$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: 1GNAoIMHXWkBt2fauaVdX+cl8/s1aP7jt5RTHmz8g4E= Subject key identifier: F4:FD:63:BD:43:FF:EF:F5:E0:8A:94:DE:89:02:BF:00:6B:BD:A7:30 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019CAD59AE35E7B3DA90281A4E68A5B828E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1A93 Signing time: Mon 02 Mar 2026 07:01:01 +0000 Manifest this update: Mon 02 Mar 2026 07:01:01 +0000 Manifest next update: Tue 03 Mar 2026 07:01:01 +0000 Files and hashes: 1: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 2: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 3: B-4Y5enlVk_Sd-7mbbGmudhFVWs.roa (hash: VrFv29MZjRI9WiKBoXLP+DEm/34C4C5KG6TpaM7VLEg=) 4: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 5: DSmFcc3CMB07sjJqwgYvCDZ71oA.roa (hash: KbPU8Oi7PTcvYEb3lmld7J6qciV9VSvqVrEzwyBTsnw=) 6: FpwdnH1vSeaA9IvOMd_9OlvXF-Q.roa (hash: dR81pd4Z3d3hQtP7AcMh1To0rqIYfbx/ZlCHk7Sp1DE=) 7: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 8: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: +bRnIlwzrOmTx2Kamr2qL7wn5cSLulFE+dckwaQMJY0=) 9: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 10: PWAh_2RuxDnoNmntOECVPDH6RBE.roa (hash: pdhSdMiMMvaP56G3c7nm7TelYNCSzBk95cSLrOqWNUU=) 11: QUSad9EfoyydrwUjL6UuKzZIeMg.roa (hash: VHq9puEsGA44rdNujULet4x2g3yNOAEgK6THQ2HkMZQ=) 12: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 13: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 14: _Kp7PDTcmGkJiJKewtOccSGpSgs.roa (hash: WM5hEQgIwiPSrdXKA7JsjCjXu6TD5zpoJlxCQduZru4=) 15: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 16: br6ophJ_seKpgle-GRBelvZMVCQ.roa (hash: xvaIA/IEe05JlJTHof0J+fBcnGDDmy2RurdQ52mdItM=) 17: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 18: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 19: iVHD7VIScc_bmYavlKZJ2ezNKcw.roa (hash: yVV/qMkCECkBEz4uxAU1f+pA2VYLLRt6TM3iu0HQ6aU=) 20: iytQpP8cOKt_SZr-dWu1mE4wm4s.roa (hash: yu00tFptzGFBvQTaVZf5FqouszpkfBRiVtW4WyFln90=) 21: ro4RN7jq-5YSJ6Tl2uyshgIvk0M.roa (hash: SsVpapMOjceHmjPuKSzNdDwvqoNheCyzL+Hv9TkqdM8=) 22: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (hash: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q=) 23: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) 24: zIIfu8DaVVMD0XsvOwpHzYoyB-g.roa (hash: nAFu8qJSmPstdE0SpXNpv/f9vO79bXQFH0mxColfbbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:59:ae:35:e7:b3:da:90:28:1a:4e:68:a5:b8:28:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Mar 2 07:01:01 2026 GMT Not After : Mar 3 07:01:01 2026 GMT Subject: CN=f4fd63bd43ffeff5e08a94de8902bf006bbda730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bd:7a:a5:ac:91:4e:cb:6a:4d:85:10:c4:da: 5c:79:2a:f6:03:8f:36:c0:8c:11:89:b3:ab:91:00: 7c:f4:9a:fd:95:94:2c:ac:7f:62:89:0e:e5:89:32: 