$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: /5vMcs9ZkjitgpbRZpLBSKdZhXP2p+iXVMStCy0jmZc= Subject key identifier: 36:94:8C:DE:F6:DC:6C:55:D0:88:CC:F0:A2:CA:28:D1:FA:A8:84:3B Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 019CA8D813D0408E4B904BEDF6005DCAFBEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 185B Signing time: Sun 01 Mar 2026 10:00:58 +0000 Manifest this update: Sun 01 Mar 2026 10:00:58 +0000 Manifest next update: Mon 02 Mar 2026 10:00:58 +0000 Files and hashes: 1: 2rYrAzNGLRy2kebzewAymxyAgFI.roa (hash: 7lRGKU9DPcDtXv+u0hXbpyy4aMqg0Uw+oprnJUe2LzA=) 2: E80jGEYfLElDqUoZ-chDRB1qCK0.roa (hash: utzWYe6st9xOk92EA2JXpbtTX4vQm0NmwUYg16KiqY4=) 3: O0zW5TfYvBKPM_06y39fr20GlgU.roa (hash: o9IJqdu4tvBH89+q/ixOEY64sxONXtm+OJZs9bCwOus=) 4: R2FNO1Ygep-crgCBZOCm6rPiC1g.asa (hash: ApEGVteE4lW6zOIWL6jC0gxWXUXXinVHVBq0ULy5NCg=) 5: WjH_ZefSAN7wwtbjUvmdIn8zw88.roa (hash: cKkXcE8FM5i99qr1dZG+cPm90fkHci3xI30wSCEhQhk=) 6: Xij9xh5DddLLuqwtCNwg7qmWYfY.asa (hash: 3EqZun6qc3DEqBJqVt9g499WWwGeNostKOQ4l981464=) 7: ZFX1wiMo9pjybe2C6NOlis161vg.roa (hash: 2gd9X68UIcrLtfaw+PHS88NJNR8euVr2/TC7qbHMmHo=) 8: bt7v5S1iGVK94mqOZQHRX86O4nE.asa (hash: swB8MgNoQmF6xNb6V+G76LxIip8Z23hDxriDFCYhY6o=) 9: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: Q1p7t5Q7ZRhHZH4NlitwnOnoealDr7TN6pXMDqLUeHs=) 10: nWTiWDUsZBq6y-Llds3TNYkdAzA.roa (hash: lu7dgyssWpWTBNpOq8brqIrMrxMRYIWthZEExVfrpEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:d8:13:d0:40:8e:4b:90:4b:ed:f6:00:5d:ca:fb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Mar 1 10:00:58 2026 GMT Not After : Mar 2 10:00:58 2026 GMT Subject: CN=36948cdef6dc6c55d088ccf0a2ca28d1faa8843b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:1c:30:24:78:24:93:6a:19:ef:7e:9b:bf: 9b:ba:35:1d:45:62:ff:31:0d:69:c4:e4:b2:8e:cf: 34:c4:f7:1c:27:7c:e3:04:b0:bc:05:b0:99:bf:25: 96:09:79:76:6d:54:18:58:c2:ab:6b:3a:3b:68:80: a2:2a:dd:d1:83:d5:5e:58:05:46:42:82:b7:d5:28: aa:5b:ef:7a:a7:dd:75:7f:f1:f0:4f:33:c0:84:6e: 6b:c6:e2:b7:52:fa:f7:8c:bd:4c:60:86:87:8f:ff: 3d:fd:46:2f:90:03:4b:13:4e:25:7c:d6:cc:79:41: b5:41:a2:87:13:59:80:1e:05:40:b9:de:7d:eb:9c: f8:0d:b3:2e:e0:e8:3d:c7:82:ac:a1:0b:5c:29:ec: 22:1d:dc:18:3f:ec:80:be:e0:25:5c:f6:bb:22:82: 70:62:13:e8:e5:e5:ec:21:07:0b:b5:61:e5:65:08: 56:a8:06:3b:ac:65:cf:db:a4:03:fc:d8:b9:dc:07: d2:bc:c9:0b:4c:4d:19:a2:42:e8:47:29:98:78:8d: 7a:01:4c:c7:90:23:bf:1d:74:a2:fc:e4:1b:76:93: 3d:c9:34:0d:5e:a5:4c:4f:51:88:d0:ff:b7:59:d7: d4:b7:6d:16:5e:15:00:26:2a:aa:a0:e5:1a:4f:7f: 7b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:94:8C:DE:F6:DC:6C:55:D0:88:CC:F0:A2:CA:28:D1:FA:A8:84:3B X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:88:aa:44:e6:cb:70:07:df:b7:4e:75:88:45:4b:52:80:d3: d7:34:87:fd:85:cf:fc:0d:0e:08:c6:72:39:eb:6d:ac:db:49: 05:39:5d:49:75:31:9e:05:7a:23:39:94:33:20:d1:dc:71:e4: c6:77:af:2a:e5:1f:81:5b:b8:74:de:1d:89:d4:b5:38:89:e9: fc:58:8d:80:f9:4f:d7:67:25:15:53:ab:8a:79:c1:7f:96:62: b0:e9:3c:33:4c:00:25:3f:97:76:4d:56:5a:da:00:6b:40:ce: 84:ec:45:38:f5:2b:fe:1f:08:70:8d:dd:bf:84:07:d8:fb:39: 7f:89:6f:8b:23:51:fa:27:20:7a:8b:2e:08:1b:ee:bb:fe:d3: 01:a1:c9:f3:d2:70:a0:93:cd:9d:1d:66:4a:1f:1f:8e:a6:d6: af:16:c1:cd:ca:34:5a:8e:b4:bb:78:9e:6a:e3:c2:e1:86:a1: b6:22:de:de:11:21:92:d3:f3:a6:a5:24:db:8d:37:29:dd:f6: a6:74:73:ba:0c:79:e8:78:6d:c6:ab:8e:f4:45:05:f8:97:ae: 43:9f:da:a0:8d:7b:4d:62:e4:e8:81:6b:4c:1c:6b:f4:fa:38: 5b:14:09:b6:e7:b0:8f:e6:7b:e9:b3:ff:59:20:d5:7b:5f:8c: b2:dc:af:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyo2BPQQI5LkEvt9gBdyvvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjYwMzAxMTAwMDU4WhcNMjYwMzAyMTAwMDU4WjAzMTEwLwYDVQQD EygzNjk0OGNkZWY2ZGM2YzU1ZDA4OGNjZjBhMmNhMjhkMWZhYTg4NDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNUcMCR4JJNqGe9+m7+bujUdRWL/ MQ1pxOSyjs80xPccJ3zjBLC8BbCZvyWWCXl2bVQYWMKrazo7aICiKt3Rg9VeWAVG QoK31SiqW+96p911f/HwTzPAhG5rxuK3Uvr3jL1MYIaHj/89/UYvkANLE04lfNbM eUG1QaKHE1mAHgVAud5965z4DbMu4Og9x4KsoQtcKewiHdwYP+yAvuAlXPa7IoJw YhPo5eXsIQcLtWHlZQhWqAY7rGXP26QD/Ni53AfSvMkLTE0ZokLoRymYeI16AUzH kCO/HXSi/OQbdpM9yTQNXqVMT1GI0P+3WdfUt20WXhUAJiqqoOUaT397twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaUjN723GxV0IjM8KLKKNH6qIQ7MB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoiqRObL cAfft051iEVLUoDT1zSH/YXP/A0OCMZyOettrNtJBTldSXUxngV6IzmUMyDR3HHk xnevKuUfgVu4dN4didS1OInp/FiNgPlP12clFVOrinnBf5ZisOk8M0wAJT+Xdk1W WtoAa0DOhOxFOPUr/h8IcI3dv4QH2Ps5f4lviyNR+icgeosuCBvuu/7TAaHJ89Jw oJPNnR1mSh8fjqbWrxbBzco0Wo60u3ieauPC4YahtiLe3hEhktPzpqUk2403Kd32 pnRzugx56HhtxquO9EUF+JeuQ5/aoI17TWLk6IFrTBxr9Po4WxQJtuewj+Z76bP/ WSDVe1+MstyvtQ== -----END CERTIFICATE-----Generated at Sun Mar 1 16:32:07 2026 by rpki-client