$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: L5X/dY6A1ffL/OTNVbGTtbGbdHjLkSaSRz8oWlzAdHo= Subject key identifier: 67:04:40:D0:F4:2A:F0:0F:AA:BD:F7:4F:61:91:D2:5E:F9:2F:FF:07 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019CADC7F5B12A4B8284439F9C86A9B03B78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 1856 Signing time: Mon 02 Mar 2026 09:01:28 +0000 Manifest this update: Mon 02 Mar 2026 09:01:28 +0000 Manifest next update: Tue 03 Mar 2026 09:01:28 +0000 Files and hashes: 1: As_pVbbnYy_pmBMm0RcX49iX6nY.roa (hash: qzus9UnBcueHhtxBHMySF8j/gf9sbzuNZT387lhMVtE=) 2: Q7kjVEhiYHEz_AIBuFCX2o6kXpQ.roa (hash: MuV9xof7zxa6mZSUu9k4zgmUqNgq/+xzFvRw2ejciSU=) 3: UhbmNbA2hwd3CclD7uA5e7VB30s.roa (hash: juSkCYLLU3kVaC1Dq0hdQw2DrlMO0olfzSo1w3Y2IAk=) 4: Z2JoyRveJcrOS84W6TpEPChd0u8.roa (hash: aEKu2ZE0v6kUC0OnwN6L0HbgZBJi/Gu9YSjx1j8FGfg=) 5: aC9Q_3qjddY1l6-wNmHh31rhiv4.roa (hash: uKO8uok9xpbvJA3MGYKk7ndaYzKJUW2pxyQNGvBjSDU=) 6: aVkTnnbGIe4fDpGVb6wjTSR-yLQ.roa (hash: mPn9lf0kaEtQghK8NnucRSJ4lyasaPeghHp1g2R6ywY=) 7: cZkC82-vLrRXW7ttrbp1YPZPpe0.roa (hash: X7Xi6DZVONjtuDM1mnYOVnatQGs+c73Ycapzeqr5W+A=) 8: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: PELt7pPN+84SzSna+hhhQOrRCcjGIr+naDFpzH4FGQY=) 9: ozLeruCkBhC4yZCUw5lMFfl-TtM.roa (hash: ygWG9N1PXEIgHYpH9dLMI7Qu5ggvIeMB+/+Dm4Mbbz4=) 10: q47qpt1p1Wj02CxPXYgOsikq_GY.roa (hash: RR0Z4b1X2W/yjPPcvR1hUKYG5qy0mYBUJ7YN4lZTqrk=) 11: s0Slj9yVMX7lCq79bqSGCqW6KPg.roa (hash: RaEewhp7TYWAZZHFh2A3/CMtjGLdyIT76c5b57zkYYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:c7:f5:b1:2a:4b:82:84:43:9f:9c:86:a9:b0:3b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Mar 2 09:01:28 2026 GMT Not After : Mar 3 09:01:28 2026 GMT Subject: CN=670440d0f42af00faabdf74f6191d25ef92fff07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:a6:22:9d:48:e8:d3:ce:9a:f3:46:7b:46: f1:8c:e2:18:20:1e:ee:9a:99:a8:d3:a7:df:b8:14: 71:a6:b7:70:c5:53:49:0a:8b:d4:c6:c7:f2:38:c8: 6e:28:47:69:a0:f1:c0:3d:56:f1:88:4e:ed:df:eb: c8:e8:c9:06:9e:de:34:91:ad:1f:a9:49:39:f8:48: 2a:8b:0c:81:e2:6d:3e:22:8a:3c:7b:40:d4:9d:1e: 86:27:c7:11:e4:83:f3:c8:65:4f:a6:7b:cd:30:08: fc:16:ea:b5:d3:58:5e:ba:8e:50:34:37:47:c2:cc: 3d:7b:5b:2b:ec:51:80:5f:61:ae:c9:ce:ab:0b:a0: 4c:87:24:55:18:d0:2a:83:19:dd:8a:33:bc:73:fa: d9:9a:7a:2c:38:6f:34:03:c1:53:7b:20:93:b3:7d: 6e:c5:82:2a:44:a9:58:97:46:fe:f5:c5:cf:3f:16: