$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: RdlMd4uCKISewm/5DqQhrgUxdMl4jFgsJ+9FyVCK4ow= Subject key identifier: CE:23:56:07:93:05:BB:73:8D:1C:7F:50:46:4C:B7:EB:49:AC:C9:2B Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019CAD5966805A10D92D8EDBA73AA6BEC03B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 1572 Signing time: Mon 02 Mar 2026 07:00:43 +0000 Manifest this update: Mon 02 Mar 2026 07:00:43 +0000 Manifest next update: Tue 03 Mar 2026 07:00:43 +0000 Files and hashes: 1: CNbyub_ywtPJGqzP5UZEA0DNtXg.roa (hash: 9XO75azpd4xnA1Fcmx7YElMcl6h2AUZai5Sul1ZnzbI=) 2: MK0PJN0MMreFyMgjGNJVCcP1kio.roa (hash: /0jr4evlMMVaJu7NGHDu4KX/gcucZOxed/cQrWReq7A=) 3: Sc45OK_ODFvPX6AE8nSZ5FbJFlU.roa (hash: gPl/EfQBajKnpdkX9+XCHslwBpwrlTf6l+4BLwHTF4A=) 4: _U9BGLEG7vRfktFO8xi21MAtt54.roa (hash: hjEgCWQMFqUs25rtyBx/grzy2AflNXODIi2nt6p8P6I=) 5: dJi6YZs9u5yGuAWQeA9vl6v1pS4.roa (hash: TJ07Erx1ucmbk+mY6rmvN19iMh+szM0QGGm7xsqrDio=) 6: odaxqgyA-464XPpTnAMVsq1gFQQ.roa (hash: l1a1cObbS9L/mSITEi5cj0NI70j4hT2KUAatMVyc5Wc=) 7: pnPhFyOQR-Ty5FxTDJWIViYOAg0.roa (hash: 6baTF2h+tI9HWRnEgIpahEHZAePaskQeBXXklNj5/lA=) 8: s4lzZoz4TOfaTfA5UYeDZq8ur3s.roa (hash: KyjAil5KpYj/3CPJ9ff7WFWwWdPxYX9NKnWKTA8EtMA=) 9: uh-5s87WlZuWxJttfnAOxsNuAX0.roa (hash: UMgBRSmBBTiRT9lOOBu/YU9ZoLQXuPHxz04QjDjJfyg=) 10: vqV-YMbeGG5ZOz3NRgFA2jG8or0.roa (hash: iwFpWruBzEZJPWkyeXovTBxFrumsa94FJvSmEvJk/vY=) 11: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: 1Y9y0UZ/beoR6/Diuq07ceq++plUC8lrk5TXeoG/ISM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:59:66:80:5a:10:d9:2d:8e:db:a7:3a:a6:be:c0:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Mar 2 07:00:43 2026 GMT Not After : Mar 3 07:00:43 2026 GMT Subject: CN=ce2356079305bb738d1c7f50464cb7eb49acc92b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:05:fd:c7:ba:0a:b0:23:50:e5:c7:43:e1: d5:38:f0:fe:a4:60:ec:4c:02:ca:e3:07:76:7e:59: 7b:be:f9:e7:b5:1c:46:85:e5:13:bb:51:ba:89:b6: 6b:85:36:9e:76:44:2d:00:af:ac:c4:f3:e6:d9:4b: 73:eb:09:4c:44:a5:fe:42:69:f5:78:f8:42:ab:63: 1e:1e:35:89:c6:d1:2c:7b:fc:51:c2:92:3f:c7:f2: 98:e3:54:43:b5:0a:b0:ff:a7:67:13:cb:a2:d7:40: 2c:b6:65:92:48:b1:3e:5a:50:4d:3a:22:25:1d:df: d5:d0:48:b1:f8:07:10:5c:72:dd:2a:2d:7f:97:f4: 3c:1a:73:8b:8a:65:79:3d:54:a3:19:cd:23:6f:78: 03:ff:c4:f3:8c:c9:f8:ac:2b:85:83:a8:7d:23:80: 37:d2:a8:b7:96:19:c9:9c:66:74:48:0e:7d:64:27: db:32:33:0d:3e:5c:cf:16:be:26:1b:43:fc:64:85: a3:0c:69:d2:7e:9a:ff:0e:2d:b5:a6:9f:c8:c1:e8: 10:ac:43:f2:a3:f2:a6:5c:7f:c6:7b:09:41:94:9c: 43:bb:5e:2f:c9:88:ae:fe:68:68:51:71:12:0f:a9: b7:0a:9d:4e:45:e5:51:af:b6:a3:79:3c:42:7b:ec: 8c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:23:56:07:93:05:BB:73:8D:1C:7F:50:46:4C:B7:EB:49:AC:C9:2B X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6c:a0:7a:55:18:13:b5:36:4a:22:76:2a:ea:01:f2:f3:c4: 3f:38:69:9a:6a:89:4f:3b:59:d9:e8:c9:0e:bc:d8:79:a6:8b: 16:97:71:92:b2:87:46:26:b3:ce:e9:33:5a:16:92:ed:ce:1b: c1:9a:46:5f:a7:b8:82:72:1a:06:9b:e6:89:30:ce:c8:d3:62: 9f:10:15:e1:a4:99:ba:18:7e:be:2d:14:a5:c6:73:e0:e6:2e: 7e:d8:6e:08:27:30:da:1c:75:2f:33:91:a9:54:30:e2:83:86: 5f:e9:e9:fb:3d:13:2c:06:f2:1f:bc:20:c9:15:ed:52:bb:bf: 81:d6:8d:4c:41:c7:9a:a5:05:b6:f2:27:0c:e1:ef:2f:ec:88: 3b:2a:71:51:5e:1a:70:05:da:35:30:63:39:ef:a4:ca:f7:1c: 65:23:27:23:f2:c7:f3:ed:64:1c:6e:cd:88:b1:e3:23:50:e9: 8d:cd:1a:62:02:3b:96:e3:17:f3:37:00:73:35:a1:ad:d6:54: 64:2c:fa:67:0f:ea:3b:ff:a1:72:ec:db:84:37:cb:d9:08:be: 9e:07:dd:78:2f:fe:4a:52:16:8d:96:a5:87:93:6b:14:00:00: 08:c2:c1:e5:8a:30:7e:65:2e:f3:f5:c4:c8:a2:99:c4:1f:99: 9e:e3:60:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytWWaAWhDZLY7bpzqmvsA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjYwMzAyMDcwMDQzWhcNMjYwMzAzMDcwMDQzWjAzMTEwLwYDVQQD EyhjZTIzNTYwNzkzMDViYjczOGQxYzdmNTA0NjRjYjdlYjQ5YWNjOTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX4F/ce6CrAjUOXHQ+HVOPD+pGDs TALK4wd2fll7vvnntRxGheUTu1G6ibZrhTaedkQtAK+sxPPm2Utz6wlMRKX+Qmn1 ePhCq2MeHjWJxtEse/xRwpI/x/KY41RDtQqw/6dnE8ui10AstmWSSLE+WlBNOiIl Hd/V0Eix+AcQXHLdKi1/l/Q8GnOLimV5PVSjGc0jb3gD/8TzjMn4rCuFg6h9I4A3 0qi3lhnJnGZ0SA59ZCfbMjMNPlzPFr4mG0P8ZIWjDGnSfpr/Di21pp/IwegQrEPy o/KmXH/GewlBlJxDu14vyYiu/mhoUXESD6m3Cp1OReVRr7ajeTxCe+yM6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4jVgeTBbtzjRx/UEZMt+tJrMkrMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmygelUY E7U2SiJ2KuoB8vPEPzhpmmqJTztZ2ejJDrzYeaaLFpdxkrKHRiazzukzWhaS7c4b wZpGX6e4gnIaBpvmiTDOyNNinxAV4aSZuhh+vi0UpcZz4OYufthuCCcw2hx1LzOR qVQw4oOGX+np+z0TLAbyH7wgyRXtUru/gdaNTEHHmqUFtvInDOHvL+yIOypxUV4a cAXaNTBjOe+kyvccZSMnI/LH8+1kHG7NiLHjI1Dpjc0aYgI7luMX8zcAczWhrdZU ZCz6Zw/qO/+hcuzbhDfL2Qi+ngfdeC/+SlIWjZalh5NrFAAACMLB5YowfmUu8/XE yKKZxB+ZnuNgrw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:28:16 2026 by rpki-client