$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json) Hash identifier: KovxBKWfMt0E8dC/yiVAUsHYJdxmwl+nvn/m9I3z/dI= Subject key identifier: 0B:D7:47:0E:39:20:AF:FE:45:4F:01:FF:F4:41:48:02:4F:CF:8D:5C Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019CAA58768B51F25CFAE09879BF5AA7DA35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft Manifest number: 1555 Signing time: Sun 01 Mar 2026 17:00:50 +0000 Manifest this update: Sun 01 Mar 2026 17:00:50 +0000 Manifest next update: Mon 02 Mar 2026 17:00:50 +0000 Files and hashes: 1: 0PWfBn0oGldVFHP5tIF47j3zzAs.roa (hash: 0sM6Ze3gvOmQYlCu1oomU3dkg7xN6YhbGGDnKDWKSSQ=) 2: 2_JDrlEf39vL8qmUM9CaRXwOr04.roa (hash: /7e65G97+6p4mluseOQELP9OxF86iI75OQ+5Z/TQzmA=) 3: 5d874HtQy3_g6Lh42ATS1BQL16o.roa (hash: FFJNypVbDwx5p1OtRayAO1/xI3zEji2XKy7Oj/jRza0=) 4: 6NzUbUPfmG_2OYaxE5u0iljd-HM.roa (hash: GEVpwDXH3AnmmmYcwcQLhZ1oJzowlyvgSDom4fjBpAM=) 5: DyhSqV4302w_Jd8C_oWX0mObDDc.roa (hash: XVB5wgNU/o6hHZ2aTWsuDvd3gUhS28oEwkGfS/KVZ7w=) 6: H9Xbs19Dof8eiG5lJjAhQV9WdWI.roa (hash: iXBhXfrYk+sqUaa89rfM9pApaz51gWzZlcef+RPdmsg=) 7: MSewK7b92JObaKeUrbrsAb5fWQk.roa (hash: sWACoQHb5c7UneFSMmjv5A00HKxYwU6xUqQ/8qlbIPE=) 8: NqUE_7vgG-i019hpuas3mtpVIf4.roa (hash: X2ZRbDZD/jel7nDnPIG6pqjl2LVgOhthOTW0hTf7CyA=) 9: Q9Ww3Do89xMOQrPd5TKLAZBAvrg.roa (hash: hGe4aZ3em/P54+6JoLXuYwSoEpjVtG261LosCw0VpbI=) 10: ZBRiJj4yKjp6xE7hgkNq4cQdPLQ.roa (hash: 6GJHppVcWVXgDv6JkXYDCys38/Oyzd7ZRUn3j/wIDXU=) 11: eKfYhAdXZm4QBxrRp-Jb19IhjKA.roa (hash: IW6hoy0lnAYpEm6NvMoOrfkrhinHm5CYNAqE2SF2Y3g=) 12: ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa (hash: 6KJzsBOmWkWNjIPw+pN6XcIjmWVNJnyQyPCTB+CKohg=) 13: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: dcPxP6+n9MrA8Zs5jnCtTOU2sGKmbuF6nJ4VuMBUW+Y=) 14: qaltJRhtOumKjVHwnWVUetcuLl8.roa (hash: BGZRfPeZLiJVX41F+zt+HW9khnF21BsLuwIzvIKpNck=) 15: slCMC5MetlL-UdrbcYVL6ivEaR8.roa (hash: L9bTvLMwoTmbYW/wx8YfNg5L/r3pNdrG0c8bxsu4UcE=) 16: tFL9wVh4WkSXocKu5wD0zL_9_m8.roa (hash: 6EEVwO12s7jfNRlLHqcR0cD6u3HIV2GLT5UfsJtR9iA=) 17: wGOi-hc1qunRv3mfhlCNuwgWq88.roa (hash: VEFeNu27Mw/MaO7I2TqKbQuNe8tJIgFySJ8plRBHBzM=) 18: zLZn5fjIxGUIeLJs3xz-C3OdAK8.roa (hash: RzZEQ/gzmc0sHqoihLaxMsPQLNBKCTKE0KmCQNShYdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:58:76:8b:51:f2:5c:fa:e0:98:79:bf:5a:a7:da:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Mar 1 17:00:50 2026 GMT Not After : Mar 2 17:00:50 2026 GMT Subject: CN=0bd7470e3920affe454f01fff44148024fcf8d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:82:e7:c0:38:0e:71:d5:4a:61:8b:c9:34:0e: 58:75:df:b3:27:98:40:6f:85:d3:b5:d9:4e:56:94: 65:d1:02:1e:c8:1c:c6:eb:ac:6f:35:32:20:2d:8b: 1f:25:8f:65:7e:0b:ae:25:6d:e2:17:9e:d1:96:03: 24:aa:b7:d6:33:96:86:4e:2b:ee:2e:7b:55:81:a8: 