$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json) Hash identifier: IHawVixiYb0EOULACFKJLhkQgGKFdiphXniNBrG595E= Subject key identifier: 29:6E:FF:23:43:07:3F:EE:2F:B0:C2:E4:83:21:25:22:4D:1A:24:54 Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce Certificate serial: 019CAC473220B5F0ECCA64EC74C6B5C3BFB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft Manifest number: 1870 Signing time: Mon 02 Mar 2026 02:01:12 +0000 Manifest this update: Mon 02 Mar 2026 02:01:12 +0000 Manifest next update: Tue 03 Mar 2026 02:01:12 +0000 Files and hashes: 1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=) 2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=) 3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=) 4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: 3yXSd1i/7NuE+bwPTccIf46+TjRNqu7aOlSrpe32EXM=) 5: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=) 6: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=) 7: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=) 8: e6E78PhXHpGFjckaurV7HRo45Qc.roa (hash: /P55Uaooj8U1yQTcKMlV6RxlENtuteMc4CS0XE887QU=) 9: pc9jqeFvGm_Ya7ftOHGOywYXqHk.roa (hash: hvmbpnMOx6aLgariBv7H4no6hWJ9AktUdxssOvOvSNs=) 10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:47:32:20:b5:f0:ec:ca:64:ec:74:c6:b5:c3:bf:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce Validity Not Before: Mar 2 02:01:12 2026 GMT Not After : Mar 3 02:01:12 2026 GMT Subject: CN=296eff2343073fee2fb0c2e4832125224d1a2454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:aa:9a:50:e4:e3:94:31:3a:20:98:16:48:76: 48:93:4d:83:e7:69:95:0a:9e:46:2f:e9:a3:c1:27: de:0c:76:d6:cf:18:f5:43:b1:24:01:cf:d7:38:b8: c0:93:9b:c3:22:dd:03:34:9e:8f:79:7e:0d:3f:5e: dc:1f:12:53:8e:cf:05:cf:c5:01:f2:93:25:b6:f4: d1:33:65:64:de:91:81:a9:84:66:76:59:37:32:a7: f5:4d:e3:e4:81:a0:98:8b:83:45:3a:7f:ed:34:4f: 1e:b1:15:f2:65:71:eb:23:80:e7:8e:89:28:1e:31: 74:47:c4:54:ae:00:14:2b:43:10:c7:13:23:9a:88: 51:a1:3b:76:cd:87:07:37:77:d6:cd:5f:8a:02:5d: 97:4a:42:5a:f1:56:69:da:14:1b:08:76:d1:89:55: 4d:83:d2:ef:dd:5a:8f:03:74:3b:a4:32:e7:37:e4: 23:b2:1b:e1:77:b9:7d:3b:f5:9e:15:a4:42:c6:16: 13:2f:f9:69:40:9c:9f:8c:9b:f6:ab:20:fd:f1:ca: 7e:93:94:eb:db:7b:f3:b6:f1:49:e2:8c:de:1c:ff: 06:43:f9:5e:af:1e:ef:26:22:8f:e0:bc:65:fe:94: 39:18:b6:13:34:55:16:31:26:12:b6:81:5b:9a:f7: 7d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6E:FF:23:43:07:3F:EE:2F:B0:C2:E4:83:21:25:22:4D:1A:24:54 X509v3 Authority Key Identifier: keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3a:97:ce:c4:f2:bb:93:4b:43:35:4e:10:4b:d9:c0:fc:70: d6:2c:51:2d:d8:f6:eb:c6:0e:c6:f3:41:32:95:d9:1e:21:e3: 48:8a:05:6d:d1:84:84:ec:30:e9:04:cf:75:7f:86:c4:9d:eb: d9:38:c3:3c:1d:e8:d3:de:f8:be:f1:78:a8:9f:bc:64:5c:83: 86:d8:b0:5f:cf:08:66:e9:ca:c1:b7:06:4c:21:43:f2:c3:5a: 07:f7:6c:5e:47:4b:d4:27:c6:2b:18:7a:da:a9:c1:5e:3f:cc: e6:42:e7:48:05:57:c8:96:f8:6f:f0:b4:c8:65:69:92:ee:b5: 01:c6:b3:a2:f9:06:1b:9e:8d:f4:a5:d2:08:3c:06:4f:df:bc: a2:d7:43:e7:f1:49:07:c0:35:9a:03:b4:01:74:04:c6:43:73: 4a:4b:77:73:96:64:bb:4a:b6:77:6c:e5:55:2f:e5:46:cb:fc: 77:cf:53:e9:a8:5b:c9:a0:39:93:3b:f6:c5:da:70:80:60:f6: 08:8d:61:71:8c:fa:16:82:d5:53:8d:5d:43:98:58:49:41:d7: ad:5c:67:50:04:20:f1:00:d7:6c:70:50:4b:51:23:28:9c:8f: a5:26:ea:ca:da:31:8f:e4:5c:a1:ca:fd:a6:85:f5:7e:f5:dc: 30:41:c3:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysRzIgtfDsymTsdMa1w7+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0 N2ZkY2UwHhcNMjYwMzAyMDIwMTEyWhcNMjYwMzAzMDIwMTEyWjAzMTEwLwYDVQQD EygyOTZlZmYyMzQzMDczZmVlMmZiMGMyZTQ4MzIxMjUyMjRkMWEyNDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKqaUOTjlDE6IJgWSHZIk02D52mV Cp5GL+mjwSfeDHbWzxj1Q7EkAc/XOLjAk5vDIt0DNJ6PeX4NP17cHxJTjs8Fz8UB 8pMltvTRM2Vk3pGBqYRmdlk3Mqf1TePkgaCYi4NFOn/tNE8esRXyZXHrI4Dnjoko HjF0R8RUrgAUK0MQxxMjmohRoTt2zYcHN3fWzV+KAl2XSkJa8VZp2hQbCHbRiVVN g9Lv3VqPA3Q7pDLnN+Qjshvhd7l9O/WeFaRCxhYTL/lpQJyfjJv2qyD98cp+k5Tr 23vztvFJ4ozeHP8GQ/lerx7vJiKP4Lxl/pQ5GLYTNFUWMSYStoFbmvd9MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClu/yNDBz/uL7DC5IMhJSJNGiRUMB8GA1UdIwQY MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt YjczYTM2ZDkzOWIyLzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzqXzsTy u5NLQzVOEEvZwPxw1ixRLdj268YOxvNBMpXZHiHjSIoFbdGEhOww6QTPdX+GxJ3r 2TjDPB3o0974vvF4qJ+8ZFyDhtiwX88IZunKwbcGTCFD8sNaB/dsXkdL1CfGKxh6 2qnBXj/M5kLnSAVXyJb4b/C0yGVpku61AcazovkGG56N9KXSCDwGT9+8otdD5/FJ B8A1mgO0AXQExkNzSkt3c5Zku0q2d2zlVS/lRsv8d89T6ahbyaA5kzv2xdpwgGD2 CI1hcYz6FoLVU41dQ5hYSUHXrVxnUAQg8QDXbHBQS1EjKJyPpSbqytoxj+Rcocr9 poX1fvXcMEHDuA== -----END CERTIFICATE-----Generated at Mon Mar 2 07:07:25 2026 by rpki-client