$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: AZsSLM7kOOFkiWc+KWEXwEUMG4fDSFqUICOCebWNHqM= Subject key identifier: 9F:F6:DA:98:FB:3E:F2:62:28:D7:A1:89:5B:68:E1:9D:ED:B1:36:4C Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 019CACB57963A2BB99ED56AFD3F8DA231E7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 14D7 Signing time: Mon 02 Mar 2026 04:01:40 +0000 Manifest this update: Mon 02 Mar 2026 04:01:40 +0000 Manifest next update: Tue 03 Mar 2026 04:01:40 +0000 Files and hashes: 1: 3jDJ5a-rblvvz-j2fpP0Sarh3To.roa (hash: +EqyrRTCgEyUFu+EGwkPk5fx5YkNUQzVTN15shVfS7c=) 2: 4PEBSYBvzkCsDVUQ66hb1Kfy5X4.roa (hash: FKTV+GMV2F3rBs+0rAhquEp7r2XIbw+tGPzN2CvtSt0=) 3: 75s-ByXhLvXCyZa2XbqfAvH6Epk.roa (hash: IX8EC7yBzBqlbwdtd9sbWgqtYLmPYcgtwLxVHX+Gxtw=) 4: 8MsqChfqyk1noQMRXmiLEoP7JJc.roa (hash: 5HC+gRN9Kd7T3/h7fthoFYQYhTna8IfEWC1qAEQyFlA=) 5: A-rHPJxadoP-DN7xVNjnNuVuw6A.roa (hash: 4l5BCwURt7YDV10rwuZHqQQEai25MJkXH4mq+zGFBZk=) 6: A3WTKCACeEMnsJPRt1EtZ_IOE_o.roa (hash: fTMDJzlNdc8urBX1kRcFBR3Pb++06Ji2RDkWJYrM/nE=) 7: GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa (hash: aaLxieN/n3yBrcTTRt8f3C9YEFE8nrKX/yFFAYKui70=) 8: VuEhHAq2HoPe8RVU69XPTei-cE8.roa (hash: Bq3m8GApqW3tKQWVbNfLNzBDZRLHrGvbYKJZWCdv6TI=) 9: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: vxt5jzOTbOtEN23V+D4wGw+tNicyQdxpx8KfS2kDrrs=) 10: tKFH2HoWkbg9bb1yJ7KiMyAru7Q.roa (hash: Hl1JR0aJQiWIXrA53WzTjCP5mFFzxpdo6sRUi29w3iI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:b5:79:63:a2:bb:99:ed:56:af:d3:f8:da:23:1e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Mar 2 04:01:40 2026 GMT Not After : Mar 3 04:01:40 2026 GMT Subject: CN=9ff6da98fb3ef26228d7a1895b68e19dedb1364c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:19:7d:86:31:fd:5a:32:45:f1:39:0c:d4:74: c3:af:20:ee:e6:d6:04:da:ee:05:30:9d:35:57:e0: 50:ea:3c:02:87:72:9f:a8:c0:d9:e1:f4:e5:cb:ca: 29:ad:9c:4f:e4:90:d7:94:71:dc:ca:7f:5e:84:71: bd:63:ab:51:87:9e:fc:e4:60:22:9a:f4:70:a0:27: af:67:1c:8e:c6:c7:f9:91:22:df:d9:f5:01:5e:52: f3:54:a4:0e:6e:0a:ae:c5:32:07:16:33:78:8e:7f: 9b:99:2c:ec:3a:da:61:48:43:93:d3:c9:f0:2b:f4: 4b:9c:d4:b6:22:17:3d:24:ed:20:8d:61:27:d9:cd: 31:e3:6c:02:86:bd:a1:c3:3b:9e:3c:ef:88:96:d8: d5:18:25:33:2b:0e:3e:bd:8a:22:4b:3b:2f:36:51: 63:7a:96:ee:76:a5:11:8b:0b:e8:78:b5:5e:67:4a: 3e:f4:74:e5:89:69:5e:57:c8:27:49:7b:f5:70:c7: