$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: 11F1GpETVjndHPBdY0AzJj0ZTXGoP0eqEzbItcYdJYE= Subject key identifier: 47:3A:00:E5:FE:E9:E1:7F:06:51:75:35:63:47:20:72:EE:7F:E5:B9 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019CA97D804A72697A27CF9A337446AE0AA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 06EB Signing time: Sun 01 Mar 2026 13:01:40 +0000 Manifest this update: Sun 01 Mar 2026 13:01:40 +0000 Manifest next update: Mon 02 Mar 2026 13:01:40 +0000 Files and hashes: 1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=) 2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=) 3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=) 4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=) 5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=) 6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=) 7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: Hjzh7fDnsSK+PYEkpK/6VA5BJAltMqgAx+2CVTk3IVI=) 8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=) 9: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=) 10: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=) 11: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=) 12: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=) 13: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 13:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:7d:80:4a:72:69:7a:27:cf:9a:33:74:46:ae:0a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Mar 1 13:01:40 2026 GMT Not After : Mar 2 13:01:40 2026 GMT Subject: CN=473a00e5fee9e17f0651753563472072ee7fe5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:6b:68:12:32:f3:d7:95:dc:02:43:c1:b5: e0:f1:5d:d7:6e:cf:bd:c5:3b:d0:fe:0d:36:fe:f1: 9a:f5:4b:6a:11:24:c6:91:fd:91:bb:b6:46:a5:8d: 45:a4:f7:d7:18:ed:ea:ea:c3:7b:80:b3:96:55:cd: 93:4c:b7:00:5e:e4:7b:b3:0b:8a:d8:12:eb:e9:91: 21:7f:c8:13:e7:82:c9:cb:94:6f:8a:d1:84:35:e7: fe:00:9b:79:79:6c:2a:9b:22:44:87:ab:5b:c8:45: 61:27:a9:af:58:c1:d7:bb:97:a6:6b:9e:ff:5f:40: 6c:68:f8:44:4d:72:aa:b6:fe:d0:29:01:d1:96:6a: 77:04:86:82:9e:af:18:76:b8:4c:0f:bc:ac:d0:cd: ed:06:e8:c0:04:80:ca:e0:48:0b:c7:48:9e:11:e7: a0:1c:f1:58:5e:68:51:97:57:56:85:0d:02:f9:ab: 13:59:9e:37:9b:85:14:61:59:85:84:5e:71:cb:cf: 1c:e4:8e:39:76:1d:a5:55:3e:1b:4a:cf:3c:70:3c: 0f:d1:a9:e7:2b:a6:89:f7:be:27:58:7d:3d:fc:ca: 38:d8:58:d0:03:24:3f:88:f0:f1:db:0b:38:6d:7a: df:c4:56:66:90:45:ad:8c:03:8a:fc:ad:2e:39:f4: f3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3A:00:E5:FE:E9:E1:7F:06:51:75:35:63:47:20:72:EE:7F:E5:B9 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0e:c2:2f:0f:cf:d8:12:e7:bf:62:9c:32:13:2f:43:21:fb: 0f:38:bf:e7:cc:f3:6a:bd:60:54:3e:d9:5d:c8:9b:75:8b:76: fe:f4:7d:76:f4:f5:d9:65:bb:80:23:f4:9a:16:c4:89:a1:37: 7b:c7:e9:36:3a:b5:8a:ac:85:17:40:e8:7f:0a:13:a1:29:61: 18:24:61:a7:52:bc:91:21:5e:6c:64:8e:d1:79:cd:32:f9:ce: d5:b2:cc:34:3e:84:e2:21:af:f4:26:be:84:8f:05:b8:a8:8a: 47:6b:ce:7b:45:09:1b:54:e4:65:54:af:c3:a7:9d:8c:23:0d: f9:c7:30:3a:a1:6b:d6:a3:c4:2c:78:bf:05:8c:14:35:03:d8: 58:5a:87:1c:8c:c8:37:4d:a7:87:68:66:51:88:ac:e5:e4:f8: 05:11:3c:8e:ab:fc:89:9e:5c:ca:03:55:2c:50:09:e1:1e:c4: 3c:05:b0:75:55:bf:9c:c9:72:ce:66:e6:e3:8b:0c:8d:6e:78: cb:58:76:e8:20:81:9b:47:4e:2f:18:25:cf:45:86:1e:2f:06: 6c:c0:78:08:84:ef:62:e0:99:6c:ee:3e:ad:73:24:5e:48:69: f2:da:d6:a6:5d:b7:a3:2c:b3:d3:5e:20:d2:c4:66:10:60:a4: 66:c3:72:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypfYBKcml6J8+aM3RGrgqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwMzAxMTMwMTQwWhcNMjYwMzAyMTMwMTQwWjAzMTEwLwYDVQQD Eyg0NzNhMDBlNWZlZTllMTdmMDY1MTc1MzU2MzQ3MjA3MmVlN2ZlNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv9raBIy89eV3AJDwbXg8V3Xbs+9 xTvQ/g02/vGa9UtqESTGkf2Ru7ZGpY1FpPfXGO3q6sN7gLOWVc2TTLcAXuR7swuK 2BLr6ZEhf8gT54LJy5RvitGENef+AJt5eWwqmyJEh6tbyEVhJ6mvWMHXu5ema57/ X0BsaPhETXKqtv7QKQHRlmp3BIaCnq8YdrhMD7ys0M3tBujABIDK4EgLx0ieEeeg HPFYXmhRl1dWhQ0C+asTWZ43m4UUYVmFhF5xy88c5I45dh2lVT4bSs88cDwP0ann K6aJ974nWH09/Mo42FjQAyQ/iPDx2ws4bXrfxFZmkEWtjAOK/K0uOfTzKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc6AOX+6eF/BlF1NWNHIHLuf+W5MB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQ7CLw/P 2BLnv2KcMhMvQyH7Dzi/58zzar1gVD7ZXcibdYt2/vR9dvT12WW7gCP0mhbEiaE3 e8fpNjq1iqyFF0DofwoToSlhGCRhp1K8kSFebGSO0XnNMvnO1bLMND6E4iGv9Ca+ hI8FuKiKR2vOe0UJG1TkZVSvw6edjCMN+ccwOqFr1qPELHi/BYwUNQPYWFqHHIzI N02nh2hmUYis5eT4BRE8jqv8iZ5cygNVLFAJ4R7EPAWwdVW/nMlyzmbm44sMjW54 y1h26CCBm0dOLxglz0WGHi8GbMB4CITvYuCZbO4+rXMkXkhp8trWpl23oyyz014g 0sRmEGCkZsNyRw== -----END CERTIFICATE-----Generated at Sun Mar 1 23:57:40 2026 by rpki-client