$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: LwxJh4udYRpOyaON3JF0TPUOdZENNg2r3s0wcY3uT3o= Subject key identifier: D1:8D:6B:4B:C5:44:3E:F6:42:A2:19:4E:DE:5B:23:0B:6F:E3:C6:00 Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 019CACEBDAF26E8CA3BC8EA1CCA1F9343575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 0CF9 Signing time: Mon 02 Mar 2026 05:01:03 +0000 Manifest this update: Mon 02 Mar 2026 05:01:03 +0000 Manifest next update: Tue 03 Mar 2026 05:01:03 +0000 Files and hashes: 1: 1-oqqJ8ZfwSYorKye1K5Dg5GXPzQ.roa (hash: 1ej6pOHLYXm5iCXxRsGDztb7+LKciVWjFXVVepkKqLs=) 2: 4C6lDO5r4dO34Kvc4puKU6qDzrc.roa (hash: cr37FJDk08RUMr1ukCqH/SNRGksdiL298wPzQsPdogU=) 3: 7ufe8Ziwajih3V-SsOX5xLzev30.roa (hash: QyIeTG/G1FNVaI9BwLqSRkawlHV2k3OXzvdMZeHqyqI=) 4: DIrmWd55nKvAoJ8yf_4jWgyrlNg.roa (hash: swf8YmD6Ki4+UjZ5FglBvmHT7MtzNkXVGqo+SXTTnU4=) 5: En53WjpKXYOY28GmUPcnj0P9XsU.roa (hash: g5B0wsfeM+kUab0oslFfy+uO/7pkIJMIUwsORX0lIxk=) 6: QzMyegFOkVY4VnXHpYFz61drfjg.roa (hash: mOpZR+GPGqu6sOaNvQ6niRjr3oITuVct+WfwTHyWSVw=) 7: UyjLHUjp8FR96cTc-X91a4t5VzU.roa (hash: olOAARUB3nsGFVXwsbDM9r8HLRIAOZ22q31k+PB08xE=) 8: YYb4o2Qrf5RAPvr8jM-eGPijvLM.roa (hash: JDywiyYxTdXyaQTqvpu95Q6O2+pyo8JzaDgoM+cMFa8=) 9: an_JBsc5UDWveWx_SgC7IPJTaY4.roa (hash: I8/w0xT4ZbJsspj7+H+BbaeuyuIiaB+TH53TkHQGuiw=) 10: eepL3sgisZ_Fx8M8tpCcWXgBN7A.roa (hash: NVQN39kYTzlIkkaImPxSDYfZQOL0uEHUr7pCGoDxD0s=) 11: jY4FxxHSLqOf-Dz4az7vjzk-05E.roa (hash: WSvRiWcLn+mHuDh/d2IOLKWGrNq7IjbPS2P0dyk6NAc=) 12: vsccf6N6ed3oSOr16Si52_Pi1OU.roa (hash: dDYPX5T+6IsG+WDryYCWg19yZkGlyJuRt9MFgGoSWIo=) 13: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: prCdhnjwNiKlyhGdcNWYu0hnHsLy/eM6cX01UDRgVDU=) 14: y5E7xH2oBenvjr2Fyw8V03Q0FEo.roa (hash: SoIINjgYLbI2mAwDLnhQS6K4Jz5ozkLCQLksrjcHRIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:eb:da:f2:6e:8c:a3:bc:8e:a1:cc:a1:f9:34:35:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Mar 2 05:01:03 2026 GMT Not After : Mar 3 05:01:03 2026 GMT Subject: CN=d18d6b4bc5443ef642a2194ede5b230b6fe3c600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:ea:3a:7c:0c:bf:9a:bc:cd:6a:65:db:58: ff:3f:84:e9:6d:0d:67:08:62:a0:db:13:2f:88:71: 08:cc:ac:da:f5:66:37:c1:fa:21:3d:67:7f:47:72: 6f:e2:a7:8f:12:cb:c0:42:af:d2:0d:4a:12:b7:a0: 39:25:59:ca:c9:cb:2f:46:13:8d:a8:62:20:cc:fd: 66:c4:83:7a:61:cf:ed:05:7d:9e:4c:d7:6c:75:39: e4:9a:9a:31:fa:fd:c0:a1:12:05:46:33:ac:9c:56: c2:22:2c:14:e0:94:6f:33:54:d9:e3:02:53:00:ea: 7d:b5:43:91:a8:45:1e:1c:e5:28:c7:c1:04:0f:0f: