$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: VEzom64LStNOG2MHhk27MhLIIZK3JKBVfVMM8hLUnHs= Subject key identifier: B2:B9:9B:04:0B:F6:54:2A:59:F7:49:F2:19:52:4A:A5:91:5C:75:C2 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019CAD908EAEB0D507F26B7274DBAC1E8F7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 1254 Signing time: Mon 02 Mar 2026 08:00:57 +0000 Manifest this update: Mon 02 Mar 2026 08:00:57 +0000 Manifest next update: Tue 03 Mar 2026 08:00:57 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: V/X1k/JHR7Ch0dccemkpmoJEcQOUrh+BMQfjQUi9tFI=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 9: ZVEWuO8vTkhYlgAxEUaEcfperi4.roa (hash: EcaVfVBsUxnWjymJwx/UBAMgjBU918j/k2sTiFawV9k=) 10: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 08:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:90:8e:ae:b0:d5:07:f2:6b:72:74:db:ac:1e:8f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Mar 2 08:00:57 2026 GMT Not After : Mar 3 08:00:57 2026 GMT Subject: CN=b2b99b040bf6542a59f749f219524aa5915c75c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:14:08:1c:13:d1:5d:9e:a6:7c:ad:c0:f3:79: ad:34:10:7f:7e:60:fc:fe:0b:29:fb:de:ac:27:c5: 1f:99:21:0e:3a:5f:3b:da:54:19:1f:b5:09:55:0b: 67:e6:06:bf:8e:cd:24:c4:01:c5:04:13:17:0d:27: 2e:7d:2a:8d:ce:83:1b:31:51:28:38:c6:8a:52:c0: 32:ce:a2:0d:23:bf:5f:29:cd:91:60:b2:9a:42:70: d3:37:18:86:c5:58:57:7f:f3:71:9a:93:dd:37:e2: 2b:38:5f:a8:e0:ec:05:8a:75:66:81:ae:f5:bb:62: 6c:b8:ff:79:04:b8:68:ec:6e:6c:3c:cc:ab:bc:0f: 35:06:f7:c3:19:ee:c3:34:ce:c2:c9:61:14:00:f4: 2f:bd:f1:f4:e6:a6:43:b4:45:d2:9e:3b:b4:ff:8c: 8d:d4:5c:9d:b1:75:b3:94:c7:b6:fe:ba:5b:6d:03: ab:4c:3d:1e:0d:53:ff:38:7a:56:37:47:30:78:3e: 4b:0d:ff:48:45:bf:87:28:85:88:48:6b:aa:6c:38: 68:9e:6c:f7:11:e2:78:db:19:85:eb:d9:ac:42:c1: 42:4d:bb:2b:86:80:75:ae:9d:bd:a4:48:b8:86:9d: a6:4d:01:8c:b8:72:9c:54:f0:92:3f:20:02:14:77: 81:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B9:9B:04:0B:F6:54:2A:59:F7:49:F2:19:52:4A:A5:91:5C:75:C2 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:27:92:71:85:bc:b0:f0:80:30:bb:9e:de:46:b3:74:74:a2: 8f:1d:4e:bb:d2:05:d6:00:f2:01:61:15:1d:b3:5e:2a:b1:0b: 18:12:b7:7c:9b:39:90:d1:46:e5:5c:db:d1:38:af:96:46:04: 8b:d9:6d:dc:49:6a:eb:16:14:6b:86:f8:7b:53:08:ad:78:db: 5b:3e:d4:dc:62:98:fe:b2:72:64:4d:50:19:16:c5:3e:ee:e3: f9:73:15:34:cd:7b:47:77:eb:62:d6:7c:d2:ac:29:90:e3:96: f6:22:31:a9:09:0f:85:a2:18:12:89:9a:a4:f1:ca:b5:8f:53: 8f:92:af:b3:06:2a:66:49:00:a7:f2:fa:8c:75:44:a1:ed:e5: a0:5b:d4:03:3a:3e:9e:e9:9f:4c:bd:1e:a8:85:c7:e5:17:3b: 02:01:7f:32:c8:2e:54:f6:b2:7a:2c:25:a9:67:17:64:5c:1e: 12:eb:a7:d6:b9:ff:54:ee:f7:9c:0f:e4:4f:65:54:9f:d5:3d: 2c:8b:5a:e6:21:fe:e0:15:19:7e:24:a4:77:4c:c2:57:21:e1: 7e:39:dd:7b:a2:8f:b4:50:a8:36:b9:cc:74:9d:db:e1:a6:0d: 38:ce:6c:ed:e8:fc:f8:02:88:96:8e:aa:a9:14:0f:32:ba:de: 6c:f0:23:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytkI6usNUH8mtydNusHo99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwMzAyMDgwMDU3WhcNMjYwMzAzMDgwMDU3WjAzMTEwLwYDVQQD EyhiMmI5OWIwNDBiZjY1NDJhNTlmNzQ5ZjIxOTUyNGFhNTkxNWM3NWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RQIHBPRXZ6mfK3A83mtNBB/fmD8 /gsp+96sJ8UfmSEOOl872lQZH7UJVQtn5ga/js0kxAHFBBMXDScufSqNzoMbMVEo OMaKUsAyzqINI79fKc2RYLKaQnDTNxiGxVhXf/NxmpPdN+IrOF+o4OwFinVmga71 u2JsuP95BLho7G5sPMyrvA81BvfDGe7DNM7CyWEUAPQvvfH05qZDtEXSnju0/4yN 1FydsXWzlMe2/rpbbQOrTD0eDVP/OHpWN0cweD5LDf9IRb+HKIWISGuqbDhonmz3 EeJ42xmF69msQsFCTbsrhoB1rp29pEi4hp2mTQGMuHKcVPCSPyACFHeB/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLK5mwQL9lQqWfdJ8hlSSqWRXHXCMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSeScYW8 sPCAMLue3kazdHSijx1Ou9IF1gDyAWEVHbNeKrELGBK3fJs5kNFG5Vzb0TivlkYE i9lt3Elq6xYUa4b4e1MIrXjbWz7U3GKY/rJyZE1QGRbFPu7j+XMVNM17R3frYtZ8 0qwpkOOW9iIxqQkPhaIYEomapPHKtY9Tj5KvswYqZkkAp/L6jHVEoe3loFvUAzo+ numfTL0eqIXH5Rc7AgF/MsguVPayeiwlqWcXZFweEuun1rn/VO73nA/kT2VUn9U9 LIta5iH+4BUZfiSkd0zCVyHhfjnde6KPtFCoNrnMdJ3b4aYNOM5s7ej8+AKIlo6q qRQPMrrebPAjgQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:26:17 2026 by rpki-client