$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: YsrQmptRYV3uLHXHIJyucv8UiPo029F30M8yXEsGXH0= Subject key identifier: 3B:E1:DD:7F:28:CA:32:1A:A2:B5:F9:4E:A4:1B:FA:F5:8F:B2:AB:32 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019CAD596198546B2E5F875A1CCF6B9EF55F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 1861 Signing time: Mon 02 Mar 2026 07:00:41 +0000 Manifest this update: Mon 02 Mar 2026 07:00:41 +0000 Manifest next update: Tue 03 Mar 2026 07:00:41 +0000 Files and hashes: 1: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: DxoNxxijMn+BJQQoSy/X8HRhJCz6ccnQOD2bFYfOfeU=) 2: GiXGWF3XbNUka_6eZbMkF4lwUUU.roa (hash: Ghc0ZSrMNmrLcxpN1ogM8Bq5yh44DA/gg5TX6sTsGwk=) 3: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (hash: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E=) 4: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (hash: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g=) 5: Ow_kueRJVip82pUj00XLQYjimrs.roa (hash: 85eWZxYsHFwXWd/YsiQWTMazT60hSpQui9cmEWNnT5M=) 6: R3e8EP6U572NIEwLXcwI5IO-_Gc.roa (hash: IMUABkpJVknPlYeXsWWkw4ZBUgDiuzIM8ni8AxR0Udc=) 7: T9-vW3KXUqDV-hHkYIlU0h63B7k.roa (hash: GVI+BtriLywrqwYg8b8nOqyUDiKVbNRN2/cPik19wB8=) 8: ZrXDV17uXjinizgfrrPqhQ0dhJM.roa (hash: GN0pZ4GDE0j/JncpGXJQ21uu5AQ3wwUlO2eU3eTfsns=) 9: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (hash: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc=) 10: fT61awwkD08cT0v6ICZahtW3HFI.roa (hash: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE=) 11: gndzUxO1CNccN-YEVyYR7nMztTA.roa (hash: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc=) 12: quYwTy2Sx7ur2wpLvrH2k8ViBR0.roa (hash: CanNYtzvyyEfG5PGl0aRHd7fPV6d8E0XKcJaLB/U+p8=) 13: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (hash: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:59:61:98:54:6b:2e:5f:87:5a:1c:cf:6b:9e:f5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Mar 2 07:00:41 2026 GMT Not After : Mar 3 07:00:41 2026 GMT Subject: CN=3be1dd7f28ca321aa2b5f94ea41bfaf58fb2ab32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:f1:1d:a2:fe:5b:06:ab:99:24:fd:0c:e8: 35:19:67:c8:a0:3d:a6:bb:79:f2:0a:73:c1:1f:54: c8:7f:82:36:12:7a:62:1e:ef:66:79:0d:79:91:9f: cf:3e:3d:71:e5:4f:00:c7:38:1f:98:80:e8:62:fe: 1b:20:1f:ee:a3:35:e3:ad:bb:a1:44:c0:88:26:be: 8d:33:99:69:4a:d3:8c:69:3a:88:6b:52:5d:b2:0d: e0:f4:0c:5a:4d:35:df:6b:36:c5:c3:6b:9d:26:fa: 71:ec:a7:69:fe:06:2d:2c:76:62:8d:bd:f2:30:f1: 4e:a1:4f:31:fd:9a:16:c2:ef:bc:7e:4f:ff:1d:b5: 