$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json) Hash identifier: CpgB3t2N/fKDyYIg6QFR4VloTddzyxsUf9UEQ4uYPSM= Subject key identifier: C4:1D:08:8E:1B:96:96:D7:52:B9:47:D4:CB:0B:84:0E:63:1B:97:C6 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019CAD22B84C97D6698C8419E64E662E4E3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft Manifest number: 1854 Signing time: Mon 02 Mar 2026 06:00:59 +0000 Manifest this update: Mon 02 Mar 2026 06:00:59 +0000 Manifest next update: Tue 03 Mar 2026 06:00:59 +0000 Files and hashes: 1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=) 2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: 9TyNXAf6g2xusE+DXfruHrqENzAywVtum5coRRbWHWs=) 3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=) 4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=) 5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=) 6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=) 7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=) 8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=) 9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=) 10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=) 11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=) 12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=) 13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=) 14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=) 15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=) 16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=) 17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=) 18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=) 19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:22:b8:4c:97:d6:69:8c:84:19:e6:4e:66:2e:4e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Mar 2 06:00:59 2026 GMT Not After : Mar 3 06:00:59 2026 GMT Subject: CN=c41d088e1b9696d752b947d4cb0b840e631b97c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:21:6e:56:49:eb:8f:20:3d:ae:93:80:bc: 60:50:eb:03:17:87:fc:9f:5d:4b:6b:eb:47:80:ca: 1c:3a:f6:e3:e3:e4:5e:d4:1d:1d:83:55:9d:a1:c1: 21:53:18:b8:9b:87:b2:1b:a6:50:b1:8d:49:4e:8e: bd:47:64:a9:a5:2e:ad:ad:5a:72:ed:82:e9:b5:5f: 94:75:7e:88:26:0e:79:a9:7a:ef:30:d5:9c:0f:58: 98:d4:4a:21:da:b3:97:e9:12:09:fe:ec:90:c5:00: 07:53:c7:8c:0f:0d:bb:6a:af:34:e3:d2:b4:ba:d8: 97:ab:46:6b:e1:59:da:13:09:34:ab:ba:ff:36:b0: e9:bb:8d:84:57:66:ef:de:07:70:04:70:43:51:72: f2:8d:6c:b0:0d:04:72:2d:06:f1:64:08:7c:36:a3: fa:45:c9:5f:58:1e:46:dd:09:95:00:e9:0c:11:93: af:fd:8e:41:66:10:a0:6c:bb:ed:71:01:6a:5d:42: 5b:fb:df:7e:9f:ee:bc:46:d0:a8:85:8e:94:4e:be: ed:6b:c3:c4:d6:98:8b:0e:97:7a:a7:e8:ba:34:f6: 9f:b0:88:4b:fa:98:17:ca:b5:6c:50:0d:90:b2:4d: 79:4d:db:69:34:31:57:a1:e0:e3:0a:40:13:53:23: ad:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1D:08:8E:1B:96:96:D7:52:B9:47:D4:CB:0B:84:0E:63:1B:97:C6 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:22:37:1b:25:d4:9c:03:79:70:8f:bd:a6:55:19:d8:6a:94: 6d:c2:c9:ed:33:e0:3e:94:57:01:7e:28:17:72:99:41:85:4d: 62:33:b2:93:0c:5a:0b:d2:e8:15:4f:5b:ec:63:38:ae:b6:a8: 53:ea:c0:a8:72:28:e5:a3:bc:fa:ed:13:22:54:f8:ab:b4:1d: 55:5d:82:bd:66:1b:a6:ce:0f:65:48:01:8a:26:04:92:92:8c: 59:97:b1:10:d6:a3:d7:97:88:fc:ea:c2:a7:2b:f8:47:65:00: 77:13:87:fe:75:e2:be:c1:19:ba:02:cd:50:1c:7f:5b:9b:92: b5:66:f0:a4:80:45:21:a9:32:f0:1a:97:a9:95:91:61:6e:43: bd:e6:1b:7b:da:6f:45:f7:90:eb:37:b4:bb:f7:d7:9f:16:be: 09:e9:77:3d:34:66:80:a3:1d:d2:bb:af:9a:b5:0f:d5:b5:08: 2d:52:87:7e:09:c6:4c:b6:bf:ec:6b:58:93:c9:b4:9f:95:a9: ef:a5:5c:88:fa:5d:c9:c7:63:1f:c2:5a:0a:b4:cf:2f:cd:53: a2:bf:3e:de:d2:d9:e3:db:af:42:df:5b:f5:20:80:f3:1c:b8: eb:c1:80:a5:be:2f:2d:35:e0:15:40:f6:15:c1:3e:ef:07:ad: 91:f0:93:97 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZytIrhMl9ZpjIQZ5k5mLk48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjYwMzAyMDYwMDU5WhcNMjYwMzAzMDYwMDU5WjAzMTEwLwYDVQQD EyhjNDFkMDg4ZTFiOTY5NmQ3NTJiOTQ3ZDRjYjBiODQwZTYzMWI5N2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWUhblZJ648gPa6TgLxgUOsDF4f8 n11La+tHgMocOvbj4+Re1B0dg1WdocEhUxi4m4eyG6ZQsY1JTo69R2SppS6trVpy 7YLptV+UdX6IJg55qXrvMNWcD1iY1Eoh2rOX6RIJ/uyQxQAHU8eMDw27aq8049K0 utiXq0Zr4VnaEwk0q7r/NrDpu42EV2bv3gdwBHBDUXLyjWywDQRyLQbxZAh8NqP6 RclfWB5G3QmVAOkMEZOv/Y5BZhCgbLvtcQFqXUJb+99+n+68RtCohY6UTr7ta8PE 1piLDpd6p+i6NPafsIhL+pgXyrVsUA2Qsk15TdtpNDFXoeDjCkATUyOt9QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMQdCI4blpbXUrlH1MsLhA5jG5fGMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3 YWEvMS8xLTVoeVJHRWJVakJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCI3 GyXUnAN5cI+9plUZ2GqUbcLJ7TPgPpRXAX4oF3KZQYVNYjOykwxaC9LoFU9b7GM4 rraoU+rAqHIo5aO8+u0TIlT4q7QdVV2CvWYbps4PZUgBiiYEkpKMWZexENaj15eI /OrCpyv4R2UAdxOH/nXivsEZugLNUBx/W5uStWbwpIBFIaky8BqXqZWRYW5DveYb e9pvRfeQ6ze0u/fXnxa+Cel3PTRmgKMd0ruvmrUP1bUILVKHfgnGTLa/7GtYk8m0 n5Wp76VciPpdycdjH8JaCrTPL81Tor8+3tLZ49uvQt9b9SCA8xy468GApb4vLTXg FUD2FcE+7wetkfCTlw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:30:03 2026 by rpki-client