$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: Ytb4k0PV43Ug5OoRYMg8prWQgFX33CjM52yhcwcoPs8= Subject key identifier: C4:9A:57:35:9E:B8:10:91:A7:BD:CB:FD:B5:23:1E:9D:AD:08:D9:95 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019CAD22BC0B1DD3F40FF8AFF39E6D96AC6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 1523 Signing time: Mon 02 Mar 2026 06:01:00 +0000 Manifest this update: Mon 02 Mar 2026 06:01:00 +0000 Manifest next update: Tue 03 Mar 2026 06:01:00 +0000 Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=) 2: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=) 3: 7mvF9myTKlEKYunZpLTQD5KEFrY.roa (hash: 1UIT2TzCE1FlQDr/AW6XvHwVdir3xpnco3QCOUshSZI=) 4: F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa (hash: jxUQ0KKcc1cvSdaRZ9vh81k1iQSpuyreVGWce3iIfz4=) 5: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=) 6: O1GW4ziuKGxF3aTFCKn2xqIz0NE.roa (hash: ScOFNBiJmWWMmbvpEIy/O/H23s5tvByR/NPpUmMp9Tg=) 7: Z3nS0nqVZ-vslxx54klnYbz02l8.roa (hash: dO6OHSX+aPL7qnM4VP6WsbVvNbzWQqrh27kk5gBnp4w=) 8: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=) 9: aBJGwoNtwjYYCfL_vY3KC-5KRiw.roa (hash: qe/bdX+L1Ag/Xhut7yjVu6KrdVE0BnulRsPIthNL1pg=) 10: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=) 11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: aDBdDzAafQKh3pE47jth2DC5Sz/S/zIh5odpXUItnNc=) 12: roVhJvLE3W-3AVNXrvbfZb_XPPo.roa (hash: 6LQ91r1uUm0MXEXzntSjw9cSGp9nmQGmFVNHFHmb1Zw=) 13: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=) 14: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:22:bc:0b:1d:d3:f4:0f:f8:af:f3:9e:6d:96:ac:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Mar 2 06:01:00 2026 GMT Not After : Mar 3 06:01:00 2026 GMT Subject: CN=c49a57359eb81091a7bdcbfdb5231e9dad08d995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:73:b1:0e:02:d2:02:ec:26:c3:05:25:fd: 1c:8d:17:75:39:98:2a:2d:ed:4f:9e:92:50:7c:e9: 38:72:7d:dc:98:d6:0d:77:75:06:73:dd:30:99:a5: 41:08:bd:9d:10:75:1d:34:76:1f:fc:a2:a6:a2:d6: 13:e5:64:5b:33:39:23:9b:41:2b:c9:4d:5a:c9:d4: 9e:62:2b:84:21:39:a1:aa:cd:09:13:57:b4:ed:cf: aa:5c:3b:37:45:26:53:95:b0:83:bc:75:5f:7d:fa: 7b:f9:22:e4:f5:82:35:bc:01:64:9a:47:97:00:b5: 73:95:ca:f8:0a:47:cf:19:9d:56:c1:8d:30:f0:9b: ca:6e:23:77:5c:32:e2:2e:e9:7b:7a:f3:2d:7e:02: 42:ad:d7:c8:1b:c5:75:7d:38:41:4a:1b:3c:45:0d: 56:55:73:ff:9f:cb:fd:3c:f9:cd:98:c6:23:79:ce: 13:67:41:df:8a:3a:c4:c5:40:50:63:55:50:32:f1: a7:6e:08:99:b0:71:b0:64:5b:5c:56:9f:9c:9f:28: 77:0a:87:4c:08:fe:c6:96:03:c3:35:4d:db:9b:9c: 15:40:f6:0a:97:19:45:3f:ae:44:61:b4:f3:72:6b: 50:00:e8:87:c6:b9:7a:be:f7:7e:ec:cd:24:74:63: 84:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9A:57:35:9E:B8:10:91:A7:BD:CB:FD:B5:23:1E:9D:AD:08:D9:95 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:95:91:af:34:7e:1b:eb:4f:01:fb:af:fa:ae:38:dc:8c:4a: 53:e6:23:2c:7a:ea:10:b6:45:af:9b:b4:86:40:ff:bd:ab:27: 2f:48:58:3a:b6:c8:de:d8:75:a8:e5:e2:b3:d5:60:7f:af:db: a0:c7:53:9d:74:d4:b4:77:3e:20:fd:1e:3b:fe:12:f2:be:e2: 77:73:7e:5c:c6:31:9f:ac:53:75:02:ba:e1:ee:71:18:8d:f9: d7:8a:76:45:cc:2b:69:72:40:93:39:9f:33:36:1c:b6:86:d2: ca:e4:ac:a5:da:a9:75:a0:3c:9a:2b:70:42:3c:68:2c:ab:ad: 08:be:7d:8f:59:a0:0d:62:ed:28:63:03:c8:ee:e7:8d:f3:15: 72:26:b7:0b:b8:03:a9:b6:90:0b:50:a3:48:49:24:6c:e7:c4: 66:89:b2:6d:a7:52:d7:f4:46:62:12:dc:c7:14:43:04:79:de: ae:68:29:2a:7f:5d:1c:e1:b2:d5:5b:47:db:7a:68:ce:82:b0: 12:54:e2:1a:56:e6:8d:f2:f8:1c:f3:fb:61:41:ce:9b:21:99: 51:1a:f5:bd:e7:bd:74:a6:6d:5c:6c:1b:bd:14:98:b5:30:1c: c9:b8:7e:6d:3c:4e:d7:d3:ea:cc:56:95:9c:83:1b:21:3c:ec: 6f:64:98:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytIrwLHdP0D/iv855tlqxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMzAyMDYwMTAwWhcNMjYwMzAzMDYwMTAwWjAzMTEwLwYDVQQD EyhjNDlhNTczNTllYjgxMDkxYTdiZGNiZmRiNTIzMWU5ZGFkMDhkOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySNzsQ4C0gLsJsMFJf0cjRd1OZgq Le1PnpJQfOk4cn3cmNYNd3UGc90wmaVBCL2dEHUdNHYf/KKmotYT5WRbMzkjm0Er yU1aydSeYiuEITmhqs0JE1e07c+qXDs3RSZTlbCDvHVfffp7+SLk9YI1vAFkmkeX ALVzlcr4CkfPGZ1WwY0w8JvKbiN3XDLiLul7evMtfgJCrdfIG8V1fThBShs8RQ1W VXP/n8v9PPnNmMYjec4TZ0HfijrExUBQY1VQMvGnbgiZsHGwZFtcVp+cnyh3CodM CP7GlgPDNU3bm5wVQPYKlxlFP65EYbTzcmtQAOiHxrl6vvd+7M0kdGOEPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSaVzWeuBCRp73L/bUjHp2tCNmVMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapWRrzR+ G+tPAfuv+q443IxKU+YjLHrqELZFr5u0hkD/vasnL0hYOrbI3th1qOXis9Vgf6/b oMdTnXTUtHc+IP0eO/4S8r7id3N+XMYxn6xTdQK64e5xGI3514p2RcwraXJAkzmf MzYctobSyuSspdqpdaA8mitwQjxoLKutCL59j1mgDWLtKGMDyO7njfMVcia3C7gD qbaQC1CjSEkkbOfEZomybadS1/RGYhLcxxRDBHnermgpKn9dHOGy1VtH23pozoKw ElTiGlbmjfL4HPP7YUHOmyGZURr1vee9dKZtXGwbvRSYtTAcybh+bTxO19PqzFaV nIMbITzsb2SY2A== -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:43 2026 by rpki-client