$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: hCVPjsgXcB8jVRX+VQPFvvoKpRXMn0VpYIQwA8ebgtU= Subject key identifier: 8B:A6:28:11:B7:78:22:95:60:E9:E8:BC:24:BE:CA:A1:45:32:3A:2A Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019CAA8FBD156BD439D6A8C63F57428F4E1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 185F Signing time: Sun 01 Mar 2026 18:01:12 +0000 Manifest this update: Sun 01 Mar 2026 18:01:12 +0000 Manifest next update: Mon 02 Mar 2026 18:01:12 +0000 Files and hashes: 1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=) 2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=) 3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=) 4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=) 5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=) 6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=) 7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=) 8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=) 9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=) 10: DTHhyCPOZ695qnvf8noKgDaldnw.roa (hash: RdAlqOJJ+D5HDTAnSoZQT+QzaM+gEFl6T7Vfm5WmDEk=) 11: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=) 12: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=) 13: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=) 14: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=) 15: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=) 16: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=) 17: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=) 18: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=) 19: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=) 20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=) 21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=) 22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=) 23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=) 24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: kO6WWnOV75TiorPB8bSGxcpInj7vl7USy2jEO4iw/8Y=) 26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:8f:bd:15:6b:d4:39:d6:a8:c6:3f:57:42:8f:4e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Mar 1 18:01:12 2026 GMT Not After : Mar 2 18:01:12 2026 GMT Subject: CN=8ba62811b778229560e9e8bc24becaa145323a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5e:50:48:e6:4e:fa:f2:ff:c4:f6:99:63:0e: 8b:ee:09:18:a1:d6:6f:3b:4c:96:4b:d6:fe:db:49: 6b:b8:79:9b:03:88:87:db:bd:c9:57:b8:77:7a:d6: 49:08:90:77:52:26:57:f0:5b:c8:7d:2c:3f:63:31: 7d:1b:05:b7:0b:b7:32:cb:06:6e:4c:b4:f0:9f:97: 63:48:fc:11:d8:a7:d0:73:b7:c2:9c:6e:52:28:14: a4:87:60:98:17:05:9d:3d:d7:8b:da:54:c0:a7:00: 61:23:f5:bc:e5:aa:07:d2:ba:1e:86:d5:52:5a:1d: 52:94:3b:46:c5:08:da:2d:db:5b:f9:55:d0:fd:bb: 5c:19:15:2c:7e:95:04:a6:29:7c:c0:5f:8a:99:58: 3f:25:2a:13:e2:90:bd:1f:84:9f:7d:78:80:d2:27: cf:26:3c:47:24:ca:93:bf:82:a2:24:e7:2f:ea:d7: 27:da:2d:e7:8e:2b:fa:67:52:1f:10:2f:c9:4d:28: ba:ff:60:d3:11:af:3a:64:85:14:d0:57:be:4f:4b: ef:a6:80:ec:6b:c0:e4:db:2d:1f:fa:64:6b:89:92: 39:bc:e7:70:71:e1:a2:0c:84:17:c7:48:ff:1c:af: 55:83:ed:5a:57:ad:59:74:36:5a:64:68:ee:14:4e: ae:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A6:28:11:B7:78:22:95:60:E9:E8:BC:24:BE:CA:A1:45:32:3A:2A X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:85:47:a8:90:a9:61:92:db:7a:ac:58:db:01:d6:a4:50:cd: 63:4d:37:ef:87:c6:00:18:d4:95:d9:02:ef:dc:bc:20:79:27: fd:f9:32:a2:64:9b:71:d9:35:1f:2b:b8:61:88:6f:57:45:23: bb:b6:04:92:e4:5f:5c:62:aa:9c:55:09:96:3a:a8:e4:6c:4b: 73:04:4a:2c:2c:86:f3:8a:d2:32:41:a2:af:0a:7a:93:42:01: b3:06:a1:4a:80:1e:57:ac:4c:14:8f:86:ae:87:df:98:90:b4: 30:c0:21:05:40:37:cd:82:94:83:af:a6:34:45:19:f8:72:44: 80:6e:88:e3:c2:e3:08:46:8c:b4:8f:b1:5f:b4:f4:27:a6:ed: be:31:04:3b:48:b1:50:3b:37:1f:ad:2c:ad:07:28:6b:14:1d: bd:99:1b:15:ab:ed:8f:a8:e8:4f:06:b0:ef:de:53:77:da:6e: 8a:ff:d6:67:b9:cc:17:4a:be:3f:7d:4e:32:0c:22:92:f3:91: 10:43:84:74:60:f4:e0:b6:7b:cf:25:3a:09:73:1a:0b:3b:5d: 0b:aa:8e:02:61:14:e0:06:4a:58:0d:60:35:f2:96:99:c8:8e: 85:94:73:b7:4a:02:e6:c4:c9:eb:fd:ad:12:9a:b7:bb:10:cb: 82:8c:23:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqj70Va9Q51qjGP1dCj04bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMzAxMTgwMTEyWhcNMjYwMzAyMTgwMTEyWjAzMTEwLwYDVQQD Eyg4YmE2MjgxMWI3NzgyMjk1NjBlOWU4YmMyNGJlY2FhMTQ1MzIzYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F5QSOZO+vL/xPaZYw6L7gkYodZv O0yWS9b+20lruHmbA4iH273JV7h3etZJCJB3UiZX8FvIfSw/YzF9GwW3C7cyywZu TLTwn5djSPwR2KfQc7fCnG5SKBSkh2CYFwWdPdeL2lTApwBhI/W85aoH0roehtVS Wh1SlDtGxQjaLdtb+VXQ/btcGRUsfpUEpil8wF+KmVg/JSoT4pC9H4SffXiA0ifP JjxHJMqTv4KiJOcv6tcn2i3njiv6Z1IfEC/JTSi6/2DTEa86ZIUU0Fe+T0vvpoDs a8Dk2y0f+mRriZI5vOdwceGiDIQXx0j/HK9Vg+1aV61ZdDZaZGjuFE6u0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIumKBG3eCKVYOnovCS+yqFFMjoqMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4VHqJCp YZLbeqxY2wHWpFDNY00374fGABjUldkC79y8IHkn/fkyomSbcdk1Hyu4YYhvV0Uj u7YEkuRfXGKqnFUJljqo5GxLcwRKLCyG84rSMkGirwp6k0IBswahSoAeV6xMFI+G roffmJC0MMAhBUA3zYKUg6+mNEUZ+HJEgG6I48LjCEaMtI+xX7T0J6btvjEEO0ix UDs3H60srQcoaxQdvZkbFavtj6joTwaw795Td9puiv/WZ7nMF0q+P31OMgwikvOR EEOEdGD04LZ7zyU6CXMaCztdC6qOAmEU4AZKWA1gNfKWmciOhZRzt0oC5sTJ6/2t Epq3uxDLgowjJg== -----END CERTIFICATE-----Generated at Mon Mar 2 01:49:55 2026 by rpki-client