$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json) Hash identifier: S949EDMfp3G/Lx/Yg/K9D+JddxGKcMQwZzBglkbocg4= Subject key identifier: 59:A1:AC:AD:97:25:64:F7:F7:6E:47:78:BC:8B:25:27:42:F1:2A:B8 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019CA9B37978681ADA40440AF4447F740442 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft Manifest number: 185A Signing time: Sun 01 Mar 2026 14:00:37 +0000 Manifest this update: Sun 01 Mar 2026 14:00:37 +0000 Manifest next update: Mon 02 Mar 2026 14:00:37 +0000 Files and hashes: 1: 1-QuFrP2FCGdb0e2Ii_z6LaU8br8.roa (hash: rbKcnlSwgT9Djc5Fqvy3u9yC2cYZiJQ7dfTu75ri+mI=) 2: Kn1XIiFvEGGy9jGV0znKGyVVN88.roa (hash: S6dp6R29PAVMF1jsj22PyQ1rploMZXbrpKsVzrPCS0A=) 3: LVf00OwBfRzfAd6G6KBKwIxU48Q.roa (hash: Xvect/bo+Wr+aXHUQYsyRoqwRvv8UXPXPU1oErWXh0o=) 4: c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa (hash: N/tir1ikaaQzeua5SN0NNzW44/svT02GC4QfKmsuXFg=) 5: i_sg361hESOO6WvkWK2Qx1qnr_o.roa (hash: grkv5sxl6QC67Xl6GRfRbX76QTIOE0y5InqEToBe4KU=) 6: jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa (hash: gYuzALxJxQy3dIl1B+tjxYOVPb7F/ttrTik4SzmNvpo=) 7: nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa (hash: QxXL80gZjutBzTVwYv0W0HB8GqSHL6xx5f7Es0Ckqj8=) 8: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: 00SggzKlqPavc/vOPSdYSbOSMpfu5NWqURjc6mN8DT0=) 9: uX2HFPa-1T3UMzqcLHxJG1wYem0.roa (hash: mt3IsY/c70SVPfG6w+VGWzHhy8025Nd/iJv2s56ORTs=) 10: xkw2dJ1kdWsWVrDQa7ecIv1ZfEE.roa (hash: TlO1SGSzKaGyjfYONLThtWXquMMxH3GzgJNd8bMLo1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:b3:79:78:68:1a:da:40:44:0a:f4:44:7f:74:04:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Mar 1 14:00:37 2026 GMT Not After : Mar 2 14:00:37 2026 GMT Subject: CN=59a1acad972564f7f76e4778bc8b252742f12ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:37:78:2c:49:30:79:7d:25:d9:45:91:63: ae:14:49:f7:2c:49:6f:55:2b:fe:59:a4:e6:fd:45: 33:63:0e:e4:33:05:58:2f:44:06:d1:37:9d:67:84: 0f:89:f7:b9:ea:b6:1c:f9:cf:56:01:aa:28:0a:be: 77:d6:38:28:91:3c:4f:eb:54:1d:b7:54:b5:ec:66: 28:47:58:63:a8:79:31:5b:9c:6c:0e:74:65:9e:1b: 68:b0:43:36:a7:2c:04:72:46:ac:64:d3:3f:8e:84: 66:23:bc:5d:c6:00:fe:92:c5:1d:66:25:0b:07:14: 3d:2f:02:92:84:fd:fb:00:fc:78:22:28:13:68:43: f9:bb:b1:60:42:d9:30:c0:79:94:fa:a7:02:2f:6c: db:c9:95:39:e8:1e:14:df:98:b3:08:1a:02:8f:15: e2:d3:a1:11:a1:9c:26:e0:96:2d:fc:b6:9c:9e:0d: 