$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: 7HPY7LM+1x6SrzyUDPpd7n7QuabEHVdh5l1YPdlQS10= Subject key identifier: 01:84:99:6D:4A:C2:5D:3D:10:F5:3E:C2:A8:FD:98:CD:1A:E7:22:25 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019CAA8FBADC70758352FF591D588F3AE316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 10A5 Signing time: Sun 01 Mar 2026 18:01:11 +0000 Manifest this update: Sun 01 Mar 2026 18:01:11 +0000 Manifest next update: Mon 02 Mar 2026 18:01:11 +0000 Files and hashes: 1: 1nfCihSTwlJIQ4nvsiCslekY7NM.roa (hash: 4kEXXYbaPTR9rMQ4lw9zYV/v1K+AlDu09MYuRsUIkjU=) 2: 1rQSpSq9n0go-1sqt7J-jro-onw.roa (hash: A170zOdDKUFR8OjpxSyTeADzDSsnK0kS+5cwO4467+4=) 3: 4YLIYNLUNKZUi3rhtGKVYy_4Aww.roa (hash: 5OBBvoknKe7BIhAFNY6E/EsSly4AA69+3FRzkxou83M=) 4: JWbtobpI47VXCFWlAi9tqrIVRvw.roa (hash: ucrMEatOyob1z9bYCx6s8YshkLw5O6g2pTzQdQKb/BI=) 5: Md6a-KQcbUfuxvWxKDr3cty5184.roa (hash: 0QYUuqR4NLEQ4pSl7SpM+UKRlpQJFGB4BeS1z7xH1dA=) 6: O-Lc9p7lKgu4RG8qbZStlySnjJw.roa (hash: VJbi6pgA5J9qOWeC5+ilPMjxUhX49jVlWxhniX3lMX8=) 7: RnEHdu41-R4PcF7uA7NCq1ymq-o.roa (hash: 1QIkC6nLYEKLiQP1dxQtxmlssoU62izuT6vjCEpQfEc=) 8: UFF8sc1cAlxiuca1UYpBZJuyruI.roa (hash: VvoB5niTEUFcEUXrlM/+U17VoiABVzzIIDopu2PtroE=) 9: euynJTb4DQRxhsqGUuIVKvMePvE.roa (hash: ApLmaeR70nQaei0kFKLHQPB8kjQglplGX2OnJJHWzlA=) 10: kjMi6obHpt9UHAnYG2JDcUbRz4I.roa (hash: eeNQkVMpQhVfJx2+o+C0G3gVG9NOsH6OImPcge0a9H8=) 11: ogYawkz_gBDjl6zl_q1fMXZNBvo.roa (hash: x588DAczbjPIl3pK5n5K7VZpFPPA1ral0L6/o6+ORO8=) 12: qBZkx98C2FyrYyHkdEdcNmhea-k.roa (hash: sIVCOdJ2FafZ1gXZEe6wh1i0aQqPT1MJAdBuWY+Cbzc=) 13: xbsOLy08hDmqcrHsStCHW6gzcKY.roa (hash: U+nyPksaAcVlKKdUnyPWFx4E2iIYZFylZhL+wDWilqE=) 14: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: pvr6ODPaJpdpPRC0mOYz01PeYjLrktsGa8bl/kRS/ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:8f:ba:dc:70:75:83:52:ff:59:1d:58:8f:3a:e3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Mar 1 18:01:11 2026 GMT Not After : Mar 2 18:01:11 2026 GMT Subject: CN=0184996d4ac25d3d10f53ec2a8fd98cd1ae72225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:62:72:b7:5f:4d:5f:e4:2b:f4:34:83:12: e9:8c:50:01:b3:c6:b2:b8:16:b5:76:04:67:8e:1d: 96:d9:7b:fb:da:4b:56:e7:1c:02:50:17:30:d7:4b: 21:09:1a:d6:f1:31:26:bf:49:c3:b0:c7:47:7b:3f: 1e:c0:d6:c4:70:d4:7e:cc:e0:9c:de:da:b2:5d:3d: a3:97:4f:84:da:78:4f:cf:28:9e:3e:a9:2a:18:4f: 63:2a:29:e1:1e:d1:ae:a1:7f:25:10:21:e8:59:7c: 27:17:69:7f:33:01:de:21:64:24:36:f5:2b:24:36: 01:30:30:d0:5f:ca:e9:ef:86:eb:60:ef:58:0f:d0: 