$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: cf7cnrKs9eZvNYToBhz8f2k45O23iKisPXDEEibwEtc= Subject key identifier: DD:46:B3:5E:85:80:67:F1:AE:0C:47:18:89:73:16:A2:B4:26:F3:8B Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019CAB341ADAE461F21DD22A34E435D58A2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 1855 Signing time: Sun 01 Mar 2026 21:00:44 +0000 Manifest this update: Sun 01 Mar 2026 21:00:44 +0000 Manifest next update: Mon 02 Mar 2026 21:00:44 +0000 Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=) 2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=) 3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=) 4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=) 5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=) 6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=) 7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=) 8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=) 9: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=) 10: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=) 11: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=) 12: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=) 13: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=) 14: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=) 15: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=) 16: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=) 17: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=) 18: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=) 19: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=) 20: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=) 21: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=) 22: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=) 23: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: JSnsbIpTYMuJHoeyTapbRdZ3c5XWXL+vfFnZ4ndXjy8=) 24: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=) 25: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=) 26: z5014MFfxmYQTm_qnLF3yXwV-3I.roa (hash: 7VbwY0J0VcsEt+trFtXcwclY4yBnf//EolgJB0xn4Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:1a:da:e4:61:f2:1d:d2:2a:34:e4:35:d5:8a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Mar 1 21:00:44 2026 GMT Not After : Mar 2 21:00:44 2026 GMT Subject: CN=dd46b35e858067f1ae0c4718897316a2b426f38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4c:7c:ea:d5:03:24:e1:7e:b7:79:12:1d:50: 37:71:c5:fa:a3:d6:77:22:f8:5e:b7:9e:f9:96:1e: c1:af:05:4d:44:84:bb:a3:14:4b:e5:3e:53:68:30: eb:ae:fa:0d:fd:ce:92:26:46:67:cd:79:0a:61:ea: 3a:fb:a3:7d:68:91:3e:33:f6:5e:b3:a6:75:2a:84: ce:ce:eb:fc:19:69:78:c7:0d:ec:73:3d:d5:f3:1f: e3:59:aa:ba:fd:c2:94:f5:8e:3d:de:29:1e:08:b8: 66:4d:8f:e7:bb:f9:80:bf:be:8b:77:bd:e3:e5:20: 67:75:2c:67:80:94:84:12:e9:2d:0d:bf:0b:10:aa: 54:db:6b:c8:10:f0:9e:44:50:79:61:18:77:56:37: 1f:d0:cc:a8:cd:a3:69:5c:4f:68:42:2f:32:b7:b5: ec:8e:b4:a3:01:4c:43:cf:d9:77:93:2b:5a:c3:10: 53:e9:3f:50:f9:96:0e:a4:90:0e:ac:1c:cf:08:4f: e7:90:bc:0d:07:f0:a0:c9:a8:bd:c1:34:f2:bb:47: b6:9e:05:1d:3d:53:d6:dd:a6:83:a9:f3:b7:0c:bd: ac:e9:44:4d:e3:ec:a0:e4:bc:b6:07:d9:16:3b:02: a7:6b:57:19:7e:5b:06:ef:1f:c9:a3:53:8d:24:8a: 99:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:46:B3:5E:85:80:67:F1:AE:0C:47:18:89:73:16:A2:B4:26:F3:8B X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5f:6d:a6:39:ff:ec:bd:ab:e4:41:e4:ce:6c:82:b8:87:24: 93:95:fc:75:bb:54:35:97:0c:9b:e7:b8:7c:be:ad:e0:1e:87: 8d:a8:94:42:5a:9a:ce:b2:9a:fe:9d:5f:bb:bc:8f:68:23:99: 2e:f3:be:85:a5:e7:1a:c0:cd:6c:6e:a8:25:62:3e:df:ee:3a: 5d:d7:d3:f3:94:ba:03:e0:99:f1:19:7d:15:80:05:9f:da:e5: a1:d2:87:4b:7b:ea:05:ba:54:35:52:1b:83:1c:d9:14:36:70: 08:b1:1a:b9:8a:d2:a1:b1:56:fb:16:84:a3:cf:b7:ab:a5:17: f2:a4:59:87:27:86:b3:1d:88:54:b3:e5:11:92:87:0a:f0:3a: b0:d9:83:25:c0:33:b4:91:2c:81:3f:b1:4b:3f:aa:74:61:26: c3:4d:33:ee:2c:2f:d5:24:52:a2:b7:a5:1e:6e:14:b5:24:cd: f8:a4:68:1c:b1:8c:20:27:13:97:3b:4b:e8:ab:37:07:9f:85: 34:15:72:72:c5:9f:36:a2:99:75:52:3d:5e:3c:c5:6e:2a:f3: ae:f4:79:aa:b4:a0:a1:4e:85:fa:ed:4d:43:9c:6b:79:c5:97: c3:f5:7d:f1:bd:23:3a:e2:5f:06:29:69:27:51:cb:8b:8b:9e: 68:fe:61:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNBra5GHyHdIqNOQ11YouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMzAxMjEwMDQ0WhcNMjYwMzAyMjEwMDQ0WjAzMTEwLwYDVQQD EyhkZDQ2YjM1ZTg1ODA2N2YxYWUwYzQ3MTg4OTczMTZhMmI0MjZmMzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0x86tUDJOF+t3kSHVA3ccX6o9Z3 Ivhet575lh7BrwVNRIS7oxRL5T5TaDDrrvoN/c6SJkZnzXkKYeo6+6N9aJE+M/Ze s6Z1KoTOzuv8GWl4xw3scz3V8x/jWaq6/cKU9Y493ikeCLhmTY/nu/mAv76Ld73j 5SBndSxngJSEEuktDb8LEKpU22vIEPCeRFB5YRh3Vjcf0MyozaNpXE9oQi8yt7Xs jrSjAUxDz9l3kytawxBT6T9Q+ZYOpJAOrBzPCE/nkLwNB/Cgyai9wTTyu0e2ngUd PVPW3aaDqfO3DL2s6URN4+yg5Ly2B9kWOwKna1cZflsG7x/Jo1ONJIqZHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1Gs16FgGfxrgxHGIlzFqK0JvOLMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAal9tpjn/ 7L2r5EHkzmyCuIckk5X8dbtUNZcMm+e4fL6t4B6HjaiUQlqazrKa/p1fu7yPaCOZ LvO+haXnGsDNbG6oJWI+3+46XdfT85S6A+CZ8Rl9FYAFn9rlodKHS3vqBbpUNVIb gxzZFDZwCLEauYrSobFW+xaEo8+3q6UX8qRZhyeGsx2IVLPlEZKHCvA6sNmDJcAz tJEsgT+xSz+qdGEmw00z7iwv1SRSorelHm4UtSTN+KRoHLGMICcTlztL6Ks3B5+F NBVycsWfNqKZdVI9XjzFbirzrvR5qrSgoU6F+u1NQ5xrecWXw/V98b0jOuJfBilp J1HLi4ueaP5hnA== -----END CERTIFICATE-----Generated at Mon Mar 2 07:42:58 2026 by rpki-client