$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: eE8LBrSQdHVBE9/T9xrlzUnJG0BYxNY3OwQ4FclkSUw= Subject key identifier: C1:A5:69:BD:CC:CE:41:88:EF:53:90:E2:22:82:1B:31:D9:FD:13:73 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019CAA900361F79686AFB9DC1721918600B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 06F7 Signing time: Sun 01 Mar 2026 18:01:30 +0000 Manifest this update: Sun 01 Mar 2026 18:01:30 +0000 Manifest next update: Mon 02 Mar 2026 18:01:30 +0000 Files and hashes: 1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=) 2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=) 3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=) 4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=) 5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=) 6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=) 7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: VY6rSlV/bG9ut1Jf9X5pydXGB70gMPosd8p2YIZXCeU=) 9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=) 10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=) 11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=) 12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=) 13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=) 14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=) 15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=) 16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=) 17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:90:03:61:f7:96:86:af:b9:dc:17:21:91:86:00:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Mar 1 18:01:30 2026 GMT Not After : Mar 2 18:01:30 2026 GMT Subject: CN=c1a569bdccce4188ef5390e222821b31d9fd1373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:8a:21:78:04:1c:4f:01:1b:3c:e1:32:1f: 68:e0:b2:7d:dd:c1:8b:68:ed:55:2e:af:d7:98:fc: 11:9b:16:05:cd:9b:e6:05:52:9a:75:d3:8d:8b:59: 6f:f2:78:ed:26:d7:96:2d:72:5e:91:9a:95:32:7d: a2:9e:be:69:e1:b7:83:d8:6f:79:f4:ec:36:95:9f: 62:01:55:46:43:8c:02:7f:9e:74:c1:12:4f:5d:53: 8c:1d:3a:43:c2:c0:7e:66:c5:f2:ab:d7:00:54:0b: 1a:4e:7a:0f:a6:5c:55:b9:a1:da:07:0e:2f:1a:b0: eb:3f:44:ac:37:6c:5d:23:5c:24:f8:d1:36:0b:eb: 92:28:7f:01:95:79:ff:87:33:59:27:0d:9c:a2:87: f8:f7:6b:ae:d0:cd:1c:b8:f8:42:bb:5f:ff:5b:78: 9c:ca:93:f1:dc:19:56:5f:eb:36:41:14:13:98:3f: 96:31:9b:a1:f5:d4:23:11:1d:d2:1c:a7:3f:b5:27: ed:fd:25:89:c7:96:43:4c:c9:a6:4e:6c:88:ba:ca: 8a:19:7d:a0:22:99:3a:15:38:e0:e6:cf:52:e1:9e: da:02:d1:df:58:72:80:d9:c0:cc:23:89:0d:5d:21: 67:cd:4d:d4:9f:53:c8:00:2c:c1:b4:06:82:a5:42: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A5:69:BD:CC:CE:41:88:EF:53:90:E2:22:82:1B:31:D9:FD:13:73 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:15:dd:88:c2:1a:f4:b9:16:fe:e5:49:f2:d3:00:3c:f9:75: fe:de:24:4c:63:91:b4:4a:f1:a6:3b:66:31:43:dc:38:60:85: f1:74:5a:d5:8b:83:bd:f8:4e:69:3c:50:60:4b:6a:4b:cc:18: 1f:37:9f:ac:dd:8c:4e:48:91:3a:e1:c4:a0:72:cf:27:99:93: c9:78:57:00:e8:87:4b:19:a6:75:d2:b6:b9:15:60:cc:33:50: 5b:a1:5e:57:8f:08:ec:16:42:06:36:cf:22:ee:d0:0e:de:4a: 33:84:96:40:78:c2:a7:d5:6d:13:a8:9e:38:f2:42:1f:d9:35: d9:2c:9c:b9:68:1b:6b:31:89:74:55:d0:11:14:7f:cc:f8:cb: fe:7c:d9:42:e5:64:e9:59:66:61:c9:8f:91:02:2a:bb:ef:c6: c8:d9:5a:77:d2:55:e0:e5:1c:8e:62:03:57:f0:95:34:38:5c: 49:03:12:1d:bb:86:d3:62:e1:39:6a:5d:3e:a0:43:4d:7c:c7: 29:1c:77:83:4b:14:45:30:64:8d:8f:d0:c3:4c:83:ea:96:1d: 33:86:1d:59:c3:80:10:2b:03:21:12:d8:82:93:7a:96:d7:d0: 6c:5e:ab:55:01:59:06:e7:b1:fd:0a:20:d4:2d:b0:9c:78:19: 2d:dd:05:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqkANh95aGr7ncFyGRhgC0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwMzAxMTgwMTMwWhcNMjYwMzAyMTgwMTMwWjAzMTEwLwYDVQQD EyhjMWE1NjliZGNjY2U0MTg4ZWY1MzkwZTIyMjgyMWIzMWQ5ZmQxMzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyWKIXgEHE8BGzzhMh9o4LJ93cGL aO1VLq/XmPwRmxYFzZvmBVKaddONi1lv8njtJteWLXJekZqVMn2inr5p4beD2G95 9Ow2lZ9iAVVGQ4wCf550wRJPXVOMHTpDwsB+ZsXyq9cAVAsaTnoPplxVuaHaBw4v GrDrP0SsN2xdI1wk+NE2C+uSKH8BlXn/hzNZJw2coof492uu0M0cuPhCu1//W3ic ypPx3BlWX+s2QRQTmD+WMZuh9dQjER3SHKc/tSft/SWJx5ZDTMmmTmyIusqKGX2g Ipk6FTjg5s9S4Z7aAtHfWHKA2cDMI4kNXSFnzU3Un1PIACzBtAaCpULshwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGlab3MzkGI71OQ4iKCGzHZ/RNzMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRXdiMIa 9LkW/uVJ8tMAPPl1/t4kTGORtErxpjtmMUPcOGCF8XRa1YuDvfhOaTxQYEtqS8wY HzefrN2MTkiROuHEoHLPJ5mTyXhXAOiHSxmmddK2uRVgzDNQW6FeV48I7BZCBjbP Iu7QDt5KM4SWQHjCp9VtE6ieOPJCH9k12SycuWgbazGJdFXQERR/zPjL/nzZQuVk 6VlmYcmPkQIqu+/GyNlad9JV4OUcjmIDV/CVNDhcSQMSHbuG02LhOWpdPqBDTXzH KRx3g0sURTBkjY/Qw0yD6pYdM4YdWcOAECsDIRLYgpN6ltfQbF6rVQFZBuex/Qog 1C2wnHgZLd0Fxw== -----END CERTIFICATE-----Generated at Mon Mar 2 01:51:09 2026 by rpki-client