$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft File: pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json) Hash identifier: AUQsFxjy7sSFw4cVHRloB/o815QsKzPlkDHnevVAQl4= Subject key identifier: 0D:B0:34:50:62:18:64:68:12:19:41:83:2C:5A:67:04:52:21:A2:42 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019CAA2169C632B119712E2003EDAD1E0EF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft Manifest number: 028C Signing time: Sun 01 Mar 2026 16:00:42 +0000 Manifest this update: Sun 01 Mar 2026 16:00:42 +0000 Manifest next update: Mon 02 Mar 2026 16:00:42 +0000 Files and hashes: 1: 1-QpEsL_AtML3ScLvBXvkFT8qJ80.roa (hash: +pcA6aIuMEkhsfThQ01/KfIXIckOnFaz60ouEEzocyo=) 2: 3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa (hash: pz2rG+hBKqBtyp01TUwFPW7c8W6AKlPJM3L7dBpBCVg=) 3: 4ofKO6WJJ9gvwJBsnh0_DxIUiCQ.roa (hash: GKRpPV/E1hNbYjuWh9w1ms8zKc2uw/7DUOZK8HvTW2k=) 4: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (hash: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs=) 5: AEmrEvTl5nZilDd5lyZaWGwH9Rk.roa (hash: PtBxNCrF8QX0P315dOs4ZmrXEvyhJt7cb+0UMIIHYW4=) 6: IdcY3v8c0CZDDmi3STdilJPAqYA.roa (hash: MtpvUlKM4NkKs2dwWGucxHDKfkZ77Tg0i1COdRQImog=) 7: In9fUZ6_laTBK3Ny_2v45J-DRyk.roa (hash: AVqBR/4RXTDFlurKJYXZ2mUzQ6COZ0Mw32Yf6crahoY=) 8: WIxhLEYJGDRzvi2YQPkejSnZcyY.roa (hash: IQv8lDCReAIo1vSxymiyMrbwR8Ln0jB9PXL5wzjZ1uM=) 9: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (hash: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw=) 10: YGgmrBWdNr2gr-PCb7IviufXu1s.roa (hash: XCRz3ie5NHXPDBJb939GkB0ydCGEbtQ+g5/MkaAJQ/w=) 11: cngSEETmst842JVqCMuJdzGT1YQ.roa (hash: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0=) 12: demNlliFBXRCd4_BO7uGvr9OBWs.roa (hash: 3e0uS6Ngag4AQ8UkZJyAtJ3ajUAIc6mhDPE4a8UAS9c=) 13: ipupcdvp4LbD6D-C1ZVS4_JrtVM.roa (hash: 1kO7KglXg+mOXu0757cqWUOoHLIBVcVZE3NF8cCE/Wk=) 14: keSJdnMwcVK2FtcwzmCvVNU79JQ.roa (hash: /rXHdI2JjhjhwAIXDwev1G3+2EHSEVpVeCwEeEhKfkg=) 15: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (hash: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE=) 16: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: 3RDzHO9MJ1prKPGyrGPDKNgvgqkSmZNwhXAAHjx7TJk=) 17: sLk-izSTWX7GM5E-kM2g-ymgESA.roa (hash: a3gJXW/HoyQtdrjVm/h5X6VgqIynZQ0Fud92Ay7J9lc=) 18: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (hash: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw=) 19: wnofk64UVBKP93Op1kPJw8OAZVA.roa (hash: tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:21:69:c6:32:b1:19:71:2e:20:03:ed:ad:1e:0e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Mar 1 16:00:42 2026 GMT Not After : Mar 2 16:00:42 2026 GMT Subject: CN=0db0345062186468121941832c5a67045221a242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:4c:49:09:8a:7f:ae:77:50:b7:fa:18:5f: f8:be:01:21:58:6e:5f:dd:96:c8:20:2a:31:31:e8: fe:f6:a8:09:f0:45:43:77:d3:b4:c2:f8:7d:fc:93: 0b:db:5a:fc:c7:f6:33:0c:77:d3:60:e5:12:0b:4c: 72:88:04:3e:7c:84:80:56:73:0c:33:84:08:f8:a1: 44:fd:c9:5d:1f:7b:0b:1e:77:a5:96:7f:6f:64:78: fe:42:70:63:ab:f3:81:c0:65:f4:62:64:60:c9:30: c5:ea:e9:02:e3:01:df:16:f1:ee:db:65:37:24:4e: 68:0c:f6:56:44:9c:56:d6:d1:e3:11:4d:45:d5:5d: 7b:a2:ac:f3:94:0b:81:88:b1:08:fa:c8:a9:6e:3b: 0d:74:f9:e5:61:c3:18:bc:b1:cc:be:6c:61:98:e2: e5:d4:08:4b:56:f6:95:8c:4d:d7:c9:95:49:42:b9: 2e:24:d4:8a:02:1f:08:bf:9f:7c:9f:74:54:eb:8c: 47:79:5b:54:ee:d9:ce:ee:b6:f5:0e:5b:c1:51:b5: 96:16:cd:a0:5d:e5:eb:b4:e3:d4:83:d5:3f:6e:0f: c2:c7:f8:b4:66:d9:13:f8:8d:99:50:c0:df:54:52: b9:c9:93:48:c2:a8:51:cd:b0:4a:70:34:eb:db:f9: 10:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B0:34:50:62:18:64:68:12:19:41:83:2C:5A:67:04:52:21:A2:42 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ef:c6:10:3b:e2:2f:61:e5:27:77:5b:2f:a2:f1:8d:7a:03: fe:5c:36:ca:aa:b3:c4:ce:15:57:3a:b0:72:cf:b8:ee:f7:43: ef:c3:e8:89:23:f6:74:30:0a:d1:3d:6b:da:2e:d7:c7:ff:53: 58:c9:87:6c:f7:6e:33:d7:eb:d1:58:52:08:99:32:10:d6:6f: 36:ad:25:42:14:3d:03:66:86:73:fa:20:0a:cf:49:65:81:90: 38:ae:0c:30:1d:3c:1a:ed:86:46:0a:92:ba:16:27:69:2d:9c: fc:ee:bd:b6:86:b7:83:66:aa:29:9f:88:a5:54:23:84:a0:6c: a8:9c:43:8b:bf:20:68:1f:32:ed:77:06:05:82:dd:79:cd:9c: 41:a2:5b:dd:00:b2:99:07:c9:c5:88:df:84:be:ef:12:e6:ca: 8c:ba:c2:e1:1f:a0:bb:d3:ec:77:43:a4:f6:5c:50:f8:33:6f: 7e:ad:74:b2:a9:05:9b:7a:80:4e:f8:56:4a:b2:95:34:3f:4f: 74:49:89:63:2b:75:25:35:4a:70:4e:05:2f:e3:f3:d7:e8:28: a3:49:7b:bf:d0:43:24:f0:88:24:61:84:02:05:06:5e:a2:3b: 68:53:8d:a3:db:51:e6:ef:cd:8c:e7:af:25:83:63:3b:54:f3: ac:78:89:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIWnGMrEZcS4gA+2tHg74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMzAxMTYwMDQyWhcNMjYwMzAyMTYwMDQyWjAzMTEwLwYDVQQD EygwZGIwMzQ1MDYyMTg2NDY4MTIxOTQxODMyYzVhNjcwNDUyMjFhMjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq45MSQmKf653ULf6GF/4vgEhWG5f 3ZbIICoxMej+9qgJ8EVDd9O0wvh9/JML21r8x/YzDHfTYOUSC0xyiAQ+fISAVnMM M4QI+KFE/cldH3sLHnelln9vZHj+QnBjq/OBwGX0YmRgyTDF6ukC4wHfFvHu22U3 JE5oDPZWRJxW1tHjEU1F1V17oqzzlAuBiLEI+sipbjsNdPnlYcMYvLHMvmxhmOLl 1AhLVvaVjE3XyZVJQrkuJNSKAh8Iv598n3RU64xHeVtU7tnO7rb1DlvBUbWWFs2g XeXrtOPUg9U/bg/Cx/i0ZtkT+I2ZUMDfVFK5yZNIwqhRzbBKcDTr2/kQZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2wNFBiGGRoEhlBgyxaZwRSIaJCMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+/GEDvi L2HlJ3dbL6LxjXoD/lw2yqqzxM4VVzqwcs+47vdD78PoiSP2dDAK0T1r2i7Xx/9T WMmHbPduM9fr0VhSCJkyENZvNq0lQhQ9A2aGc/ogCs9JZYGQOK4MMB08Gu2GRgqS uhYnaS2c/O69toa3g2aqKZ+IpVQjhKBsqJxDi78gaB8y7XcGBYLdec2cQaJb3QCy mQfJxYjfhL7vEubKjLrC4R+gu9Psd0Ok9lxQ+DNvfq10sqkFm3qATvhWSrKVND9P dEmJYyt1JTVKcE4FL+Pz1+goo0l7v9BDJPCIJGGEAgUGXqI7aFONo9tR5u/NjOev JYNjO1TzrHiJLQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:43:45 2026 by rpki-client