$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: AI1NXv/NH5r7kmOX+yRH26VN6m9fOdWXPlAYChBrLQI= Subject key identifier: C6:20:2C:43:79:81:78:2D:C6:B8:5F:C7:F9:A8:63:26:AD:18:30:A9 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019CA9EA9A3B6A195A7F356742C6DFFD50D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1850 Signing time: Sun 01 Mar 2026 15:00:50 +0000 Manifest this update: Sun 01 Mar 2026 15:00:50 +0000 Manifest next update: Mon 02 Mar 2026 15:00:50 +0000 Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=) 2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=) 3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=) 4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=) 5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=) 6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=) 7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=) 8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=) 9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=) 10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=) 11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=) 12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: H1TR4U3NPpXsk3BXdKekLF9X8nvzF7DAiSiGRAk2kLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:ea:9a:3b:6a:19:5a:7f:35:67:42:c6:df:fd:50:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Mar 1 15:00:50 2026 GMT Not After : Mar 2 15:00:50 2026 GMT Subject: CN=c6202c437981782dc6b85fc7f9a86326ad1830a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:fc:78:9e:ec:c4:a8:fa:99:bd:e5:7a:1f: 3b:e8:3b:b9:ff:db:69:7a:ee:d8:d8:71:da:9a:5a: 97:65:62:4d:e0:87:5c:24:0d:29:96:f6:ea:e9:05: 56:bf:d9:d8:00:da:eb:e8:c9:02:49:f9:c8:3b:ef: da:7a:2c:0c:8b:c9:29:e2:13:b6:54:09:90:c5:7d: ef:8a:91:76:69:00:bb:e8:a0:f9:da:b0:ba:6c:61: 22:66:13:46:1c:6b:69:75:9d:91:27:7b:c3:c6:41: a8:db:96:61:42:33:e6:aa:d4:65:6b:74:7b:65:6c: 79:20:e6:18:3d:a3:c8:3d:65:05:96:e0:c4:d7:8c: 96:ff:4b:32:a3:31:10:07:b1:23:41:a1:42:86:d4: f0:ef:c6:b9:98:e7:9d:33:2b:ba:a1:f3:a8:07:4a: 02:61:fc:02:ac:4f:17:19:8c:36:44:d3:ff:1e:16: 12:b0:62:84:a7:81:14:2f:e0:8d:33:d5:28:1b:7b: c1:6c:c5:4b:55:51:6f:e0:96:61:1b:28:bf:7f:48: 12:36:8a:7f:c4:8b:bc:03:9c:86:bf:50:ef:b5:2d: 43:d5:4a:7f:da:97:53:7c:a9:d3:7d:5b:8a:3f:28: 3e:be:29:29:c4:1d:cd:f0:0f:cb:73:17:f4:6c:9f: 23:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:20:2C:43:79:81:78:2D:C6:B8:5F:C7:F9:A8:63:26:AD:18:30:A9 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:43:ac:de:12:76:2b:35:f9:6f:07:b5:c4:27:f2:71:fd:fc: be:97:12:d7:53:60:73:c2:c6:40:41:b9:24:f8:1f:d4:a4:3c: 35:66:18:26:20:98:3c:e3:fd:1a:5c:8d:53:fc:8e:ff:16:a9: a0:ae:83:3a:a1:c1:d6:de:80:20:ce:50:4b:79:6f:05:b1:f7: 78:b4:54:66:29:0e:76:6b:22:a5:96:09:f8:88:38:77:34:0c: d2:b5:59:53:b2:f4:a9:bd:27:d9:08:fb:0e:d0:9f:8b:82:8a: bc:74:13:37:9c:72:09:ec:50:4f:04:cc:7a:fd:71:5f:e7:f8: 22:aa:95:23:c2:96:8c:06:c0:6f:37:2f:65:97:31:cc:71:87: 4f:87:e2:ee:b4:55:b6:59:fd:30:f3:fd:6a:4d:28:a6:fd:64: fc:a7:ab:fa:88:a6:ef:1b:67:64:4d:3a:56:05:00:d4:88:d5: c4:31:91:d3:fd:00:13:b7:d9:3c:72:07:62:d0:a1:bb:87:1a: 93:83:31:e6:da:3f:0b:40:4a:b5:5a:61:7f:5e:d6:6e:37:e9: 92:96:48:1c:d2:45:e7:80:4b:86:ec:87:db:86:fd:31:ed:0e: 0a:34:be:ad:e1:bc:bd:d1:79:78:d5:93:ab:0d:14:39:31:38: b5:56:57:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyp6po7ahlafzVnQsbf/VDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwMzAxMTUwMDUwWhcNMjYwMzAyMTUwMDUwWjAzMTEwLwYDVQQD EyhjNjIwMmM0Mzc5ODE3ODJkYzZiODVmYzdmOWE4NjMyNmFkMTgzMGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx/8eJ7sxKj6mb3leh876Du5/9tp eu7Y2HHamlqXZWJN4IdcJA0plvbq6QVWv9nYANrr6MkCSfnIO+/aeiwMi8kp4hO2 VAmQxX3vipF2aQC76KD52rC6bGEiZhNGHGtpdZ2RJ3vDxkGo25ZhQjPmqtRla3R7 ZWx5IOYYPaPIPWUFluDE14yW/0syozEQB7EjQaFChtTw78a5mOedMyu6ofOoB0oC YfwCrE8XGYw2RNP/HhYSsGKEp4EUL+CNM9UoG3vBbMVLVVFv4JZhGyi/f0gSNop/ xIu8A5yGv1DvtS1D1Up/2pdTfKnTfVuKPyg+vikpxB3N8A/Lcxf0bJ8jWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYgLEN5gXgtxrhfx/moYyatGDCpMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0Os3hJ2 KzX5bwe1xCfycf38vpcS11Ngc8LGQEG5JPgf1KQ8NWYYJiCYPOP9GlyNU/yO/xap oK6DOqHB1t6AIM5QS3lvBbH3eLRUZikOdmsipZYJ+Ig4dzQM0rVZU7L0qb0n2Qj7 DtCfi4KKvHQTN5xyCexQTwTMev1xX+f4IqqVI8KWjAbAbzcvZZcxzHGHT4fi7rRV tln9MPP9ak0opv1k/Ker+oim7xtnZE06VgUA1IjVxDGR0/0AE7fZPHIHYtChu4ca k4Mx5to/C0BKtVphf17WbjfpkpZIHNJF54BLhuyH24b9Me0OCjS+reG8vdF5eNWT qw0UOTE4tVZXtg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:17:51 2026 by rpki-client