$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: vAQOilrN6SpfTlDgYabx+RNleXnVBXyn8ldoxxwtnmU= Subject key identifier: C9:97:C2:E5:79:2B:DF:D3:E9:17:58:B0:42:05:54:90:64:FD:3D:39 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019CA97CA63F5CDFE01D66D617550130C11E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0DDE Signing time: Sun 01 Mar 2026 13:00:44 +0000 Manifest this update: Sun 01 Mar 2026 13:00:44 +0000 Manifest next update: Mon 02 Mar 2026 13:00:44 +0000 Files and hashes: 1: 1EgCfIUZHYf24SrWg9kAOto8Duc.roa (hash: AUpadmn7SxPiN/E2rAaCXCpLwYoRDkhN/Jxbn7p885k=) 2: 8D8hc9aqkL4Bavtx_8Gt5LyWD9Q.roa (hash: 0uF2Af7Dk4CplpXlk+Cbt9rR/69r9fo7ZdCCr7L8Q0k=) 3: CI5OA6QXqxDb_vQORKk6q2XDhKs.roa (hash: EhsJRsPXMO4K43zEnBLLLlr95wCN5evyvOqkDdEQez8=) 4: C_i3BFwSyufK3kEKnj8AwQJSM-g.roa (hash: RqeBg4qnPKs7LMu02pA0RKL7OpjvJCoQwZAVatnEMK4=) 5: G978p2Z4fjPEzTOjuXppglSIr4s.roa (hash: Nz/5Sv/BTu9yF7BMhupkYJxi7TJYJJ/JoGGvUftlZv8=) 6: GNGk2dk3owBh0t7XjA8lYKtdBNY.roa (hash: C0SSoQPsvhCvPcaamLjO8oeUMsL4lVyuJZ6NEzbK8t8=) 7: Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa (hash: pGrQx5S2KxHTpkTBouQo/IMtimjqQRdhpHgfquKymNk=) 8: KwOOI4nyHLltSmxmCqXmNAWGCTk.roa (hash: Cn4AENaFj3iDaJ2ynDP4Br7mPiKHlqswys3FUBKbke4=) 9: M8jgCbSmS_f7pdpfIZJACPF9zFQ.roa (hash: pXnnl9PZijaHt9S33eJN6xuH7nQxj7MBnjM8e2gGQQQ=) 10: Ot9lzAsI_BYRWxJHShZ_sNy6TQE.roa (hash: okx1A4+uPrtu1VfsVJTCRu2rdB0eV794sdfC0zgIhxk=) 11: YFekMV6k_znI9JX_sw8Tv3F6sTI.roa (hash: m5Hdd1gjDtnmRTylaY7LXFqGy5f9ant1wS9vgjPqwac=) 12: YX-6ScqKUraMD69yYtTsBuVasbs.roa (hash: RDolbbCzs8cCvZMotuCTGu7mkuVioGtLAt4tkI4fzeY=) 13: c4DyAsvFXbG5o7jFYYQSHpcqttU.roa (hash: 4O/PlJ6tXg3HjZe3texYnbvtJFDsgoqM8xcWPLuCcns=) 14: hd7nNrL_1mle-1qn41vN6UL_cQo.roa (hash: rIFhHh/krDGOpoRXwoCwuKbz6zBx+GuARGKj0KEhEE8=) 15: iKgelSgdHhyAKexXbXYmueOaeUg.roa (hash: +J08ylKBec0E8mLjnpla5kSjNS7Y7MzYev03SpaSkmY=) 16: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: 1Wh/S6XGtzolVEruygSrm7GMYcfff+5sOj4RfIvnxE4=) 17: rmDqg6_mwNfYbcdrFON7FhlqYh0.roa (hash: jIARmAph/9tdERae1K6C9u4rfY/UdNtYyTUK8kLHly0=) 18: vk8AdaRmwdGEey0-KpqMAa5y-4s.roa (hash: gP9M2HbDQuUF4XHqQmNFAfst7z43j3AWmXSU5dk3Lk4=) 19: wehcPMWdUQvCmWJevdZknxgIA3c.roa (hash: LUZzWvM19nGNUyYCC4muLiqCKcZL6hOtbafsQKTgU7I=) 20: x7sCJ34Ztr98gIfsfgWJnnEyU4U.roa (hash: EQOvnK3Oa0O5kiMJfZT9bEcq7pBtLSg9vEZYTLmrVPI=) 21: xJUfKNZ1xwiWMdelR8iN_NauVcs.roa (hash: W+SoqO5Yn7RcvEpB633UMr3Dz2Q++VpVK6LVgymGZUo=) 22: zACbew-GGDfV_PK86Nbolx1SxaQ.roa (hash: D57qhpDyGLmWHribQIP+4h8O4QGVd3pMoP+ytRMK0jc=) 23: zSrZfDynMxjHsni65bw3lNFxjdo.roa (hash: B3r/Ky/6d0oUxMT1wJmgm/sCz+cdvAcj1deLNp7FbDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:7c:a6:3f:5c:df:e0:1d:66:d6:17:55:01:30:c1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Mar 1 13:00:44 2026 GMT Not After : Mar 2 13:00:44 2026 GMT Subject: CN=c997c2e5792bdfd3e91758b04205549064fd3d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:28:8c:f1:78:2b:42:30:69:f7:87:ba:13:36: 