$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: iycCeFoStwpLdYbb/R4wSehtsCvsP9ibYv6/iOzkoBM= Subject key identifier: 7C:B2:1D:2D:09:7E:D1:E3:BA:4F:8B:9A:A2:E3:A2:66:7D:D5:56:F4 Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019CAC7DC1AB78C367D93AD083218351DF28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 1638 Signing time: Mon 02 Mar 2026 03:00:48 +0000 Manifest this update: Mon 02 Mar 2026 03:00:48 +0000 Manifest next update: Tue 03 Mar 2026 03:00:48 +0000 Files and hashes: 1: 1-W964s-KtZyiNamSbJ6IP1jbFT4.roa (hash: tyUpzznYouv+Rmk3/StqHsUEFXC/JRLOGyGTS4NNP4Y=) 2: GStnKDxU2VExQ_xcPN4egFEKjLo.roa (hash: siSBOiPXXJh3GCU5grMPMkb/iUn8KcQ7coKcPhWce6E=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: hTVgXCUOGIiefcAYKx9N6ZebeMOBrU0oIU4gnz7SVCE=) 4: KzDc8QsMTzvMJxQ96GJ3yCoLi_U.roa (hash: Xkhd86uGm3VF/evalHU0tYC3SzwGKBs1H4sASP/73Pg=) 5: RKeJP9iEvuDf3LggtuJwNO7uQEk.roa (hash: +VIR5z/XQ5Qx7TTNzGJldp0pk9LFlEUwye6JlD69ltQ=) 6: RMWLa9nYNadgqj8fRvJ7gt0vmRY.roa (hash: YPSVWQ4p2Yzt69XO4XRgEZdOa23MUm2U51FrUJbQeG0=) 7: VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa (hash: zTpZ/xLPhwOsaGOqgGhoR4AJouaTmVoH7QdVIfFBLJc=) 8: WkDZDOXBWr9x5TExAfjLxWKxbkU.roa (hash: YkRBfAeJDTqNqtEqsLxdtIzJ8woFGgTRSv1hmR+uNQ4=) 9: mju1GTQPLsJiestxJWXcq-E1Bo0.roa (hash: 95gpW7g+cVKJk4QbRN0p3aXkVNHoQsAxKOBXvYSCcxk=) 10: qJD08TGqbLXdbWVjPMA7B5pGkPI.roa (hash: Kx7++AsdN5bNJwCWFiOZcN26zdxHM+ZF2tTRAsBHsXQ=) 11: rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa (hash: vhHXEQRDhmmcuNgaQBq7IXJimIzM9H1G1xvHCsunoqk=) 12: xewkVdgaX0V36_1yEpoUi8m7v6c.roa (hash: kF/BrgELi4+Am7OL4A+u/VI4R7I6POdHlx4gpQyUi6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:7d:c1:ab:78:c3:67:d9:3a:d0:83:21:83:51:df:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Mar 2 03:00:48 2026 GMT Not After : Mar 3 03:00:48 2026 GMT Subject: CN=7cb21d2d097ed1e3ba4f8b9aa2e3a2667dd556f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:a7:4a:e6:da:72:49:4c:05:85:d4:73:69: 76:d2:d2:c3:77:08:c1:d8:18:98:c2:37:39:ec:03: da:29:d9:5d:6f:83:e5:fd:01:36:17:b4:0c:de:5d: e4:55:53:c9:eb:49:b5:cc:92:0e:57:f4:83:4d:9a: 87:6d:5b:e3:31:cd:90:e1:04:43:2c:90:f3:4a:2b: 84:23:9c:7a:39:f2:f5:0e:7c:8a:33:3e:fc:b8:57: 18:00:e8:ae:0b:8c:b4:96:8b:b4:0b:76:52:07:35: ac:67:76:f6:7f:6f:24:52:5b:70:b7:f4:30:7d:8b: 95:5f:ac:16:02:3e:d4:f5:55:33:82:9e:f8:d8:c7: 2a:87:96:b0:ec:42:1c:68:6d:49:e8:67:65:52:b7: 8b:49:5c:61:8e:1b:82:2b:c9:42:43:b8:48:61:88: 