$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft File: tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json) Hash identifier: SMtk4mL9w2qDWV1B9Z5CPbuIusUal87RrktEXFfmAsE= Subject key identifier: 12:44:6E:85:AF:3B:08:D8:FB:92:89:97:FD:0C:67:67:66:E4:02:A1 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019CAA8FE613F1CBD2E03D6B86BE45CC4E0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft Manifest number: 1138 Signing time: Sun 01 Mar 2026 18:01:23 +0000 Manifest this update: Sun 01 Mar 2026 18:01:23 +0000 Manifest next update: Mon 02 Mar 2026 18:01:23 +0000 Files and hashes: 1: 00yjAHUjPi78LWd5NKw2W62obOE.roa (hash: fy76k6hktxmrp/33ybyKcOrtr3l2uBboJQ/aOUgHGR4=) 2: 2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa (hash: 2RhFKguLdx/frIsqfhlZq+St14nwRLDsFvzdspSUCHs=) 3: 7SmXzQd-nWaNe8t8rqOA7438J_s.roa (hash: RMY9iFIYUbgR/WmLppHu9PswGGc4qk7Roiy4Bmlgw3s=) 4: CRPgBeRXAqRmTgTtfsmiIZosBaQ.roa (hash: wDvPNmhM7GcOMSdAsmrbJDDVqrwM6YWhHFV4n7fPWuI=) 5: DHLKNILgfx16JsrlSXMeY6f762E.roa (hash: z5ydua2ZisWly8IjsMlT6pkwvFda1aV+qss6iF0vFOU=) 6: FerkNmRdMMqBAxxCWnxbdwDF0fM.roa (hash: X4J4aibstvyyZ1dw044vF6xHdgTuovNe6IxPq/bGSrQ=) 7: KKcG59VmFqQ4cXd0BBLDjoayHpI.roa (hash: I8RNIw+sEHGZn2p4ZlnQNs1qXyAS/e9dFOjjqFagY3w=) 8: LvDcdbQFTKKtCL0HWtHi8ZHMICw.roa (hash: pr9dzyzuzRXVF7OipbNJiEIFE2wIqGOEkXf2LlwVcSo=) 9: M_kXnc2VW4WObsQRGmM4dOkxvAo.roa (hash: hrx4tS1F9C1+NylfSdZou47j0Ea58tIJch7D5WphPNA=) 10: Pg6WcfGC8AkvBSVyCvKxqgdMGlM.roa (hash: 2K2U6cGOTmQqLf6zsnhVRf79y+nh5CGpqyhhe8CMkU8=) 11: b1R5F1rXBZ-9jQYuesOiTfnnXjw.roa (hash: i2y4+MSKBcNxu87+qDE+/nX7xefI7C4Gq8swc9+9PNU=) 12: bsu95ghiIBpd9cfADiMIa9Yxj6Q.roa (hash: 16b5K9754SCIP/D165OSsKJafJ6ZtxK/WBHz3KMDFr0=) 13: eUlwfQNbP2vIOtwAcyEsR7HEJss.roa (hash: P1z0FJdjv4KMmXfM20mE40d3OdggWf6hJHcQuPfAi3M=) 14: i7lgm15yljxNJJIdxV0PN0NruUk.roa (hash: 2LRwTaHFptBADB4hm7Yrbr+djCqVu9Gi1I6wte0t5nk=) 15: pADycQ-9xhjD7DWrrFk7pCQ_Ijo.roa (hash: K1+0R7I0/kdM14j+kEitEaAtqppeRpYjvV274U8LEQY=) 16: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: 20fUlvhX7oOqL0K/GGx+Us7D0vFpPJjRWMQNh74xDvA=) 17: trir8qL64aNBmuq7kCE6q-vw1qE.roa (hash: e1sr1CETTzxHpRTFfDyLkJVAK4EzBhmgBByIF0XK3ZI=) 18: wHn4Idt9pbw0xNqo1xXnrZAME_c.roa (hash: 1V81c+Xq4YaFlhjRvvqZvgJ/aOSF31vxmGkYy8VJT/Q=) 19: xjh8d3YdZh4vpQueR9SItUPZD4Y.roa (hash: MrzcYUv0dMN5mv5Khff5m7xjUUe7vIM3FRg1rUhiWT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:8f:e6:13:f1:cb:d2:e0:3d:6b:86:be:45:cc:4e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Mar 1 18:01:23 2026 GMT Not After : Mar 2 18:01:23 2026 GMT Subject: CN=12446e85af3b08d8fb928997fd0c676766e402a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7f:6c:b9:12:da:67:16:71:ee:0f:c6:51:96: 6f:2d:76:f5:ae:95:7c:19:75:94:1d:a3:44:f4:0d: 29:db:a4:a4:f1:fe:d6:a6:41:8b:d4:b6:f4:aa:44: e7:8a:37:27:84:94:36:41:eb:a4:5e:15:4e:98:58: d0:e1:b1:c3:f5:87:6d:72:ba:e5:84:93:1c:b1:5f: 10:29:ba:a9:22:21:b8:19:19:4f:f7:1a:94:ff:56: 19:00:e9:9a:96:23:f1:0a:50:be:25:85:96:41:16: 1c:7f:3f:e1:fc:f7:d7:85:94:1c:4c:5b:83:fa:d0: 58:7e:9f:bb:ea:ec:b2:b0:68:28:ea:55:f3:25:ad: a8:95:2f:f1:92:08:ff:c1:ac:86:c5:f2:d0:71:50: a2:5b:d6:91:5b:bc:1e:2e:b9:30:91:81:e0:ed:78: 2b:33:16:cb:3d:2d:e4:e7:95:f0:45:98:18:b1:b1: 2d:16:76:df:b8:74:7a:d8:35:50:e6:aa:8b:3c:ce: 71:40:2b:8d:48:5d:f2:b2:2c:a3:a5:89:7f:dc:6e: 1d:8d:f7:25:69:c3:2b:24:02:5a:fd:a8:90:02:53: 2a:4e:d3:2a:88:ea:e6:5c:64:29:71:a1:a2:09:ac: fb:29:fb:e9:66:4d:b5:79:b0:1a:f6:aa:da:aa:a9: 3c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:44:6E:85:AF:3B:08:D8:FB:92:89:97:FD:0C:67:67:66:E4:02:A1 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cb:72:46:4d:1d:67:3d:f9:75:32:27:bd:32:65:25:e2:f2: 33:f9:4a:b8:b7:40:9d:8a:cf:8e:fc:0f:f8:d8:2c:90:8d:65: 4d:2e:bd:75:69:06:11:df:f2:2e:08:bc:51:8c:2d:7b:67:e8: fc:21:a8:4e:f2:51:dc:61:e3:3f:98:4e:3f:68:f7:cb:da:87: 1e:1e:b5:66:40:d9:45:32:5c:c9:e9:ec:94:69:4b:43:fa:74: 10:ae:ee:64:6e:3b:db:5d:40:3e:53:57:cf:ed:a3:68:72:d2: 89:28:80:db:8a:5c:cb:a9:b1:f7:c1:68:86:f2:3f:38:4c:f1: 01:0b:73:65:e5:d6:3f:07:b1:f3:1d:17:85:ff:fa:74:89:a9: 9e:17:72:fc:50:c0:a2:01:bf:1b:43:cd:f2:e5:8c:eb:fc:0d: 27:d7:3d:dc:0b:16:7d:5a:c0:0d:ba:38:57:19:45:a4:59:cc: fc:4c:8f:60:52:9a:3a:56:19:51:ee:0c:9c:b5:1f:7f:86:01: af:4c:ec:ac:35:46:89:9b:3d:59:8a:f2:e2:b9:f7:65:e9:2c: bd:65:b1:be:85:a4:c2:88:09:4a:3e:8b:9a:2c:87:2e:df:bd: d9:1d:e3:8f:86:a1:cc:57:11:d4:2c:8a:c4:58:6d:3d:3a:2f: 24:5f:e1:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqj+YT8cvS4D1rhr5FzE4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMzAxMTgwMTIzWhcNMjYwMzAyMTgwMTIzWjAzMTEwLwYDVQQD EygxMjQ0NmU4NWFmM2IwOGQ4ZmI5Mjg5OTdmZDBjNjc2NzY2ZTQwMmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH9suRLaZxZx7g/GUZZvLXb1rpV8 GXWUHaNE9A0p26Sk8f7WpkGL1Lb0qkTnijcnhJQ2QeukXhVOmFjQ4bHD9Ydtcrrl hJMcsV8QKbqpIiG4GRlP9xqU/1YZAOmaliPxClC+JYWWQRYcfz/h/PfXhZQcTFuD +tBYfp+76uyysGgo6lXzJa2olS/xkgj/wayGxfLQcVCiW9aRW7weLrkwkYHg7Xgr MxbLPS3k55XwRZgYsbEtFnbfuHR62DVQ5qqLPM5xQCuNSF3ysiyjpYl/3G4djfcl acMrJAJa/aiQAlMqTtMqiOrmXGQpcaGiCaz7KfvpZk21ebAa9qraqqk8RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJEboWvOwjY+5KJl/0MZ2dm5AKhMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbctyRk0d Zz35dTInvTJlJeLyM/lKuLdAnYrPjvwP+NgskI1lTS69dWkGEd/yLgi8UYwte2fo /CGoTvJR3GHjP5hOP2j3y9qHHh61ZkDZRTJcyenslGlLQ/p0EK7uZG47211APlNX z+2jaHLSiSiA24pcy6mx98FohvI/OEzxAQtzZeXWPwex8x0Xhf/6dImpnhdy/FDA ogG/G0PN8uWM6/wNJ9c93AsWfVrADbo4VxlFpFnM/EyPYFKaOlYZUe4MnLUff4YB r0zsrDVGiZs9WYry4rn3ZeksvWWxvoWkwogJSj6LmiyHLt+92R3jj4ahzFcR1CyK xFhtPTovJF/h/w== -----END CERTIFICATE-----Generated at Mon Mar 2 00:42:52 2026 by rpki-client