32:91:4b:47:82:9f:9f:72:41:f9:ea:18:0f:ad:8a: ea:12:f8:dc:ab:9b:88:f3:46:0b:79:bd:bc:70:9f: 93:e1:c9:0b:03:fe:40:1f:0e:bc:68:44:e3:75:2e: 73:5f:8d:f7:8e:00:32:0a:64:52:a2:e2:48:e0:47: 00:49:35:08:b2:da:82:ec:2e:a3:7e:40:72:f1:57: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A1:AC:AD:97:25:64:F7:F7:6E:47:78:BC:8B:25:27:42:F1:2A:B8 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:6c:1a:53:47:54:56:7b:4e:89:ec:48:cd:20:23:d2:51:d8: 91:ba:4f:ba:2e:49:23:c3:1a:68:c3:02:ee:0b:bd:ac:c9:cc: 44:59:f8:fa:76:d9:7a:fc:20:01:61:2b:70:f3:67:eb:3c:62: be:7d:84:67:25:4e:c9:b5:6b:ee:33:d3:90:34:48:12:18:0c: 6b:56:b4:d0:81:3d:04:78:09:5f:9d:ef:ab:d4:c5:1c:34:76: 88:f3:53:35:33:d7:58:c3:1c:39:2d:3a:c3:6a:09:21:65:c6: ae:3b:9f:3c:c3:ac:b2:d6:d8:09:b2:3c:a9:17:e7:df:93:ba: f8:a9:86:d0:ca:7b:47:95:34:55:54:06:fa:f8:e5:1c:b0:13: fd:46:fa:b0:8e:5b:cb:56:34:ee:00:93:4c:bb:c3:3b:97:06: ce:48:68:fd:43:6b:43:74:d6:a9:a6:9c:25:53:a4:15:70:2e: 75:d4:75:e4:61:52:43:f2:4a:e5:fe:97:e4:8e:b6:bc:9d:4b: 8f:5b:9a:b3:52:f7:8c:db:2c:aa:19:c4:8c:65:07:10:91:21: 38:f4:01:51:3f:f5:f6:70:71:8b:4f:cf:bf:99:6b:44:6a:73: cf:02:07:3f:32:fe:b2:19:48:32:25:e4:ef:c0:35:4a:39:25: 4f:d0:c0:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyps3l4aBraQEQK9ER/dARCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjYwMzAxMTQwMDM3WhcNMjYwMzAyMTQwMDM3WjAzMTEwLwYDVQQD Eyg1OWExYWNhZDk3MjU2NGY3Zjc2ZTQ3NzhiYzhiMjUyNzQyZjEyYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFY3eCxJMHl9JdlFkWOuFEn3LElv VSv+WaTm/UUzYw7kMwVYL0QG0TedZ4QPife56rYc+c9WAaooCr531jgokTxP61Qd t1S17GYoR1hjqHkxW5xsDnRlnhtosEM2pywEckasZNM/joRmI7xdxgD+ksUdZiUL BxQ9LwKShP37APx4IigTaEP5u7FgQtkwwHmU+qcCL2zbyZU56B4U35izCBoCjxXi 06ERoZwm4JYt/Lacng0ykUtHgp+fckH56hgPrYrqEvjcq5uI80YLeb28cJ+T4ckL A/5AHw68aETjdS5zX433jgAyCmRSouJI4EcASTUIstqC7C6jfkBy8VcvmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmhrK2XJWT3925HeLyLJSdC8Sq4MB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGwaU0dU VntOiexIzSAj0lHYkbpPui5JI8MaaMMC7gu9rMnMRFn4+nbZevwgAWErcPNn6zxi vn2EZyVOybVr7jPTkDRIEhgMa1a00IE9BHgJX53vq9TFHDR2iPNTNTPXWMMcOS06 w2oJIWXGrjufPMOsstbYCbI8qRfn35O6+KmG0Mp7R5U0VVQG+vjlHLAT/Ub6sI5b y1Y07gCTTLvDO5cGzkho/UNrQ3TWqaacJVOkFXAuddR15GFSQ/JK5f6X5I62vJ1L j1uas1L3jNssqhnEjGUHEJEhOPQBUT/19nBxi0/Pv5lrRGpzzwIHPzL+shlIMiXk 78A1SjklT9DAbQ== -----END CERTIFICATE-----Generated at Mon Mar 2 01:16:21 2026 by rpki-client