$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: W0z6hRrPhj+j0UsrmqdJ0y+4GDrE4lbXIatUxXfiyyo= Subject key identifier: CF:8F:2E:11:75:4D:E4:DC:A1:25:7F:2D:13:05:66:EE:49:D8:D6:5D Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019CACEBFFC912DA636D9871A6D6C4133136 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 15EE Signing time: Mon 02 Mar 2026 05:01:13 +0000 Manifest this update: Mon 02 Mar 2026 05:01:13 +0000 Manifest next update: Tue 03 Mar 2026 05:01:13 +0000 Files and hashes: 1: 4LTSiiIXCY2aVQheO-OK2Ks1zVc.roa (hash: /HUlN5mU4nQlfn3Lbzxe64CdVsxaFWp5WmzIr3dsQ+U=) 2: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 3: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 4: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 5: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 6: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 7: KiLA-XCCVQ3hp6NK0nSvvdBkVaA.roa (hash: Wrbvgs04+OV9y9FcYP+1OM/PeyM8B8+/OgsBO82HfPE=) 8: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 9: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 10: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: B2sLl60l0pxxi/xZzuzjhlHCkyW3hBt+SpebV59QXKE=) 11: dZo66_L9wh2qbij7G3JOKCs449k.roa (hash: EcfgXVOvSMiIqr4XDNVO8j7tZpRnQKNduJAQlIX28Ko=) 12: hN8uqpJVGUVz_yoCMsK71ZeLMkw.roa (hash: yFRAlutdbfqI9DX9panTjVrB5bc9srd6cM00XqjPdl4=) 13: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 14: vNdkeRwM5csqt2VdDCeWXV5Lqcg.roa (hash: 8fLuiRSXi1wlRLB5+uM6MoQhKZD4VrD7fYAS5Z6UVgU=) 15: vR9E1xSnliRW9Usue4V0ADKHiho.roa (hash: S5rMh/OoVyLOT3VDLY9zfWdq9jorvnICYEBPJuWsM0s=) 16: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 17: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:eb:ff:c9:12:da:63:6d:98:71:a6:d6:c4:13:31:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Mar 2 05:01:13 2026 GMT Not After : Mar 3 05:01:13 2026 GMT Subject: CN=cf8f2e11754de4dca1257f2d130566ee49d8d65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4c:52:8d:e1:a9:f8:5f:3c:12:83:ed:32:d3: 26:9a:79:70:4b:38:0c:3b:b3:83:b8:eb:42:ec:5c: 72:41:59:70:3a:21:8c:10:f2:4f:e9:d3:ad:70:54: d7:6d:2c:92:67:74:c5:72:8f:82:f1:5c:f2:34:05: e5:e1:8b:e9:85:f8:9b:a3:5d:a1:07:77:d4:4e:e3: 47:b6:48:c9:44:b0:c8:0d:05:52:8f:7f:a9:20:df: 7d:35:13:7a:2e:29:0a:9f:c1:bc:cc:00:58:de:35: ab:2a:35:f7:f9:3b:1c:05:80:1f:cc:87:15:4f:c4: 2a:d7:13:89:9b:5a:22:db:fc:84:e6:84:98:90:2c: 59:9c:1f:67:5c:52:a3:8c:c6:3a:be:5b:80:c0:4f: e3:fb:2f:fa:6a:86:4d:e7:6a:1d:fc:f7:e4:17:31: fa:c6:58:d5:ea:92:f2:77:41:8c:0c:88:f5:32:b1: f9:38:65:95:35:de:12:c1:09:22:63:31:89:73:2c: 88:45:7a:78:54:f1:3a:5d:f8:98:9a:6c:dd:92:18: b8:f6:64:c5:39:4d:8b:b6:ef:db:f9:b7:91:6b:f0: 21:76:39:22:f4:5d:7b:c5:1a:c5:2f:11:61:80:48: 31:cd:52:37:fd:ff:2f:2d:dc:73:05:d8:91:68:fd: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8F:2E:11:75:4D:E4:DC:A1:25:7F:2D:13:05:66:EE:49:D8:D6:5D X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:27:d4:81:f1:f2:e4:d8:50:ad:5a:ce:dc:f4:f2:ce:76:10: 99:91:63:8f:78:47:a6:7e:11:fc:a2:19:52:f6:c9:86:74:47: f6:b6:6f:10:26:7f:8c:c0:c9:4e:e0:9a:74:3d:ff:9f:e5:4a: d7:20:30:23:9f:1c:3f:5e:2c:68:cd:d1:43:0b:17:ab:1a:84: 75:13:80:d2:d5:65:a2:97:97:b6:e1:6c:89:78:70:eb:94:94: af:a3:83:8b:c3:db:bf:f8:ec:42:81:40:6b:de:5a:8d:03:b0: eb:79:26:42:d7:30:32:eb:d0:87:13:8b:bd:0f:2b:17:d8:ec: 2e:19:1c:8d:bd:78:e3:66:03:95:76:a8:ac:f7:cb:28:3e:9d: d6:cc:57:a2:e7:78:90:ca:02:ef:f4:a9:7d:e0:57:1c:7e:9d: 5e:16:64:b8:73:ab:70:83:c1:11:7c:6f:05:41:62:89:67:48: bc:5c:99:42:6a:b3:d0:04:5b:e7:33:32:25:e9:0a:f4:d9:b3: 44:c4:fb:65:eb:90:9a:61:05:a3:b7:1b:69:c5:5d:06:00:3a: e4:5b:69:5c:72:e1:4e:9e:63:9e:9f:6e:da:88:ec:7f:4d:67: e7:48:66:ed:b2:4d:43:b6:9b:0c:de:75:96:00:07:50:ec:d4: 7e:4f:f5:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZys6//JEtpjbZhxptbEEzE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMzAyMDUwMTEzWhcNMjYwMzAzMDUwMTEzWjAzMTEwLwYDVQQD EyhjZjhmMmUxMTc1NGRlNGRjYTEyNTdmMmQxMzA1NjZlZTQ5ZDhkNjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UxSjeGp+F88EoPtMtMmmnlwSzgM O7ODuOtC7FxyQVlwOiGMEPJP6dOtcFTXbSySZ3TFco+C8VzyNAXl4Yvphfibo12h B3fUTuNHtkjJRLDIDQVSj3+pIN99NRN6LikKn8G8zABY3jWrKjX3+TscBYAfzIcV T8Qq1xOJm1oi2/yE5oSYkCxZnB9nXFKjjMY6vluAwE/j+y/6aoZN52od/PfkFzH6 xljV6pLyd0GMDIj1MrH5OGWVNd4SwQkiYzGJcyyIRXp4VPE6XfiYmmzdkhi49mTF OU2Ltu/b+beRa/Ahdjki9F17xRrFLxFhgEgxzVI3/f8vLdxzBdiRaP0xLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+PLhF1TeTcoSV/LRMFZu5J2NZdMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuCfUgfHy 5NhQrVrO3PTyznYQmZFjj3hHpn4R/KIZUvbJhnRH9rZvECZ/jMDJTuCadD3/n+VK 1yAwI58cP14saM3RQwsXqxqEdROA0tVlopeXtuFsiXhw65SUr6ODi8Pbv/jsQoFA a95ajQOw63kmQtcwMuvQhxOLvQ8rF9jsLhkcjb1442YDlXaorPfLKD6d1sxXoud4 kMoC7/SpfeBXHH6dXhZkuHOrcIPBEXxvBUFiiWdIvFyZQmqz0ARb5zMyJekK9Nmz RMT7ZeuQmmEFo7cbacVdBgA65FtpXHLhTp5jnp9u2ojsf01n50hm7bJNQ7abDN51 lgAHUOzUfk/1Yw== -----END CERTIFICATE-----Generated at Mon Mar 2 10:53:41 2026 by rpki-client