$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: ZPXRjxsPVVgNhaIoalnPr7J1VXYxgpGpdUmQytowhIs= Subject key identifier: A3:B8:03:1A:14:2E:80:81:31:E3:A3:1C:D2:8A:B4:E6:78:7D:58:0B Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019CAB6BE6CC1CFF913249DA17C7AEA38F17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 06EC Signing time: Sun 01 Mar 2026 22:01:41 +0000 Manifest this update: Sun 01 Mar 2026 22:01:41 +0000 Manifest next update: Mon 02 Mar 2026 22:01:41 +0000 Files and hashes: 1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=) 2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=) 3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=) 4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=) 5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=) 6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=) 7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: zNjcvUXhx8ebku72MwWRoGRlywJ1l2guHFOvSECy2Yg=) 8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=) 9: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=) 10: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=) 11: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=) 12: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=) 13: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:6b:e6:cc:1c:ff:91:32:49:da:17:c7:ae:a3:8f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Mar 1 22:01:41 2026 GMT Not After : Mar 2 22:01:41 2026 GMT Subject: CN=a3b8031a142e808131e3a31cd28ab4e6787d580b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6f:3a:e7:d1:db:0a:54:b7:0d:9d:92:e8:23: cb:da:78:11:b7:7a:6e:82:83:49:64:56:5e:d6:97: 25:b3:92:ec:d7:3d:1c:a6:bd:2d:e7:50:99:2c:30: 01:ed:fa:12:57:ac:bb:42:e9:25:9f:12:2b:ab:c9: cb:c7:ee:48:3a:be:7f:8a:24:af:d9:f6:fd:40:a3: 86:d9:80:00:e7:a8:c7:69:6b:da:cf:1f:ec:13:e1: 7d:b9:4e:20:00:18:05:6f:16:08:c4:71:af:8d:6e: 9f:6d:18:13:bd:8c:0a:ab:05:6a:38:9e:eb:79:79: c7:4a:04:15:00:a2:35:dd:d8:82:21:26:9e:ca:af: 29:7d:43:b8:57:e4:b3:42:e8:90:e2:f9:12:aa:67: ab:29:e0:ac:3a:78:25:4f:c4:3a:a8:16:5f:f1:72: 15:8b:c3:ff:06:26:11:34:33:b8:6a:6c:a6:0f:74: 0f:dd:4d:ff:6a:2a:2e:71:eb:8b:ce:40:47:33:2c: 88:77:9a:0f:f8:c1:f8:23:d7:32:a7:05:97:49:66: a7:02:3b:58:87:63:9f:f6:54:5e:91:f2:0f:74:57: df:3a:9b:7f:cb:9f:02:d9:08:71:6f:9a:a9:b6:65: 47:3f:ff:4d:d4:6d:de:28:b3:e6:25:7d:32:21:2f: 1e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B8:03:1A:14:2E:80:81:31:E3:A3:1C:D2:8A:B4:E6:78:7D:58:0B X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b8:17:fe:e8:8c:02:bb:55:89:fa:da:40:c0:51:08:07:a2: 36:af:13:79:f8:0c:99:52:7c:43:05:53:77:d3:48:0b:fa:44: 2f:27:d3:e6:13:f1:3a:43:3b:68:12:bc:a5:22:d8:3c:39:83: 12:3a:34:17:e3:2d:8e:99:af:7a:c6:42:a7:cb:4e:6b:08:ef: ce:f3:b7:17:97:88:85:b3:1f:9c:43:83:14:59:ab:3d:47:9a: 30:f1:44:49:2f:de:3c:a8:33:76:e4:f0:72:8e:b7:39:01:ed: e0:d6:e2:73:ed:43:fa:e2:83:c1:05:2c:75:d1:7c:a3:79:27: 3c:f3:29:67:10:87:19:92:ff:18:af:4f:91:3e:73:39:bc:a6: f6:32:75:f2:31:6e:94:09:25:9a:c0:0e:56:4a:71:16:54:2c: 5f:1e:a6:09:5b:40:59:86:fc:6d:f3:14:08:b3:9a:2c:b1:7f: a4:ea:6d:73:64:e9:23:39:a4:75:1a:48:07:fc:d9:d0:d7:15: de:7e:8c:7a:36:69:6b:4d:4d:42:8a:09:d8:20:b4:8c:25:86: 07:fd:ed:a7:32:06:0c:e2:9a:45:2d:18:ae:99:76:04:d3:e5: 10:09:05:82:e4:db:2d:db:b6:80:55:f5:05:bd:ce:ef:2a:87: 7a:c6:02:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyra+bMHP+RMknaF8euo48XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwMzAxMjIwMTQxWhcNMjYwMzAyMjIwMTQxWjAzMTEwLwYDVQQD EyhhM2I4MDMxYTE0MmU4MDgxMzFlM2EzMWNkMjhhYjRlNjc4N2Q1ODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW8659HbClS3DZ2S6CPL2ngRt3pu goNJZFZe1pcls5Ls1z0cpr0t51CZLDAB7foSV6y7QuklnxIrq8nLx+5IOr5/iiSv 2fb9QKOG2YAA56jHaWvazx/sE+F9uU4gABgFbxYIxHGvjW6fbRgTvYwKqwVqOJ7r eXnHSgQVAKI13diCISaeyq8pfUO4V+SzQuiQ4vkSqmerKeCsOnglT8Q6qBZf8XIV i8P/BiYRNDO4amymD3QP3U3/aiouceuLzkBHMyyId5oP+MH4I9cypwWXSWanAjtY h2Of9lRekfIPdFffOpt/y58C2Qhxb5qptmVHP/9N1G3eKLPmJX0yIS8eBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKO4AxoULoCBMeOjHNKKtOZ4fVgLMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrgX/uiM ArtVifraQMBRCAeiNq8TefgMmVJ8QwVTd9NIC/pELyfT5hPxOkM7aBK8pSLYPDmD Ejo0F+MtjpmvesZCp8tOawjvzvO3F5eIhbMfnEODFFmrPUeaMPFESS/ePKgzduTw co63OQHt4Nbic+1D+uKDwQUsddF8o3knPPMpZxCHGZL/GK9PkT5zObym9jJ18jFu lAklmsAOVkpxFlQsXx6mCVtAWYb8bfMUCLOaLLF/pOptc2TpIzmkdRpIB/zZ0NcV 3n6MejZpa01NQooJ2CC0jCWGB/3tpzIGDOKaRS0Yrpl2BNPlEAkFguTbLdu2gFX1 Bb3O7yqHesYCWA== -----END CERTIFICATE-----Generated at Mon Mar 2 01:04:12 2026 by rpki-client