$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: nmU5roivKCLuib/6k427hw7OVzLKDi6I8kidNtUrJD0= Subject key identifier: 12:EF:F4:3C:25:40:85:91:9F:C2:18:EF:79:C1:7F:AE:07:CF:16:54 Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 019CABD94E598E007AFDBD63E8E516857753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 1812 Signing time: Mon 02 Mar 2026 00:01:11 +0000 Manifest this update: Mon 02 Mar 2026 00:01:11 +0000 Manifest next update: Tue 03 Mar 2026 00:01:11 +0000 Files and hashes: 1: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: NALa58aBMyx+ghK8lTdAUg1h5VBK9vYrAjktk/VSZPg=) 2: 5mhLXZz9uaLrxRXezZSHWsxyd-w.roa (hash: L8zJBOmGnGLdAhL8uK2yDENjhkyNLKbL3TEmcXLA584=) 3: 6RiDdnednlszc5nfc-ANOJUv2-o.roa (hash: jp3uEswNG4RA6H4G2MDNF+CFUPavRhXT4rfyfKyq6LE=) 4: Ckff1S9rQwDmb1fYOy6uaMvBYaQ.roa (hash: po3/SD3l27xL71DpVgMNbKKZYbb+hPc9NcBH/9yqqcs=) 5: Nu_9r8H3m3GpfJQaXI9Z_gksBSE.roa (hash: A0MtvPieujf5jUqev3piW+xmWcpxjiKiXWnP9KoZX/U=) 6: ObexSGVy696Wkd2DRhwt2_VaBs8.roa (hash: Ly1Ec9X97SiqjYPYhofzign3IKjIwUM2uHbt0VCXmE4=) 7: ObzqjXT5GtzebuI8BcIwPsXaLb8.roa (hash: CxduJ99uKrCwZPdYUZzvhflelo5OchrVkeFU+IICnVU=) 8: Y236QjVhGrl24C2bEpBZTpmsO9g.roa (hash: roo618zomZv/80bpPa5A4SKzRxktEgno100+FqWeWZU=) 9: teSjGmrvY_tu6RkdG_34GiE8KM0.roa (hash: yc8bd5ePK4M8XX+rsAFOZYDdIrq94apPIscjQGUl9lw=) 10: ugVQrwIOiOMJPcA4zFZm9kWmY04.roa (hash: Q8pDB3SA4JzJaHb+up2jkC0do3Kit4mBYGTJ7TNXFRI=) 11: yWZ-5OdaSQI1LPfjNeNs7tCX608.roa (hash: esuWPq3Xg5U/Su3ABpCWC8pkIxvEw4LQCmVfV8WC2QE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:d9:4e:59:8e:00:7a:fd:bd:63:e8:e5:16:85:77:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Mar 2 00:01:11 2026 GMT Not After : Mar 3 00:01:11 2026 GMT Subject: CN=12eff43c254085919fc218ef79c17fae07cf1654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4e:dc:08:6d:bd:2f:32:2a:bc:ec:e6:9e:3e: 62:d0:04:05:9c:1e:15:ee:be:41:da:9c:22:6f:79: 5f:db:89:31:4a:d9:14:7d:e3:81:a8:54:9b:98:c6: 03:3c:c8:2e:e4:54:cb:28:31:10:ac:64:a9:cf:39: 2a:6c:ec:19:e3:06:53:14:10:b7:5b:6d:c2:a9:c4: fb:ef:19:26:a6:31:06:c2:9b:ff:99:b5:78:ea:9c: 2c:b0:58:7d:74:bc:eb:53:0f:cc:f5:00:fe:24:ae: 3c:2a:23:53:74:21:4a:b8:f7:bf:bd:ee:b1:2c:11: 67:ac:bf:dd:44:15:d1:07:21:cf:44:cb:18:1e:39: b7:97:cd:6a:3d:ec:9e:e0:6b:33:d3:bd:0c:09:53: 39:6a:ac:20:01:18:3d:3c:02:5c:cf:91:e8:83:62: fc:96:84:ab:12:57:27:6e:02:09:db:27:33:4a:ba: e9:0b:a1:53:24:a4:d4:db:4d:10:e9:f9:f0:93:ed: 62:b2:aa:32:96:f8:4a:3b:df:6d:5a:72:2d:82:09: 31:14:3a:d5:0b:83:d5:03:e9:00:14:9b:40:69:12: 12:f2:5e:3d:4c:0c:30:85:24:fe:5c:49:6c:4b:12: da:b7:9d:71:2f:6f:8c:88:05:d8:90:cd:c2:71:ff: d7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EF:F4:3C:25:40:85:91:9F:C2:18:EF:79:C1:7F:AE:07:CF:16:54 X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:01:6c:6b:fe:8b:10:b3:2f:2e:07:d8:95:5d:39:52:dc:3a: d2:c4:af:c5:0d:f9:cf:4c:8e:86:17:bc:68:f1:d0:95:83:74: 26:c6:f8:b9:23:0e:dc:c1:38:a3:f1:fc:c2:8a:da:d0:86:07: c5:b2:13:60:0b:b4:95:0e:ea:7e:5d:13:a0:57:67:b4:bc:3a: 5b:be:e3:d5:6e:64:57:2b:2f:d7:df:ae:5b:3d:8a:68:2c:cd: f9:42:68:5e:9f:fd:e0:94:aa:84:ae:af:dd:8d:17:be:c1:90: dd:15:05:c2:4d:50:73:6d:c6:70:a0:1f:8e:dc:72:df:46:f7: ea:1b:2f:41:a9:0e:4b:a2:d9:0b:78:a0:a7:08:84:ad:3f:bf: dc:6b:d1:6b:26:4e:00:a8:1d:f8:32:5e:d4:c3:03:c7:c7:fd: 1c:b4:64:df:5b:b5:b4:85:d2:c3:b1:85:45:88:6b:48:c7:6a: dd:79:a6:ea:8b:f8:5e:13:85:21:62:57:0a:b1:e2:5e:11:dd: 46:72:66:21:3a:ef:81:73:fc:a9:8d:b5:72:2d:fc:9f:63:45: 58:67:e6:0f:dc:1b:44:e0:2e:e0:0a:ed:e8:b9:a3:bf:29:e6: 90:a7:35:9d:a2:2a:30:cc:c7:e5:58:d9:e3:6a:35:9d:91:38: 14:a5:c9:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyr2U5ZjgB6/b1j6OUWhXdTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjYwMzAyMDAwMTExWhcNMjYwMzAzMDAwMTExWjAzMTEwLwYDVQQD EygxMmVmZjQzYzI1NDA4NTkxOWZjMjE4ZWY3OWMxN2ZhZTA3Y2YxNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E7cCG29LzIqvOzmnj5i0AQFnB4V 7r5B2pwib3lf24kxStkUfeOBqFSbmMYDPMgu5FTLKDEQrGSpzzkqbOwZ4wZTFBC3 W23CqcT77xkmpjEGwpv/mbV46pwssFh9dLzrUw/M9QD+JK48KiNTdCFKuPe/ve6x LBFnrL/dRBXRByHPRMsYHjm3l81qPeye4Gsz070MCVM5aqwgARg9PAJcz5Hog2L8 loSrElcnbgIJ2yczSrrpC6FTJKTU200Q6fnwk+1isqoylvhKO99tWnItggkxFDrV C4PVA+kAFJtAaRIS8l49TAwwhST+XElsSxLat51xL2+MiAXYkM3Ccf/XuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLv9DwlQIWRn8IY73nBf64HzxZUMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQFsa/6L ELMvLgfYlV05Utw60sSvxQ35z0yOhhe8aPHQlYN0Jsb4uSMO3ME4o/H8wora0IYH xbITYAu0lQ7qfl0ToFdntLw6W77j1W5kVysv19+uWz2KaCzN+UJoXp/94JSqhK6v 3Y0XvsGQ3RUFwk1Qc23GcKAfjtxy30b36hsvQakOS6LZC3igpwiErT+/3GvRayZO AKgd+DJe1MMDx8f9HLRk31u1tIXSw7GFRYhrSMdq3Xmm6ov4XhOFIWJXCrHiXhHd RnJmITrvgXP8qY21ci38n2NFWGfmD9wbROAu4Art6LmjvynmkKc1naIqMMzH5VjZ 42o1nZE4FKXJ4w== -----END CERTIFICATE-----Generated at Mon Mar 2 05:54:59 2026 by rpki-client