$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft File: b56WltzPbBpDIJBAhRSuzcP2Bzk.mft (raw, json) Hash identifier: n0J/1PPf4UOi9/ZFIeALIcoGYeTP0owYMuFauPk0g0M= Subject key identifier: 86:88:E9:68:AA:C6:0E:1B:77:3E:39:C0:9B:D3:7A:F6:47:05:C2:5C Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019CAA8F61F3D36387463B1C75B587E21408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft Manifest number: 0F5F Signing time: Sun 01 Mar 2026 18:00:49 +0000 Manifest this update: Sun 01 Mar 2026 18:00:49 +0000 Manifest next update: Mon 02 Mar 2026 18:00:49 +0000 Files and hashes: 1: 02C_yN_pBtrRHfaPFMBLJa0WHZ8.roa (hash: 7dhoMo1eR7pFH0VVu4/1Umj2Sqmm2uRRTNfBAcPSvnQ=) 2: 1-6TPWOGFnVc0Nj7oVC4aAr613ls.roa (hash: fO8iBbvBaMNoHq3COqjue3TAdfcc3LHY54KEjAJ2QqA=) 3: 4gWTFBdbX28RmU-vZWa7w0Na-oY.roa (hash: qVoPT+hSYJGFIxsu7hxtF38NHWCrB7G+eA7b60ig6oM=) 4: C2l9FVRYOzzBJurzWsT0JOwEoX4.roa (hash: 7Sk+vqLvJx0/QulXIfk1zjfce9b9KULZIVzx1MsBroo=) 5: GqCPC0caM7vVLyfxlDbXr-1bB6Q.roa (hash: 5BgcRj7E+Zjch4bi8qsfXSHZRBSk5RcNGFESWPAD6ZM=) 6: HD3Ku7wm-D2ZNqFQc0d3iaq3EpA.roa (hash: aXoYi4sL26UfttU2AQRoMTdqaFswBst+yXFXy3bMFQI=) 7: Kd5BCnuh7Vfh_ncYW41MRfZTY_g.roa (hash: 550VYYwHjp6DkAL2ALMNefBJad9ffNBJSB4pG2l/Jxc=) 8: Ov08WMAA8s4fGJQZj-YBPxQx7ao.roa (hash: AmlE5tYLPssjw9U4Xmt2RH2S2h07B8JY5rM+qQje4aM=) 9: WpG-HECBoKzNEGH7SZCr2uB_62w.roa (hash: QHsaGRcXtfYHvO3WG+U0BRusuvkiVd+XVkbhpqWYJNE=) 10: b56WltzPbBpDIJBAhRSuzcP2Bzk.crl (hash: e+0hw2AVFhRqaQASn0bmMcbPWqkhfGK2o1D/H3KwYw0=) 11: gW7JxFR7uiW4ZpkuSJauf4QocGo.roa (hash: cXbpQwceKEQaMo+TbQWEr8PhkuENmJydovPMYT6tg40=) 12: hMLqEXV_h8cwrkd0qVqjik9UM5Q.roa (hash: 049g9W8sXpkKaEFMxqweslPE125wn44hfoXmY1GLrGM=) 13: hOkQmF7Lw2-BvISqqDLTuUkkq5w.roa (hash: NgSV6JkTSImeWP6gCSVbJkpIH9ZghYaqVNR51xDKH60=) 14: iimjKUl-qjBPkN04_QBUYyWdW7o.roa (hash: T+YUf0Z6oxTt8MxUmLWzLVl7rc+n8K/6kIavpWBwNJ4=) 15: z7k8kovlPmv-zBHmb4FIXdtjtc4.roa (hash: 34UjHgoDLPq5cVz9xOQp030/8J4AwYYZjM3LuMub1Pg=) 16: zFi2gp3SKU3c0S_naj_PpCRo6aU.roa (hash: /L5t/XoZ8kDLzebR3QIc1BMtvCbpTdiF6nGgxkPEo1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:8f:61:f3:d3:63:87:46:3b:1c:75:b5:87:e2:14:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Mar 1 18:00:49 2026 GMT Not After : Mar 2 18:00:49 2026 GMT Subject: CN=8688e968aac60e1b773e39c09bd37af64705c25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:95:00:f6:c5:eb:8c:c9:9d:af:98:91:6a:8a: b0:d5:a7:bc:43:a8:50:91:e9:06:b6:90:03:63:20: ab:5d:5f:be:43:c7:71:3d:99:94:5c:d9:a5:3f:9b: a3:9c:2e:92:d7:1e:fb:cd:ba:57:dc:26:0f:ad:32: d3:f1:0c:44:03:de:1e:0f:57:2a:6a:6e:56:7d:d8: 06:f5:c0:0e:7c:4d:88:69:01:06:15:ff:60:7e:bf: 08:8f:25:b6:70:15:da:38:1a:ae:15:b0:49:7f:19: 