$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: hVkz8EU1uF3bPzOYvaVP27e5MRhMPpTW1pYGWrY/lcc= Subject key identifier: 54:96:8B:45:D4:FE:E6:BC:49:6D:06:5B:F2:02:62:2B:98:4A:B6:5F Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019CAA21C6A4DB272577B0BCF6DBA67104A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1947 Signing time: Sun 01 Mar 2026 16:01:06 +0000 Manifest this update: Sun 01 Mar 2026 16:01:06 +0000 Manifest next update: Mon 02 Mar 2026 16:01:06 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: 5lW7DzSg1syy1OJVIuGJU7s782ejfZAolBBhIzfl9o8=) 3: 2tySjVTQSHiULWpIIHxe3UTXyKc.roa (hash: 11efIhc4jliYz5b7ccbbcBy+lueobimG/f4ImBFKSr4=) 4: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 5: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 6: EQGugxJGZZhy7ULlXu2xf-8SXLU.roa (hash: UznnK9y+/YnAzmFCMUsWlBbf7xpLU6GolAvI0bvVwdE=) 7: Hn6HT0rI8yw7OpMX6Ki5ydHEALE.roa (hash: zwMQqyYw0odC6f9bIE+RcXjMzhkbC7l0+euZhieJ6Hw=) 8: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 9: XOJqgPtkORGHv7Nl-1WIFWlpEVc.roa (hash: NkYkGj0wSkYhV+bXuEXtn1TIi5NsUyapnO+clUSvIHU=) 10: b9b4J-MZL7V3ZGeqeJgMGRcaM0U.asa (hash: 4N2HHHaR2GuXJ1UFnYx11sFy5wWNh7GfZPfqfmEWwDc=) 11: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 12: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 13: iyfIsG_zCzXslesxdnK347yeiF4.roa (hash: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=) 14: kxe8v2_GCeDxT_0MCmWHOHxPJNM.roa (hash: tEeXDR/COaV7Zl8LmdrHLVZAbvrGNZU+gXaNAYeV4rM=) 15: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 16: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:21:c6:a4:db:27:25:77:b0:bc:f6:db:a6:71:04:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Mar 1 16:01:06 2026 GMT Not After : Mar 2 16:01:06 2026 GMT Subject: CN=54968b45d4fee6bc496d065bf202622b984ab65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:1d:bd:5e:03:3b:f2:5e:5d:ac:69:5f:8b: 7f:b5:ce:e8:cb:e4:e9:bd:34:3e:ab:35:53:54:42: 19:a1:44:7f:f8:28:00:85:e0:75:a7:3b:6f:a6:55: ce:99:ae:20:42:8d:f4:d7:6d:d0:34:9d:6c:c8:42: e9:ce:3c:bb:39:2f:59:4d:d5:dd:95:ed:85:f2:38: e0:60:28:1c:75:e7:e8:b9:be:ab:1b:27:a9:7f:07: cb:36:48:aa:1c:11:78:1c:ce:7b:a1:0d:1d:eb:96: 6a:b9:2d:96:b4:35:d0:2d:0c:fe:86:3a:58:72:fd: aa:96:0d:13:59:f4:3e:d3:50:1c:12:9d:8c:73:83: 00:fc:3b:f6:37:fc:9a:93:1c:f3:8f:c4:80:7f:62: 11:71:87:af:3f:01:41:dc:ee:95:e2:d0:5a:c7:be: