$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: e2RrhFdJ/RbyJ2UxhER79VdabalaSR9d5mqmmmjiLI4= Subject key identifier: 76:0F:25:B7:81:44:B9:1D:35:1F:26:88:A9:BC:AC:2D:B0:09:8E:B2 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019CAAFD0FD6A5C80914F0D66F92FB23B5BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 1854 Signing time: Sun 01 Mar 2026 20:00:37 +0000 Manifest this update: Sun 01 Mar 2026 20:00:37 +0000 Manifest next update: Mon 02 Mar 2026 20:00:37 +0000 Files and hashes: 1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=) 2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=) 3: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=) 4: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=) 5: NjoBWFZasR4u5kKYBTzr17mcUXo.roa (hash: 5hFL56Dz1c0tBp4+xkoRBXQC3H4xXKPV9W/AB2fy/u0=) 6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=) 7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: WwE8hVVG7OU1cvoQmYNJokshTjDJeCh8iPdlsPa3hvQ=) 8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=) 9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=) 10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fd:0f:d6:a5:c8:09:14:f0:d6:6f:92:fb:23:b5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Mar 1 20:00:37 2026 GMT Not After : Mar 2 20:00:37 2026 GMT Subject: CN=760f25b78144b91d351f2688a9bcac2db0098eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:47:df:33:5f:4d:48:27:37:91:9e:9c:4f:e3: 05:40:03:f7:1d:4c:1d:52:b6:38:02:ec:f7:bd:05: d8:08:8d:36:a1:0a:75:89:10:21:80:28:2f:78:dd: 29:09:9d:d2:a8:d7:c6:4d:15:dd:10:ee:09:55:90: 3d:c6:a8:b9:a5:a2:c0:43:8e:24:d0:e2:6f:03:0f: cb:12:99:4a:e0:38:6a:4e:81:19:72:79:4b:bd:14: a8:b1:a1:16:cc:df:83:f4:62:8e:62:49:6c:20:19: 5b:df:39:9f:f3:88:8b:f5:7c:85:0b:2d:95:85:e0: 24:07:d3:bd:fa:24:72:02:36:fe:e2:3c:28:90:dd: bb:a6:b7:36:21:07:7d:88:4f:d5:70:96:6f:3a:31: b4:4e:e7:0a:c5:ed:2d:72:91:9b:d3:a7:e6:5c:a6: 8c:33:e3:c4:6e:56:1b:af:32:c0:aa:5c:fb:4c:a7: b6:1f:02:3d:aa:42:c5:86:cc:f8:66:0d:1d:28:c8: fd:d5:66:ca:35:63:b0:6b:1a:5e:77:7c:2a:a8:50: dd:ca:c9:c2:dc:0e:c7:57:95:dd:f5:57:d7:02:50: 9c:fb:24:81:05:36:56:b8:82:7c:16:85:e9:9e:16: a0:e4:78:9c:b0:a0:4e:29:71:e1:c1:26:ec:c6:06: b3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0F:25:B7:81:44:B9:1D:35:1F:26:88:A9:BC:AC:2D:B0:09:8E:B2 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:86:f4:fa:8b:23:bb:35:fa:10:05:b1:63:07:dd:a7:88:75: 44:2a:dc:51:3b:37:b3:70:3b:a4:87:ae:bc:11:4a:61:c2:d9: 37:70:2b:b8:97:99:4f:91:23:c8:db:48:dc:05:28:5f:df:6e: 6f:ed:df:00:ab:9f:55:a1:be:21:0c:57:ce:3b:be:24:42:86: c0:04:02:68:24:ef:75:c1:73:0b:ef:bf:90:df:b5:36:12:28: 91:32:6d:11:92:62:df:a9:c8:17:16:6b:04:bc:36:64:4e:a6: 7a:63:61:ba:30:20:8c:1f:aa:f7:fa:65:4b:f0:5d:ee:08:d4: fa:0e:1e:a3:3e:28:e3:47:ab:83:7d:1e:88:91:bf:21:d5:fb: 3f:ee:ca:cf:2e:d0:f0:65:87:a9:1e:f3:e7:b2:d1:48:ac:23: d3:1d:0f:8f:d0:51:74:05:9c:4d:08:aa:69:56:2e:69:d8:8c: 61:18:ee:11:d2:1c:82:b1:26:88:50:dc:32:10:42:6c:6c:91: 83:31:7e:aa:bd:59:27:d9:47:58:48:06:cd:f0:38:48:aa:26: aa:9d:f1:19:f3:4d:8e:45:2d:2d:98:7c:b6:4e:98:d8:25:e8: f1:a4:c9:90:8f:34:f0:45:9d:1d:f3:3f:c6:d5:e4:8e:74:98: 6f:48:64:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/Q/WpcgJFPDWb5L7I7W6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwMzAxMjAwMDM3WhcNMjYwMzAyMjAwMDM3WjAzMTEwLwYDVQQD Eyg3NjBmMjViNzgxNDRiOTFkMzUxZjI2ODhhOWJjYWMyZGIwMDk4ZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0ffM19NSCc3kZ6cT+MFQAP3HUwd UrY4Auz3vQXYCI02oQp1iRAhgCgveN0pCZ3SqNfGTRXdEO4JVZA9xqi5paLAQ44k 0OJvAw/LEplK4DhqToEZcnlLvRSosaEWzN+D9GKOYklsIBlb3zmf84iL9XyFCy2V heAkB9O9+iRyAjb+4jwokN27prc2IQd9iE/VcJZvOjG0TucKxe0tcpGb06fmXKaM M+PEblYbrzLAqlz7TKe2HwI9qkLFhsz4Zg0dKMj91WbKNWOwaxped3wqqFDdysnC 3A7HV5Xd9VfXAlCc+ySBBTZWuIJ8FoXpnhag5HicsKBOKXHhwSbsxgazLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYPJbeBRLkdNR8miKm8rC2wCY6yMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIb0+osj uzX6EAWxYwfdp4h1RCrcUTs3s3A7pIeuvBFKYcLZN3AruJeZT5EjyNtI3AUoX99u b+3fAKufVaG+IQxXzju+JEKGwAQCaCTvdcFzC++/kN+1NhIokTJtEZJi36nIFxZr BLw2ZE6memNhujAgjB+q9/plS/Bd7gjU+g4eoz4o40erg30eiJG/IdX7P+7Kzy7Q 8GWHqR7z57LRSKwj0x0Pj9BRdAWcTQiqaVYuadiMYRjuEdIcgrEmiFDcMhBCbGyR gzF+qr1ZJ9lHWEgGzfA4SKomqp3xGfNNjkUtLZh8tk6Y2CXo8aTJkI808EWdHfM/ xtXkjnSYb0hkkw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:36:18 2026 by rpki-client