$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: BkuyWTCMMCJtf/lIBDIGYZId36FW3KS1WhI8NB/1iQk= Subject key identifier: 64:6D:0F:8D:D7:A2:43:CF:35:5F:9B:6B:ED:E2:2B:26:F8:45:34:0F Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019CAD2286F5E24C2051D521A98AC9008826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 1215 Signing time: Mon 02 Mar 2026 06:00:46 +0000 Manifest this update: Mon 02 Mar 2026 06:00:46 +0000 Manifest next update: Tue 03 Mar 2026 06:00:46 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: uYqoFb1tcJv43eLtjV/LXqDdQyrRycpb5dUPeTR/+/o=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:22:86:f5:e2:4c:20:51:d5:21:a9:8a:c9:00:88:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Mar 2 06:00:46 2026 GMT Not After : Mar 3 06:00:46 2026 GMT Subject: CN=646d0f8dd7a243cf355f9b6bede22b26f845340f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:54:f3:a1:ce:40:b6:93:f2:2a:b8:df:86: d1:15:90:68:23:45:23:33:0c:b5:5d:b5:20:4d:3d: 8e:bd:ae:3d:73:4a:79:12:99:d5:27:d5:2f:c8:39: 45:7e:ea:21:4c:82:f3:72:e5:b2:a4:85:b8:35:fb: 28:17:2e:bf:97:68:d2:41:7b:a1:85:d1:76:f6:d6: 8d:9e:23:ab:80:49:2f:ba:37:87:7b:e9:ca:b6:22: ed:e4:3b:7a:b2:44:49:d4:da:ff:a9:5c:74:6f:af: cf:10:9d:15:b3:12:e1:75:79:b6:b2:8e:9e:b5:b2: 02:42:52:b3:d8:9d:21:52:b7:51:92:89:23:65:01: 3a:2d:b4:12:38:71:64:68:54:7a:50:01:d7:56:09: 7a:54:1f:b4:57:4e:d2:9e:39:a6:66:af:e2:06:0e: 0a:03:e8:26:48:21:69:28:5f:eb:aa:6f:31:8b:5f: 7b:8a:64:a7:a4:99:75:42:77:22:9c:0d:6a:05:b0: a4:81:8f:14:69:dc:9e:14:f7:08:64:31:d4:6a:d2: 37:e3:36:5b:05:63:85:ad:b3:be:96:c3:04:fe:57: 0a:29:e5:9c:23:25:98:e8:06:59:20:ff:98:8b:7e: 5a:45:6f:71:a1:7a:59:1f:21:df:50:23:a3:6b:80: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6D:0F:8D:D7:A2:43:CF:35:5F:9B:6B:ED:E2:2B:26:F8:45:34:0F X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:32:67:ba:69:94:c3:54:3e:75:75:7c:40:d7:c4:57:a2:c0: 74:66:34:3d:36:84:be:62:63:ca:a0:b1:b0:19:8f:89:2e:24: d0:fa:34:6a:8b:24:94:a5:01:8d:8e:e9:d9:3a:b3:04:06:4d: 04:cf:4e:2a:e2:92:6c:90:60:f6:d6:b1:e0:2d:c2:a3:26:67: 98:67:f7:d1:5b:45:1b:69:65:ef:ce:cd:31:84:fe:14:26:f3: 8d:45:fe:4f:87:10:9a:d1:a2:b9:df:bd:a5:bd:c0:ad:75:ff: 4d:4f:42:70:65:77:89:21:20:94:53:55:d7:08:d8:af:7d:7a: 38:a8:a9:90:24:7a:f9:37:e1:d6:d4:6d:09:2f:9a:da:0b:7d: 8f:5d:b3:3b:92:62:78:a5:b3:40:a4:8a:bc:26:f4:2f:d4:56: 92:16:6c:e0:a3:36:03:e7:31:0c:ce:e1:4b:3c:cc:ef:42:fb: 07:34:00:f1:bd:94:92:fa:9d:fc:06:d1:75:f1:0b:8d:97:76: 42:ca:cc:22:7b:c9:00:62:75:7b:77:ce:59:e5:f6:ec:ad:a9: 90:59:b5:9e:87:f7:d3:57:a0:7f:18:d6:24:9a:78:aa:7c:e1: 85:62:e3:55:65:36:47:55:2f:8d:80:4d:19:c3:ca:8b:bf:cb: 8a:95:f9:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytIob14kwgUdUhqYrJAIgmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwMzAyMDYwMDQ2WhcNMjYwMzAzMDYwMDQ2WjAzMTEwLwYDVQQD Eyg2NDZkMGY4ZGQ3YTI0M2NmMzU1ZjliNmJlZGUyMmIyNmY4NDUzNDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpJU86HOQLaT8iq434bRFZBoI0Uj Mwy1XbUgTT2Ova49c0p5EpnVJ9UvyDlFfuohTILzcuWypIW4NfsoFy6/l2jSQXuh hdF29taNniOrgEkvujeHe+nKtiLt5Dt6skRJ1Nr/qVx0b6/PEJ0VsxLhdXm2so6e tbICQlKz2J0hUrdRkokjZQE6LbQSOHFkaFR6UAHXVgl6VB+0V07SnjmmZq/iBg4K A+gmSCFpKF/rqm8xi197imSnpJl1QncinA1qBbCkgY8UadyeFPcIZDHUatI34zZb BWOFrbO+lsME/lcKKeWcIyWY6AZZIP+Yi35aRW9xoXpZHyHfUCOja4CsZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRtD43XokPPNV+ba+3iKyb4RTQPMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTJnummU w1Q+dXV8QNfEV6LAdGY0PTaEvmJjyqCxsBmPiS4k0Po0aosklKUBjY7p2TqzBAZN BM9OKuKSbJBg9tax4C3CoyZnmGf30VtFG2ll787NMYT+FCbzjUX+T4cQmtGiud+9 pb3ArXX/TU9CcGV3iSEglFNV1wjYr316OKipkCR6+Tfh1tRtCS+a2gt9j12zO5Ji eKWzQKSKvCb0L9RWkhZs4KM2A+cxDM7hSzzM70L7BzQA8b2Ukvqd/AbRdfELjZd2 QsrMInvJAGJ1e3fOWeX27K2pkFm1nof301egfxjWJJp4qnzhhWLjVWU2R1UvjYBN GcPKi7/LipX5nQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:06:51 2026 by rpki-client