$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: shdA68F/YHSKuogxYgmdR5oCiVHVFc65zVTykPdQsW8= Subject key identifier: 8A:56:BA:7B:FC:07:68:34:E6:79:25:90:42:52:8A:A6:65:BE:B4:95 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019CABD9D76B6EE555014F8F44273EECB90C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1870 Signing time: Mon 02 Mar 2026 00:01:46 +0000 Manifest this update: Mon 02 Mar 2026 00:01:46 +0000 Manifest next update: Tue 03 Mar 2026 00:01:46 +0000 Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=) 2: 1CdaDEMYuczsE5fB0W--_kjgKz4.roa (hash: eLlevVfSpCGIySbdmJVMxY3O6xhqpu9HHp+hjTsXa+Y=) 3: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=) 4: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: 79bBr00K5cBr1WAcEa8EsnTStIKyGQXfGz7eHj0HclQ=) 5: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=) 6: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=) 7: XfKFQ0jrYjUJX2-xXdeOtI2PwBA.roa (hash: Dv4g2hdF2DWTn9KmOFquly3+gEa0c48Mrasajz85cj8=) 8: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=) 9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=) 10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=) 11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=) 12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:d9:d7:6b:6e:e5:55:01:4f:8f:44:27:3e:ec:b9:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Mar 2 00:01:46 2026 GMT Not After : Mar 3 00:01:46 2026 GMT Subject: CN=8a56ba7bfc076834e679259042528aa665beb495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:00:41:d2:06:53:c9:c1:04:b1:75:9e:f7: 21:01:8a:fe:28:f6:29:87:b3:bf:e7:7e:35:3d:17: b8:38:a4:7b:95:fc:43:af:f2:07:42:88:86:30:ba: ae:e5:f6:f2:eb:61:da:88:1c:3b:8e:36:0c:29:12: 04:aa:53:16:34:09:15:b8:10:ae:0c:53:a4:86:9e: b1:cb:fa:5e:da:58:5c:f9:1c:c1:18:d8:c4:ad:11: 3e:84:24:14:5a:fd:3b:5f:9a:91:5f:96:2c:93:95: 47:a7:61:5e:31:ae:c8:de:73:84:94:c2:51:17:3e: 68:72:24:2a:63:75:b9:86:bc:08:50:71:be:c4:94: 44:e5:92:99:e5:16:37:c4:ed:b7:74:4b:74:40:96: 4f:c7:ca:3a:56:c6:71:ef:6e:e7:4c:b0:c7:95:94: d0:40:bc:82:4f:2c:c4:8c:61:b1:b7:b1:14:3a:03: 41:ab:e8:5a:42:02:7d:ca:6f:a7:aa:34:3c:5c:99: e5:25:b4:d6:43:87:0c:23:27:39:7d:23:2a:f0:36: 13:02:d9:14:8b:12:a4:33:61:05:2d:64:46:33:3d: 12:0b:2d:6e:9a:c7:3e:ec:95:08:95:1e:4d:a6:f7: 99:75:46:d6:2f:81:c5:07:b7:31:24:f7:94:ca:e4: 16:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:56:BA:7B:FC:07:68:34:E6:79:25:90:42:52:8A:A6:65:BE:B4:95 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1a:0f:c7:53:e0:bd:5b:8c:f7:a3:da:08:df:c2:15:bc:83: 2e:b3:a2:8e:de:a0:5c:e6:fe:8c:3a:00:b8:99:3c:4f:46:7c: ed:fd:dd:27:d1:09:c1:11:81:50:6b:b1:e7:12:a2:f3:6f:c1: 29:91:f7:3f:91:5a:19:0a:6e:e9:c6:89:0b:7a:70:6e:96:11: de:5d:56:f3:e3:5c:b6:2a:8f:ab:f9:89:9b:9f:15:74:09:df: 70:91:78:9d:80:95:b2:58:eb:8d:cd:0e:7b:2f:23:6a:af:63: c1:e2:0e:42:40:ed:19:ce:e4:21:99:c6:e3:ea:68:3c:64:5f: 2a:5b:83:95:e2:e1:08:51:2c:a2:5a:9e:3c:ad:aa:82:c6:ae: 6a:8d:b3:70:99:8b:92:4f:47:08:fd:db:31:db:67:60:a1:32: 78:d4:ca:94:91:84:a3:3d:0d:ac:0e:b5:ef:33:b3:3e:1b:26: d3:39:b1:ac:36:41:ec:98:6e:28:03:7d:52:8e:2a:b7:45:d1: c5:56:37:21:dd:65:2b:51:cf:ab:fd:bc:d6:d3:67:d2:bb:24: 3f:16:36:9f:05:e0:52:74:da:b5:59:a5:a9:7e:b8:ef:76:f3: f0:e3:d7:40:f8:b2:97:dd:4a:25:88:ab:d8:90:a0:1d:12:cd: c4:0e:b2:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyr2ddrbuVVAU+PRCc+7LkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwMzAyMDAwMTQ2WhcNMjYwMzAzMDAwMTQ2WjAzMTEwLwYDVQQD Eyg4YTU2YmE3YmZjMDc2ODM0ZTY3OTI1OTA0MjUyOGFhNjY1YmViNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGkAQdIGU8nBBLF1nvchAYr+KPYp h7O/5341PRe4OKR7lfxDr/IHQoiGMLqu5fby62HaiBw7jjYMKRIEqlMWNAkVuBCu DFOkhp6xy/pe2lhc+RzBGNjErRE+hCQUWv07X5qRX5Ysk5VHp2FeMa7I3nOElMJR Fz5ociQqY3W5hrwIUHG+xJRE5ZKZ5RY3xO23dEt0QJZPx8o6VsZx727nTLDHlZTQ QLyCTyzEjGGxt7EUOgNBq+haQgJ9ym+nqjQ8XJnlJbTWQ4cMIyc5fSMq8DYTAtkU ixKkM2EFLWRGMz0SCy1umsc+7JUIlR5NpveZdUbWL4HFB7cxJPeUyuQW7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpWunv8B2g05nklkEJSiqZlvrSVMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBoPx1Pg vVuM96PaCN/CFbyDLrOijt6gXOb+jDoAuJk8T0Z87f3dJ9EJwRGBUGux5xKi82/B KZH3P5FaGQpu6caJC3pwbpYR3l1W8+NctiqPq/mJm58VdAnfcJF4nYCVsljrjc0O ey8jaq9jweIOQkDtGc7kIZnG4+poPGRfKluDleLhCFEsolqePK2qgsauao2zcJmL kk9HCP3bMdtnYKEyeNTKlJGEoz0NrA617zOzPhsm0zmxrDZB7JhuKAN9Uo4qt0XR xVY3Id1lK1HPq/281tNn0rskPxY2nwXgUnTatVmlqX6473bz8OPXQPiyl91KJYir 2JCgHRLNxA6yBw== -----END CERTIFICATE-----Generated at Mon Mar 2 06:24:32 2026 by rpki-client