$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: hz9xYBoRbnQN7+hd55uaUynvvh+ykKL/J3iB4Hs7y3A= Subject key identifier: 42:92:4C:45:77:8F:AD:14:FE:1E:78:6B:EB:DE:B6:71:F1:FF:C0:0C Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019CA90ECB973616CFD3A5C7FD96955881EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 184C Signing time: Sun 01 Mar 2026 11:00:45 +0000 Manifest this update: Sun 01 Mar 2026 11:00:45 +0000 Manifest next update: Mon 02 Mar 2026 11:00:45 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: 20e/v9VoKkiK8LQD+RiFAn+qmVCyRVvEqGHFo3bxiNg=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:0e:cb:97:36:16:cf:d3:a5:c7:fd:96:95:58:81:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Mar 1 11:00:45 2026 GMT Not After : Mar 2 11:00:45 2026 GMT Subject: CN=42924c45778fad14fe1e786bebdeb671f1ffc00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:c4:28:16:99:90:8d:21:2a:17:fe:11:d8: 55:37:30:14:c1:d4:77:0d:a5:e6:5b:04:83:0f:d0: 29:2f:ef:98:8c:fe:ee:7d:7b:56:23:3b:eb:28:c5: 34:53:0d:04:5f:1c:3c:9a:a2:a6:a4:3e:41:28:eb: 06:5e:3b:6b:fa:2d:87:be:39:5d:a7:64:f7:83:32: 8d:06:e1:b7:f4:13:04:e4:14:51:6f:00:aa:0d:76: 0a:fd:62:85:7e:24:25:96:d7:1a:e2:49:63:c3:cb: d7:79:a5:c9:bc:18:d0:87:a4:e7:d5:fc:d7:39:1e: d0:9b:f2:0d:7a:ca:86:67:03:1f:78:0c:f8:d7:70: 35:f0:c2:3d:ea:67:84:10:2f:72:7c:cf:82:78:1f: 11:af:e5:e5:a7:eb:6c:74:9e:8e:4d:2b:cd:e6:42: c1:48:64:6a:32:f9:b5:6e:b2:20:d8:82:8e:c3:21: b3:0b:7d:06:d3:76:ec:e5:49:31:84:51:21:a0:29: 0d:4c:15:08:33:d4:da:1d:f1:37:4b:59:df:47:2d: 46:41:73:a3:1d:12:3c:18:10:63:e2:7c:06:b8:eb: 9a:7a:9e:c7:09:85:ea:44:57:c2:84:b1:4f:41:9a: 7b:e7:47:2e:d4:fd:a3:71:50:aa:98:84:ed:7c:b3: 38:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:4C:45:77:8F:AD:14:FE:1E:78:6B:EB:DE:B6:71:F1:FF:C0:0C X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f3:ca:e2:9c:ea:28:7f:32:4f:de:62:b1:d0:2c:46:9f:f5: 61:ef:6d:5f:7f:ff:3c:0a:0d:2a:27:71:9d:0b:18:44:bb:0d: ce:7d:23:2e:52:98:5a:17:fa:f6:75:32:e0:06:a9:e0:65:c9: d0:5f:54:91:21:c0:54:77:fc:2f:de:6b:de:a1:82:80:b5:b6: 5b:8a:72:71:94:26:89:b3:6b:ea:10:11:d7:23:fc:8e:8b:94: 5c:4d:cd:cd:3c:f8:d1:e4:2a:36:f7:ec:c2:45:60:5f:9d:4e: b7:8f:50:8a:ef:d2:f7:fa:a3:9f:18:21:3f:46:a1:25:31:87: 29:b8:f1:7d:26:f8:85:65:1a:a8:70:c7:32:a2:c5:fb:eb:23: 07:4f:53:21:05:06:81:f9:e7:27:38:ae:93:77:10:e7:76:8e: 9a:aa:82:56:17:bb:b3:92:ff:1e:86:1b:68:d0:85:99:3f:26: e0:c9:f4:44:7a:c7:9a:18:a7:60:14:5c:91:d9:26:02:5e:c1: 7c:ef:3c:de:19:d2:2c:4a:3a:30:02:62:08:66:c3:88:45:a4: fb:a5:cc:7d:5b:6c:25:5e:5d:51:33:5b:e2:bb:50:c2:ff:62: 21:f4:0d:18:0b:53:02:4a:77:46:b6:60:86:c7:39:ba:f5:49: b2:d9:13:93 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZypDsuXNhbP06XH/ZaVWIHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwMzAxMTEwMDQ1WhcNMjYwMzAyMTEwMDQ1WjAzMTEwLwYDVQQD Eyg0MjkyNGM0NTc3OGZhZDE0ZmUxZTc4NmJlYmRlYjY3MWYxZmZjMDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOjEKBaZkI0hKhf+EdhVNzAUwdR3 DaXmWwSDD9ApL++YjP7ufXtWIzvrKMU0Uw0EXxw8mqKmpD5BKOsGXjtr+i2Hvjld p2T3gzKNBuG39BME5BRRbwCqDXYK/WKFfiQlltca4kljw8vXeaXJvBjQh6Tn1fzX OR7Qm/INesqGZwMfeAz413A18MI96meEEC9yfM+CeB8Rr+Xlp+tsdJ6OTSvN5kLB SGRqMvm1brIg2IKOwyGzC30G03bs5UkxhFEhoCkNTBUIM9TaHfE3S1nfRy1GQXOj HRI8GBBj4nwGuOuaep7HCYXqRFfChLFPQZp750cu1P2jcVCqmITtfLM44QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEKSTEV3j60U/h54a+vetnHx/8AMMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPPK 4pzqKH8yT95isdAsRp/1Ye9tX3//PAoNKidxnQsYRLsNzn0jLlKYWhf69nUy4Aap 4GXJ0F9UkSHAVHf8L95r3qGCgLW2W4pycZQmibNr6hAR1yP8jouUXE3NzTz40eQq NvfswkVgX51Ot49Qiu/S9/qjnxghP0ahJTGHKbjxfSb4hWUaqHDHMqLF++sjB09T IQUGgfnnJziuk3cQ53aOmqqCVhe7s5L/HoYbaNCFmT8m4Mn0RHrHmhinYBRckdkm Al7BfO883hnSLEo6MAJiCGbDiEWk+6XMfVtsJV5dUTNb4rtQwv9iIfQNGAtTAkp3 RrZghsc5uvVJstkTkw== -----END CERTIFICATE-----Generated at Sun Mar 1 16:29:46 2026 by rpki-client