$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft File: g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft (raw, json) Hash identifier: OSALLQw0w7SbTBkrXSjOZPuT7q3mVEbHBwClFr1Cckk= Subject key identifier: 84:71:6A:D6:82:FE:2C:73:FD:0B:68:7D:53:FE:89:AC:F3:C3:83:58 Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Certificate serial: 019CAE35D8C71FBEF8513A8E88D3A2B4340F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft Manifest number: 0BB2 Signing time: Mon 02 Mar 2026 11:01:30 +0000 Manifest this update: Mon 02 Mar 2026 11:01:30 +0000 Manifest next update: Tue 03 Mar 2026 11:01:30 +0000 Files and hashes: 1: 1o8rc1B2rz8EJdbZ3z6LILHJGLM.roa (hash: RgVkOLGuQmy3f1VaDolVM/xuPM7B5/Thq2bqgQQQ5KI=) 2: 9CiYOh3Tvo2DBfl0jabQvFLWLFc.roa (hash: 43nWzmq/RjcNjuxCi4y1M8IbSxUCfohc5YoCfDEycLQ=) 3: MwBfnIeh4icyMtphU38ylCMXamk.roa (hash: CEXyVLtqmaHwpYLSDbPmPnIa3IY69NeBED7KXP3ze6c=) 4: ezYsw2_e3R9NDcGghu9oCFEJ53c.roa (hash: 2lry/rf4POpaKlgjomChorPFhc51fpzfavcz/xLZEo0=) 5: g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl (hash: f5I3zOa2gNzACTi2jG/MlnqdeOSY2ocdhO2pQdStaYY=) 6: kdEPUuQDUI6I6jbSpPW6P-kkOuA.roa (hash: zinbJQSjE4KwqubnM0+SQjc1EG+tlbXwWx2ZhYd6qEA=) 7: n94KenbJMH70fjR1rrFahdY8U34.roa (hash: yP/yPEDoYrtpaNUeRocAKawwYPvsmMlpzOFnFwFc4BQ=) 8: q5kphRSAlG3DN63C9RqhU3DMVds.roa (hash: VfvnDEZYHd7dijCx60k38qn3Wzq30eQaAO0QQVJTt/4=) 9: qbbxFuzSkULQOBICM7rqsaqrwu4.roa (hash: hvKhotK2pMOwPjulJduMi4iCjCSu8N/+Goyf1aqun7Y=) 10: sNj_laiOcAyx4yKKoT5eo1FxYbQ.roa (hash: MfbxVfKPhfU7+vz/KhDXRG39RyplbnNlSLuWA903WKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ae:35:d8:c7:1f:be:f8:51:3a:8e:88:d3:a2:b4:34:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Validity Not Before: Mar 2 11:01:30 2026 GMT Not After : Mar 3 11:01:30 2026 GMT Subject: CN=84716ad682fe2c73fd0b687d53fe89acf3c38358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d9:46:0b:4f:9e:31:65:ba:d8:d1:2d:eb:2f: b0:f7:25:a9:57:97:92:1f:56:8a:f5:43:10:d7:91: 2e:ba:9e:7c:5b:b9:7f:f6:ab:2a:ad:65:8f:e9:54: 7a:f7:40:2f:43:c7:59:67:8b:73:c0:4c:95:5b:75: 00:e6:98:a4:81:0e:24:eb:00:3b:55:2a:9f:af:b2: 0c:aa:99:f5:17:71:96:05:5d:f4:a2:28:b1:63:cf: f4:aa:f5:bb:a1:5f:c6:1b:2f:52:95:80:37:51:f3: 3d:4d:00:fe:93:f0:e4:55:45:2b:a5:52:50:6e:af: 60:df:9b:e5:f7:59:63:20:6e:02:52:2c:e8:eb:47: cf:83:75:51:a0:fe:ca:58:c0:2a:58:d8:c9:17:d3: 48:5b:da:de:96:80:9e:c1:a5:6a:c9:5c:ce:67:37: 54:de:3d:c2:21:b6:e9:59:1c:7f:ff:df:ce:07:f4: a5:cf:65:fa:aa:ef:20:8a:69:34:49:c9:03:29:be: b8:dc:1c:da:72:6e:20:20:83:eb:54:81:ad:4d:3d: 