$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: o9nnPenCKPqV0iehiMvRO8WaJyIPSht0COZ4xJw4XVc= Subject key identifier: 06:7C:53:CE:C3:9B:EB:16:9E:D5:DA:DC:33:59:2E:29:53:35:A3:14 Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019CAA586FF44D1BC573C17438DD7DE81FDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 1218 Signing time: Sun 01 Mar 2026 17:00:48 +0000 Manifest this update: Sun 01 Mar 2026 17:00:48 +0000 Manifest next update: Mon 02 Mar 2026 17:00:48 +0000 Files and hashes: 1: 2JOxayZ4kxrtihpkJSNfTVv34wU.roa (hash: zOn78CRIowaCVixyqjErS7L368UV3aEuLomuXw4ifTk=) 2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=) 3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=) 4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=) 5: Hp0vnK6LsH978scPrAVFBl2kfG4.roa (hash: MiTGwbJzWQLF/5BUrcBlVLuqzCKJBbep6wp6tPRmCrg=) 6: JGgBlVIY2oUSh_HFDVRqyLKytmE.roa (hash: RKsfB4gNYffazBWvIDvr2El30bylWlzUFL7S8HQbwRU=) 7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=) 8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=) 9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=) 10: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: nv4jW1B2YxzXtiTN0tUg5rFpmPflcZ1jE8dea+QOKas=) 11: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=) 12: iyrSz_wsF9CBGgcuXGLfggTWLUc.roa (hash: hTAJ5z1uKngFKR3nayC40cEb7tmnFdoOcWdYxUuDRsQ=) 13: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=) 14: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=) 15: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:58:6f:f4:4d:1b:c5:73:c1:74:38:dd:7d:e8:1f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Mar 1 17:00:48 2026 GMT Not After : Mar 2 17:00:48 2026 GMT Subject: CN=067c53cec39beb169ed5dadc33592e295335a314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:93:61:d9:1b:03:aa:b6:65:1e:a4:46:69: 71:67:f9:d6:4a:67:ed:d4:00:88:88:c6:fd:0d:dd: d9:fe:64:25:47:8a:8c:6a:cb:bf:43:53:14:f3:96: f7:17:64:22:f3:10:9b:32:25:60:73:42:7b:c1:c4: 04:05:67:a1:c3:3c:e1:a6:44:39:54:9f:2f:74:66: 69:f2:13:ba:1e:ab:20:22:fa:55:95:21:39:c3:31: f5:59:ee:b9:ed:e6:90:c8:db:ea:b9:b0:96:54:e7: 9c:10:01:74:79:23:47:d1:59:73:0c:53:21:64:b0: a1:28:62:9d:db:a2:7d:cd:5d:b6:49:3c:63:71:df: 9f:f8:4f:58:d3:3d:77:cc:10:9a:89:76:84:a5:ab: 88:30:91:7d:be:1f:2a:0d:e6:27:6b:fd:5e:fd:5c: b9:42:7b:85:0d:e7:29:ba:52:96:ae:50:18:20:bd: 35:a8:5f:0e:5f:04:e6:3f:5c:b4:30:6d:b1:32:5e: 56:22:f6:c0:f3:d7:ac:02:97:82:ac:51:75:aa:38: 46:93:b2:62:26:f2:60:7d:f8:e3:c3:76:6a:88:3e: 03:7f:63:10:b5:af:30:16:cb:97:e2:dd:c8:a4:b6: d5:71:34:b3:2e:ec:6e:e9:87:ef:b1:22:33:17:05: b2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7C:53:CE:C3:9B:EB:16:9E:D5:DA:DC:33:59:2E:29:53:35:A3:14 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e3:23:80:66:64:b7:e8:1a:9f:1b:4a:38:14:6a:89:fe:c9: 25:8d:68:cf:82:d7:8e:0d:84:87:98:f1:50:a9:e2:06:65:4a: 4a:0f:57:cf:bc:47:76:8e:48:68:02:f5:13:10:30:4a:9e:f6: 6c:84:5d:a0:ef:f3:dd:7f:c8:64:9a:4f:57:38:03:54:fe:46: a8:f4:78:e2:99:b1:17:99:12:bd:68:4e:05:ad:af:ef:b9:bc: c0:b5:35:3b:a1:71:b8:5a:6c:a9:3b:9e:09:49:46:30:b8:25: 4e:a0:f0:b2:e4:72:1e:17:15:a6:de:6d:2d:1a:a3:ef:9e:77: cd:de:2b:fb:d8:94:97:4c:7d:1e:04:33:f5:9d:88:e6:e2:59: 07:0b:f7:45:cb:1e:39:15:00:5f:e9:f6:00:82:2a:d9:f7:14: d6:c2:af:f6:17:ab:ac:44:77:c5:ca:14:a5:c1:96:c7:1e:1c: 3b:9a:f1:0d:bf:c6:c9:d1:f9:2d:04:15:8e:19:6e:b5:e3:22: 4b:6a:72:71:19:11:dc:b1:ca:59:d6:fe:7b:3b:d9:fb:d8:a4: 24:43:34:7f:ef:77:9b:48:14:5a:a9:81:69:1a:ee:7b:32:7f: 76:1e:1c:30:e2:12:6e:eb:de:94:66:4e:15:5d:db:4f:44:71: ab:43:04:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqWG/0TRvFc8F0ON196B/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwMzAxMTcwMDQ4WhcNMjYwMzAyMTcwMDQ4WjAzMTEwLwYDVQQD EygwNjdjNTNjZWMzOWJlYjE2OWVkNWRhZGMzMzU5MmUyOTUzMzVhMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYSTYdkbA6q2ZR6kRmlxZ/nWSmft 1ACIiMb9Dd3Z/mQlR4qMasu/Q1MU85b3F2Qi8xCbMiVgc0J7wcQEBWehwzzhpkQ5 VJ8vdGZp8hO6HqsgIvpVlSE5wzH1We657eaQyNvqubCWVOecEAF0eSNH0VlzDFMh ZLChKGKd26J9zV22STxjcd+f+E9Y0z13zBCaiXaEpauIMJF9vh8qDeYna/1e/Vy5 QnuFDecpulKWrlAYIL01qF8OXwTmP1y0MG2xMl5WIvbA89esApeCrFF1qjhGk7Ji JvJgffjjw3ZqiD4Df2MQta8wFsuX4t3IpLbVcTSzLuxu6YfvsSIzFwWy/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZ8U87Dm+sWntXa3DNZLilTNaMUMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeMjgGZk t+ganxtKOBRqif7JJY1oz4LXjg2Eh5jxUKniBmVKSg9Xz7xHdo5IaAL1ExAwSp72 bIRdoO/z3X/IZJpPVzgDVP5GqPR44pmxF5kSvWhOBa2v77m8wLU1O6FxuFpsqTue CUlGMLglTqDwsuRyHhcVpt5tLRqj7553zd4r+9iUl0x9HgQz9Z2I5uJZBwv3Rcse ORUAX+n2AIIq2fcU1sKv9herrER3xcoUpcGWxx4cO5rxDb/GydH5LQQVjhluteMi S2pycRkR3LHKWdb+ezvZ+9ikJEM0f+93m0gUWqmBaRruezJ/dh4cMOISbuvelGZO FV3bT0Rxq0MELQ== -----END CERTIFICATE-----Generated at Mon Mar 2 01:59:45 2026 by rpki-client