$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: BCQAjSBnHsNa3sws6WhCLRDB/sM/w3ZaPDN6FHDnxYg= Subject key identifier: C3:DC:33:D5:04:9F:8D:07:58:8F:23:EF:83:A3:D1:8E:3B:8B:96:74 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019CAD22DED260DB55A2872415D28D421F5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 1856 Signing time: Mon 02 Mar 2026 06:01:09 +0000 Manifest this update: Mon 02 Mar 2026 06:01:09 +0000 Manifest next update: Tue 03 Mar 2026 06:01:09 +0000 Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=) 2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=) 3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=) 4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=) 5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=) 6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=) 7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=) 8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=) 9: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=) 10: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=) 11: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=) 12: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=) 13: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=) 14: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=) 15: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=) 16: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=) 17: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=) 18: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=) 19: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=) 20: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=) 21: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=) 22: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=) 23: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: hJ0US7iUXSaG6+n0QQeJSVWlJdu3krBwH6EAV9Xwu6g=) 24: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=) 25: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=) 26: z5014MFfxmYQTm_qnLF3yXwV-3I.roa (hash: 7VbwY0J0VcsEt+trFtXcwclY4yBnf//EolgJB0xn4Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:22:de:d2:60:db:55:a2:87:24:15:d2:8d:42:1f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Mar 2 06:01:09 2026 GMT Not After : Mar 3 06:01:09 2026 GMT Subject: CN=c3dc33d5049f8d07588f23ef83a3d18e3b8b9674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:62:b4:95:b4:2c:ab:ce:c6:d6:d1:4c:d5:a9: 1d:09:c6:cb:7b:52:db:d3:dc:2b:69:2b:8e:71:20: da:f9:e2:09:73:08:ba:f4:25:f3:0a:87:f8:45:df: d2:5a:1c:b3:84:1d:5c:7b:9d:3d:b7:80:88:e1:52: 5e:42:fd:c0:b5:82:f8:c2:7b:c0:29:2e:38:28:d3: 62:d9:52:77:4d:5e:e7:3a:a1:e8:d4:fc:f0:4f:bc: da:93:c2:67:fb:23:88:81:b5:2a:09:af:c9:bd:84: 7b:71:cb:8e:8d:c5:21:c8:a6:51:50:b8:d2:b1:ff: 1f:47:40:8a:77:d9:7f:68:2b:76:9e:5f:67:cb:68: 38:8a:bb:75:21:39:e9:0b:be:74:7c:af:0a:41:03: 59:a9:47:e2:6e:a8:7e:d2:d2:a8:17:2a:d7:fa:da: 20:b3:67:6a:3d:62:a2:e3:b5:26:80:fa:02:84:19: ef:a3:8f:2e:8c:2a:be:bd:be:e9:2f:de:c1:53:00: 86:83:32:4f:67:90:60:88:2f:9d:3b:19:17:a6:d7: fb:76:74:6b:32:17:cc:35:2a:05:f4:83:2b:3a:8c: c2:fa:c1:14:30:05:8e:44:04:d9:a6:0f:02:ec:c9: 3c:2a:75:5d:c0:82:83:41:8b:24:26:79:bd:1d:93: 94:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DC:33:D5:04:9F:8D:07:58:8F:23:EF:83:A3:D1:8E:3B:8B:96:74 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:25:88:ea:2e:55:c4:2a:b5:a5:e5:9f:65:98:6c:27:81:16: 47:cd:ad:fc:f3:ea:c6:1b:25:14:4f:9b:eb:4a:df:26:16:53: 57:3f:a1:bd:5c:b8:79:b2:34:2b:8c:73:1b:26:e4:fe:a9:11: 65:ee:9e:d1:87:11:c1:3e:5b:16:7e:c1:41:2a:9e:bd:71:43: 0c:7b:b5:65:a9:4e:ea:f0:6c:da:f3:4b:e5:0a:79:b4:65:f9: 62:5c:60:0f:e3:fd:c7:8f:ea:4e:c9:52:32:50:d9:5e:46:fe: 51:3f:de:8d:60:eb:a1:5b:5b:f8:8e:c6:07:bd:a7:f7:c6:9e: ca:87:04:8c:dc:f7:63:1b:06:49:e6:78:19:a4:02:d6:9e:c7: bc:61:6a:c2:27:bf:51:11:d7:fb:bf:4b:ea:50:c5:8b:e4:f2: c1:e3:31:bc:25:3b:ad:0e:21:c4:b8:f5:c4:28:bb:ea:80:87: a7:bc:b9:ec:60:2f:d5:b7:55:c9:68:da:ff:6d:d2:40:ac:5b: c5:1b:d1:19:9b:28:e8:e7:c9:34:a4:6d:c7:dc:7f:26:ab:ea: 24:a1:cf:41:d5:6d:a3:13:ad:e2:c6:7d:c9:8c:84:9b:54:67: c9:b9:19:13:f2:e9:0d:7b:a6:f9:cf:df:8a:68:ed:e2:9f:5b: 05:4f:3d:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytIt7SYNtVoockFdKNQh9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMzAyMDYwMTA5WhcNMjYwMzAzMDYwMTA5WjAzMTEwLwYDVQQD EyhjM2RjMzNkNTA0OWY4ZDA3NTg4ZjIzZWY4M2EzZDE4ZTNiOGI5Njc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGK0lbQsq87G1tFM1akdCcbLe1Lb 09wraSuOcSDa+eIJcwi69CXzCof4Rd/SWhyzhB1ce509t4CI4VJeQv3AtYL4wnvA KS44KNNi2VJ3TV7nOqHo1PzwT7zak8Jn+yOIgbUqCa/JvYR7ccuOjcUhyKZRULjS sf8fR0CKd9l/aCt2nl9ny2g4irt1ITnpC750fK8KQQNZqUfibqh+0tKoFyrX+tog s2dqPWKi47UmgPoChBnvo48ujCq+vb7pL97BUwCGgzJPZ5BgiC+dOxkXptf7dnRr MhfMNSoF9IMrOozC+sEUMAWORATZpg8C7Mk8KnVdwIKDQYskJnm9HZOUhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPcM9UEn40HWI8j74Oj0Y47i5Z0MB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiWI6i5V xCq1peWfZZhsJ4EWR82t/PPqxhslFE+b60rfJhZTVz+hvVy4ebI0K4xzGybk/qkR Ze6e0YcRwT5bFn7BQSqevXFDDHu1ZalO6vBs2vNL5Qp5tGX5YlxgD+P9x4/qTslS MlDZXkb+UT/ejWDroVtb+I7GB72n98aeyocEjNz3YxsGSeZ4GaQC1p7HvGFqwie/ URHX+79L6lDFi+TyweMxvCU7rQ4hxLj1xCi76oCHp7y57GAv1bdVyWja/23SQKxb xRvRGZso6OfJNKRtx9x/JqvqJKHPQdVtoxOt4sZ9yYyEm1RnybkZE/LpDXum+c/f imjt4p9bBU89uw== -----END CERTIFICATE-----Generated at Mon Mar 2 10:39:47 2026 by rpki-client