f6:72:2c:36:75:e0:e0:59:25:63:20:94:6a:d5:74: 17:c3:1c:86:4f:98:95:fb:6e:2a:1c:2d:19:80:a8: 6a:70:75:34:19:c6:33:f3:f4:39:f5:e1:bb:0b:b6: 82:f7:bb:52:3a:0c:da:f6:aa:70:1f:e0:56:da:2e: fd:6f:c2:81:4b:a2:17:28:41:9b:4a:1c:97:ca:03: a5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:04:40:D0:F4:2A:F0:0F:AA:BD:F7:4F:61:91:D2:5E:F9:2F:FF:07 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9c:c2:28:ff:61:ae:e5:ab:3f:d9:fb:40:7a:f1:e2:fd:97: f7:5e:e5:68:d6:cd:4d:cf:fe:cf:1d:3c:4a:ad:29:26:c1:70: 1f:76:6d:3b:0f:65:ee:4c:ca:c0:d2:ee:d4:bf:d0:4a:8a:8f: 5c:32:86:5c:d4:85:f0:3c:b2:7b:7b:84:26:e3:31:d4:11:e6: e1:e2:f6:be:df:c6:51:0d:0b:06:3c:1e:c6:ec:b8:50:77:78: b6:7e:03:17:b4:1e:cc:45:57:13:c0:a0:41:32:b5:66:2c:d3: c5:1a:ab:c1:35:dc:cc:0c:1f:dc:16:89:25:4d:db:83:62:c2: 54:2e:d4:49:26:7d:84:a1:0a:94:39:1c:a6:7d:3d:70:45:fa: 85:20:87:37:1f:b2:c0:e4:c3:c0:e1:ad:de:a9:95:72:c1:9c: 21:e2:10:1b:bd:c3:d1:d4:53:67:10:da:05:51:e0:f5:42:db: 2d:2e:22:02:ed:1a:46:de:67:4c:1b:1f:fe:41:24:f0:fc:92: a8:68:32:0c:51:9a:24:0d:0f:ca:c6:9c:73:39:17:cd:8f:da: 5c:82:e5:d3:6c:43:33:68:5f:f8:68:90:27:48:1c:90:f0:9b: 89:e4:1c:06:af:43:56:b0:4c:d7:12:b3:82:8e:ce:e7:67:33: 80:11:b4:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytx/WxKkuChEOfnIapsDt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwMzAyMDkwMTI4WhcNMjYwMzAzMDkwMTI4WjAzMTEwLwYDVQQD Eyg2NzA0NDBkMGY0MmFmMDBmYWFiZGY3NGY2MTkxZDI1ZWY5MmZmZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql6mIp1I6NPOmvNGe0bxjOIYIB7u mpmo06ffuBRxprdwxVNJCovUxsfyOMhuKEdpoPHAPVbxiE7t3+vI6MkGnt40ka0f qUk5+EgqiwyB4m0+Ioo8e0DUnR6GJ8cR5IPzyGVPpnvNMAj8Fuq101heuo5QNDdH wsw9e1sr7FGAX2Guyc6rC6BMhyRVGNAqgxndijO8c/rZmnosOG80A8FTeyCTs31u xYIqRKlYl0b+9cXPPxb2ciw2deDgWSVjIJRq1XQXwxyGT5iV+24qHC0ZgKhqcHU0 GcYz8/Q59eG7C7aC97tSOgza9qpwH+BW2i79b8KBS6IXKEGbShyXygOlYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcEQND0KvAPqr33T2GR0l75L/8HMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJzCKP9h ruWrP9n7QHrx4v2X917laNbNTc/+zx08Sq0pJsFwH3ZtOw9l7kzKwNLu1L/QSoqP XDKGXNSF8Dyye3uEJuMx1BHm4eL2vt/GUQ0LBjwexuy4UHd4tn4DF7QezEVXE8Cg QTK1ZizTxRqrwTXczAwf3BaJJU3bg2LCVC7USSZ9hKEKlDkcpn09cEX6hSCHNx+y wOTDwOGt3qmVcsGcIeIQG73D0dRTZxDaBVHg9ULbLS4iAu0aRt5nTBsf/kEk8PyS qGgyDFGaJA0PysacczkXzY/aXILl02xDM2hf+GiQJ0gckPCbieQcBq9DVrBM1xKz go7O52czgBG0OQ== -----END CERTIFICATE-----Generated at Mon Mar 2 19:08:25 2026 by rpki-client