$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: DmS2CsBhKmZVHvsmiV+GXNBJA9lZlJpuiyoTE38bOns= Subject key identifier: 3C:9D:89:B4:42:66:67:49:39:5D:77:A0:55:C8:31:1B:77:99:57:5E Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019CABD901267FFD529A2828AB8A3BD6B8A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0A7A Signing time: Mon 02 Mar 2026 00:00:51 +0000 Manifest this update: Mon 02 Mar 2026 00:00:51 +0000 Manifest next update: Tue 03 Mar 2026 00:00:51 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: upba0bqIX8HJyjhHVH9TIXT4yhmGQ07gzXwFlWmTtIM=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: LZ_m2waZIs7_F9DFpQeDZwKSqaI.roa (hash: AswbWRxQk3rPm90PMBMeMwOGoat0R8hOqCGqrGPRnek=) 8: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 9: P12Bd5VdoMxJk2YYVATcG1-aLsk.roa (hash: tMed7m101KjSKZGY84e4m62zANDxSX8qjIVWkfIG7SI=) 10: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 11: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 12: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 13: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 14: k4m5uF6d86bKxXryYJZgXjvW8I0.roa (hash: H2jNyKD+HmfBkpz7JaRABFyLsbIlNp19F4CUBAdQu10=) 15: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 19: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:d9:01:26:7f:fd:52:9a:28:28:ab:8a:3b:d6:b8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Mar 2 00:00:51 2026 GMT Not After : Mar 3 00:00:51 2026 GMT Subject: CN=3c9d89b442666749395d77a055c8311b7799575e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:66:42:9a:b4:3b:81:db:21:54:b8:64:04:33: ea:b9:68:e7:2a:03:3c:83:7f:5c:6d:9b:0f:f2:e9: 9d:21:b3:1f:97:dc:42:dc:95:ae:5e:c9:c1:e1:72: 60:9f:35:96:2d:80:35:01:48:42:df:5f:c6:4d:d4: f9:d5:d8:cc:6f:2a:52:b2:4a:dd:4a:f2:8d:15:f6: dd:22:d5:fb:f4:f7:4d:98:6c:dc:fb:7c:14:47:dd: b1:68:e7:e5:24:29:39:18:52:27:df:46:39:28:59: 85:88:d1:ae:e5:93:b1:83:b4:50:d4:a8:a7:75:03: aa:c6:0f:51:93:ee:40:11:e2:d2:16:24:bb:e5:da: fd:5c:c1:ff:24:e4:b9:59:cc:55:23:34:0a:7b:d2: 93:9c:1a:68:24:4e:18:a5:c0:dd:20:80:69:c9:31: 08:19:f0:d3:a0:6f:7a:9c:93:ab:52:d6:01:23:76: 2a:49:15:02:f7:7e:ea:59:4b:93:19:eb:ab:2a:73: cf:ee:ff:49:db:ee:fa:8f:03:54:91:ed:89:8e:72: 7f:e1:f3:ff:1e:12:6b:74:77:8e:5a:21:d0:07:05: de:51:ef:db:18:e8:5f:c1:7b:a4:f4:ad:cc:de:5b: c4:e3:cd:9d:91:11:0b:c8:93:e5:53:01:90:bf:58: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9D:89:B4:42:66:67:49:39:5D:77:A0:55:C8:31:1B:77:99:57:5E X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e5:48:cd:8e:c9:cf:ea:b3:df:fd:e9:73:b3:90:8f:90:a3: 39:7a:5e:b9:3d:69:d6:1e:a0:ee:d9:cd:bc:20:f2:df:6d:12: a2:45:38:a1:3e:8a:90:c0:f0:8a:2b:8c:d9:1e:b6:3b:bb:4f: 9c:df:65:54:28:e1:61:a4:1c:25:39:eb:53:f7:9c:58:e1:64: dd:22:fd:bd:d5:4c:29:30:52:86:ed:a9:fe:4a:7c:0f:93:b4: 2e:33:29:ba:3c:e0:66:93:c2:26:ab:40:36:f0:be:70:52:06: 5b:77:89:31:07:fb:88:10:78:be:5d:d9:d2:d5:07:6f:4c:6c: 14:4a:87:68:7d:59:3a:eb:bf:0f:c5:b8:16:36:42:75:18:56: c5:bc:00:45:1d:ba:98:25:83:ea:e4:a4:3a:57:b5:9f:e4:e6: 75:0a:21:b0:13:fc:49:85:cb:aa:d2:14:d3:81:ae:e2:d2:8c: 06:01:32:68:b5:6d:41:96:6b:03:2c:99:70:d2:bc:a0:fc:77: d3:74:bd:5d:4f:1a:18:97:ae:4c:bf:24:0f:0e:77:46:aa:cc: 4b:5a:ec:75:91:d2:62:59:d3:5e:98:dc:fd:10:18:9c:b9:c9: d0:cd:aa:2e:24:aa:74:2b:8d:86:4c:f8:0f:30:47:10:e0:68: 0c:d1:c4:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyr2QEmf/1Smigoq4o71rioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMzAyMDAwMDUxWhcNMjYwMzAzMDAwMDUxWjAzMTEwLwYDVQQD EygzYzlkODliNDQyNjY2NzQ5Mzk1ZDc3YTA1NWM4MzExYjc3OTk1NzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mZCmrQ7gdshVLhkBDPquWjnKgM8 g39cbZsP8umdIbMfl9xC3JWuXsnB4XJgnzWWLYA1AUhC31/GTdT51djMbypSskrd SvKNFfbdItX79PdNmGzc+3wUR92xaOflJCk5GFIn30Y5KFmFiNGu5ZOxg7RQ1Kin dQOqxg9Rk+5AEeLSFiS75dr9XMH/JOS5WcxVIzQKe9KTnBpoJE4YpcDdIIBpyTEI GfDToG96nJOrUtYBI3YqSRUC937qWUuTGeurKnPP7v9J2+76jwNUke2JjnJ/4fP/ HhJrdHeOWiHQBwXeUe/bGOhfwXuk9K3M3lvE482dkRELyJPlUwGQv1hDrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDydibRCZmdJOV13oFXIMRt3mVdeMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeVIzY7J z+qz3/3pc7OQj5CjOXpeuT1p1h6g7tnNvCDy320SokU4oT6KkMDwiiuM2R62O7tP nN9lVCjhYaQcJTnrU/ecWOFk3SL9vdVMKTBShu2p/kp8D5O0LjMpujzgZpPCJqtA NvC+cFIGW3eJMQf7iBB4vl3Z0tUHb0xsFEqHaH1ZOuu/D8W4FjZCdRhWxbwARR26 mCWD6uSkOle1n+TmdQohsBP8SYXLqtIU04Gu4tKMBgEyaLVtQZZrAyyZcNK8oPx3 03S9XU8aGJeuTL8kDw53RqrMS1rsdZHSYlnTXpjc/RAYnLnJ0M2qLiSqdCuNhkz4 DzBHEOBoDNHERA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:04:55 2026 by rpki-client