$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: OyLqAAZKROlb+dxWooqFklvjM4kLO6k8mhs+qcb0XvY= Subject key identifier: 5E:8D:00:00:E7:1E:E5:99:FC:19:97:DA:D5:D9:A9:F9:14:5A:8A:8F Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019CAAFD6FF9312B0583B568A1E33C61C11B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 105E Signing time: Sun 01 Mar 2026 20:01:01 +0000 Manifest this update: Sun 01 Mar 2026 20:01:01 +0000 Manifest next update: Mon 02 Mar 2026 20:01:01 +0000 Files and hashes: 1: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=) 2: C4GFPQJi7p8x697vDEqdYSForok.roa (hash: x37lAGnggrFkEEQihLvJsXhXtDeedMO3diP0XULMgKY=) 3: F0yBqDMqCNM0pe9rWG8uj3CbYkc.roa (hash: XCZ0JTvoTGZ62Q11PauRxwPTiRMvREV2N/LHqEFLe2w=) 4: FXRjYZvbpR4kI47t-xbWMZKIpXs.roa (hash: f82R7m8nlKkGC17z2MB1wjV2cD02/YvewqP02lzhH/g=) 5: GyehNP3GNMAkeXlLJEWyWCcQtzU.roa (hash: IpYqqZa4sTN+dmYx8FkURhFjGrU2UAuArFl+utDihPQ=) 6: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=) 7: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: tG+F0glVnpAIZ3dUujeeKL4C35fx1ZG6usSD7bGOGOE=) 8: eoCcRd3DQ06osUmaj6wTPXbyx3M.roa (hash: Bag32wKiY/ZwSFfm1YHrZ2XH/ziquJ1Nmz4VoaY0zzY=) 9: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=) 10: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=) 11: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fd:6f:f9:31:2b:05:83:b5:68:a1:e3:3c:61:c1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Mar 1 20:01:01 2026 GMT Not After : Mar 2 20:01:01 2026 GMT Subject: CN=5e8d0000e71ee599fc1997dad5d9a9f9145a8a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:05:50:26:18:8c:7f:cb:b8:27:d3:a9:0e: 63:e0:e3:17:f4:92:97:f5:5d:ae:53:3b:0c:e1:b2: c4:50:19:58:9d:f5:a7:ad:39:15:85:04:6e:73:07: f4:49:db:4d:63:5d:07:48:85:0f:8c:a0:a4:40:8f: 94:57:00:8f:df:da:13:f2:83:3c:9f:a0:70:1d:57: 2c:7c:ba:ab:b0:47:03:d6:a4:36:f1:23:40:d8:5e: f8:0c:0e:d3:51:8e:7b:4c:96:77:e8:d7:6e:b2:b7: 9c:11:c3:33:28:93:c2:da:ca:35:55:bd:83:b2:53: cf:2e:11:6c:7e:d3:ce:15:a5:a4:ee:da:86:f2:a8: fa:a8:d9:30:1d:cf:a7:8c:23:05:53:a5:82:4f:ee: 1a:a5:43:64:6f:ce:dc:9a:a9:b2:07:d3:4c:6d:69: 8e:59:8c:ec:61:81:1f:50:7c:da:d7:29:13:b5:b9: 3e:a7:30:09:de:e5:f0:03:ec:b9:6c:98:7c:16:3e: 7e:52:a4:60:29:aa:52:e2:48:15:b5:93:a8:b1:b2: 9c:0c:68:59:cf:3c:9e:97:21:75:04:69:06:e5:71: ef:c5:a1:d8:e9:ed:45:bb:72:a0:5c:cb:ec:5d:63: ec:9d:7d:eb:bf:b3:46:a8:e6:41:8b:9f:51:6a:14: 78:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8D:00:00:E7:1E:E5:99:FC:19:97:DA:D5:D9:A9:F9:14:5A:8A:8F X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:eb:95:a4:22:0d:bc:0d:82:1e:54:0b:4d:03:c2:ef:93:9f: 49:5c:6c:41:bf:44:98:27:7e:3c:e1:a8:f7:72:14:b4:e0:b0: 22:c3:41:28:dc:40:6f:1d:b4:d2:70:85:ef:be:d4:12:43:06: 2c:ce:34:d8:41:d5:07:e4:9e:1d:d7:4e:44:95:59:23:14:5d: 0a:16:d0:dd:f9:07:0b:df:4a:5c:b5:af:56:6b:ac:4b:56:30: b5:57:70:e9:7b:67:7c:ac:85:ca:c9:db:a2:0f:81:81:09:3c: 22:1d:c1:07:64:17:1a:80:cd:8f:23:1b:4e:2f:b5:3c:bc:9c: c9:b4:f8:27:06:b7:4f:f8:26:62:14:4f:46:65:0a:4b:7b:fb: b2:f9:b3:4d:ab:eb:c8:fa:f6:0a:87:29:62:7a:17:2a:28:c9: 7f:e7:82:f6:e4:10:78:56:d6:3a:b4:f4:92:be:27:1e:0e:25: 9b:86:7f:83:9e:b2:98:ce:b5:35:6a:20:d6:1b:fc:f3:fc:f8: 80:cc:cb:9e:60:46:d7:c5:ff:da:52:14:8b:3e:d1:61:a5:6c: 69:07:c5:ec:19:62:33:27:c7:dc:85:b8:8f:7f:e7:b2:ad:e1: a7:80:9f:ea:49:7c:7f:6d:8a:58:15:26:8c:54:05:38:39:6f: c6:a3:fe:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/W/5MSsFg7VooeM8YcEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwMzAxMjAwMTAxWhcNMjYwMzAyMjAwMTAxWjAzMTEwLwYDVQQD Eyg1ZThkMDAwMGU3MWVlNTk5ZmMxOTk3ZGFkNWQ5YTlmOTE0NWE4YThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB0FUCYYjH/LuCfTqQ5j4OMX9JKX 9V2uUzsM4bLEUBlYnfWnrTkVhQRucwf0SdtNY10HSIUPjKCkQI+UVwCP39oT8oM8 n6BwHVcsfLqrsEcD1qQ28SNA2F74DA7TUY57TJZ36NdusrecEcMzKJPC2so1Vb2D slPPLhFsftPOFaWk7tqG8qj6qNkwHc+njCMFU6WCT+4apUNkb87cmqmyB9NMbWmO WYzsYYEfUHza1ykTtbk+pzAJ3uXwA+y5bJh8Fj5+UqRgKapS4kgVtZOosbKcDGhZ zzyelyF1BGkG5XHvxaHY6e1Fu3KgXMvsXWPsnX3rv7NGqOZBi59RahR44QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6NAADnHuWZ/BmX2tXZqfkUWoqPMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuuVpCIN vA2CHlQLTQPC75OfSVxsQb9EmCd+POGo93IUtOCwIsNBKNxAbx200nCF777UEkMG LM402EHVB+SeHddORJVZIxRdChbQ3fkHC99KXLWvVmusS1YwtVdw6XtnfKyFysnb og+BgQk8Ih3BB2QXGoDNjyMbTi+1PLycybT4Jwa3T/gmYhRPRmUKS3v7svmzTavr yPr2CocpYnoXKijJf+eC9uQQeFbWOrT0kr4nHg4lm4Z/g56ymM61NWog1hv88/z4 gMzLnmBG18X/2lIUiz7RYaVsaQfF7BliMyfH3IW4j3/nsq3hp4Cf6kl8f22KWBUm jFQFODlvxqP+tA== -----END CERTIFICATE-----Generated at Mon Mar 2 00:42:53 2026 by rpki-client