68:71:14:bd:85:8b:a9:0b:0a:c8:11:8c:ea:da:26: 0e:c5:76:cd:81:e4:37:81:58:ea:ef:a5:f3:a3:fc: 76:41:de:05:cc:1a:5b:92:8b:ca:4f:f7:b8:5d:60: 8c:0c:6d:49:b8:a9:5b:d7:aa:3a:54:59:1c:f6:d1: 29:56:f1:7b:21:92:20:54:a4:c9:65:3e:8e:f2:83: 19:f2:aa:5d:12:b1:97:8b:af:7d:4e:98:a0:dc:bd: a5:62:78:7f:7d:94:b5:41:0e:ad:f7:3b:a8:1e:37: c4:8d:2d:7d:de:cf:f2:35:e1:79:29:a7:ed:ac:5e: af:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:84:99:6D:4A:C2:5D:3D:10:F5:3E:C2:A8:FD:98:CD:1A:E7:22:25 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:07:bd:2b:a0:c5:b9:1f:f8:5b:1b:3d:b4:a1:83:85:1d:23: 3a:4e:d8:90:d5:25:84:01:a9:09:28:28:57:38:dc:cd:de:11: ef:00:7f:28:8a:6c:f5:de:73:ae:7a:fe:8b:61:49:69:76:cb: 67:5f:1f:34:42:3b:7b:04:ce:07:ba:88:a9:49:e8:9e:d5:f7: 2c:9a:58:13:34:0d:f3:f5:b5:c0:e2:5b:cc:09:00:f4:be:43: d2:96:55:0f:42:78:bc:c1:2d:f6:b3:a1:c3:b4:b8:31:35:1f: 7b:e7:25:02:c1:68:e0:71:46:bd:84:c6:b8:55:81:4f:43:c5: 78:a5:c8:88:e0:9b:7a:19:cc:f2:73:85:4b:93:15:71:40:41: 19:fc:a2:b5:ea:e2:92:f1:14:38:83:fd:ac:bd:dc:5e:eb:8b: ac:e4:dc:03:07:a6:f6:1c:8e:22:3a:8f:72:91:05:66:a6:d7: 56:89:de:25:5a:68:fe:8a:6e:2e:f1:69:9a:25:6e:ce:05:f7: f7:2b:20:33:1a:ec:2d:b6:a7:e7:24:55:ea:a0:f9:88:b9:f1: 0a:ed:8b:e8:7b:b8:39:73:60:bb:03:8e:28:3e:e6:3e:ff:23: de:6d:65:68:b1:da:86:e8:2d:74:fc:37:2f:ca:c9:de:93:43: 43:08:57:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqj7rccHWDUv9ZHViPOuMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwMzAxMTgwMTExWhcNMjYwMzAyMTgwMTExWjAzMTEwLwYDVQQD EygwMTg0OTk2ZDRhYzI1ZDNkMTBmNTNlYzJhOGZkOThjZDFhZTcyMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoNicrdfTV/kK/Q0gxLpjFABs8ay uBa1dgRnjh2W2Xv72ktW5xwCUBcw10shCRrW8TEmv0nDsMdHez8ewNbEcNR+zOCc 3tqyXT2jl0+E2nhPzyiePqkqGE9jKinhHtGuoX8lECHoWXwnF2l/MwHeIWQkNvUr JDYBMDDQX8rp74brYO9YD9BocRS9hYupCwrIEYzq2iYOxXbNgeQ3gVjq76Xzo/x2 Qd4FzBpbkovKT/e4XWCMDG1JuKlb16o6VFkc9tEpVvF7IZIgVKTJZT6O8oMZ8qpd ErGXi699Tpig3L2lYnh/fZS1QQ6t9zuoHjfEjS193s/yNeF5KaftrF6v8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGEmW1Kwl09EPU+wqj9mM0a5yIlMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwe9K6DF uR/4Wxs9tKGDhR0jOk7YkNUlhAGpCSgoVzjczd4R7wB/KIps9d5zrnr+i2FJaXbL Z18fNEI7ewTOB7qIqUnontX3LJpYEzQN8/W1wOJbzAkA9L5D0pZVD0J4vMEt9rOh w7S4MTUfe+clAsFo4HFGvYTGuFWBT0PFeKXIiOCbehnM8nOFS5MVcUBBGfyiteri kvEUOIP9rL3cXuuLrOTcAwem9hyOIjqPcpEFZqbXVoneJVpo/opuLvFpmiVuzgX3 9ysgMxrsLban5yRV6qD5iLnxCu2L6Hu4OXNguwOOKD7mPv8j3m1laLHahugtdPw3 L8rJ3pNDQwhXog== -----END CERTIFICATE-----Generated at Mon Mar 2 00:54:53 2026 by rpki-client