$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: T6Gv4Nz01iUh/DYevmTHFsrFKISRf6U+sRcRmmvMpNg= Subject key identifier: DE:33:00:25:BC:6A:A0:37:DB:7F:8A:08:F6:9A:3D:A7:28:5D:46:E7 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019CAB3430720D9012861117E2F71756CBBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 156B Signing time: Sun 01 Mar 2026 21:00:50 +0000 Manifest this update: Sun 01 Mar 2026 21:00:50 +0000 Manifest next update: Mon 02 Mar 2026 21:00:50 +0000 Files and hashes: 1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=) 2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=) 3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=) 4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=) 5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=) 6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=) 7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=) 8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=) 9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: +c499WUFCdUMsWo/vXVCO9dCkN2Uvk7YTq6ntHK0z8M=) 10: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=) 11: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=) 12: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=) 13: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=) 14: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=) 15: y8jNpNhJhN8HEtdIA-w7AJf_i5Q.roa (hash: 8sIOOrWgw4Q4JWzlfJJ/cqOkQmwBNx1SNCCheRpOVMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:30:72:0d:90:12:86:11:17:e2:f7:17:56:cb:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Mar 1 21:00:50 2026 GMT Not After : Mar 2 21:00:50 2026 GMT Subject: CN=de330025bc6aa037db7f8a08f69a3da7285d46e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:07:1b:d9:54:ec:df:63:2e:5a:f0:e4:c5:09: 31:29:5c:e9:0e:4f:74:19:66:37:4c:40:dd:bd:c0: ce:3a:f9:63:e9:70:25:94:4b:45:f4:8c:a0:e7:0b: a4:23:33:c3:9d:eb:99:7d:51:48:3b:19:ae:ad:ef: e4:1d:af:95:0f:a6:3e:8f:1a:02:14:49:03:ab:9f: 31:76:02:4a:e6:aa:bb:4f:1e:5c:ac:e3:9d:fb:49: 25:e7:35:68:73:9b:54:68:f1:7f:c5:e7:b1:31:97: 47:bb:20:7f:af:17:8f:36:48:2d:d9:8f:6e:32:f6: a2:f3:fd:32:75:39:a5:79:fa:46:77:32:cf:51:78: 31:6c:c8:9f:c5:a6:1d:84:d1:e2:64:38:fc:e1:42: e0:0c:55:bb:96:98:61:cd:59:d0:d4:7e:01:26:a4: 13:c4:98:e1:13:c0:bf:97:7c:e1:4f:5a:c3:2d:d3: 41:ec:fd:81:72:59:10:50:37:9d:4e:5d:d5:52:f5: 4b:19:64:82:b1:ce:e8:07:25:05:03:4d:a9:f1:7b: d2:70:53:1a:6d:9e:9d:a8:9c:09:0a:09:14:c9:fe: 75:12:64:ab:03:7c:c4:88:ca:3b:0a:34:1d:e9:d0: 59:f8:88:e4:01:3c:9c:cb:62:e9:4d:51:e4:f2:f9: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:33:00:25:BC:6A:A0:37:DB:7F:8A:08:F6:9A:3D:A7:28:5D:46:E7 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:37:41:28:5c:9e:d1:27:92:f2:69:67:27:e7:b5:df:63:2a: 9c:01:5e:d2:92:f5:30:65:2e:db:4c:dc:98:ba:e7:f6:67:2c: 81:4d:e9:4b:dd:a2:a0:f8:16:63:64:f0:7c:58:81:b0:8c:e5: 42:16:75:8b:44:97:fe:19:c8:96:83:21:74:13:04:18:02:2f: a8:c3:c7:02:0a:24:bf:b3:2c:2f:d6:55:e2:1b:f2:48:22:c0: ad:0d:c2:d0:fe:5c:14:f3:1e:14:b9:72:51:32:f4:3c:5a:f4: 9b:bf:da:a3:9f:78:ec:e1:b1:d5:f9:a8:42:d3:12:61:de:68: 86:c1:de:38:c9:84:95:fd:fa:e1:8c:64:ee:d5:27:6c:11:f8: 27:fb:cd:14:d5:ad:92:a2:57:e5:40:a1:11:0f:70:84:e8:75: 81:62:6a:bd:0e:f2:f1:9d:c1:a5:03:ae:6f:e8:8a:ac:59:a0: 92:48:6a:68:87:1b:29:22:d0:1e:6b:be:13:d9:0a:3b:1f:66: 0e:d1:61:08:8e:4c:f7:4a:bd:03:9a:e3:d3:bf:9f:6b:68:ab: 21:fb:62:91:1d:7e:38:f1:43:f6:29:b8:6b:9a:66:5b:1d:9f: b9:a7:f7:b1:2f:fb:89:27:c3:38:96:b4:c2:6e:50:76:24:e2: 7f:7d:15:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNDByDZAShhEX4vcXVsu8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwMzAxMjEwMDUwWhcNMjYwMzAyMjEwMDUwWjAzMTEwLwYDVQQD EyhkZTMzMDAyNWJjNmFhMDM3ZGI3ZjhhMDhmNjlhM2RhNzI4NWQ0NmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwcb2VTs32MuWvDkxQkxKVzpDk90 GWY3TEDdvcDOOvlj6XAllEtF9Iyg5wukIzPDneuZfVFIOxmure/kHa+VD6Y+jxoC FEkDq58xdgJK5qq7Tx5crOOd+0kl5zVoc5tUaPF/xeexMZdHuyB/rxePNkgt2Y9u Mvai8/0ydTmlefpGdzLPUXgxbMifxaYdhNHiZDj84ULgDFW7lphhzVnQ1H4BJqQT xJjhE8C/l3zhT1rDLdNB7P2BclkQUDedTl3VUvVLGWSCsc7oByUFA02p8XvScFMa bZ6dqJwJCgkUyf51EmSrA3zEiMo7CjQd6dBZ+IjkATycy2LpTVHk8vkppwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4zACW8aqA323+KCPaaPacoXUbnMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTdBKFye 0SeS8mlnJ+e132MqnAFe0pL1MGUu20zcmLrn9mcsgU3pS92ioPgWY2TwfFiBsIzl QhZ1i0SX/hnIloMhdBMEGAIvqMPHAgokv7MsL9ZV4hvySCLArQ3C0P5cFPMeFLly UTL0PFr0m7/ao5947OGx1fmoQtMSYd5ohsHeOMmElf364Yxk7tUnbBH4J/vNFNWt kqJX5UChEQ9whOh1gWJqvQ7y8Z3BpQOub+iKrFmgkkhqaIcbKSLQHmu+E9kKOx9m DtFhCI5M90q9A5rj07+fa2irIftikR1+OPFD9im4a5pmWx2fuaf3sS/7iSfDOJa0 wm5QdiTif30VFQ== -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:08 2026 by rpki-client