$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: kjq6CBWqLENn4MTW7qChIEikp9qlxmv5rT8wG6zQskE= Subject key identifier: 7C:70:DD:C8:A6:D8:7A:D9:13:16:76:CB:63:DC:05:34:26:31:A7:76 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019CA9EB8EFA092D17ACAA4C565F3B782FD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1854 Signing time: Sun 01 Mar 2026 15:01:52 +0000 Manifest this update: Sun 01 Mar 2026 15:01:52 +0000 Manifest next update: Mon 02 Mar 2026 15:01:52 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 6: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 7: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: /6Y3QyPgaddzYrtuuld3EJ28kBSJEEM1Yo8/hNEXdkE=) 8: cYY9JWownI4dxUC113BsmeB-bPg.asa (hash: mzYcpAgDjivMiDigXGlTibFV5zqA/T/HUHr0MSI0Bk4=) 9: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 10: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 11: iaTyWoYRTwRbH-8Asj0TijaPuO4.asa (hash: Z8zpBbBj2fntekitrlPrQF77k8Fhh9yLKV2dUy8NxuU=) 12: lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa (hash: fjbHrRsPWcRvcVzpQntP9+B1NmK4Bi2Amk0MUakU4gE=) 13: z8lBi3aAEOzIA4rjFoQW2NBYnGI.roa (hash: WkLdmUjUmDG0OM0nogJaG3cgrVGCp28qMqMnj28ytDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:eb:8e:fa:09:2d:17:ac:aa:4c:56:5f:3b:78:2f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Mar 1 15:01:52 2026 GMT Not After : Mar 2 15:01:52 2026 GMT Subject: CN=7c70ddc8a6d87ad9131676cb63dc05342631a776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cb:b3:1d:75:bf:b8:c3:a1:b4:fa:19:f2:58: ad:c0:1f:f5:8d:3c:c4:34:74:16:ac:35:c9:62:b4: 80:3d:1a:b9:19:d5:46:8e:3e:7d:ac:2d:cb:ad:9b: 5c:16:ac:46:44:5d:57:fb:76:e5:18:9f:be:e2:e4: a4:db:2a:54:62:09:73:3b:56:53:d0:bf:1b:4e:cf: 1b:8c:f7:a0:97:a9:a9:df:5c:13:32:27:ef:dd:eb: 04:c3:bf:77:c1:79:7e:b0:8e:6b:10:e5:44:16:73: 5c:63:26:df:c2:87:bf:9a:9a:3d:f0:c4:b0:3b:ea: b6:21:fc:50:16:4b:f6:c9:a9:9b:e0:a8:4f:04:5a: 2f:4c:03:7f:0f:71:0f:a6:0c:28:7a:b0:7e:70:c8: 62:07:8f:ec:24:3c:f6:9c:c9:b2:18:cf:9c:4c:23: 0e:b1:62:4f:fe:32:c8:76:a9:27:ad:5e:e4:de:0b: 82:4b:d2:99:9e:ce:71:27:d7:ec:6b:84:f9:01:fe: 62:e3:d7:cd:c4:e9:1a:ab:df:d0:b7:a1:1e:09:e4: 7e:d7:0f:fd:66:96:3b:5d:25:c1:c8:5e:24:0d:f4: 00:6d:f0:da:55:c4:37:19:7f:d3:19:63:a3:4f:26: 9b:c4:57:0b:a3:cf:2f:32:1a:3a:1d:99:0d:2b:d3: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:70:DD:C8:A6:D8:7A:D9:13:16:76:CB:63:DC:05:34:26:31:A7:76 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:09:f9:a6:2c:25:06:aa:c3:0e:15:a3:73:e7:78:64:78:e4: c4:0d:76:63:76:79:7d:4b:db:49:44:f8:fb:93:5c:80:58:0f: 0a:c8:8b:21:e2:b8:f2:aa:fc:d1:07:68:1e:27:d2:94:e0:e4: 06:2c:2d:a2:6a:ac:4a:b8:01:05:93:ac:87:66:c6:0c:49:ef: ee:be:4e:03:dc:0b:b0:82:d8:5b:11:8a:98:2d:92:a4:c1:cd: 9e:f6:81:7e:e9:a5:e8:7d:25:3d:47:d5:48:db:3e:c8:fe:08: 83:52:17:1d:a4:8a:ac:89:b9:b4:83:27:f3:cc:67:c3:23:02: 7b:fd:d6:30:31:37:38:8b:50:43:0b:b2:57:0d:f2:3f:9b:21: c3:9a:93:29:16:b8:54:02:3b:4c:9c:01:d3:9f:37:14:96:cc: 17:99:35:12:40:d3:7a:66:59:df:9a:87:4c:f7:bb:27:12:e2: 2c:3a:11:00:7f:e8:1e:b4:3b:93:ee:02:41:12:c7:1d:96:e2: fa:6f:9d:09:bb:59:05:fe:d3:96:9e:74:8e:d3:5a:86:81:e4: d3:0c:31:40:4f:c5:9c:b8:fc:98:c5:0c:65:b2:69:12:43:12: 85:ab:b2:65:0a:0f:19:01:d0:2e:40:c9:51:2b:e1:ae:1c:21: e2:05:9e:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyp6476CS0XrKpMVl87eC/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwMzAxMTUwMTUyWhcNMjYwMzAyMTUwMTUyWjAzMTEwLwYDVQQD Eyg3YzcwZGRjOGE2ZDg3YWQ5MTMxNjc2Y2I2M2RjMDUzNDI2MzFhNzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMuzHXW/uMOhtPoZ8litwB/1jTzE NHQWrDXJYrSAPRq5GdVGjj59rC3LrZtcFqxGRF1X+3blGJ++4uSk2ypUYglzO1ZT 0L8bTs8bjPegl6mp31wTMifv3esEw793wXl+sI5rEOVEFnNcYybfwoe/mpo98MSw O+q2IfxQFkv2yamb4KhPBFovTAN/D3EPpgwoerB+cMhiB4/sJDz2nMmyGM+cTCMO sWJP/jLIdqknrV7k3guCS9KZns5xJ9fsa4T5Af5i49fNxOkaq9/Qt6EeCeR+1w/9 ZpY7XSXByF4kDfQAbfDaVcQ3GX/TGWOjTyabxFcLo88vMho6HZkNK9OXCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxw3cim2HrZExZ2y2PcBTQmMad2MB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwn5piwl BqrDDhWjc+d4ZHjkxA12Y3Z5fUvbSUT4+5NcgFgPCsiLIeK48qr80QdoHifSlODk BiwtomqsSrgBBZOsh2bGDEnv7r5OA9wLsILYWxGKmC2SpMHNnvaBfuml6H0lPUfV SNs+yP4Ig1IXHaSKrIm5tIMn88xnwyMCe/3WMDE3OItQQwuyVw3yP5shw5qTKRa4 VAI7TJwB0583FJbMF5k1EkDTemZZ35qHTPe7JxLiLDoRAH/oHrQ7k+4CQRLHHZbi +m+dCbtZBf7Tlp50jtNahoHk0wwxQE/FnLj8mMUMZbJpEkMShauyZQoPGQHQLkDJ USvhrhwh4gWeHw== -----END CERTIFICATE-----Generated at Sun Mar 1 18:22:07 2026 by rpki-client