$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: d+S/8lf4TYzqPrQC/k8moGBIiuR+amkAAjyZlXOtbUY= Subject key identifier: 27:A3:65:39:DA:75:89:45:3F:AC:45:EB:81:9F:DD:7B:C7:7D:F8:07 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019CA9DF4548D4E70E9D828F8050219C3446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 185B Signing time: Sun 01 Mar 2026 14:48:27 +0000 Manifest this update: Sun 01 Mar 2026 14:48:27 +0000 Manifest next update: Mon 02 Mar 2026 14:48:27 +0000 Files and hashes: 1: 5bw3FxzpBWgCUPFGor6BeS_x13E.roa (hash: vbv6Fyo711z5Y6WllYiF1+hQCuBRfjBj2SnqOdmQ/Ko=) 2: KClfXxgk0wRzsCWY2cBjE-9OUBw.roa (hash: mZTkzVHUlv75y3/sF2jX1yQ3NF8yk3kbKCgMEXnClVc=) 3: OPUmPq2MCSSLajil_N8xjasEED0.roa (hash: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI=) 4: PVZJLc9tODZFqXK-cJmdd7K-baM.roa (hash: nv2FNyj3NvI+l9/bwumlpSj6KXBZJHOiEr8IoIDWWBs=) 5: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (hash: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY=) 6: RTtrcIMD_1Pooh2hybtppswd0Cs.roa (hash: gHzBppcBQRTrZFKZdzTeaIz8G3KIuJKhpm0DEQdKM5o=) 7: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (hash: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI=) 8: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: 8b1NZDi1qwKEqrG+1/XtN+VcfqFMQPTOD0nuegjIivs=) 9: iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa (hash: Xmy3joGzE7DOFCUoxtKq+8sQb3nS9R29UjEKhSZ9+oA=) 10: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (hash: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM=) 11: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (hash: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4=) 12: vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa (hash: HHDiRi1+BOUzXevtTy1X6aaBtWS9/5nRjSa9y3Tpifg=) 13: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (hash: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:df:45:48:d4:e7:0e:9d:82:8f:80:50:21:9c:34:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Mar 1 14:48:27 2026 GMT Not After : Mar 2 14:48:27 2026 GMT Subject: CN=27a36539da7589453fac45eb819fdd7bc77df807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a4:86:d3:9d:77:9d:bc:35:a2:38:67:67:d0: d8:d0:3a:56:6f:ce:4a:ee:f2:83:3d:de:83:ce:9f: c3:34:c2:f4:70:fa:28:98:a8:bb:02:d6:57:97:74: 5d:b9:c1:a5:f8:b5:ef:3d:7f:a9:68:a9:23:d2:c6: da:f4:5a:80:a5:b2:8e:36:f4:ab:8f:1b:4c:81:79: e1:be:95:1d:3f:09:88:46:70:c7:20:1c:5f:f6:88: 05:b0:e0:ed:d0:46:8e:04:16:c8:35:52:e1:51:6f: 46:e4:c7:39:1c:47:49:58:23:08:7f:9b:b6:69:e4: d5:16:1a:7e:1f:93:71:a9:3f:2b:e9:f7:56:3c:21: