 Mar 2026 17:00:34 +0000 Manifest this update: Mon 02 Mar 2026 17:00:34 +0000 Manifest next update: Tue 03 Mar 2026 17:00:34 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: 2YyFLQQAtJUzZpydkzgae1CciYPfAalC4JCUvaLb9pw=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 9: ZVEWuO8vTkhYlgAxEUaEcfperi4.roa (hash: EcaVfVBsUxnWjymJwx/UBAMgjBU918j/k2sTiFawV9k=) 10: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 15:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:af:7e:96:9a:b5:ca:dd:9a:ba:08:2a:9e:e0:d1:67:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Mar 2 17:00:34 2026 GMT Not After : Mar 3 17:00:34 2026 GMT Subject: CN=5e8f5688f72b5a73f641f1281559f529c31af013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:91:29:39:e7:a7:e6:5f:bc:91:a6:7f:da:37: a5:b2:51:8b:65:d4:3b:af:56:d6:86:e4:85:79:be: 90:2b:40:7f:73:17:3f:0f:a7:79:d9:2b:81:fc:03: 82:fa:65:64:3b:56:86:75:34:d8:b5:b6:28:15:11: d7:21:b8:9b:e3:67:19:9e:b4:c6:1c:3b:34:43:0e: 3e:56:27:1a:fd:72:24:9d:b8:6d:74:00:d9:a5:43: 83:fe:9b:97:bf:e8:7e:7a:34:30:95:47:67:d2:47: 73:4f:46:ef:17:15:89:54:08:fa:24:c3:cc:5b:e2: 2c:3b:a1:fa:77:fe:09:09:fa:22:7c:2c:92:8b:d2: 0e:70:1d:4e:78:cc:5f:63:94:64:96:b7:77:5d:a2: 8f:8d:ef:7e:bf:ee:29:8e:f9:ce:ae:eb:59:75:7c: d8:7f:4e:90:79:08:2d:96:07:f2:73:4e:ae:11:ca: 4e:ff:eb:04:23:46:07:a6:79:8c:ec:bc:c9:de:5f: a6:31:f0:17:3b:ba:e2:29:c3:97:4a:79:08:0c:e5: 9a:45:fb:d5:8a:5f:51:19:3b:87:73:c8:47:f6:4d: bc:d8:95:4d:07:10:95:64:24:81:d8:c5:87:5e:b3: c3:93:fe:26:15:a3:84:56:84:b6:0f:14:47:e0:ce: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8F:56:88:F7:2B:5A:73:F6:41:F1:28:15:59:F5:29:C3:1A:F0:13 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c7:ef:c2:21:a9:26:b2:77:9e:ee:70:64:19:ff:97:9d:3e: 0c:97:ae:17:2a:e9:bf:aa:77:31:d4:93:da:25:16:8e:58:3b: c1:dc:80:7d:d4:da:e3:b9:1f:02:b1:f6:d6:73:4b:1e:de:b1: fc:b1:26:0a:08:96:87:ea:39:d0:fe:65:c3:82:78:27:38:08: 1b:fd:07:8c:14:b8:16:00:3c:0b:7a:ae:2b:1a:f3:d8:02:6a: ad:cf:44:7e:43:20:07:47:0d:e8:e2:d3:3b:55:90:14:89:8a: 20:d3:09:d3:f9:1e:c4:a8:90:97:6b:5c:9a:4c:4d:00:7c:dd: 26:c4:91:42:6f:a0:7a:5a:7c:a7:d3:27:08:a8:ac:0f:cb:b7: db:39:00:c9:71:10:4b:cd:38:e0:d5:f5:dc:52:12:24:aa:6e: 21:d9:10:5b:3d:8d:03:b6:06:23:cf:43:45:be:09:c0:c2:61: 5d:c4:b5:8d:bd:c9:80:40:6c:c0:93:ed:4f:03:9d:14:11:67: 93:7e:bf:7c:ce:95:84:03:b5:c2:d2:ce:17:5e:8a:a5:b7:e3: 0e:48:a1:3b:6d:44:b2:32:49:4b:6c:8e:83:d4:0b:7f:f7:f3: d0:8f:8d:e4:65:39:1e:eb:62:6d:08:f8:f7:3e:29:61:90:e8: 0d:a0:5c:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyvfpaatcrdmroIKp7g0WfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwMzAyMTcwMDM0WhcNMjYwMzAzMTcwMDM0WjAzMTEwLwYDVQQD Eyg1ZThmNTY4OGY3MmI1YTczZjY0MWYxMjgxNTU5ZjUyOWMzMWFmMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5EpOeen5l+8kaZ/2jelslGLZdQ7 r1bWhuSFeb6QK0B/cxc/D6d52SuB/AOC+mVkO1aGdTTYtbYoFRHXIbib42cZnrTG HDs0Qw4+Vica/XIknbhtdADZpUOD/puXv+h+ejQwlUdn0kdzT0bvFxWJVAj6JMPM W+IsO6H6d/4JCfoifCySi9IOcB1OeMxfY5Rklrd3XaKPje9+v+4pjvnOrutZdXzY f06QeQgtlgfyc06uEcpO/+sEI0YHpnmM7LzJ3l+mMfAXO7riKcOXSnkIDOWaRfvV il9RGTuHc8hH9k282JVNBxCVZCSB2MWHXrPDk/4mFaOEVoS2DxRH4M71HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6PVoj3K1pz9kHxKBVZ9SnDGvATMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcfvwiGp JrJ3nu5wZBn/l50+DJeuFyrpv6p3MdST2iUWjlg7wdyAfdTa47kfArH21nNLHt6x /LEmCgiWh+o50P5lw4J4JzgIG/0HjBS4FgA8C3quKxrz2AJqrc9EfkMgB0cN6OLT O1WQFImKINMJ0/kexKiQl2tcmkxNAHzdJsSRQm+gelp8p9MnCKisD8u32zkAyXEQ S8044NX13FISJKpuIdkQWz2NA7YGI89DRb4JwMJhXcS1jb3JgEBswJPtTwOdFBFn k36/fM6VhAO1wtLOF16KpbfjDkihO21EsjJJS2yOg9QLf/fz0I+N5GU5HutibQj4 9z4pYZDoDaBcdg== -----END CERTIFICATE-----Generated at Tue Mar 3 01:15:15 2026 by rpki-client