$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: j+pg+EPpmeb8Ub8BdLSWL6K3MVOfYW9F2w0lkzhWg6w= Subject key identifier: 72:F8:66:D5:99:5C:36:69:E2:8C:A3:DE:7F:70:87:BE:E6:3D:39:FA Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019CA9B3CB998F55466517A0808A83F3E2C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 1605 Signing time: Sun 01 Mar 2026 14:00:58 +0000 Manifest this update: Sun 01 Mar 2026 14:00:58 +0000 Manifest next update: Mon 02 Mar 2026 14:00:58 +0000 Files and hashes: 1: 5izoM-ae0viPYeMa8vG_OMdcCFM.roa (hash: TwuLhMgA2SHR4gXSc9/RCEg/7dBujziBPA56lp4yzpw=) 2: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=) 3: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=) 4: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=) 5: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: /lQeyBNZ1srxvcHT9tdunlem9s3znJy9iWyou+leRw8=) 6: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=) 7: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=) 8: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=) 9: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=) 10: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=) 11: qJOi4zVPIJeiBz6kzCUQLpwMngk.roa (hash: vqduf5OrqJ9boER+M0PF82VqTnPYijX9elPDZEa03wo=) 12: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=) 13: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=) 14: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:b3:cb:99:8f:55:46:65:17:a0:80:8a:83:f3:e2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Mar 1 14:00:58 2026 GMT Not After : Mar 2 14:00:58 2026 GMT Subject: CN=72f866d5995c3669e28ca3de7f7087bee63d39fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a0:54:83:e2:5d:a6:d2:d7:ee:73:e1:be:df: 26:e1:31:32:81:58:a4:7a:3b:74:96:5a:8c:70:de: 43:3a:13:1e:37:48:c9:56:c5:f3:43:52:b9:75:e7: 7d:b2:6d:fa:eb:b6:26:ce:28:c1:9c:db:02:79:d9: 02:ae:c0:92:61:c2:0d:46:41:80:3b:d0:ac:e7:15: 0b:92:fc:a1:d9:16:e1:c8:0d:82:fb:92:58:33:9c: 5d:4e:c2:57:b6:81:eb:68:63:8f:44:df:76:c8:84: 2c:66:fe:79:cb:ba:19:af:16:fd:ee:1e:70:f5:db: ea:57:02:68:05:31:6e:bd:a0:31:8f:25:cf:f1:7d: 0b:46:e3:7f:fc:e9:0a:70:12:c7:6b:4e:2c:1a:54: 2a:ef:77:09:6a:09:4e:3d:ab:4d:4c:f1:e1:df:79: a1:ec:19:ba:d1:58:4f:53:47:90:fc:6d:dd:eb:2c: 42:ca:f3:6c:9d:75:93:0e:e0:2e:7e:bc:94:e4:84: d2:5b:f9:98:06:c8:cb:fe:14:5e:43:23:c5:98:f8: 4c:5c:25:2c:5b:c4:6e:b4:9f:5e:b8:c7:5f:0a:be: 14:2f:e3:62:c5:78:18:e5:4f:37:a3:50:02:ae:a3: 4b:05:b0:a9:fb:ea:6d:e0:7a:23:42:28:77:4a:00: af:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F8:66:D5:99:5C:36:69:E2:8C:A3:DE:7F:70:87:BE:E6:3D:39:FA X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c4:60:3b:3e:62:f9:d0:c5:ac:c2:1f:db:3d:ac:84:3a:e6: 3b:e8:7d:7c:a4:b4:81:6d:0a:f8:a0:af:fb:6b:fd:7f:68:a3: 1e:64:f0:17:43:83:40:df:54:1c:1b:9b:68:1b:23:30:b1:4b: e5:c2:63:0d:67:4c:87:d0:7d:fd:a4:33:e7:80:78:40:c2:50: d2:1c:be:0e:dc:b3:6b:9b:2e:e4:19:7f:d7:94:69:af:88:8d: a8:8d:26:24:c4:35:e8:c7:b8:89:2f:3c:60:e8:d2:67:bc:18: d1:99:c5:e2:02:e1:11:87:f0:22:b8:16:a7:31:8c:0a:17:68: 32:0c:c0:dc:67:17:eb:f7:a0:c1:6a:e0:9b:de:3a:6b:49:e1: b0:66:97:d6:a5:4f:3d:c8:02:39:c4:4e:79:5b:f8:bc:33:18: cf:4e:58:83:f3:e3:9b:03:ca:08:e2:d8:2a:09:91:44:3c:91: fc:a2:37:c9:dd:ac:00:09:79:2f:99:4f:1e:dd:76:12:90:81: bc:d5:55:82:86:ef:35:04:e2:f2:28:a7:85:cd:c8:b8:51:63: 6e:48:83:77:a8:2c:d1:85:5c:77:71:06:6b:d9:26:a7:3b:78: 6d:94:da:76:f3:7b:0b:0f:16:d9:c1:43:2a:c6:6a:00:b5:7e: 75:92:c1:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyps8uZj1VGZReggIqD8+LDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYwMzAxMTQwMDU4WhcNMjYwMzAyMTQwMDU4WjAzMTEwLwYDVQQD Eyg3MmY4NjZkNTk5NWMzNjY5ZTI4Y2EzZGU3ZjcwODdiZWU2M2QzOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6BUg+JdptLX7nPhvt8m4TEygVik ejt0llqMcN5DOhMeN0jJVsXzQ1K5ded9sm3667YmzijBnNsCedkCrsCSYcINRkGA O9Cs5xULkvyh2RbhyA2C+5JYM5xdTsJXtoHraGOPRN92yIQsZv55y7oZrxb97h5w 9dvqVwJoBTFuvaAxjyXP8X0LRuN//OkKcBLHa04sGlQq73cJaglOPatNTPHh33mh 7Bm60VhPU0eQ/G3d6yxCyvNsnXWTDuAufryU5ITSW/mYBsjL/hReQyPFmPhMXCUs W8RutJ9euMdfCr4UL+NixXgY5U83o1ACrqNLBbCp++pt4HojQih3SgCvDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHL4ZtWZXDZp4oyj3n9wh77mPTn6MB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8RgOz5i +dDFrMIf2z2shDrmO+h9fKS0gW0K+KCv+2v9f2ijHmTwF0ODQN9UHBubaBsjMLFL 5cJjDWdMh9B9/aQz54B4QMJQ0hy+Dtyza5su5Bl/15Rpr4iNqI0mJMQ16Me4iS88 YOjSZ7wY0ZnF4gLhEYfwIrgWpzGMChdoMgzA3GcX6/egwWrgm946a0nhsGaX1qVP PcgCOcROeVv4vDMYz05Yg/PjmwPKCOLYKgmRRDyR/KI3yd2sAAl5L5lPHt12EpCB vNVVgobvNQTi8iinhc3IuFFjbkiDd6gs0YVcd3EGa9kmpzt4bZTadvN7Cw8W2cFD KsZqALV+dZLBtA== -----END CERTIFICATE-----Generated at Sun Mar 1 18:25:56 2026 by rpki-client