40:34:fa:a0:03:59:15:12:4e:d9:71:dd:ca:09:3d: c1:af:75:c5:d4:84:b3:ca:95:b9:cb:12:f6:36:a6: 2c:dd:14:43:9f:6d:0b:bf:d0:17:8b:a2:fb:89:58: 7b:54:dc:01:5a:cd:d6:9c:58:0b:81:79:cc:7e:93: 37:7b:8a:af:b4:cb:c3:27:10:69:17:69:57:b6:2d: f0:2c:6e:86:76:bc:8f:2d:ba:65:ca:af:5e:e4:c8: 1b:42:e6:84:35:1c:9c:e5:c6:28:d5:19:ff:44:4b: 4f:58:4d:9f:42:a2:7a:75:92:96:4a:3e:16:22:d8: 07:9c:99:ac:6d:0b:73:19:39:6e:69:12:88:cc:63: 9f:25:56:a8:b9:d0:f4:04:5c:71:92:db:70:8e:2a: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:88:E9:68:AA:C6:0E:1B:77:3E:39:C0:9B:D3:7A:F6:47:05:C2:5C X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f7:ec:f6:af:47:fc:8e:43:ef:5b:7c:40:58:24:72:a4:73: c7:dd:db:45:79:c0:ee:15:bc:9e:b7:4f:f7:0c:e2:21:15:a0: 20:d3:04:87:3e:cf:73:cf:7d:30:bb:4c:2a:e6:61:9e:f2:26: 93:61:37:10:72:44:ab:72:78:11:e7:4b:b3:f1:44:27:5d:f0: d6:ed:7e:b2:90:82:99:e2:be:36:45:f1:fc:33:0b:35:c7:b7: 1a:62:07:96:46:8d:fd:4b:99:1f:23:fa:ae:82:1c:87:f3:71: e7:29:81:1f:88:47:ee:b9:0b:73:fe:a6:9d:f6:08:eb:19:3c: 92:ca:28:15:02:f9:ae:a7:d2:c6:f6:13:e9:b1:ef:6f:3e:67: bd:4d:a1:e4:02:7f:c4:d2:13:de:5d:7e:56:79:b8:ec:3e:ba: c8:03:0e:82:9e:86:59:c9:6b:6a:ce:03:2f:5c:00:e2:8d:c4: c1:8d:6f:23:cd:ff:c3:49:71:b2:09:f7:99:b8:51:4f:34:d5: 50:22:41:44:4c:0b:39:75:4a:a7:d9:ed:d5:2f:65:b5:8b:5a: 4e:76:b6:a5:5b:93:ed:0f:79:3b:89:47:dc:c8:bf:79:f9:aa: 53:23:77:8c:13:12:2b:91:3b:0f:df:01:54:fe:af:a3:2d:26: 31:fe:53:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqj2Hz02OHRjscdbWH4hQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwMzAxMTgwMDQ5WhcNMjYwMzAyMTgwMDQ5WjAzMTEwLwYDVQQD Eyg4Njg4ZTk2OGFhYzYwZTFiNzczZTM5YzA5YmQzN2FmNjQ3MDVjMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJUA9sXrjMmdr5iRaoqw1ae8Q6hQ kekGtpADYyCrXV++Q8dxPZmUXNmlP5ujnC6S1x77zbpX3CYPrTLT8QxEA94eD1cq am5WfdgG9cAOfE2IaQEGFf9gfr8IjyW2cBXaOBquFbBJfxlANPqgA1kVEk7Zcd3K CT3Br3XF1ISzypW5yxL2NqYs3RRDn20Lv9AXi6L7iVh7VNwBWs3WnFgLgXnMfpM3 e4qvtMvDJxBpF2lXti3wLG6GdryPLbplyq9e5MgbQuaENRyc5cYo1Rn/REtPWE2f QqJ6dZKWSj4WItgHnJmsbQtzGTluaRKIzGOfJVaoudD0BFxxkttwjiq4+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaI6Wiqxg4bdz45wJvTevZHBcJcMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/fs9q9H /I5D71t8QFgkcqRzx93bRXnA7hW8nrdP9wziIRWgINMEhz7Pc899MLtMKuZhnvIm k2E3EHJEq3J4EedLs/FEJ13w1u1+spCCmeK+NkXx/DMLNce3GmIHlkaN/UuZHyP6 roIch/Nx5ymBH4hH7rkLc/6mnfYI6xk8ksooFQL5rqfSxvYT6bHvbz5nvU2h5AJ/ xNIT3l1+Vnm47D66yAMOgp6GWclras4DL1wA4o3EwY1vI83/w0lxsgn3mbhRTzTV UCJBREwLOXVKp9nt1S9ltYtaTna2pVuT7Q95O4lH3Mi/efmqUyN3jBMSK5E7D98B VP6voy0mMf5TGQ== -----END CERTIFICATE-----Generated at Mon Mar 2 03:07:50 2026 by rpki-client