$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: r7ZjmYu2AvJzavh/T0OXLnVe/3ngdCyp+2IAUXdVc0w= Subject key identifier: 20:35:08:E7:DB:20:BA:15:11:A9:AB:E8:37:49:7C:DD:19:79:17:48 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019CAAC714618E205E570C1FA9023DE7975A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 186D Signing time: Sun 01 Mar 2026 19:01:39 +0000 Manifest this update: Sun 01 Mar 2026 19:01:39 +0000 Manifest next update: Mon 02 Mar 2026 19:01:39 +0000 Files and hashes: 1: 82H1zOCTQDypvCqoPuf64HIGCNs.roa (hash: OjMqE4nBwVgcGVmO5TIDFN6XpFP5Ht4TkG9+jF5A/Lc=) 2: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=) 3: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=) 4: PMLPEEMeDaCa9G0bvEGYFmbkz4U.roa (hash: tkN/efywA+5kpM31KV+mqm28OwLiTj+XO+01vH0nfrA=) 5: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=) 6: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=) 7: cJZ1eCq8wNMXKNwTEszQ8TczfTc.roa (hash: 0VY9Ph5RNw4cSf706jloXuKMKAZqhCe3Ib9xhrKBEjQ=) 8: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: rWDGLzmGdPtKR8Jr4rDhpaNyhQFZmbV6SNcLPh6BCi8=) 9: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=) 10: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=) 11: ty8paLCk4TaEs9kfb6irUZZ4p-g.roa (hash: E3jPnIGaX9YCeoKgK4OtXqPGRq5byhzJcS6QFpLOQV8=) 12: w54MSAoYkvWAhyocjd5urm0fs-o.roa (hash: Fxvw/XX9z5X/yBtzMmWjgC1aQmrGLx6Nw2e1Qr38xVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:c7:14:61:8e:20:5e:57:0c:1f:a9:02:3d:e7:97:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Mar 1 19:01:39 2026 GMT Not After : Mar 2 19:01:39 2026 GMT Subject: CN=203508e7db20ba1511a9abe837497cdd19791748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4d:f8:69:75:6a:cb:1a:22:2c:ae:9c:92:5b: 77:6b:05:a5:51:79:7b:d2:ba:b0:1b:2c:8b:29:f7: 9d:1c:48:14:d9:ca:e2:2d:d7:cd:3d:8a:fc:4e:e1: 8a:2e:57:2c:66:c4:ac:33:4c:f6:58:3f:bd:b6:5d: 4e:3f:68:79:8c:df:e0:65:94:27:fd:15:7d:0c:61: 85:cc:08:99:0b:9e:9a:8e:57:4f:e9:19:28:ec:df: 91:2e:29:6d:77:32:b2:8a:2b:03:5a:1d:54:b3:b5: 2d:e1:e7:3b:e3:76:87:96:88:62:24:08:15:af:82: 77:f1:4a:46:05:b7:dc:81:21:3f:88:40:5b:da:b2: 86:ba:2d:dc:21:4a:51:e7:e4:88:66:87:43:10:9a: 59:c4:bb:37:ba:b1:3a:4f:d6:47:9e:5a:61:13:ac: cd:0f:ea:67:58:ef:97:cf:d6:92:a7:a2:5f:f3:33: 29:cf:a8:bd:5a:44:03:01:2e:5d:16:71:ea:31:a8: 50:85:73:3c:fd:d8:40:d0:7e:4d:62:ce:ad:47:c4: 95:0d:79:6f:c7:12:f3:a1:90:33:48:10:cd:11:b0: e4:5f:48:71:e1:62:4c:eb:43:23:04:fb:f7:a4:a9: dc:78:f5:1e:b7:3c:06:b0:42:33:ae:85:91:c3:44: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:35:08:E7:DB:20:BA:15:11:A9:AB:E8:37:49:7C:DD:19:79:17:48 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e8:b1:45:18:1d:29:77:2c:b8:24:e1:f4:5d:78:7f:69:5b: 98:35:a8:76:c1:2b:6b:7b:13:17:13:ad:26:34:a3:ae:10:16: 1a:ef:98:82:ee:f2:ac:5b:4f:4e:4e:70:a5:5a:e7:59:76:64: a9:47:b4:cb:ac:cd:cc:58:81:0b:d4:33:37:48:98:e8:25:6a: dd:15:81:0b:6d:2e:68:a3:ff:ea:c4:fd:ef:d1:3f:6b:bd:e8: 89:98:f0:f1:1b:9b:87:8a:15:5f:aa:cf:8b:ac:13:8c:14:ae: a6:ae:02:50:fb:5e:cd:d3:1c:cb:fb:d8:a0:04:9d:ab:6d:4c: 60:ec:9b:b5:c6:6c:d9:d4:fa:02:e5:a6:9b:27:63:7a:f9:7c: f7:e7:4c:5d:04:af:e1:9f:91:f0:60:d9:29:56:6b:17:1c:f9: a3:05:b8:25:6d:0f:9f:63:fc:2f:9e:da:e9:5d:cf:9b:13:0e: 2c:c6:1e:4e:bc:29:fb:4e:3a:c8:f4:ab:20:03:6e:c1:1a:d0: b0:b1:e9:78:4e:21:78:f1:7c:aa:46:70:90:f3:9c:5c:51:64: 61:b0:88:86:32:15:f0:70:7c:9b:28:b5:48:0b:b0:1d:6c:ed: dd:33:8e:c3:bc:da:fb:e0:bd:93:df:0b:14:5e:8d:6e:e2:39: 36:59:da:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqxxRhjiBeVwwfqQI955daMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjYwMzAxMTkwMTM5WhcNMjYwMzAyMTkwMTM5WjAzMTEwLwYDVQQD EygyMDM1MDhlN2RiMjBiYTE1MTFhOWFiZTgzNzQ5N2NkZDE5NzkxNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw034aXVqyxoiLK6cklt3awWlUXl7 0rqwGyyLKfedHEgU2criLdfNPYr8TuGKLlcsZsSsM0z2WD+9tl1OP2h5jN/gZZQn /RV9DGGFzAiZC56ajldP6Rko7N+RLiltdzKyiisDWh1Us7Ut4ec743aHlohiJAgV r4J38UpGBbfcgSE/iEBb2rKGui3cIUpR5+SIZodDEJpZxLs3urE6T9ZHnlphE6zN D+pnWO+Xz9aSp6Jf8zMpz6i9WkQDAS5dFnHqMahQhXM8/dhA0H5NYs6tR8SVDXlv xxLzoZAzSBDNEbDkX0hx4WJM60MjBPv3pKncePUetzwGsEIzroWRw0SJMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCA1COfbILoVEamr6DdJfN0ZeRdIMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeixRRgd KXcsuCTh9F14f2lbmDWodsEra3sTFxOtJjSjrhAWGu+Ygu7yrFtPTk5wpVrnWXZk qUe0y6zNzFiBC9QzN0iY6CVq3RWBC20uaKP/6sT979E/a73oiZjw8Rubh4oVX6rP i6wTjBSupq4CUPtezdMcy/vYoASdq21MYOybtcZs2dT6AuWmmydjevl89+dMXQSv 4Z+R8GDZKVZrFxz5owW4JW0Pn2P8L57a6V3PmxMOLMYeTrwp+046yPSrIANuwRrQ sLHpeE4hePF8qkZwkPOcXFFkYbCIhjIV8HB8myi1SAuwHWzt3TOOw7za++C9k98L FF6NbuI5Nlnasg== -----END CERTIFICATE-----Generated at Mon Mar 2 00:56:17 2026 by rpki-client