$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json) Hash identifier: HfoSByLBsSiAif7D/u/vnzVCciXCMy9csExH3TV5g+4= Subject key identifier: 85:D6:15:3C:DC:69:47:5D:D6:43:8E:33:79:9C:32:EF:F9:DF:1E:6E Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019CA97C7E08E10AFF32940BD2E5630805D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft Manifest number: 1060 Signing time: Sun 01 Mar 2026 13:00:34 +0000 Manifest this update: Sun 01 Mar 2026 13:00:34 +0000 Manifest next update: Mon 02 Mar 2026 13:00:34 +0000 Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=) 2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: p7MTc+t8Q+cVS6BWLLnRWIXRe19eaZR0mFlH0LEU+U4=) 3: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=) 4: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=) 5: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=) 6: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=) 7: QojlrQ9a8Sf-3OscCFSF9lKZeL0.roa (hash: 5zZB8tcLmgJvpKxRcJyw89w0k3VioDwJSjfpHcGceEg=) 8: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=) 9: jFHWQVied9oZQfm4vhIvSC4eiV0.roa (hash: dr0KfgCKcAC1kV4SsWObX5dDQnEh0pKNGg0bXRatP4I=) 10: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:7c:7e:08:e1:0a:ff:32:94:0b:d2:e5:63:08:05:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Mar 1 13:00:34 2026 GMT Not After : Mar 2 13:00:34 2026 GMT Subject: CN=85d6153cdc69475dd6438e33799c32eff9df1e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:52:57:81:c9:22:d2:e9:bb:aa:94:a9:91:5a: fd:da:a8:f4:6f:7a:e5:b9:1c:d8:8c:fe:f9:79:05: 23:30:f7:7a:77:39:a3:e8:44:e0:ea:b2:44:b2:ac: 51:95:a2:44:61:55:23:e1:9e:bf:01:bc:fb:72:1f: 3b:1e:35:71:71:ca:24:f2:df:50:21:09:25:fd:91: 82:c8:c9:ff:a5:04:ae:b7:cb:39:04:05:19:23:3a: a0:a1:04:8d:90:3f:a6:f6:01:fe:43:8f:6e:3e:0b: 84:16:f0:72:02:e0:3e:ac:a8:d0:e2:36:b9:a9:7b: 6d:9e:ba:c8:e6:f5:af:73:a5:16:5e:06:4a:5e:4b: 77:f7:38:60:3f:1d:e9:a6:f0:67:5f:07:49:55:01: 8b:6d:0f:04:ac:b9:e1:57:bd:5a:a5:32:94:cf:48: 4f:6c:da:41:9c:e2:e3:6a:56:8f:76:07:b1:cc:77: 48:b5:9d:56:f6:17:b0:9a:46:49:2e:31:d5:18:c8: b8:be:0d:08:68:d7:3e:38:7e:9a:da:08:61:3d:57: c0:49:25:06:3f:45:1d:dd:57:eb:bd:8b:fd:68:ac: da:0f:81:a0:c7:75:b1:b5:22:45:a8:4f:6f:05:ab: 30:84:5e:c8:e2:71:4e:32:2f:62:60:e9:cd:77:a1: 1d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D6:15:3C:DC:69:47:5D:D6:43:8E:33:79:9C:32:EF:F9:DF:1E:6E X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b5:c9:f8:f0:94:96:30:f2:2d:d8:6e:f2:0f:04:ed:76:17: 11:75:98:0d:fe:ef:b5:e5:6a:e7:df:44:d7:d5:40:b8:48:09: bf:57:cb:20:27:23:a4:d5:43:7b:b6:84:b6:86:1f:1a:a9:ba: 93:3e:e4:e1:57:d0:3f:e7:0e:8f:2b:83:cc:cc:1d:43:4c:d2: 81:8a:b5:46:dc:10:4f:26:e8:36:9e:45:69:54:83:c1:2d:29: 9e:06:9a:f5:2b:fc:51:3b:e4:1f:50:9e:6d:44:60:de:3c:57: 64:f2:ae:4b:7b:d9:1b:f8:68:6b:79:12:bc:55:13:9b:42:3f: 3c:19:83:84:81:25:dc:79:a0:24:97:9b:04:31:ac:31:d7:85: 2d:05:ce:4d:5f:73:21:e1:87:dd:14:a5:fc:7d:84:cd:c9:32: 06:8e:6a:25:dc:6c:2b:b0:fa:4b:e1:81:c2:1e:0c:2d:be:1b: db:d5:e3:84:be:e0:a6:69:0e:b7:98:7c:53:4a:76:98:42:e2: c7:44:39:eb:94:47:c9:07:12:9b:0d:24:8b:3f:1d:3b:83:fc: 95:29:cc:f6:7f:7b:02:c2:c1:5f:d7:a0:c3:55:5b:01:f9:9c: e1:1f:90:e8:e8:6a:20:9c:6f:47:58:30:06:a4:88:1f:d8:7a: e9:54:10:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypfH4I4Qr/MpQL0uVjCAXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwMzAxMTMwMDM0WhcNMjYwMzAyMTMwMDM0WjAzMTEwLwYDVQQD Eyg4NWQ2MTUzY2RjNjk0NzVkZDY0MzhlMzM3OTljMzJlZmY5ZGYxZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFJXgcki0um7qpSpkVr92qj0b3rl uRzYjP75eQUjMPd6dzmj6ETg6rJEsqxRlaJEYVUj4Z6/Abz7ch87HjVxccok8t9Q IQkl/ZGCyMn/pQSut8s5BAUZIzqgoQSNkD+m9gH+Q49uPguEFvByAuA+rKjQ4ja5 qXttnrrI5vWvc6UWXgZKXkt39zhgPx3ppvBnXwdJVQGLbQ8ErLnhV71apTKUz0hP bNpBnOLjalaPdgexzHdItZ1W9hewmkZJLjHVGMi4vg0IaNc+OH6a2ghhPVfASSUG P0Ud3VfrvYv9aKzaD4Ggx3WxtSJFqE9vBaswhF7I4nFOMi9iYOnNd6EddQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXWFTzcaUdd1kOOM3mcMu/53x5uMB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrXJ+PCU ljDyLdhu8g8E7XYXEXWYDf7vteVq599E19VAuEgJv1fLICcjpNVDe7aEtoYfGqm6 kz7k4VfQP+cOjyuDzMwdQ0zSgYq1RtwQTyboNp5FaVSDwS0pngaa9Sv8UTvkH1Ce bURg3jxXZPKuS3vZG/hoa3kSvFUTm0I/PBmDhIEl3HmgJJebBDGsMdeFLQXOTV9z IeGH3RSl/H2EzckyBo5qJdxsK7D6S+GBwh4MLb4b29XjhL7gpmkOt5h8U0p2mELi x0Q565RHyQcSmw0kiz8dO4P8lSnM9n97AsLBX9egw1VbAfmc4R+Q6OhqIJxvR1gw BqSIH9h66VQQAA== -----END CERTIFICATE-----Generated at Sun Mar 1 18:21:18 2026 by rpki-client