e5:c4:67:53:a8:1b:ab:49:5f:fa:90:82:34:20:88: e0:0a:f5:bd:2f:8a:3e:8f:e4:f6:5a:1e:ad:03:1e: 1b:32:b2:40:cd:ab:3d:22:df:3a:b2:b8:e2:36:25: 6d:dc:05:55:50:f5:4b:00:eb:0f:17:5c:cb:91:32: 15:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F6:DA:98:FB:3E:F2:62:28:D7:A1:89:5B:68:E1:9D:ED:B1:36:4C X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:43:ae:30:84:b7:60:f4:fa:68:bd:7d:3b:a4:30:c2:86:e6: d4:15:6e:b3:4f:65:26:37:41:3d:19:b9:8f:0c:86:9b:71:64: 7f:7f:6a:d5:47:ee:17:c2:be:f5:a3:2b:f9:a3:19:a0:8c:ee: d6:f2:70:ca:cf:78:ed:a9:70:cb:b6:2a:54:c6:b0:f1:c2:c7: 66:06:3d:ae:c7:eb:a0:c3:da:59:c9:b3:c6:d8:fe:71:e0:db: 4f:0b:d6:7b:22:c7:6d:07:89:e4:25:19:57:6c:03:ee:af:f4: c2:f4:32:ac:e1:6f:07:a9:77:77:4f:9b:12:ae:e7:04:d5:04: c8:0e:38:e3:a5:07:90:98:1c:25:0c:ac:b8:87:e2:78:ce:68: a1:e4:f2:1e:10:9f:56:19:86:3a:d2:61:b7:cc:67:18:b6:b2: 54:2b:69:a2:ae:c1:85:f3:4a:1b:e3:38:38:f2:a7:e7:36:ab: 10:95:ca:13:fb:c7:57:0f:db:46:40:02:58:f2:75:e9:f0:39: ad:71:e0:a7:44:3f:9f:0d:f6:85:69:d5:56:98:62:6a:c5:af: 3b:1e:e4:cc:63:81:b3:55:ef:91:32:6d:4f:3a:f5:f2:63:b3: 25:86:dc:4b:77:86:48:0b:b8:c6:3f:84:1b:7b:e2:95:eb:bc: eb:5f:e4:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZystXljoruZ7Vav0/jaIx5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjYwMzAyMDQwMTQwWhcNMjYwMzAzMDQwMTQwWjAzMTEwLwYDVQQD Eyg5ZmY2ZGE5OGZiM2VmMjYyMjhkN2ExODk1YjY4ZTE5ZGVkYjEzNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Bl9hjH9WjJF8TkM1HTDryDu5tYE 2u4FMJ01V+BQ6jwCh3KfqMDZ4fTly8oprZxP5JDXlHHcyn9ehHG9Y6tRh5785GAi mvRwoCevZxyOxsf5kSLf2fUBXlLzVKQObgquxTIHFjN4jn+bmSzsOtphSEOT08nw K/RLnNS2Ihc9JO0gjWEn2c0x42wChr2hwzuePO+IltjVGCUzKw4+vYoiSzsvNlFj epbudqURiwvoeLVeZ0o+9HTliWleV8gnSXv1cMflxGdTqBurSV/6kII0IIjgCvW9 L4o+j+T2Wh6tAx4bMrJAzas9It86srjiNiVt3AVVUPVLAOsPF1zLkTIVgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/22pj7PvJiKNehiVto4Z3tsTZMMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0OuMIS3 YPT6aL19O6Qwwobm1BVus09lJjdBPRm5jwyGm3Fkf39q1UfuF8K+9aMr+aMZoIzu 1vJwys947alwy7YqVMaw8cLHZgY9rsfroMPaWcmzxtj+ceDbTwvWeyLHbQeJ5CUZ V2wD7q/0wvQyrOFvB6l3d0+bEq7nBNUEyA4446UHkJgcJQysuIfieM5ooeTyHhCf VhmGOtJht8xnGLayVCtpoq7BhfNKG+M4OPKn5zarEJXKE/vHVw/bRkACWPJ16fA5 rXHgp0Q/nw32hWnVVphiasWvOx7kzGOBs1XvkTJtTzr18mOzJYbcS3eGSAu4xj+E G3vileu861/kGQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:03:02 2026 by rpki-client