$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: foVS61kyAeg9WtCYvdXmNeR2fdA/P9GrxXGhQ7q0bfo= Subject key identifier: 14:5F:AF:BE:44:49:E5:B6:58:94:03:03:83:F0:A1:56:E6:78:C7:31 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019CA9B3918D12D86F22E88BAFBE9B8E6CAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0EBC Signing time: Sun 01 Mar 2026 14:00:43 +0000 Manifest this update: Sun 01 Mar 2026 14:00:43 +0000 Manifest next update: Mon 02 Mar 2026 14:00:43 +0000 Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=) 2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=) 3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=) 4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=) 5: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=) 6: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=) 7: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=) 8: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: dnbnKOoJLWunxCdVUcaZYv+l3mVJtAFU1e/lGPdEGmQ=) 9: FgNKNW5B9puTce7TwiHPk7LKkM8.roa (hash: vwSEzoXOmoqMUtBgzMgDVlO/tkSbCfgKY6cTiF3Xr7o=) 10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=) 11: On4dn5XbiBS1Qg2b3q7FuPrKKPU.roa (hash: aFxUmAbMZfGMNEqIxTU//GiK2u8cv1a8L3zZwck32pU=) 12: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=) 13: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=) 14: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=) 15: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=) 16: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=) 17: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=) 18: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=) 19: j7LtCmBQkrQBJnb_ZCt76IEDtVw.roa (hash: xzoT1lmtc0/rZsZSXDJS+I2wkN8O0eHPbcY9YaDshes=) 20: j7x8fbkRwMKStj5ClhgwLaeQkVs.roa (hash: 6lRnNTk9GDpCpdru3WxCTgGzGwqKwzzDgbtgNglJr4E=) 21: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=) 22: q6AprXpiRcVl5ELQQP4HzyoPU1s.roa (hash: y1TzMFIAWDqXBEbPleIWHolHXjF7gfy6B7SVOuVhNiA=) 23: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (hash: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc=) 24: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=) 25: uIV80scH6u5gHYdNO6XCbXg6J0o.roa (hash: SeBYh3gOgab2j7dPxQk9qB9Evvzqzf/WoiGkwr4d8Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:b3:91:8d:12:d8:6f:22:e8:8b:af:be:9b:8e:6c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Mar 1 14:00:43 2026 GMT Not After : Mar 2 14:00:43 2026 GMT Subject: CN=145fafbe4449e5b65894030383f0a156e678c731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:26:f1:b2:25:6f:2e:7c:ed:92:cd:3b:9b:3f: f3:24:35:99:9c:f5:37:7d:d6:f2:f4:af:ba:e3:f9: ec:8d:41:42:1e:3c:43:3d:a7:56:07:4c:fa:57:3d: 71:02:fe:37:68:ff:56:51:7c:85:9f:4d:b8:6d:1d: aa:d2:a3:be:bd:9a:8f:d9:1b:e6:84:db:bf:83:f0: 36:7a:59:5c:c9:c6:b1:6e:4d:20:1e:8c:9e:fc:96: 46:d5:0e:38:03:2f:cc:bd:27:a3:20:24:28:07:99: 44:d7:1b:7f:cc:4f:4f:22:a9:8d:e2:c6:59:61:34: 41:8b:b4:45:6e:0f:49:50:3e:5c:ac:7a:4a:76:85: be:a2:57:31:53:42:95:dc:5d:76:e9:32:be:bd:25: 40:71:1c:93:2b:fe:cb:48:75:15:ab:3d:e0:58:0d: 3b:69:4d:4d:12:9b:0c:c4:2c:43:5d:28:e5:71:77: 97:10:7a:82:3d:f7:3f:f9:eb:62:23:7c:c4:4d:e4: cd:c7:ea:05:6c:ce:14:9e:8a:78:4d:75:dc:fd:ca: 4c:0e:43:c2:24:06:99:06:b5:07:25:d4:9d:b6:d8: b9:d8:cf:f1:06:82:47:2a:80:df:dc:34:b0:91:d2: 06:25:e3:f4:26:84:c6:c4:1b:16:24:41:e0:90:05: 9b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5F:AF:BE:44:49:E5:B6:58:94:03:03:83:F0:A1:56:E6:78:C7:31 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9c:da:e9:dc:a6:02:86:7c:2f:16:29:86:c7:8d:44:d1:6d: 0c:5f:f9:af:6a:e9:c6:a4:fe:df:0f:d3:61:89:d2:99:36:26: 6e:97:01:69:43:2c:c9:6c:ad:ff:c8:50:0b:14:27:3b:2a:d3: 65:8a:00:fa:80:79:a8:ba:2c:4d:e8:65:f0:fa:38:d3:d7:da: 61:7d:87:83:3a:64:8f:b6:4b:9c:99:6b:3a:8f:35:61:aa:eb: 13:a2:35:06:81:dc:f6:9a:00:a1:ce:86:42:f7:9c:ef:80:77: ef:3f:ea:39:3a:5c:b9:12:95:36:b6:92:ac:de:bb:54:20:20: 8d:d6:d4:14:02:6c:fc:c0:89:9f:78:5f:97:1f:22:9a:b7:00: 29:38:5c:11:20:40:56:33:9f:ed:1a:0b:6c:5a:83:29:05:e3: 9c:69:aa:b1:26:93:7d:c9:e0:9f:a3:66:84:cc:f9:6a:2e:18: 91:8c:97:28:9b:4c:d6:08:b1:40:9a:e4:06:00:4d:a6:32:94: 54:a1:c2:f8:6b:74:bd:9c:20:bf:2d:10:4a:65:e4:41:79:e6: 8d:1e:f0:cf:7a:d8:87:71:e6:a5:6f:93:8d:01:32:72:a4:5a: 2c:99:43:df:0e:c1:1e:2e:0a:02:0f:84:d9:45:af:1e:95:ae: e1:e9:c1:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyps5GNEthvIuiLr76bjmyqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMzAxMTQwMDQzWhcNMjYwMzAyMTQwMDQzWjAzMTEwLwYDVQQD EygxNDVmYWZiZTQ0NDllNWI2NTg5NDAzMDM4M2YwYTE1NmU2NzhjNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoibxsiVvLnztks07mz/zJDWZnPU3 fdby9K+64/nsjUFCHjxDPadWB0z6Vz1xAv43aP9WUXyFn024bR2q0qO+vZqP2Rvm hNu/g/A2ellcycaxbk0gHoye/JZG1Q44Ay/MvSejICQoB5lE1xt/zE9PIqmN4sZZ YTRBi7RFbg9JUD5crHpKdoW+olcxU0KV3F126TK+vSVAcRyTK/7LSHUVqz3gWA07 aU1NEpsMxCxDXSjlcXeXEHqCPfc/+etiI3zETeTNx+oFbM4Unop4TXXc/cpMDkPC JAaZBrUHJdSdtti52M/xBoJHKoDf3DSwkdIGJeP0JoTGxBsWJEHgkAWb+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRfr75ESeW2WJQDA4PwoVbmeMcxMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZza6dym AoZ8LxYphseNRNFtDF/5r2rpxqT+3w/TYYnSmTYmbpcBaUMsyWyt/8hQCxQnOyrT ZYoA+oB5qLosTehl8Po409faYX2Hgzpkj7ZLnJlrOo81YarrE6I1BoHc9poAoc6G Qvec74B37z/qOTpcuRKVNraSrN67VCAgjdbUFAJs/MCJn3hflx8imrcAKThcESBA VjOf7RoLbFqDKQXjnGmqsSaTfcngn6NmhMz5ai4YkYyXKJtM1gixQJrkBgBNpjKU VKHC+Gt0vZwgvy0QSmXkQXnmjR7wz3rYh3HmpW+TjQEycqRaLJlD3w7BHi4KAg+E 2UWvHpWu4enBpw== -----END CERTIFICATE-----Generated at Sun Mar 1 16:41:26 2026 by rpki-client