$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft File: IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json) Hash identifier: Twd8mCCGyImp+anwJb7H8EBpM6VQZ4/BaeeijBHx9EY= Subject key identifier: 1F:5E:07:3E:5E:6E:C5:ED:FD:5B:5E:8B:46:43:7E:22:DA:68:18:3E Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019CA90EA820E55D1C2DC36E42D36BBEB876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft Manifest number: 1854 Signing time: Sun 01 Mar 2026 11:00:35 +0000 Manifest this update: Sun 01 Mar 2026 11:00:35 +0000 Manifest next update: Mon 02 Mar 2026 11:00:35 +0000 Files and hashes: 1: 5OuAtNn0l8oe2em-i-_BkRqZL7g.roa (hash: vANhq4PdID8vPwTjDrBS+mXwABE8TzXjEn+JW1v5ExU=) 2: 7t8wgjK41lzapDs5jikBb5vTFhI.roa (hash: pNcEvtuu1o2hH2eMF61QKg8HYUfp8zz08CbYNkIzxoY=) 3: 9Ftjq_Eq-fyNHlW3WtWYGabPEOo.roa (hash: RROt5jRdMmps8oCVGgLhKd+7IXUEEDExlgWjv5fKF/c=) 4: CLa3JNQ78J4sBQQxh8GAqDQBO2U.roa (hash: Ptpr2OeA+6xL/czPzBtIc73Iw+siDZQ42cRR8gFjgKk=) 5: Ep3XVJ-_t23pza2fzpUEP6EDP9w.roa (hash: hoiisfSpISgCVFz1VXlgIuAWQt8MugVbvtDs45VkzlE=) 6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: FKSdhslJRw9pjhoSsEjQkEeHz54Bmc2I0QxUB5xscg8=) 7: LCWtZ049FoEMI5HAwHzYkDXlzb0.roa (hash: fito6QodYmgMrVei2hs3ovjCGv+4YYqwwa8c3/bKpq8=) 8: LRyKKJzTBliMx34ASYig8HFEXqY.roa (hash: HoiPjv5M2f1QZDzcqH+pau0FYK61g+kOdOsd3jsE6KY=) 9: N8_jgVETZSZgMZuy7Nmx901ELco.roa (hash: +zMjL/+nyqUTVAJWqSLmseSeJa4kcd3Eto/YmX3LSA0=) 10: QZOA4Cw_wJbFqn0TYzvO7eAmllA.roa (hash: urP1bJFXb+aibHUz3y+1eQjAxhXGlX3kRZlCoVkKq8U=) 11: VPsOpQzvuZLSVdRpUbPccqsH0HI.roa (hash: LNvdod+2moYgqIRIXig9MujeQAei+hV7OeUdz/G9T2c=) 12: VcaphQh4vHAVmPQId2jsNB2aQv4.roa (hash: 8e+QqZ403DJ8rCqJdp/PBd4JgkUk23mp8hqKweh0FDA=) 13: VrIgLz2PFQgd63beVRzJrL2SQBc.roa (hash: sXPs4ggxGfscBiESz3blqF00BOn9YaRW1W7ATtbBk3s=) 14: YEIy-4popFF63uiUMaqEq6MP2-k.roa (hash: gVX7vNZdK/HpIGkA/+EuEhyy05rdK5xmjj38Yi11muE=) 15: ZwVEwgiwITzzAorGck8VXul9oFU.roa (hash: qDVShcnTFlPrk8WY/vVUFbSS/IUCjtruta++I3zUCp4=) 16: _KdTD9Hfu5k6hVTondfZQJ_OxLo.roa (hash: 4TQXprbZCs5Jf+ifvEFuTZxSKFFhMf/XaJeUj1L8wlE=) 17: b5_puVoiaaK1luof_u2L7B-PTEE.roa (hash: Uuu9Wl4sZx9v7YzIOuwEsj+WuePom5BSk93dnj/mc9Q=) 18: fLzeZ00IYj-IxnoGIbn7t2eWUGI.roa (hash: YW5jkNHqF6tBgAJfKMQglVG8Rn1wn5A7xiLfsMA393U=) 19: j0nf_y6uB0VgXHQDlN6OhEbU5jU.roa (hash: SKADJBgkOhviqwy7f7gDKRZV4Zt1/yBSufcp/4OhY7k=) 20: pMzwR3DaYSVoHUR1RGTsgZ23wm0.roa (hash: 6sMrJ/AtbSyiDYLE+mzWMFlpOxx6wBjmiT963p9LhmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:0e:a8:20:e5:5d:1c:2d:c3:6e:42:d3:6b:be:b8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Mar 1 11:00:35 2026 GMT Not After : Mar 2 11:00:35 2026 GMT Subject: CN=1f5e073e5e6ec5edfd5b5e8b46437e22da68183e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a4:72:10:a1:11:dc:6b:60:60:74:57:22:a4: e0:6c:bd:5f:0e:44:48:28:05:8b:14:6d:58:47:c2: 