1a:4b:cf:40:23:7c:6c:bf:47:c3:87:e2:7d:a7:2e: cd:54:f3:33:b3:96:d0:3f:b9:36:7c:da:f9:11:c3: 25:5f:67:ec:ae:89:8f:51:26:38:b8:cd:51:e8:45: 2a:6d:4b:74:81:5f:bd:a6:7d:d7:c7:87:11:b8:be: 13:82:d6:a0:21:4f:2a:0d:f7:1d:e0:cf:26:1c:29: c5:5f:f7:6b:fb:68:39:7c:80:fe:f9:5c:ce:97:bf: c4:88:64:33:07:8c:5f:3c:63:48:4a:b8:25:29:f9: 1a:2f:49:1c:45:fa:1b:8c:3f:2f:e3:d2:b6:a5:d5: c2:db:28:68:7f:48:aa:70:0e:9d:7a:19:27:c8:98: 9a:bd:5a:cd:f7:b7:99:b5:dc:e8:9f:df:8e:6b:c6: 16:9c:c8:dc:8a:e9:07:17:7c:b8:b8:19:d5:90:95: 7c:ea:e3:d2:15:5d:86:ad:f8:b5:70:08:e8:ae:49: c6:c4:24:41:a1:f8:2a:88:81:a0:24:fe:da:55:cf: 78:ba:a9:11:f5:2c:3c:c9:75:99:a6:51:dc:a1:e9: ba:93:bd:93:3a:64:d2:8c:33:e5:c2:a3:53:69:8a: 58:d8:5a:48:cc:a2:b0:52:76:75:12:7a:bc:bd:b4: aa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:C2:E5:79:2B:DF:D3:E9:17:58:B0:42:05:54:90:64:FD:3D:39 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:55:52:cd:11:47:48:aa:15:31:f4:47:9c:30:b6:a3:38:00: 86:72:fc:15:e1:78:4d:a2:d2:59:7b:cb:21:fb:cc:bb:78:44: 02:b6:f4:1c:b2:7b:f2:1a:db:20:d7:65:4a:74:cf:38:83:33: 0d:1e:72:fb:b3:1f:ea:2f:07:46:3a:0b:c6:c9:fd:f2:ef:31: 4a:61:f1:35:cf:cd:94:d8:eb:09:80:0d:95:1a:e6:2f:0e:61: 4c:68:47:42:7d:c9:bf:b6:b1:b6:e5:df:80:99:aa:e9:83:4c: 67:94:71:44:b5:e2:7b:92:6a:4e:83:f5:55:e1:49:d1:e4:96: b2:2a:06:53:7b:e3:81:4e:e0:b3:22:38:5b:96:44:63:79:15: 87:26:a8:5d:33:64:ae:94:86:c2:a8:e6:d3:5e:80:e3:0a:e0: 02:db:7f:99:39:ec:00:3d:8b:b6:30:c7:3d:6c:72:a8:29:1e: ea:44:58:93:7f:4c:47:48:3b:7d:34:df:d5:8d:ba:29:48:70: 6b:9b:30:1f:9a:ed:ad:d0:57:59:f1:d9:97:66:f9:1a:9b:e3: 6f:33:8a:6a:d0:cb:66:62:44:1d:83:9e:bd:15:27:04:fd:0d: a5:8f:bf:4f:b5:fc:5d:09:ee:51:83:f1:25:7c:5b:93:cc:04: fb:99:63:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypfKY/XN/gHWbWF1UBMMEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMzAxMTMwMDQ0WhcNMjYwMzAyMTMwMDQ0WjAzMTEwLwYDVQQD EyhjOTk3YzJlNTc5MmJkZmQzZTkxNzU4YjA0MjA1NTQ5MDY0ZmQzZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSiM8XgrQjBp94e6EzYaS89AI3xs v0fDh+J9py7NVPMzs5bQP7k2fNr5EcMlX2fsromPUSY4uM1R6EUqbUt0gV+9pn3X x4cRuL4TgtagIU8qDfcd4M8mHCnFX/dr+2g5fID++VzOl7/EiGQzB4xfPGNISrgl KfkaL0kcRfobjD8v49K2pdXC2yhof0iqcA6dehknyJiavVrN97eZtdzon9+Oa8YW nMjciukHF3y4uBnVkJV86uPSFV2Grfi1cAjorknGxCRBofgqiIGgJP7aVc94uqkR 9Sw8yXWZplHcoem6k72TOmTSjDPlwqNTaYpY2FpIzKKwUnZ1Enq8vbSqLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmXwuV5K9/T6RdYsEIFVJBk/T05MB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1VSzRFH SKoVMfRHnDC2ozgAhnL8FeF4TaLSWXvLIfvMu3hEArb0HLJ78hrbINdlSnTPOIMz DR5y+7Mf6i8HRjoLxsn98u8xSmHxNc/NlNjrCYANlRrmLw5hTGhHQn3Jv7axtuXf gJmq6YNMZ5RxRLXie5JqToP1VeFJ0eSWsioGU3vjgU7gsyI4W5ZEY3kVhyaoXTNk rpSGwqjm016A4wrgAtt/mTnsAD2LtjDHPWxyqCke6kRYk39MR0g7fTTf1Y26KUhw a5swH5rtrdBXWfHZl2b5GpvjbzOKatDLZmJEHYOevRUnBP0NpY+/T7X8XQnuUYPx JXxbk8wE+5ljcw== -----END CERTIFICATE-----Generated at Sun Mar 1 23:22:14 2026 by rpki-client