$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: Z9z4OeMf1VSGBEfMyZx/FowX0fcYyr1fVKDFVbFjXH4= Subject key identifier: 1A:0D:2C:FF:EF:08:43:E8:FC:94:38:4B:86:6C:CC:CE:41:10:D6:74 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 019CA9462CD4CC89A0D7FE08E8E7A547DDA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 0E61 Signing time: Sun 01 Mar 2026 12:01:14 +0000 Manifest this update: Sun 01 Mar 2026 12:01:14 +0000 Manifest next update: Mon 02 Mar 2026 12:01:14 +0000 Files and hashes: 1: 02DR5VqiImR1ELzoMhmN2MgdJEw.roa (hash: A46KCkLXFpYgdMenUrWnd1pDGxM359G65Rk9wVjYrCI=) 2: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: pCOop3c5o9iFydCP2GuUupuL/SmqoLU20NGMAFXpGdA=) 3: 66ry_Oqrn2z2VQi36erLm_YTas8.roa (hash: 8++6k+ANwssYLtGuRElIJ17chl0LvEvv8esMVg7kfIE=) 4: 8P-jAkBcMOaRIUETkZOwY2giLXE.roa (hash: JFv+n+pyR4z+68wZuOFM0scuNRmrUJ1Wb5COfkBUH5E=) 5: JrRi-0qoMFLhRr6cb92PJhrDFOQ.roa (hash: IOBcBMl3KD2AdRrtTbfJnBEtnt8xxIivFvb7gPSo8iM=) 6: KpUnWVUlULWTTS0J2TLqceBjzCk.roa (hash: 76AJtOxzTxnr9dKExR5Nj079cdfCs06aPInHb2LSvtc=) 7: Xpfmc5Pj6g7rym3j_1LXYJ9AL1s.roa (hash: MovlI65q4mVYc3DNO4AqCJ9iCuS7hY789BB33mIixAc=) 8: b2A87lKXZV-LA0ZGDO4bCLP_qZk.roa (hash: fj4a7LJXRs7D1MouPdKAx8xun8DGteQiIPGE+YxQovY=) 9: eqwxW_73SsfybtamGFjU8BT6lss.roa (hash: eZIEEacqr0QeRaw//AWmV7fNo+uhUfn87QEEoeHj8N4=) 10: fHiLAjeGI5fzHUJT-wjG-vUQaUc.roa (hash: b2nJsInyFTD4R4jnJKV9oymyFGug4tERm9L1VVzvdQU=) 11: gcxp-EWnfFLHMrONlRoutn-Z7U8.roa (hash: pfCAICQ/vVikMpFdMBXvwM28HdJs0Hi4u8HPJ1KDTPI=) 12: grRv1zK274iLycaoK-Nbqjw_x1k.roa (hash: QLP5kOYkk4bXScipk9r7CnpegfUS+YnmqDjmg8xa35o=) 13: l1LATFY_vdostbB9Lz5ULV3obQg.roa (hash: g5dMlB8SMZ/AEHbTJXc8VAsuZMEmjzmc7YnjTo/UDz8=) 14: lmwUE6-sNDETCNSEMoLU5Q6laJU.roa (hash: 8qCzxJz2lk/vBKmrmfwaSNgolO5upfvcwLUosHTaWSo=) 15: pMRzd49PJuC_a8isaKVdx-y6R6E.roa (hash: vS6bWVrCBd2U3yUpSsw/bcztmwQtyHAUDWfNv8cokkA=) 16: yeEWbOYgX_Oncu1Rzgm_LkCjWSg.roa (hash: SuLBsAyJ9wMKUX8JJrXZ9GO0IIZWlW+vtwNA4dWtXb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:46:2c:d4:cc:89:a0:d7:fe:08:e8:e7:a5:47:dd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Mar 1 12:01:14 2026 GMT Not After : Mar 2 12:01:14 2026 GMT Subject: CN=1a0d2cffef0843e8fc94384b866cccce4110d674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:3f:f4:6e:e3:23:71:21:0f:0f:df:2e:dc:2c: 3b:18:cb:00:2d:13:89:41:5d:c7:68:e1:2d:4d:b7: 6d:cb:6c:b2:f1:1f:a4:e0:27:7f:e6:71:e9:41:7c: d1:0e:83:86:91:1d:59:37:6d:c7:b1:38:21:c8:6e: 41:b6:66:5c:63:75:a2:a0:1d:86:6c:c5:a1:ee:4e: 34:43:5d:da:d5:a8:2f:a5:61:d1:2b:66:2b:04:41: cb:6d:a6:52:1a:92:29:8a:b1:76:4f:17:c7:1b:68: df:2c:b8:f0:33:6d:de:6a:54:dd:82:0a:a4:69:f5: 90:f5:56:b6:bd:b9:74:73:ec:5b:3e:a1:27:df:fa: ab:9d:65:b9:aa:66:e9:b9:06:07:7a:df:b5:a6:5e: 77:5b:16:05:e7:7e:41:ee:48:1d:64:18:16:8a:76: b0:76:ba:7f:60:b0:b3:f7:cd:6e:56:44:93:c7:b2: 1f:db:93:1e:2f:36:17:e2:65:a3:a4:5b:93:86:b4: d6:f2:59:74:24:d1:09:75:f7:d3:42:d6:78:59:61: d9:b3:0e:ca:ab:a5:07:76:03:4d:38:76:01:87:ce: a4:c9:08:c9:8f:61:73:d9:7d:1f:15:4b:3e:fd:d9: 10:2b:ca:1e:6a:b1:6f:5a:4c:e7:a3:32:a5:29:25: 91:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0D:2C:FF:EF:08:43:E8:FC:94:38:4B:86:6C:CC:CE:41:10:D6:74 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:54:a4:19:27:40:78:1c:42:3e:f3:86:8b:17:d2:88:6f:37: 5c:44:76:ff:7d:27:6f:58:0c:b4:3e:fb:2a:38:7a:5c:f7:86: 1c:67:76:63:a2:4b:d5:86:51:80:83:c3:6a:c1:26:11:1a:1f: 51:68:36:29:4f:11:ca:bd:23:d9:bb:5e:12:2f:3b:9d:96:fc: e1:b0:04:42:ba:25:11:b8:d6:17:b1:9e:54:4a:db:e1:f0:39: 34:67:eb:27:fa:fa:78:d1:4f:e0:e6:d2:ff:30:64:d7:f0:ab: 5d:33:76:6d:09:81:6f:b0:f4:6b:cf:29:fa:a1:4e:56:e7:57: d4:8a:37:fd:84:6e:8a:40:3f:3d:5a:0c:c1:de:8d:8a:e9:3b: 6d:c8:e3:93:f2:db:d1:a1:e3:a0:9c:48:5d:af:3e:21:d0:49: ad:0a:c7:0b:c9:04:f0:bc:43:bd:37:40:39:6d:d4:49:93:86: aa:33:18:10:3a:ae:12:f5:e4:ee:40:65:a8:03:0a:49:20:de: 42:46:80:3e:9f:5f:8f:17:61:c1:05:dc:15:ca:61:e7:69:9e: b9:c0:b6:37:51:1e:2a:60:4c:f4:5c:3c:9d:59:66:2b:bd:9d: 0c:89:fc:f1:82:79:8b:fc:71:ec:ec:2b:d5:f2:22:46:92:43: 5d:2c:38:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypRizUzImg1/4I6OelR92oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjYwMzAxMTIwMTE0WhcNMjYwMzAyMTIwMTE0WjAzMTEwLwYDVQQD EygxYTBkMmNmZmVmMDg0M2U4ZmM5NDM4NGI4NjZjY2NjZTQxMTBkNjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+j/0buMjcSEPD98u3Cw7GMsALROJ QV3HaOEtTbdty2yy8R+k4Cd/5nHpQXzRDoOGkR1ZN23HsTghyG5BtmZcY3WioB2G bMWh7k40Q13a1agvpWHRK2YrBEHLbaZSGpIpirF2TxfHG2jfLLjwM23ealTdggqk afWQ9Va2vbl0c+xbPqEn3/qrnWW5qmbpuQYHet+1pl53WxYF535B7kgdZBgWinaw drp/YLCz981uVkSTx7If25MeLzYX4mWjpFuThrTW8ll0JNEJdffTQtZ4WWHZsw7K q6UHdgNNOHYBh86kyQjJj2Fz2X0fFUs+/dkQK8oearFvWkznozKlKSWRBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoNLP/vCEPo/JQ4S4ZszM5BENZ0MB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVSkGSdA eBxCPvOGixfSiG83XER2/30nb1gMtD77Kjh6XPeGHGd2Y6JL1YZRgIPDasEmERof UWg2KU8Ryr0j2bteEi87nZb84bAEQrolEbjWF7GeVErb4fA5NGfrJ/r6eNFP4ObS /zBk1/CrXTN2bQmBb7D0a88p+qFOVudX1Io3/YRuikA/PVoMwd6Niuk7bcjjk/Lb 0aHjoJxIXa8+IdBJrQrHC8kE8LxDvTdAOW3USZOGqjMYEDquEvXk7kBlqAMKSSDe QkaAPp9fjxdhwQXcFcph52meucC2N1EeKmBM9Fw8nVlmK72dDIn88YJ5i/xx7Owr 1fIiRpJDXSw4Mg== -----END CERTIFICATE-----Generated at Sun Mar 1 18:14:32 2026 by rpki-client