$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: mvtiyJXGUQk/aFewm6xlYEmRkukTgFPKLLBeHHHvZTg= Subject key identifier: 30:D7:84:82:FE:C8:9E:2C:9B:A0:06:CF:A1:F5:3E:6B:EC:7D:C5:8A Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019CAD901A0E407DBF25D5CBF6290E18EFC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 0BAB Signing time: Mon 02 Mar 2026 08:00:28 +0000 Manifest this update: Mon 02 Mar 2026 08:00:28 +0000 Manifest next update: Tue 03 Mar 2026 08:00:28 +0000 Files and hashes: 1: 1vbf4idXUPCWVm0PjanUNDzo3LM.roa (hash: /Im6rBlfP/hqnXVPz/7A/iNYH4vUpjF3xS/bQj/oQ5Q=) 2: 2KGI0ncnRfDhkkE_GeDt4kg9A6A.roa (hash: D03oFEIOCPyMTFkWyGOuVN6dyHDgUfDh2sP45/yVk0M=) 3: 7ZlxFMTrvWHxaDQj8cGRFKFOYRs.roa (hash: cMX6h6ESvCK8kLWWGv+cii+7hJJzZRIJOKQPIQ2Prc4=) 4: 99pLW5NSdSWyy1K_KuBziUqycLU.roa (hash: iIMALiQte4M3j2/lLwOQNkJ4eCV7WxTe0kTN8g67L1E=) 5: BVH6b7o32zruo819dGQ7RJqUDl8.roa (hash: xnWOB/u8pFkczKp6SQPwHh+agMf57JcMqkeEhSQno3k=) 6: CFRA8brf5sE4J0Vi_mv81svugxI.roa (hash: uvljp7f/z0E6aDzdRUCbiXg1uxB0BXMPXZAh/OfcnR8=) 7: O95FYcJt2MJqQBJC_AIOSexxhY0.roa (hash: 0fj+Bm1xvWakTGbe1RmNsauUNwiHSCe1QzuuMJQvQKI=) 8: Q319puPuZ6pEVFIow6HSoz6aiu4.roa (hash: w5OU1Qsqqe0TAPMfpoTlrKdZQKLeQmRMZSWdZEzQ0ZA=) 9: R2Xs7XqXEclO85JXT59oGHv2UUY.roa (hash: nIFGF9nru9tSwOgFOZOY266TEUqFgtMmSxtUiekx1us=) 10: SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa (hash: OXGfPj6oOrbejLX45mK4NILgwBe4FcCaUI2RA3UNsvQ=) 11: UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa (hash: 31f0c90jHRTJFbEadEWirIAL83TgIDaQVunpcdqq/Lc=) 12: WBXZwfjVQMhyPd0wAfSbxYfJifA.roa (hash: 7Zi1rF/rVFpFWu59NAjvAspfxDVu7Q9niDEtiwGb2YM=) 13: YnEzVxxydocNJgTIMFRXPna0zB4.roa (hash: ZgavJWzGoXn3e/0BfVR/irboVRcmVNTc0rTuF6DBaG8=) 14: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: YLlXznZcXRF6tVDUPu9w46gWaisp5O4T7ISpHIyOrIc=) 15: fja8EDLSj-GXWp-ja1-kSk00taQ.roa (hash: fV9XPVZHv5y/fbzPwaa+4kN4atFK0nZgUPlx8b1imXU=) 16: qUJVzkvCS28CT-LmqvhYZclQCzE.roa (hash: BntXpT1OhjVzTBdajvz/YjJOLIAqWeZhu5LfIQJSn34=) 17: ulmVQiOp1gOs49EtEkyImPsqtd0.roa (hash: f351U+o3k5FK4942+J3BTuz1lhxg1e9CRMaV4iDlrp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:90:1a:0e:40:7d:bf:25:d5:cb:f6:29:0e:18:ef:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Mar 2 08:00:28 2026 GMT Not After : Mar 3 08:00:28 2026 GMT Subject: CN=30d78482fec89e2c9ba006cfa1f53e6bec7dc58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:fb:80:bd:fc:d6:dc:94:0c:ba:e8:6d:3a: 89:78:5c:16:37:d3:06:d9:21:c5:a5:97:04:81:8f: 10:d4:02:94:65:24:d7:b8:b9:65:b1:c1:29:c8:44: 6e:44:01:2f:cc:a2:cd:50:2d:55:51:05:ab:de:35: 47:6f:85:8c:08:89:9c:b1:9c:c8:cd:5d:30:71:4e: c5:e0:aa:16:93:b9:49:b3:64:9c:2a:37:9a:dc:0e: e2:d3:8b:05:1b:1c:f6:6a:d1:4b:f1:6d:30:8a:5b: 22:ce:77:91:45:34:f6:b3:49:67:56:7e:f3:ea:f3: d0:77:75:25:7b:1f:16:0f:ac:a8:db:f0:ed:59:8e: e6:1a:5b:90:89:4d:e3:dc:d6:a5:1a:3c:8e:39:b3: 00:e3:f6:b8:a9:ab:de:30:7c:95:81:65:54:44:c1: 60:0c:ad:18:61:32:fe:f0:3d:a3:e6:23:24:f2:35: 38:33:56:79:f5:2d:77:51:24:d4:21:d6:b8:04:6b: b9:e7:53:b8:c3:db:40:d7:d6:9d:b1:1d:dc:4c:69: bc:3a:e2:62:76:c8:a4:cb:67:05:e0:6c:22:dd:49: 97:f7:e8:ca:25:a0:1b:1a:e7:c8:11:25:df:68:dc: 40:f0:0b:05:f4:4d:12:9a:39:f6:5f:13:40:61:9c: f1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D7:84:82:FE:C8:9E:2C:9B:A0:06:CF:A1:F5:3E:6B:EC:7D:C5:8A X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b5:0b:f3:b9:5e:b8:c1:11:23:43:7f:88:ca:a2:55:41:76: d9:5a:26:b6:3c:f1:39:93:e8:b7:de:d5:6d:ae:71:3e:58:f4: c4:7d:5c:bb:6b:73:b0:fc:38:a3:bf:08:19:f3:dc:e4:9b:79: 00:a2:90:27:fe:ac:0d:f4:64:20:31:f7:df:5f:7a:64:fb:28: ca:d7:c0:72:c7:92:3a:2c:e3:49:1a:b6:99:3d:07:f3:5f:12: 12:ba:59:e9:a1:20:91:11:4a:d1:cf:97:64:ab:65:73:fd:b6: e1:e4:63:1e:47:e4:7a:9d:3c:5b:27:85:21:5a:24:08:6d:25: a5:2f:f8:82:c7:7d:65:ea:2a:9a:29:f5:6f:7a:41:76:a9:b1: ae:00:e6:1d:01:e7:a1:c2:0f:61:9e:1b:b6:b8:36:3e:f7:2f: 70:65:78:99:4d:05:1b:ac:1f:06:b5:8b:d8:f8:15:6c:1b:2c: 68:b7:60:38:e3:f8:fa:33:4f:d1:83:67:d0:8f:60:c2:48:76: 23:d8:50:e8:11:2f:19:3f:c0:cd:cb:e3:c3:3a:16:b4:7c:49: 57:bd:4a:4b:42:2f:20:5c:cb:49:f7:69:9e:79:af:ee:93:8d: eb:2c:fd:8a:28:e3:62:31:5a:ba:55:7e:a6:cb:94:4e:ca:d0: e9:56:51:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytkBoOQH2/JdXL9ikOGO/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwMzAyMDgwMDI4WhcNMjYwMzAzMDgwMDI4WjAzMTEwLwYDVQQD EygzMGQ3ODQ4MmZlYzg5ZTJjOWJhMDA2Y2ZhMWY1M2U2YmVjN2RjNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl/7gL381tyUDLrobTqJeFwWN9MG 2SHFpZcEgY8Q1AKUZSTXuLllscEpyERuRAEvzKLNUC1VUQWr3jVHb4WMCImcsZzI zV0wcU7F4KoWk7lJs2ScKjea3A7i04sFGxz2atFL8W0wilsizneRRTT2s0lnVn7z 6vPQd3Ulex8WD6yo2/DtWY7mGluQiU3j3NalGjyOObMA4/a4qaveMHyVgWVURMFg DK0YYTL+8D2j5iMk8jU4M1Z59S13USTUIda4BGu551O4w9tA19adsR3cTGm8OuJi dsiky2cF4Gwi3UmX9+jKJaAbGufIESXfaNxA8AsF9E0Smjn2XxNAYZzxOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDXhIL+yJ4sm6AGz6H1PmvsfcWKMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrUL87le uMERI0N/iMqiVUF22VomtjzxOZPot97Vba5xPlj0xH1cu2tzsPw4o78IGfPc5Jt5 AKKQJ/6sDfRkIDH33196ZPsoytfAcseSOizjSRq2mT0H818SErpZ6aEgkRFK0c+X ZKtlc/224eRjHkfkep08WyeFIVokCG0lpS/4gsd9Zeoqmin1b3pBdqmxrgDmHQHn ocIPYZ4btrg2PvcvcGV4mU0FG6wfBrWL2PgVbBssaLdgOOP4+jNP0YNn0I9gwkh2 I9hQ6BEvGT/AzcvjwzoWtHxJV71KS0IvIFzLSfdpnnmv7pON6yz9iijjYjFaulV+ psuUTsrQ6VZRbQ== -----END CERTIFICATE-----Generated at Mon Mar 2 16:50:37 2026 by rpki-client