2b:b8:a2:88:ea:b9:03:71:3f:13:1b:50:9f:45:42: 71:5d:c4:51:bb:48:f7:ff:1e:c8:72:09:32:2c:97: 40:6f:81:23:78:90:87:e4:67:ee:ce:9f:b0:da:6e: fb:98:65:79:50:97:7e:b8:80:c5:39:b1:cb:8b:2a: bb:b1:f5:65:90:98:0d:89:fe:0c:f3:fe:c4:ef:2d: ef:f1:4d:f8:f6:4c:99:d9:d1:9d:0d:22:ed:26:c0: f7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B2:1D:2D:09:7E:D1:E3:BA:4F:8B:9A:A2:E3:A2:66:7D:D5:56:F4 X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b3:ab:24:f8:8e:9a:ba:78:4c:9d:9a:28:0e:46:1c:14:21: 6c:a1:14:79:3e:77:01:8a:47:3e:f9:05:c2:24:db:59:f5:e7: f4:c3:1d:47:7f:8a:42:34:76:0c:97:86:44:c9:ba:ef:23:46: 98:bd:cb:fb:71:e9:ac:62:c5:16:19:1c:83:ba:21:75:5e:ad: 36:9b:09:76:44:61:d1:2c:f7:f1:8e:de:ce:13:79:23:2a:63: 4e:61:d4:bf:e3:8f:4a:57:85:19:b5:82:04:9b:a9:2a:39:e9: 00:47:4e:df:c9:21:58:03:09:9a:0d:0d:f4:86:9f:6a:ab:c8: db:23:0c:4f:11:dc:69:7c:84:6a:e9:4b:83:d8:eb:1a:fb:3f: f2:9a:30:06:95:c8:4e:3b:7e:e5:47:d7:7f:4f:6d:66:a2:7a: 50:70:9d:d8:60:1e:fe:08:10:8e:47:44:af:ec:35:bb:89:eb: e5:38:e0:84:da:e2:77:f1:8d:08:5f:5c:55:03:a2:e7:b0:70: cf:48:7f:e4:03:43:45:0d:95:7c:b7:d3:0e:fa:20:66:7f:2f: 67:46:41:0c:30:7a:ef:da:ba:37:6b:15:e6:90:9e:10:5f:19: c2:8b:b1:df:e2:5e:69:1b:83:03:27:11:cc:44:71:4b:8f:4b: 6a:7e:d3:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysfcGreMNn2TrQgyGDUd8oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYwMzAyMDMwMDQ4WhcNMjYwMzAzMDMwMDQ4WjAzMTEwLwYDVQQD Eyg3Y2IyMWQyZDA5N2VkMWUzYmE0ZjhiOWFhMmUzYTI2NjdkZDU1NmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshKnSubacklMBYXUc2l20tLDdwjB 2BiYwjc57APaKdldb4Pl/QE2F7QM3l3kVVPJ60m1zJIOV/SDTZqHbVvjMc2Q4QRD LJDzSiuEI5x6OfL1DnyKMz78uFcYAOiuC4y0lou0C3ZSBzWsZ3b2f28kUltwt/Qw fYuVX6wWAj7U9VUzgp742Mcqh5aw7EIcaG1J6GdlUreLSVxhjhuCK8lCQ7hIYYgr uKKI6rkDcT8TG1CfRUJxXcRRu0j3/x7IcgkyLJdAb4EjeJCH5Gfuzp+w2m77mGV5 UJd+uIDFObHLiyq7sfVlkJgNif4M8/7E7y3v8U349kyZ2dGdDSLtJsD3gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyyHS0JftHjuk+LmqLjomZ91Vb0MB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbOrJPiO mrp4TJ2aKA5GHBQhbKEUeT53AYpHPvkFwiTbWfXn9MMdR3+KQjR2DJeGRMm67yNG mL3L+3HprGLFFhkcg7ohdV6tNpsJdkRh0Sz38Y7ezhN5IypjTmHUv+OPSleFGbWC BJupKjnpAEdO38khWAMJmg0N9IafaqvI2yMMTxHcaXyEaulLg9jrGvs/8powBpXI Tjt+5UfXf09tZqJ6UHCd2GAe/ggQjkdEr+w1u4nr5TjghNrid/GNCF9cVQOi57Bw z0h/5ANDRQ2VfLfTDvogZn8vZ0ZBDDB679q6N2sV5pCeEF8Zwoux3+JeaRuDAycR zERxS49Lan7ToA== -----END CERTIFICATE-----Generated at Mon Mar 2 05:38:12 2026 by rpki-client