fb:76:90:70:79:f4:ab:a8:32:8b:c6:aa:83:ef:c0: 80:87:94:13:1c:92:6b:17:93:df:97:bb:22:2d:67: 47:74:37:a4:0c:1c:c6:5b:c3:66:bd:3e:31:eb:26: 68:73:1a:08:83:b4:ea:01:98:89:04:4f:0f:d6:34: a1:78:50:c2:91:a8:ff:2a:32:a7:c8:52:c2:96:14: 77:cb:5a:c1:9e:76:6a:ae:09:bb:b4:73:12:49:b8: 29:c0:32:a5:2f:1b:57:ed:26:33:06:54:4c:0f:07: cc:67:8b:ab:f0:ee:34:ae:db:38:00:07:2e:ff:29: 3f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8D:6B:4B:C5:44:3E:F6:42:A2:19:4E:DE:5B:23:0B:6F:E3:C6:00 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:68:70:b0:ae:83:3e:32:47:80:13:0f:1f:be:2b:51:95:58: f2:28:bf:35:5c:54:6a:47:f4:02:3c:47:2f:84:e6:5b:a8:a8: 16:9e:5a:40:dc:1f:b3:c2:29:f3:b4:cd:de:ca:7e:b0:84:eb: dd:b8:d0:43:86:a8:f4:7f:32:08:cc:a4:20:39:8b:cf:27:39: 36:ce:11:ed:76:c8:41:20:b3:b5:0d:21:26:ab:e6:a4:c1:07: c6:af:f5:f8:ec:b4:97:9b:d9:f9:51:91:59:f2:e2:45:40:f0: 61:e5:27:5b:8a:d2:d4:34:d3:89:9f:02:89:5f:c8:90:31:00: 82:32:b5:0c:3e:7f:e8:97:65:e1:f9:51:12:29:fc:54:a9:d7: 76:05:c9:e3:40:e1:3a:80:70:ff:87:72:62:70:83:5b:26:55: de:79:f8:05:e2:90:5b:d1:11:d8:76:42:76:3f:42:b4:01:6b: 99:b8:9e:52:5a:2a:28:40:66:f4:e0:17:c4:58:2e:69:f0:11: bd:00:ca:81:03:7d:89:f0:ba:34:be:d6:88:d9:e8:d9:56:63: b9:d9:e8:4f:e4:a1:76:70:cd:4e:48:45:c7:85:6e:15:98:db: 72:f5:6e:61:0a:54:ae:da:7c:52:8e:40:f5:71:ec:e6:f8:03: 2d:0c:e6:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZys69ryboyjvI6hzKH5NDV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjYwMzAyMDUwMTAzWhcNMjYwMzAzMDUwMTAzWjAzMTEwLwYDVQQD EyhkMThkNmI0YmM1NDQzZWY2NDJhMjE5NGVkZTViMjMwYjZmZTNjNjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6XqOnwMv5q8zWpl21j/P4TpbQ1n CGKg2xMviHEIzKza9WY3wfohPWd/R3Jv4qePEsvAQq/SDUoSt6A5JVnKycsvRhON qGIgzP1mxIN6Yc/tBX2eTNdsdTnkmpox+v3AoRIFRjOsnFbCIiwU4JRvM1TZ4wJT AOp9tUORqEUeHOUox8EEDw/7dpBwefSrqDKLxqqD78CAh5QTHJJrF5Pfl7siLWdH dDekDBzGW8NmvT4x6yZocxoIg7TqAZiJBE8P1jSheFDCkaj/KjKnyFLClhR3y1rB nnZqrgm7tHMSSbgpwDKlLxtX7SYzBlRMDwfMZ4ur8O40rts4AAcu/yk/awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGNa0vFRD72QqIZTt5bIwtv48YAMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGhwsK6D PjJHgBMPH74rUZVY8ii/NVxUakf0AjxHL4TmW6ioFp5aQNwfs8Ip87TN3sp+sITr 3bjQQ4ao9H8yCMykIDmLzyc5Ns4R7XbIQSCztQ0hJqvmpMEHxq/1+Oy0l5vZ+VGR WfLiRUDwYeUnW4rS1DTTiZ8CiV/IkDEAgjK1DD5/6Jdl4flREin8VKnXdgXJ40Dh OoBw/4dyYnCDWyZV3nn4BeKQW9ER2HZCdj9CtAFrmbieUloqKEBm9OAXxFguafAR vQDKgQN9ifC6NL7WiNno2VZjudnoT+ShdnDNTkhFx4VuFZjbcvVuYQpUrtp8Uo5A 9XHs5vgDLQzm7g== -----END CERTIFICATE-----Generated at Mon Mar 2 09:19:12 2026 by rpki-client