33:fd:6a:8c:fe:31:9d:6e:bf:35:c0:c9:7f:79:24: d6:97:2d:fc:9c:7d:4b:4e:a1:9e:3c:0f:f4:05:37: 32:e5:8d:b1:72:cd:86:dd:e5:21:35:58:a7:3d:2e: b7:b6:d2:3e:13:c4:99:8e:71:67:ea:05:01:3e:8b: 46:64:45:9a:be:7a:5d:24:d9:ff:70:90:b2:ca:a8: 87:a2:f3:6e:16:38:f8:4c:31:b9:7a:94:7c:7a:54: 7d:38:b8:89:02:e2:7c:f2:2d:0d:e1:73:21:bc:14: 32:65:80:5f:ef:d4:cd:4f:17:65:ca:a6:ed:da:7f: aa:83:f6:21:f7:f4:1f:8e:15:4e:4d:97:78:d9:0d: 25:f1:b8:29:0c:cd:28:e8:a7:e3:ab:f3:45:82:0e: 31:3d:32:f9:a4:ce:82:34:72:70:11:31:f6:7b:a4: 0b:88:32:8f:4d:81:8e:ef:1c:55:a7:86:55:72:bf: 56:c4:93:29:f0:b9:9c:4a:0a:8d:1b:0d:05:7f:5a: c5:e1:e4:29:83:1b:80:f0:8a:6c:5e:67:da:1e:7f: 76:e6:b1:46:04:a9:46:4e:15:f4:3e:f1:f2:1c:44: b2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5E:07:3E:5E:6E:C5:ED:FD:5B:5E:8B:46:43:7E:22:DA:68:18:3E X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6c:5b:4c:40:bc:21:97:fe:4c:24:f8:e5:6f:c9:1d:15:be: 4c:2e:b1:1f:05:4a:b4:cc:33:f7:dc:96:c6:7a:69:5b:56:c5: bd:cd:33:8b:20:e3:23:10:ef:38:d8:75:04:ae:d3:ac:70:33: 20:da:42:6a:d1:31:c7:66:e0:f4:73:ca:7c:e1:4f:e7:01:2f: cb:3d:4f:e7:86:3d:a5:51:f5:1d:0f:93:55:d3:f5:a1:c1:ac: f5:14:c0:55:db:e9:0c:8f:c9:1f:c0:53:e9:1e:e3:5f:b4:e0: 6d:4b:56:ca:07:a8:9b:a0:e5:9c:ae:20:db:54:a4:ef:99:12: c5:18:b5:c0:d0:44:4b:0b:9b:91:bb:75:17:e0:49:03:ee:7e: c3:12:7b:a7:89:50:35:26:fe:4a:d2:36:15:4d:56:c7:66:7c: 94:99:39:a7:cb:1d:14:b6:75:7b:df:55:ee:88:59:57:62:de: 3a:d8:75:06:b3:36:0e:d1:c6:64:f3:47:27:b6:e0:0e:f8:19: 11:1e:e5:42:34:5a:16:e5:b4:87:55:9e:3e:6f:ee:c6:4f:04: 78:81:d4:71:09:35:03:92:b2:81:b9:f2:53:d6:a4:14:af:88: 35:ff:1b:fb:b7:6b:30:40:26:ac:59:38:a6:ba:e0:da:70:58: 15:d6:70:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypDqgg5V0cLcNuQtNrvrh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjYwMzAxMTEwMDM1WhcNMjYwMzAyMTEwMDM1WjAzMTEwLwYDVQQD EygxZjVlMDczZTVlNmVjNWVkZmQ1YjVlOGI0NjQzN2UyMmRhNjgxODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaRyEKER3GtgYHRXIqTgbL1fDkRI KAWLFG1YR8Iz/WqM/jGdbr81wMl/eSTWly38nH1LTqGePA/0BTcy5Y2xcs2G3eUh NVinPS63ttI+E8SZjnFn6gUBPotGZEWavnpdJNn/cJCyyqiHovNuFjj4TDG5epR8 elR9OLiJAuJ88i0N4XMhvBQyZYBf79TNTxdlyqbt2n+qg/Yh9/QfjhVOTZd42Q0l 8bgpDM0o6Kfjq/NFgg4xPTL5pM6CNHJwETH2e6QLiDKPTYGO7xxVp4ZVcr9WxJMp 8LmcSgqNGw0Ff1rF4eQpgxuA8IpsXmfaHn925rFGBKlGThX0PvHyHESyZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9eBz5ebsXt/Vtei0ZDfiLaaBg+MB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmxbTEC8 IZf+TCT45W/JHRW+TC6xHwVKtMwz99yWxnppW1bFvc0ziyDjIxDvONh1BK7TrHAz INpCatExx2bg9HPKfOFP5wEvyz1P54Y9pVH1HQ+TVdP1ocGs9RTAVdvpDI/JH8BT 6R7jX7TgbUtWygeom6DlnK4g21Sk75kSxRi1wNBESwubkbt1F+BJA+5+wxJ7p4lQ NSb+StI2FU1Wx2Z8lJk5p8sdFLZ1e99V7ohZV2LeOth1BrM2DtHGZPNHJ7bgDvgZ ER7lQjRaFuW0h1WePm/uxk8EeIHUcQk1A5KygbnyU9akFK+INf8b+7drMEAmrFk4 prrg2nBYFdZweA== -----END CERTIFICATE-----Generated at Sun Mar 1 19:05:09 2026 by rpki-client