3e:13:3d:c8:38:11:5c:9e:6f:52:4d:c5:3a:d1:28: a1:3b:ba:c2:ee:40:dc:c1:04:bf:3f:cb:f3:7a:6a: c9:d2:21:39:12:75:03:4a:68:87:e2:6c:a3:46:b9: a0:10:db:72:91:cb:5f:68:8a:ca:35:82:8f:dc:2b: 00:75:70:64:6b:ec:70:c8:18:c4:63:30:25:3a:48: 5c:2d:02:bd:62:dd:3f:71:04:68:79:a1:f0:9d:10: aa:2d:70:f1:e2:dd:5e:9f:25:78:81:e9:4a:73:f7: dc:0c:a3:da:6a:60:38:a1:00:36:d7:86:45:26:a1: 8d:54:96:2f:f3:ed:63:e3:af:d6:fb:f8:54:c3:0c: e0:59:4f:1a:74:02:3e:02:57:e6:c9:7b:e4:00:7e: 9e:7f:e2:c0:bf:27:d4:eb:9e:69:d6:d9:29:63:85: 56:4d:a7:49:e2:f3:60:04:f6:16:8a:e9:1a:d8:f4: 8a:24:4b:54:e6:3a:b4:cf:ee:ee:98:5d:a7:16:0a: 90:b3:97:04:45:78:52:4d:e3:f6:6d:4d:5e:f7:be: 5a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FD:63:BD:43:FF:EF:F5:E0:8A:94:DE:89:02:BF:00:6B:BD:A7:30 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e4:1b:bd:c2:84:45:5c:82:46:d3:78:93:d1:9c:7d:60:63: 91:c4:a4:2b:86:b7:20:93:f8:90:ef:8b:ac:9a:b4:97:76:ca: 6c:ec:26:b8:e1:1c:12:db:37:b6:d7:b9:cd:47:3c:b9:85:0d: 17:f4:68:37:4f:45:bb:a6:2e:1b:ca:10:34:88:cc:26:b7:91: de:d0:1b:bc:9b:b8:2f:58:b5:2e:5e:97:36:c9:30:61:94:d5: 2f:a6:03:8d:87:a6:89:30:90:91:3c:4f:d5:9d:eb:33:ff:28: 93:dd:7c:f6:36:e9:53:ea:da:f8:03:17:f9:b6:80:1f:63:ad: 1b:8f:7d:69:ce:6c:a2:b3:32:c5:f6:04:91:cf:57:9a:98:ca: e7:7a:6d:c8:3b:48:58:9a:f1:8f:8c:31:a7:0a:ae:a4:a7:da: 77:69:85:4c:68:bf:13:b7:d9:0f:91:5f:e4:27:88:53:dc:9c: ad:5d:12:9e:3d:37:7a:74:34:63:fb:87:48:be:47:66:6e:77: a9:31:f6:63:89:8e:91:92:61:23:66:b1:4e:c6:6c:68:17:8e: 1c:ba:e7:1a:41:cc:cf:5c:bf:e0:55:c5:cd:35:84:91:1a:50: e9:24:38:31:b9:bd:a3:fa:db:66:4c:b2:2a:af:38:10:29:96: 7e:78:79:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytWa4157PakCgaTmiluCjoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMzAyMDcwMTAxWhcNMjYwMzAzMDcwMTAxWjAzMTEwLwYDVQQD EyhmNGZkNjNiZDQzZmZlZmY1ZTA4YTk0ZGU4OTAyYmYwMDZiYmRhNzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr16payRTstqTYUQxNpceSr2A482 wIwRibOrkQB89Jr9lZQsrH9iiQ7liTI+Ez3IOBFcnm9STcU60SihO7rC7kDcwQS/ P8vzemrJ0iE5EnUDSmiH4myjRrmgENtykctfaIrKNYKP3CsAdXBka+xwyBjEYzAl OkhcLQK9Yt0/cQRoeaHwnRCqLXDx4t1enyV4gelKc/fcDKPaamA4oQA214ZFJqGN VJYv8+1j46/W+/hUwwzgWU8adAI+AlfmyXvkAH6ef+LAvyfU655p1tkpY4VWTadJ 4vNgBPYWiuka2PSKJEtU5jq0z+7umF2nFgqQs5cERXhSTeP2bU1e975avQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT9Y71D/+/14IqU3okCvwBrvacwMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuQbvcKE RVyCRtN4k9GcfWBjkcSkK4a3IJP4kO+LrJq0l3bKbOwmuOEcEts3tte5zUc8uYUN F/RoN09Fu6YuG8oQNIjMJreR3tAbvJu4L1i1Ll6XNskwYZTVL6YDjYemiTCQkTxP 1Z3rM/8ok9189jbpU+ra+AMX+baAH2OtG499ac5sorMyxfYEkc9XmpjK53ptyDtI WJrxj4wxpwqupKfad2mFTGi/E7fZD5Ff5CeIU9ycrV0Snj03enQ0Y/uHSL5HZm53 qTH2Y4mOkZJhI2axTsZsaBeOHLrnGkHMz1y/4FXFzTWEkRpQ6SQ4Mbm9o/rbZkyy Kq84ECmWfnh5WQ== -----END CERTIFICATE-----Generated at Mon Mar 2 12:00:05 2026 by rpki-client