37:78:2c:36:7e:bc:ec:fc:8c:80:01:d7:7e:1a:7d: 1a:0c:bc:a7:24:97:51:43:5f:5b:93:ac:44:24:e9: 82:85:a6:34:fc:bf:a4:31:67:ae:aa:2f:9c:23:1f: 40:20:fe:3f:5a:51:8c:69:1e:2c:56:6f:84:5a:58: ae:49:a3:df:31:4d:6d:b9:f5:ed:33:70:63:14:ea: a4:3b:bc:ed:6d:d8:99:17:fd:e5:f6:1f:9b:39:dc: 31:5e:20:0b:bd:e7:ce:ae:78:ae:96:11:e3:c1:23: 18:42:3d:f6:e1:d7:fd:c8:4a:75:ce:32:97:ef:89: 03:42:a8:31:b3:f5:f9:99:86:e5:cc:80:56:ed:9d: 23:a8:f9:bd:b5:15:bc:5a:56:28:fb:4c:44:da:20: da:56:87:6c:db:57:56:29:14:68:f9:31:0a:82:af: 7c:78:06:12:88:9a:05:8a:be:5e:a6:7b:5b:3d:68: ba:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D7:47:0E:39:20:AF:FE:45:4F:01:FF:F4:41:48:02:4F:CF:8D:5C X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9f:4c:c1:54:57:33:dc:89:14:1c:ca:02:c0:37:d4:53:63: e8:a7:0b:80:ba:e7:e8:17:f3:2e:a2:d6:94:6e:fa:0b:73:ad: 7c:3d:97:10:62:9e:60:5f:2d:57:c3:e5:98:4f:4d:2d:07:74: 54:e5:b2:50:8d:ef:60:cf:af:32:6c:cf:f1:65:ab:d7:b6:79: 67:60:fb:d6:c9:61:e8:7e:e8:c1:24:63:c8:ab:51:f6:2b:90: d6:25:ff:70:90:73:62:f4:96:c6:ad:87:84:46:1b:d2:82:2d: 4b:5f:19:3e:42:69:c2:01:fd:7a:62:07:2b:f9:f8:fb:a4:76: 64:ca:18:22:1e:32:b6:40:d7:a2:e5:c5:f8:53:94:63:b2:90: 34:09:f6:ef:57:ac:bc:53:8f:bf:2d:db:8a:93:be:1d:33:be: cd:6a:3c:ea:7c:06:6f:d9:58:38:ae:a2:4b:9a:ca:67:b9:e9: 90:61:6a:ec:b7:52:1e:68:a6:56:c9:e2:11:6d:38:ce:34:94: 0f:8e:b9:9f:09:bf:e2:db:a0:a9:19:19:56:fa:9d:d6:84:42: 38:49:77:ec:4a:a7:90:d3:b2:5c:a0:a4:01:07:5c:3d:4f:93: 76:13:c6:66:a9:aa:bd:bb:57:a6:62:3f:16:67:00:d1:b8:e5: e8:47:3f:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqWHaLUfJc+uCYeb9ap9o1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYwMzAxMTcwMDUwWhcNMjYwMzAyMTcwMDUwWjAzMTEwLwYDVQQD EygwYmQ3NDcwZTM5MjBhZmZlNDU0ZjAxZmZmNDQxNDgwMjRmY2Y4ZDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoLnwDgOcdVKYYvJNA5Ydd+zJ5hA b4XTtdlOVpRl0QIeyBzG66xvNTIgLYsfJY9lfguuJW3iF57RlgMkqrfWM5aGTivu LntVgag3eCw2frzs/IyAAdd+Gn0aDLynJJdRQ19bk6xEJOmChaY0/L+kMWeuqi+c Ix9AIP4/WlGMaR4sVm+EWliuSaPfMU1tufXtM3BjFOqkO7ztbdiZF/3l9h+bOdwx XiALvefOrniulhHjwSMYQj324df9yEp1zjKX74kDQqgxs/X5mYblzIBW7Z0jqPm9 tRW8WlYo+0xE2iDaVods21dWKRRo+TEKgq98eAYSiJoFir5epntbPWi69QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvXRw45IK/+RU8B//RBSAJPz41cMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZ9MwVRX M9yJFBzKAsA31FNj6KcLgLrn6BfzLqLWlG76C3OtfD2XEGKeYF8tV8PlmE9NLQd0 VOWyUI3vYM+vMmzP8WWr17Z5Z2D71slh6H7owSRjyKtR9iuQ1iX/cJBzYvSWxq2H hEYb0oItS18ZPkJpwgH9emIHK/n4+6R2ZMoYIh4ytkDXouXF+FOUY7KQNAn271es vFOPvy3bipO+HTO+zWo86nwGb9lYOK6iS5rKZ7npkGFq7LdSHmimVsniEW04zjSU D465nwm/4tugqRkZVvqd1oRCOEl37EqnkNOyXKCkAQdcPU+TdhPGZqmqvbtXpmI/ FmcA0bjl6Ec/OA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:26:38 2026 by rpki-client