$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: /HCNM+DhKOkj6404Ld5vJT1sfgo5tJlzf+A9nNiaUy8= Subject key identifier: D0:31:DA:06:7F:52:4B:43:3D:8C:1B:97:D1:FA:6D:93:B3:E4:64:E4 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019CA7FD061D5F0CABBD20B1DFE29AC70AF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1853 Signing time: Sun 01 Mar 2026 06:01:43 +0000 Manifest this update: Sun 01 Mar 2026 06:01:43 +0000 Manifest next update: Mon 02 Mar 2026 06:01:43 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 6: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 7: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: cMxEezxl7aRR7ayQL3SqUE88CQQF+bueJOws9yH/0dA=) 8: cYY9JWownI4dxUC113BsmeB-bPg.asa (hash: mzYcpAgDjivMiDigXGlTibFV5zqA/T/HUHr0MSI0Bk4=) 9: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 10: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 11: iaTyWoYRTwRbH-8Asj0TijaPuO4.asa (hash: Z8zpBbBj2fntekitrlPrQF77k8Fhh9yLKV2dUy8NxuU=) 12: lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa (hash: fjbHrRsPWcRvcVzpQntP9+B1NmK4Bi2Amk0MUakU4gE=) 13: z8lBi3aAEOzIA4rjFoQW2NBYnGI.roa (hash: WkLdmUjUmDG0OM0nogJaG3cgrVGCp28qMqMnj28ytDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a7:fd:06:1d:5f:0c:ab:bd:20:b1:df:e2:9a:c7:0a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Mar 1 06:01:43 2026 GMT Not After : Mar 2 06:01:43 2026 GMT Subject: CN=d031da067f524b433d8c1b97d1fa6d93b3e464e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:ec:f4:09:72:5e:dc:cb:38:c1:a5:86:77: b6:be:01:b0:ea:83:db:d9:fc:a0:ae:40:ad:de:fc: 8e:be:c6:c1:69:62:f1:0f:a5:e7:58:19:5e:a9:e3: 21:8f:3a:11:e4:bb:28:d8:84:96:a2:b1:b7:c7:4f: 74:79:e5:fa:f6:a6:1e:14:de:de:7d:73:6c:94:ff: c4:2e:a0:b8:3d:f8:c8:ae:0b:47:a0:d4:5e:90:a7: 1c:9e:0a:49:08:ff:33:79:ef:9d:14:70:e1:d9:35: e4:14:75:28:57:c8:dd:d1:a6:00:b3:1a:0e:f5:6a: a0:f1:71:83:0b:30:8e:68:54:37:ca:cb:c7:4f:57: bc:84:a5:05:66:cd:58:42:34:28:ab:a7:16:82:0b: 15:1f:7a:3a:c6:64:2c:ba:cf:85:95:0e:76:f9:72: 09:aa:8b:98:b5:3e:13:61:95:0e:72:d0:37:f0:94: be:02:6f:75:bd:07:57:08:e1:3b:f6:2d:bb:1f:3d: 47:a4:8d:9b:4b:bf:5e:4e:91:d1:48:10:6a:3c:ed: e5:11:7b:73:34:e9:48:db:9f:eb:1c:a5:8b:77:6f: 1c:0a:7c:2d:02:b2:c2:b9:7e:78:a1:7d:c2:c2:95: 85:e7:d9:d2:5e:67:54:a4:e0:cd:76:0c:68:d0:9a: f6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:31:DA:06:7F:52:4B:43:3D:8C:1B:97:D1:FA:6D:93:B3:E4:64:E4 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:95:fc:82:ce:e2:8f:6d:ce:0c:16:64:3e:6c:95:0d:fe:fe: 25:31:0b:f7:ad:11:b8:f4:f8:e2:17:19:d0:23:ad:b4:8d:79: aa:bb:4e:a3:d0:48:46:f0:6c:db:b5:b7:c5:42:00:86:21:20: 0a:35:b7:7a:4e:9d:c2:f5:a1:d6:e2:e1:20:4f:2a:5b:fe:53: 36:7f:ae:ce:e8:09:1f:29:ce:f9:74:d6:20:42:18:b2:68:4a: 16:2f:b5:fe:b5:d2:21:4f:44:08:fb:7d:a9:4b:d5:37:c6:a9: 2b:89:71:45:71:d4:12:e8:99:e0:0b:d6:6d:e4:74:5f:07:d6: 02:e6:85:d0:31:53:49:df:cd:05:41:9e:a3:39:d5:3a:01:74: 5b:d2:d9:7f:a6:f3:b7:8b:00:66:ed:e0:a8:a9:81:1e:2c:94: 99:a5:de:c9:a3:bb:a2:61:fb:1d:ba:1e:54:a0:f9:d8:a0:96: 44:88:8f:ac:56:b1:cf:24:cb:da:e6:93:74:e1:6d:0d:ce:fc: a6:25:8f:a3:63:47:fe:df:2f:fd:35:bc:4a:70:fe:14:3e:da: 72:dc:b7:81:fc:29:dd:40:12:f9:10:1d:4d:ed:7d:cf:33:1b: c9:2b:3f:74:ea:11:2b:5e:ae:60:62:9d:33:eb:b0:0a:eb:2f: 55:03:d8:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyn/QYdXwyrvSCx3+KaxwrwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwMzAxMDYwMTQzWhcNMjYwMzAyMDYwMTQzWjAzMTEwLwYDVQQD EyhkMDMxZGEwNjdmNTI0YjQzM2Q4YzFiOTdkMWZhNmQ5M2IzZTQ2NGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi3s9AlyXtzLOMGlhne2vgGw6oPb 2fygrkCt3vyOvsbBaWLxD6XnWBleqeMhjzoR5Lso2ISWorG3x090eeX69qYeFN7e fXNslP/ELqC4PfjIrgtHoNRekKccngpJCP8zee+dFHDh2TXkFHUoV8jd0aYAsxoO 9Wqg8XGDCzCOaFQ3ysvHT1e8hKUFZs1YQjQoq6cWggsVH3o6xmQsus+FlQ52+XIJ qouYtT4TYZUOctA38JS+Am91vQdXCOE79i27Hz1HpI2bS79eTpHRSBBqPO3lEXtz NOlI25/rHKWLd28cCnwtArLCuX54oX3CwpWF59nSXmdUpODNdgxo0Jr2pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAx2gZ/UktDPYwbl9H6bZOz5GTkMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJX8gs7i j23ODBZkPmyVDf7+JTEL960RuPT44hcZ0COttI15qrtOo9BIRvBs27W3xUIAhiEg CjW3ek6dwvWh1uLhIE8qW/5TNn+uzugJHynO+XTWIEIYsmhKFi+1/rXSIU9ECPt9 qUvVN8apK4lxRXHUEuiZ4AvWbeR0XwfWAuaF0DFTSd/NBUGeoznVOgF0W9LZf6bz t4sAZu3gqKmBHiyUmaXeyaO7omH7HboeVKD52KCWRIiPrFaxzyTL2uaTdOFtDc78 piWPo2NH/t8v/TW8SnD+FD7acty3gfwp3UAS+RAdTe19zzMbySs/dOoRK16uYGKd M+uwCusvVQPYZw== -----END CERTIFICATE-----Generated at Sun Mar 1 16:28:45 2026 by rpki-client