b6:8f:72:8b:1c:de:7d:1b:9d:ad:d7:07:66:e8:db: 94:4f:cc:db:8d:3a:a7:e9:98:0b:1e:06:c9:3a:fd: af:9c:b4:08:54:d3:a7:ba:54:6a:3a:c2:a0:24:34: cd:8b:54:ab:ee:8f:3b:14:0b:90:39:3c:1f:4f:d5: 92:d1:ad:da:b9:4f:d5:32:98:02:8a:1b:51:d3:43: e6:df:9a:4d:75:89:e7:f4:96:d9:f2:e9:fc:65:ab: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:96:8B:45:D4:FE:E6:BC:49:6D:06:5B:F2:02:62:2B:98:4A:B6:5F X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:db:d1:e0:0e:44:bb:47:84:25:d6:04:27:ff:c6:32:08:60: c9:52:51:a9:37:da:1f:7d:9c:e3:a4:73:67:65:f5:a7:d8:4a: 7a:fd:5a:9d:f1:a6:55:13:0e:2e:e2:40:ac:15:ed:d6:bf:bf: 53:61:d9:96:64:09:aa:e2:66:42:00:78:af:4b:33:43:97:c3: 8e:d1:c3:d0:01:0f:54:72:15:6e:c9:f0:be:36:5b:a1:06:b8: ea:d6:63:04:7b:a7:23:1c:40:92:af:40:eb:5f:5b:eb:0f:72: 47:43:6d:90:f4:fb:32:6b:d9:d1:b2:ae:bf:c1:fa:cb:b9:2e: ac:f6:7c:17:bb:07:ef:b3:40:63:be:66:52:a8:9d:c3:e3:66: 69:30:e6:e5:c0:8e:32:ea:d6:10:32:30:c9:7e:68:ad:fe:d6: cf:6f:31:72:ae:0a:3e:6f:30:10:9b:9a:a1:a1:fe:f6:32:9f: 52:47:de:5c:94:1c:6f:23:2f:d6:e6:62:cf:7d:fb:a3:06:7a: 32:a2:2d:9a:1c:20:5c:fc:ce:5d:77:aa:ca:5d:26:2d:b2:4d: d7:6e:db:66:45:e0:4b:cb:c9:09:14:59:6e:58:c9:47:3b:2d: 1c:04:ae:6f:1c:af:94:8f:ec:a8:6e:82:c2:74:ba:c9:d8:ae: 65:af:58:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIcak2ycld7C89tumcQSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwMzAxMTYwMTA2WhcNMjYwMzAyMTYwMTA2WjAzMTEwLwYDVQQD Eyg1NDk2OGI0NWQ0ZmVlNmJjNDk2ZDA2NWJmMjAyNjIyYjk4NGFiNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVMdvV4DO/JeXaxpX4t/tc7oy+Tp vTQ+qzVTVEIZoUR/+CgAheB1pztvplXOma4gQo30123QNJ1syELpzjy7OS9ZTdXd le2F8jjgYCgcdefoub6rGyepfwfLNkiqHBF4HM57oQ0d65ZquS2WtDXQLQz+hjpY cv2qlg0TWfQ+01AcEp2Mc4MA/Dv2N/yakxzzj8SAf2IRcYevPwFB3O6V4tBax762 j3KLHN59G52t1wdm6NuUT8zbjTqn6ZgLHgbJOv2vnLQIVNOnulRqOsKgJDTNi1Sr 7o87FAuQOTwfT9WS0a3auU/VMpgCihtR00Pm35pNdYnn9JbZ8un8Zav7TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSWi0XU/ua8SW0GW/ICYiuYSrZfMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdvR4A5E u0eEJdYEJ//GMghgyVJRqTfaH32c46RzZ2X1p9hKev1anfGmVRMOLuJArBXt1r+/ U2HZlmQJquJmQgB4r0szQ5fDjtHD0AEPVHIVbsnwvjZboQa46tZjBHunIxxAkq9A 619b6w9yR0NtkPT7MmvZ0bKuv8H6y7kurPZ8F7sH77NAY75mUqidw+NmaTDm5cCO MurWEDIwyX5orf7Wz28xcq4KPm8wEJuaoaH+9jKfUkfeXJQcbyMv1uZiz337owZ6 MqItmhwgXPzOXXeqyl0mLbJN127bZkXgS8vJCRRZbljJRzstHASubxyvlI/sqG6C wnS6ydiuZa9YHQ== -----END CERTIFICATE-----Generated at Sun Mar 1 18:15:53 2026 by rpki-client