9c:c1:76:4a:4c:24:86:d5:e6:22:bf:3c:37:9f:8a: db:06:82:81:57:04:83:74:84:d4:42:56:17:d5:af: 37:7e:39:09:fb:06:47:60:7c:84:59:d3:61:6a:df: 91:41:a5:08:02:33:92:ac:3f:9a:c4:0d:38:f2:18: b5:ab:6a:ef:bc:8c:59:d7:30:42:26:8b:b0:b1:51: 04:f1:ea:12:8c:01:14:5b:dd:59:e0:d2:07:e2:5f: 53:ee:21:27:e8:6b:94:a0:d7:42:6e:b4:4a:59:29: e4:4b:d9:c8:a2:76:19:01:a5:78:be:53:f0:54:ae: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E1:DD:7F:28:CA:32:1A:A2:B5:F9:4E:A4:1B:FA:F5:8F:B2:AB:32 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:18:67:76:0f:60:a9:3f:32:e7:8b:a8:5a:b1:a6:df:b7:99: 0b:cf:f0:51:df:78:6e:32:72:f2:e8:45:7a:5d:dc:ab:08:31: ed:c7:10:4f:c1:8a:bd:c2:01:82:72:19:0c:dd:5e:eb:3b:8f: c6:8a:4d:82:92:75:57:74:74:bb:fd:ee:26:8c:62:a4:ed:76: 34:47:cd:80:e6:f5:25:55:52:7f:1c:e5:7a:4a:0b:54:7a:13: cc:86:b0:92:78:6c:ff:39:5a:a7:2f:f2:39:70:d4:f7:16:2e: 81:02:fd:6f:74:72:18:c5:26:9e:cb:34:b7:c8:3a:37:e0:cb: 58:70:76:a2:75:50:55:5d:55:1b:21:c5:07:46:7e:cc:a0:4d: 9d:d1:1f:d5:2c:3f:1b:83:8e:59:a5:39:b8:1b:cd:0b:03:a7: 67:ba:0f:b0:f8:b9:25:8f:6b:68:06:85:88:6c:39:62:ec:44: 0d:03:01:5b:8a:7b:05:61:3b:5c:0a:c6:f7:63:50:76:83:fa: e3:6c:4d:4d:1a:2f:59:ee:70:d1:e8:ee:df:35:3d:6f:80:36: a9:7f:e7:ac:ac:fe:f7:89:7f:09:58:cf:4c:b9:23:f3:bc:c0: 0d:6c:6a:78:62:16:63:6f:54:a2:aa:b6:12:0f:ef:d9:4d:a8: 3f:28:e6:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytWWGYVGsuX4daHM9rnvVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwMzAyMDcwMDQxWhcNMjYwMzAzMDcwMDQxWjAzMTEwLwYDVQQD EygzYmUxZGQ3ZjI4Y2EzMjFhYTJiNWY5NGVhNDFiZmFmNThmYjJhYjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV7xHaL+WwarmST9DOg1GWfIoD2m u3nyCnPBH1TIf4I2EnpiHu9meQ15kZ/PPj1x5U8AxzgfmIDoYv4bIB/uozXjrbuh RMCIJr6NM5lpStOMaTqIa1Jdsg3g9AxaTTXfazbFw2udJvpx7Kdp/gYtLHZijb3y MPFOoU8x/ZoWwu+8fk//HbWcwXZKTCSG1eYivzw3n4rbBoKBVwSDdITUQlYX1a83 fjkJ+wZHYHyEWdNhat+RQaUIAjOSrD+axA048hi1q2rvvIxZ1zBCJouwsVEE8eoS jAEUW91Z4NIH4l9T7iEn6GuUoNdCbrRKWSnkS9nIonYZAaV4vlPwVK5/lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvh3X8oyjIaorX5TqQb+vWPsqsyMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBhndg9g qT8y54uoWrGm37eZC8/wUd94bjJy8uhFel3cqwgx7ccQT8GKvcIBgnIZDN1e6zuP xopNgpJ1V3R0u/3uJoxipO12NEfNgOb1JVVSfxzlekoLVHoTzIawknhs/zlapy/y OXDU9xYugQL9b3RyGMUmnss0t8g6N+DLWHB2onVQVV1VGyHFB0Z+zKBNndEf1Sw/ G4OOWaU5uBvNCwOnZ7oPsPi5JY9raAaFiGw5YuxEDQMBW4p7BWE7XArG92NQdoP6 42xNTRovWe5w0eju3zU9b4A2qX/nrKz+94l/CVjPTLkj87zADWxqeGIWY29Uoqq2 Eg/v2U2oPyjmmQ== -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:10 2026 by rpki-client