$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: eRMP31ipZEBJLRBa7zfcsb1K6WfsZiEZFx0843bkEP0= Subject key identifier: 3B:05:F8:B3:53:D9:C8:B3:62:21:8C:61:60:3C:80:61:66:C8:1E:84 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019CAA8F5897C2DE2C641A8EFB6CD8290CA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 187E Signing time: Sun 01 Mar 2026 18:00:46 +0000 Manifest this update: Sun 01 Mar 2026 18:00:46 +0000 Manifest next update: Mon 02 Mar 2026 18:00:46 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: 3BLezSxydOI2O9djm9sRWWgYpN86CFOl/Tzuq00yW2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:8f:58:97:c2:de:2c:64:1a:8e:fb:6c:d8:29:0c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Mar 1 18:00:46 2026 GMT Not After : Mar 2 18:00:46 2026 GMT Subject: CN=3b05f8b353d9c8b362218c61603c806166c81e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:44:23:c6:5a:d6:d8:ad:4d:38:b5:1a:3d: ad:db:6f:84:d0:9b:c1:2c:41:fa:c3:b5:82:2d:ff: a3:5c:ea:2d:22:f4:34:49:eb:1c:59:da:41:91:f4: af:2d:f5:6c:99:3d:38:cb:46:1e:57:e4:22:a1:97: ca:b9:00:8e:15:c2:f9:94:00:61:81:1a:2d:d1:02: 02:8f:19:f3:e0:74:6c:a1:a5:80:3b:df:b4:0b:43: e4:f6:3e:11:86:11:d1:8b:1b:23:84:ad:06:ce:c5: 64:f5:cd:83:25:ca:89:ba:e7:42:66:66:48:57:f4: 5b:52:36:2a:5f:15:f5:14:48:f7:3e:36:36:3b:3f: 32:9f:31:4d:59:54:74:22:56:f3:c7:84:84:be:43: 6b:1f:ff:03:b3:c7:94:4a:71:c7:e2:f1:2f:b1:fc: 9f:0e:5c:28:a7:84:24:90:75:11:a0:74:5a:ad:7b: 8f:fa:85:4d:99:04:c3:e0:a2:14:48:25:9d:9a:b8: ff:5f:ca:79:e2:c9:6e:58:4e:f5:85:4b:59:ed:9a: bb:cc:19:27:b0:86:22:64:10:97:1f:b4:23:38:e8: 0a:82:35:4c:37:5b:8d:3a:09:28:eb:f6:90:75:8d: 9b:ba:ac:3a:60:cd:48:9c:cc:28:06:f0:61:7d:42: 1b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:05:F8:B3:53:D9:C8:B3:62:21:8C:61:60:3C:80:61:66:C8:1E:84 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a7:d9:64:63:fa:5d:b2:39:47:83:6b:3b:10:5e:08:fb:c5: 22:1a:1c:16:66:e3:2e:9c:ea:09:49:e8:8d:3d:46:b5:68:55: 82:fa:f3:38:31:82:d3:b4:d3:cd:0e:c0:93:51:bf:42:cc:2e: f6:1e:14:35:58:fe:bf:2a:17:87:ae:1b:e2:b1:d8:e4:9d:15: a8:19:7a:9a:7f:17:67:99:f1:a2:8c:3f:6a:a1:cb:a2:ae:86: b6:90:8f:1c:6a:74:65:7d:99:bf:d3:d2:13:e3:d8:bf:4b:8e: 1a:30:5f:6e:4f:a9:b2:e7:61:0f:23:81:af:e8:cf:0b:e5:e8: d1:68:89:76:6a:16:0e:5b:9f:98:88:5b:f8:86:c9:88:0d:08: 1a:5a:33:73:5f:27:f6:f5:da:93:fe:19:54:9a:a7:e6:9d:23: 44:b8:36:22:5a:23:be:48:dd:eb:0e:d0:42:75:e2:dc:fd:42: ad:82:8e:25:2e:b9:fb:21:42:b2:36:ba:0a:06:34:d4:4f:03: cb:6c:72:0a:53:af:90:42:2a:2e:17:38:44:c3:35:1c:9f:98: bb:5e:fe:f5:7a:e2:e9:b7:dc:88:6f:9d:30:55:ee:0c:cf:e7: 7b:d8:58:b5:61:02:3b:0e:a6:31:be:ba:6b:fa:dd:77:83:a1: 29:b0:0c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqj1iXwt4sZBqO+2zYKQyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMzAxMTgwMDQ2WhcNMjYwMzAyMTgwMDQ2WjAzMTEwLwYDVQQD EygzYjA1ZjhiMzUzZDljOGIzNjIyMThjNjE2MDNjODA2MTY2YzgxZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnlEI8Za1titTTi1Gj2t22+E0JvB LEH6w7WCLf+jXOotIvQ0SescWdpBkfSvLfVsmT04y0YeV+QioZfKuQCOFcL5lABh gRot0QICjxnz4HRsoaWAO9+0C0Pk9j4RhhHRixsjhK0GzsVk9c2DJcqJuudCZmZI V/RbUjYqXxX1FEj3PjY2Oz8ynzFNWVR0Ilbzx4SEvkNrH/8Ds8eUSnHH4vEvsfyf Dlwop4QkkHURoHRarXuP+oVNmQTD4KIUSCWdmrj/X8p54sluWE71hUtZ7Zq7zBkn sIYiZBCXH7QjOOgKgjVMN1uNOgko6/aQdY2buqw6YM1InMwoBvBhfUIbwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsF+LNT2cizYiGMYWA8gGFmyB6EMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPafZZGP6 XbI5R4NrOxBeCPvFIhocFmbjLpzqCUnojT1GtWhVgvrzODGC07TTzQ7Ak1G/Qswu 9h4UNVj+vyoXh64b4rHY5J0VqBl6mn8XZ5nxoow/aqHLoq6GtpCPHGp0ZX2Zv9PS E+PYv0uOGjBfbk+psudhDyOBr+jPC+Xo0WiJdmoWDlufmIhb+IbJiA0IGlozc18n 9vXak/4ZVJqn5p0jRLg2Ilojvkjd6w7QQnXi3P1CrYKOJS65+yFCsja6CgY01E8D y2xyClOvkEIqLhc4RMM1HJ+Yu17+9Xri6bfciG+dMFXuDM/ne9hYtWECOw6mMb66 a/rdd4OhKbAMDQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:44:19 2026 by rpki-client