fe:e2:59:fd:9c:ec:1a:0b:ee:e9:5d:44:db:c5:4c: 77:ab:0d:b9:ff:ec:cd:0b:3a:27:69:90:12:88:cd: ad:e5:4e:08:6f:25:d0:6b:62:98:01:f4:e7:ab:3d: 89:d0:87:f7:02:0e:34:55:38:5b:52:83:f2:25:26: 5e:af:08:d5:3d:fa:75:e3:f6:c5:56:25:d9:d4:99: bf:8f:25:c7:93:9e:57:01:9c:1d:b3:27:07:ea:ac: aa:56:a5:df:86:18:1e:2b:15:d4:ac:cb:ac:eb:c1: 0c:05:6e:0d:1c:e9:07:05:b3:0f:14:d5:e3:26:0f: 74:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A3:65:39:DA:75:89:45:3F:AC:45:EB:81:9F:DD:7B:C7:7D:F8:07 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ef:91:b0:86:a5:5b:48:89:b3:06:df:3d:0c:15:44:fc:9c: bb:49:e1:7a:42:84:be:88:77:9e:72:27:87:96:f7:61:8c:36: 8e:71:cb:a2:06:c1:8b:a9:2a:14:98:73:24:9a:e8:49:e2:2f: d8:d9:df:2d:83:bc:67:18:62:05:62:e9:7a:e0:4d:63:05:28: dc:f0:82:bd:b1:f4:28:2a:24:ad:30:28:83:d2:ea:91:c7:d0: a4:41:9d:44:1d:f0:f8:84:b2:43:d0:25:5f:0e:a1:4d:7a:41: 3a:20:7d:55:fa:2a:e6:07:dd:1a:e9:cf:e3:d2:c6:3c:4e:13: df:2d:0d:ed:f7:dc:31:0b:43:6e:e6:ee:37:c4:bb:87:8c:0f: 29:ab:01:0b:f3:6d:e0:ab:82:f4:67:9e:5a:a0:f0:7a:7f:de: 50:60:c1:1e:95:fe:59:09:55:b7:c7:22:b1:ca:f9:5e:af:e1: 1a:df:81:ac:72:f5:2e:ee:ff:3e:ff:fa:e4:04:f7:34:3c:a1: b2:51:7f:fd:fd:b5:37:6c:5e:ad:f4:9d:bc:24:b2:70:14:9e: 15:a5:73:07:23:d3:b9:74:75:2f:cf:a3:86:ad:69:2a:cc:05: 7e:36:e7:33:f1:4b:44:93:54:a0:5b:24:f9:38:a9:21:32:18: c6:5c:eb:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyp30VI1OcOnYKPgFAhnDRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwMzAxMTQ0ODI3WhcNMjYwMzAyMTQ0ODI3WjAzMTEwLwYDVQQD EygyN2EzNjUzOWRhNzU4OTQ1M2ZhYzQ1ZWI4MTlmZGQ3YmM3N2RmODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86SG0513nbw1ojhnZ9DY0DpWb85K 7vKDPd6Dzp/DNML0cPoomKi7AtZXl3RducGl+LXvPX+paKkj0sba9FqApbKONvSr jxtMgXnhvpUdPwmIRnDHIBxf9ogFsODt0EaOBBbINVLhUW9G5Mc5HEdJWCMIf5u2 aeTVFhp+H5NxqT8r6fdWPCH+4ln9nOwaC+7pXUTbxUx3qw25/+zNCzonaZASiM2t 5U4IbyXQa2KYAfTnqz2J0If3Ag40VThbUoPyJSZerwjVPfp14/bFViXZ1Jm/jyXH k55XAZwdsycH6qyqVqXfhhgeKxXUrMus68EMBW4NHOkHBbMPFNXjJg90mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCejZTnadYlFP6xF64Gf3XvHffgHMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJO+RsIal W0iJswbfPQwVRPycu0nhekKEvoh3nnInh5b3YYw2jnHLogbBi6kqFJhzJJroSeIv 2NnfLYO8ZxhiBWLpeuBNYwUo3PCCvbH0KCokrTAog9LqkcfQpEGdRB3w+ISyQ9Al Xw6hTXpBOiB9Vfoq5gfdGunP49LGPE4T3y0N7ffcMQtDbubuN8S7h4wPKasBC/Nt 4KuC9GeeWqDwen/eUGDBHpX+WQlVt8ciscr5Xq/hGt+BrHL1Lu7/Pv/65AT3NDyh slF//f21N2xerfSdvCSycBSeFaVzByPTuXR1L8+jhq1pKswFfjbnM/FLRJNUoFsk +TipITIYxlzrZg== -----END CERTIFICATE-----Generated at Sun Mar 1 18:21:59 2026 by rpki-client