80:57:c9:cd:94:14:78:71:ea:71:98:30:e8:a4:5d: e1:66:9c:b1:78:ad:c3:99:bd:eb:34:8d:dc:b7:cc: e3:c9:f5:35:ab:da:b6:fd:a3:b7:19:47:76:13:db: bf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:71:6A:D6:82:FE:2C:73:FD:0B:68:7D:53:FE:89:AC:F3:C3:83:58 X509v3 Authority Key Identifier: keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a8:f1:cd:d3:af:0f:63:46:00:7e:54:32:37:49:b2:a4:34: 64:c1:8c:44:ed:99:12:e4:3f:38:05:17:68:53:ee:1e:78:07: 16:a0:bb:0e:89:b1:9f:35:72:ea:a9:43:8b:40:d6:81:0a:30: 58:aa:f3:bf:c8:23:91:a2:d8:70:cf:44:d3:d2:e5:cd:8d:49: 1f:52:97:7d:bb:eb:50:3e:92:ea:ed:b8:8a:e3:64:2d:56:e5: 19:f7:a0:a0:28:a6:ec:cd:e4:e4:f8:eb:d3:2d:52:d6:a1:71: 4d:8f:4e:74:a9:88:0d:e0:d1:ce:6f:64:1f:8a:16:6b:e1:7f: d1:82:94:45:53:1c:72:61:81:af:19:64:2b:06:96:e2:03:82: ea:26:f0:de:11:fa:81:2d:74:aa:b3:7d:93:e7:21:4c:a3:a1: aa:e8:be:c7:71:75:aa:be:67:24:cd:81:c0:b7:fc:10:e9:fa: 05:4e:3f:0a:d1:b8:74:90:f0:a4:2b:e8:b1:76:d7:6a:4f:f2: c2:15:cf:41:a8:c1:ab:bf:e1:06:5f:fb:73:9e:93:da:b2:51: 60:f7:a8:2a:7d:ef:9b:bc:f2:9e:1e:6d:fa:c4:d0:44:e9:45: 95:7c:5f:85:84:30:98:1b:42:73:e8:bd:9f:a7:a6:d9:79:1d: eb:d4:c9:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyuNdjHH774UTqOiNOitDQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZjM2YjBhZGVlNmNiNTUxODc2M2I1YmM4ZWFhM2Q0MWYy M2U5MzgwHhcNMjYwMzAyMTEwMTMwWhcNMjYwMzAzMTEwMTMwWjAzMTEwLwYDVQQD Eyg4NDcxNmFkNjgyZmUyYzczZmQwYjY4N2Q1M2ZlODlhY2YzYzM4MzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dlGC0+eMWW62NEt6y+w9yWpV5eS H1aK9UMQ15Euup58W7l/9qsqrWWP6VR690AvQ8dZZ4tzwEyVW3UA5pikgQ4k6wA7 VSqfr7IMqpn1F3GWBV30oiixY8/0qvW7oV/GGy9SlYA3UfM9TQD+k/DkVUUrpVJQ bq9g35vl91ljIG4CUizo60fPg3VRoP7KWMAqWNjJF9NIW9reloCewaVqyVzOZzdU 3j3CIbbpWRx//9/OB/Slz2X6qu8gimk0SckDKb643Bzacm4gIIPrVIGtTT2AV8nN lBR4cepxmDDopF3hZpyxeK3Dmb3rNI3ct8zjyfU1q9q2/aO3GUd2E9u/ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRxataC/ixz/QtofVP+iazzw4NYMB8GA1UdIwQY MBaAFIPzawre5stVGHY7W8jqo9QfI+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGIt YWY2NGYzZmEyNDU5LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGItYWY2NGYzZmEyNDU5 LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWajxzdOv D2NGAH5UMjdJsqQ0ZMGMRO2ZEuQ/OAUXaFPuHngHFqC7DomxnzVy6qlDi0DWgQow WKrzv8gjkaLYcM9E09LlzY1JH1KXfbvrUD6S6u24iuNkLVblGfegoCim7M3k5Pjr 0y1S1qFxTY9OdKmIDeDRzm9kH4oWa+F/0YKURVMccmGBrxlkKwaW4gOC6ibw3hH6 gS10qrN9k+chTKOhqui+x3F1qr5nJM2BwLf8EOn6BU4/CtG4dJDwpCvosXbXak/y whXPQajBq7/hBl/7c56T2rJRYPeoKn3vm7zynh5t+sTQROlFlXxfhYQwmBtCc+i9 n6em2Xkd69TJ+g== -----END CERTIFICATE-----Generated at Mon Mar 2 14:13:58 2026 by rpki-client