$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: ceBXJSQNYAw9zyxoO++xAVyhT2awbbiyMDPQTL/lV50= Subject key identifier: C6:6F:AE:F9:21:7C:65:65:62:A7:5A:3F:27:B0:B2:BA:09:D6:03:9A Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019CA8D7DAC30D484EF8EEDA0E928323FDD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 185F Signing time: Sun 01 Mar 2026 10:00:44 +0000 Manifest this update: Sun 01 Mar 2026 10:00:44 +0000 Manifest next update: Mon 02 Mar 2026 10:00:44 +0000 Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=) 2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=) 3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=) 4: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=) 5: 9tVl0OudtWaiiEvwscrGSSX56jU.roa (hash: th1F5H92mnPFNJ3P0FMgp4iOub0klsX+xg8MmiRJg5A=) 6: AyulhXyOhP2buicHYb4PF6awarA.roa (hash: o1jB5gIRXTUngRxBAxg2DTNhVQcSy127ziFioxQ1PVM=) 7: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=) 8: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=) 9: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=) 10: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=) 11: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=) 12: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=) 13: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=) 14: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=) 15: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=) 16: XSRfDKJB1vWxhWr5_nnhi8kY_Ro.roa (hash: vbcx865viaCEEplLJzs5WTHypNQpAu7A3ivTLIG9UFw=) 17: XUBXC0DROf8_aCxS_neH8O6J0e4.roa (hash: /C5B3L/2hO5EvNBmbIy9wgx/1sbjdRkGMDg2OXb+bOM=) 18: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=) 19: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=) 20: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=) 21: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=) 22: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=) 23: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=) 24: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=) 25: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=) 26: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=) 27: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=) 28: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=) 29: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=) 30: o9FmlafZWwctHqF-kO7MMcKUwY4.roa (hash: +ltDg6DQJ7tLtwDHjEkx+wbj2MGOhGNITDZvV2VkwIc=) 31: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=) 32: r5EQFD61hWzkJjB7v7Y30uUhewc.roa (hash: 6ypgI1gg3G9f0KTPTcY2gQYHH5FXI074w6M2BK68aUs=) 33: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=) 34: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=) 35: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: pBuBMuZj8y/aIU925w3i1fcpWddBXho36fPaiakJFiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:d7:da:c3:0d:48:4e:f8:ee:da:0e:92:83:23:fd:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Mar 1 10:00:44 2026 GMT Not After : Mar 2 10:00:44 2026 GMT Subject: CN=c66faef9217c656562a75a3f27b0b2ba09d6039a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:aa:8e:c1:28:bc:d2:1e:56:d4:a3:b0:11:e2: 0d:a4:d5:b5:81:1a:c7:05:12:80:db:ee:c1:db:7f: 7f:eb:1c:57:67:3b:18:7c:10:2b:c4:92:67:93:13: ea:2c:63:55:c1:bf:dc:68:6a:1c:58:d7:86:eb:3b: f9:70:b3:c7:b5:cb:55:ef:1d:16:ea:c9:3e:a0:cd: 6c:53:99:f2:03:62:16:46:cc:02:b0:d6:28:83:5d: 7f:eb:d1:d7:14:05:5d:c2:15:45:23:5d:b3:17:d0: 23:e2:89:10:9c:63:0b:cf:ea:f3:c8:7b:4e:3a:74: 56:e9:04:60:8a:df:b2:c8:31:b9:46:c8:86:06:77: 0f:ac:25:33:3f:38:89:61:62:0f:7e:b3:c0:4c:83: f0:b4:4f:95:22:a5:b3:75:b0:6b:a8:98:0b:31:8e: 4f:60:5f:97:9b:28:59:3f:cc:70:be:3c:2b:62:c3: 12:83:5e:4e:ad:87:00:16:77:82:c3:23:50:cc:cd: 48:00:75:ac:0e:a9:3c:27:8c:b2:91:dd:12:0e:85: fd:3f:0a:fa:4a:5a:ae:2c:29:8d:fe:05:8e:ac:20: 24:47:29:64:16:42:b3:1b:d8:9f:42:71:bb:8a:85: 0a:ca:f4:dd:ee:03:8f:4e:81:76:df:8d:7d:36:91: ae:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6F:AE:F9:21:7C:65:65:62:A7:5A:3F:27:B0:B2:BA:09:D6:03:9A X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:97:ec:02:90:61:da:ce:5a:0b:b0:12:cf:d4:9e:85:40:8a: 47:9f:4e:8c:8c:b9:28:99:67:d6:3a:e2:c0:31:b6:58:52:ee: 21:ed:56:57:97:0e:c0:f0:d7:d8:c4:52:f5:6f:42:70:2c:3d: fc:bb:00:f8:23:9d:4a:4b:21:26:04:3f:4d:ea:53:fe:67:c7: e6:08:72:14:30:e4:7b:6d:81:d1:66:ee:2c:3f:fe:33:12:dd: 02:eb:03:17:62:4c:be:5f:7b:63:82:c4:05:80:98:14:c4:04: cf:9d:6b:6b:e9:24:1e:67:9e:41:5c:c7:cb:71:28:8a:1a:6c: e4:9d:87:79:0e:69:38:6d:05:82:b6:cd:7a:ca:f9:4c:f4:c5: 85:59:a2:14:d5:db:a4:48:8c:a4:28:28:44:e0:aa:71:4d:e8: fc:9c:e6:a1:6a:bb:de:31:1c:fb:44:28:bf:31:92:91:50:6d: c6:7a:48:4b:b9:bb:03:7d:0b:00:60:18:f9:a8:ad:c2:49:8e: 3d:10:c9:82:14:5d:b8:9d:34:02:8e:b7:2d:78:67:45:6e:66: 3e:68:7b:c3:31:9c:87:72:66:c6:0e:d3:ba:39:c6:e5:d1:a7: 83:22:69:e2:72:2c:7f:9f:32:59:0a:e9:01:da:0d:a2:e4:25: 0f:ce:08:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyo19rDDUhO+O7aDpKDI/3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMzAxMTAwMDQ0WhcNMjYwMzAyMTAwMDQ0WjAzMTEwLwYDVQQD EyhjNjZmYWVmOTIxN2M2NTY1NjJhNzVhM2YyN2IwYjJiYTA5ZDYwMzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6qOwSi80h5W1KOwEeINpNW1gRrH BRKA2+7B239/6xxXZzsYfBArxJJnkxPqLGNVwb/caGocWNeG6zv5cLPHtctV7x0W 6sk+oM1sU5nyA2IWRswCsNYog11/69HXFAVdwhVFI12zF9Aj4okQnGMLz+rzyHtO OnRW6QRgit+yyDG5RsiGBncPrCUzPziJYWIPfrPATIPwtE+VIqWzdbBrqJgLMY5P YF+XmyhZP8xwvjwrYsMSg15OrYcAFneCwyNQzM1IAHWsDqk8J4yykd0SDoX9Pwr6 SlquLCmN/gWOrCAkRylkFkKzG9ifQnG7ioUKyvTd7gOPToF23419NpGuVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZvrvkhfGVlYqdaPyewsroJ1gOaMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpfsApBh 2s5aC7ASz9SehUCKR59OjIy5KJln1jriwDG2WFLuIe1WV5cOwPDX2MRS9W9CcCw9 /LsA+COdSkshJgQ/TepT/mfH5ghyFDDke22B0WbuLD/+MxLdAusDF2JMvl97Y4LE BYCYFMQEz51ra+kkHmeeQVzHy3Eoihps5J2HeQ5pOG0FgrbNesr5TPTFhVmiFNXb pEiMpCgoROCqcU3o/JzmoWq73jEc+0QovzGSkVBtxnpIS7m7A30LAGAY+aitwkmO PRDJghRduJ00Ao63LXhnRW5mPmh7wzGch3Jmxg7TujnG5dGngyJp4nIsf58yWQrp AdoNouQlD84IUQ== -----END CERTIFICATE-----Generated at Sun Mar 1 18:24:44 2026 by rpki-client