$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft File: kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json) Hash identifier: lSPY9Akx5XQFIn3NprzXbcnZ1NG8cLdd2W8myM4dL3E= Subject key identifier: 39:12:91:2C:2B:0E:B9:88:E3:05:84:CB:05:56:15:42:69:DB:82:00 Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019CAC4759EB54B434BB94D64506666FE663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft Manifest number: 044D Signing time: Mon 02 Mar 2026 02:01:22 +0000 Manifest this update: Mon 02 Mar 2026 02:01:22 +0000 Manifest next update: Tue 03 Mar 2026 02:01:22 +0000 Files and hashes: 1: HWudsOjdG8oDTKzDkSrmsmwxXhg.roa (hash: MsNQyO4x3GL1ZljNMgkCfOoEnGHTPJUa2PFQHyg4E6M=) 2: IPE-tbT7mZHC_mVOXCnZbBARVrE.roa (hash: 9Pvd8mTsmxDOqa26tsGPIpoLn8+h+Tn9v4mWnas6nBQ=) 3: OQVv5QkSzLFHCeZztVRUieZDZPc.roa (hash: vYdS9MR1CGk4IGJAzwFEYebnVkZn8CGWtEzbXiqEhI0=) 4: X8sdbycHT12fl8v3f4JjpsnZTG0.roa (hash: 35gVkSTJeST2VThCOqua4110t4pi9FQFLTgTaz5Gffk=) 5: Z6T-mH64Ktjyv15PrCDxC1HFCdI.roa (hash: 3XMoK/THw8/0HobmxoCjCg9LTB+PwSAZm57uiGwgmxc=) 6: aRFGRkrVW4tSAzMOBGbwJhIU8vI.roa (hash: Lo8StkiOJatbskiLh2LCukF3ojNljMu1U3MvMXSb67w=) 7: hrzUT60RppU12sijbO5nUnIsLDE.roa (hash: +JirVR+wIPZ5lVwuA3SZmdQkTSTYsXEklEIVJFUFJXU=) 8: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: cNrkwz2ZHnA4g4SCql3Q+9Q/h21WhiUKfgo3mKjkpDY=) 9: lSNMLrnc9Ovc80RjYYgbTiNSNC4.roa (hash: ddLRIgsR3OaurvPlaqh/T1KmeoE4k62sFhw0t4pRoB0=) 10: n4VJToHSeaZ048nrx0RCFUgh-4A.roa (hash: ufYQ2K75b3VNZBOfEf/BHtPHrCx/r1Ddr4foAeeoSLE=) 11: qX0JcHb-4_m4lN-m7dBA_lCXIVc.roa (hash: WHgfUpAoHQic9gm2ceoWcsdBiZLB2e7/+gKtnutZkJY=) 12: sqdXQjfm4onO1QiOFsXJu-JeMZs.roa (hash: Qw1x6srQqo+v0XYWJ9z2CM3xz/OxwTMeNmtDU3qoGRM=) 13: v_8oHkJrMTUTEJw4tXjOKqHM9IU.roa (hash: aUHL1kaI3QLAnPjxaA6YFCkAEzIof0X0DkpPUS5Vu/k=) 14: wD4NGg88WndC9yzTU4xLEQbP1a4.roa (hash: 1N6JcnXJHN0H7GLkTeSYJRGUOZxk0cd6K/lZq+xShtE=) 15: x56_yIkGQShrN2jHMGedFTT6u2A.roa (hash: lWCo2253cKN7EMDrZlg9mSPoT6nLJWZ1KLutVgOoDk0=) 16: yDZ8auLb9Ssr09XLgAxBVRRfV4U.roa (hash: fhMpAkLLpyxiRs4uFYlANdmyZQGd+FckjUeaIQV2OMI=) 17: zrABntG9K9mhIhdqztHDeRg--G4.roa (hash: gMDq/Kln5jA0QKMrkqoy1kLNKDrHuD7nJKA9uHp8ouU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:47:59:eb:54:b4:34:bb:94:d6:45:06:66:6f:e6:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Mar 2 02:01:22 2026 GMT Not After : Mar 3 02:01:22 2026 GMT Subject: CN=3912912c2b0eb988e30584cb0556154269db8200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:5b:14:b7:47:2d:61:cf:4c:ca:53:76:8f: 2f:b6:26:33:6a:1e:0b:c6:1e:14:70:de:90:94:e2: 44:17:48:55:1a:bd:12:5e:4c:f4:ae:87:b2:ef:71: 34:9d:b6:40:ad:58:49:d4:b6:69:75:ad:fc:81:a6: 58:29:85:fc:bb:24:8f:35:df:c4:c5:b4:7f:6b:17: ce:bc:b9:85:0c:f5:5a:d1:61:42:99:18:fb:aa:0c: 5a:ea:e5:e5:42:19:94:25:44:0b:f2:1c:95:2f:db: fa:ae:da:64:4c:dc:b0:a7:5c:ab:c0:41:48:19:31: 7e:7d:1b:55:d9:aa:a3:64:91:54:4d:a9:57:ab:02: 8a:8f:5d:f8:95:5f:36:0f:7b:41:c4:07:59:93:2d: 67:0d:f9:7b:5b:c7:67:d0:40:6d:26:dd:c5:f2:4a: 16:4b:e6:7e:61:83:54:52:a9:ef:c3:85:35:9c:c7: 70:ca:bc:ec:b5:0d:04:c9:b7:b6:d2:76:a6:8b:16: 56:9f:c5:f5:9d:55:1b:ab:58:d8:bb:3d:56:59:80: e7:a8:98:bd:48:af:9b:85:49:58:c4:aa:ef:df:51: a1:24:70:62:b8:27:50:5c:e1:2c:8d:7c:25:b7:c5: 5f:e6:f0:91:f2:a5:8c:55:d3:1e:02:96:d1:9b:54: 87:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:12:91:2C:2B:0E:B9:88:E3:05:84:CB:05:56:15:42:69:DB:82:00 X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fe:da:12:95:8a:98:87:4f:12:68:65:30:09:db:66:8c:3b: 18:b5:8f:4c:21:70:a2:68:4b:a3:23:46:d6:b8:60:ea:b8:57: 2f:72:21:57:ae:0c:bf:ef:a5:ee:5f:0e:97:aa:17:39:de:40: 97:8e:07:39:27:40:35:29:a2:b4:5a:a0:8c:ad:c4:d1:a7:93: 35:6a:c0:35:b8:69:50:78:9e:30:21:de:f3:3f:d9:e9:ee:52: 09:9a:59:f7:87:44:31:56:18:34:4b:db:18:0c:55:b4:67:92: cf:3a:01:65:dc:13:fa:42:c3:eb:7a:d9:a8:00:a2:48:29:0f: 8b:e4:56:b6:c9:09:9b:85:2b:91:b5:dc:6d:d7:9e:27:d7:c1: cf:11:0e:56:e5:c6:cb:ad:37:36:ea:f8:ca:98:56:ae:f8:ad: 5b:72:5e:41:5b:76:bd:31:48:18:85:25:f2:50:00:87:4d:7d: cf:08:86:d4:89:54:36:08:65:c8:7f:b2:35:88:a2:35:b6:c9: 03:aa:e4:86:b3:ba:7b:80:ed:7b:21:d6:e2:d9:79:96:b1:7a: 6b:89:f4:0b:4b:c7:34:4d:ba:b9:4a:f9:07:bc:66:dd:b2:07: 31:7f:bf:a2:0b:20:ec:0c:d7:55:35:79:31:37:74:cf:49:46: 79:16:ed:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysR1nrVLQ0u5TWRQZmb+ZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjYwMzAyMDIwMTIyWhcNMjYwMzAzMDIwMTIyWjAzMTEwLwYDVQQD EygzOTEyOTEyYzJiMGViOTg4ZTMwNTg0Y2IwNTU2MTU0MjY5ZGI4MjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSxbFLdHLWHPTMpTdo8vtiYzah4L xh4UcN6QlOJEF0hVGr0SXkz0roey73E0nbZArVhJ1LZpda38gaZYKYX8uySPNd/E xbR/axfOvLmFDPVa0WFCmRj7qgxa6uXlQhmUJUQL8hyVL9v6rtpkTNywp1yrwEFI GTF+fRtV2aqjZJFUTalXqwKKj134lV82D3tBxAdZky1nDfl7W8dn0EBtJt3F8koW S+Z+YYNUUqnvw4U1nMdwyrzstQ0Eybe20namixZWn8X1nVUbq1jYuz1WWYDnqJi9 SK+bhUlYxKrv31GhJHBiuCdQXOEsjXwlt8Vf5vCR8qWMVdMeApbRm1SH2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkSkSwrDrmI4wWEywVWFUJp24IAMB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWP7aEpWK mIdPEmhlMAnbZow7GLWPTCFwomhLoyNG1rhg6rhXL3IhV64Mv++l7l8Ol6oXOd5A l44HOSdANSmitFqgjK3E0aeTNWrANbhpUHieMCHe8z/Z6e5SCZpZ94dEMVYYNEvb GAxVtGeSzzoBZdwT+kLD63rZqACiSCkPi+RWtskJm4UrkbXcbdeeJ9fBzxEOVuXG y603Nur4yphWrvitW3JeQVt2vTFIGIUl8lAAh019zwiG1IlUNghlyH+yNYiiNbbJ A6rkhrO6e4DteyHW4tl5lrF6a4n0C0vHNE26uUr5B7xm3bIHMX+/ogsg7AzXVTV5 MTd0z0lGeRbtqg== -----END CERTIFICATE-----Generated at Mon Mar 2 05:45:27 2026 by rpki-client