$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: WvQ1dACgYJ7F/mjj4n8kKHKk5LjSSLWSoaOQ8ru0dGY= Subject key identifier: A0:55:E0:EC:20:B9:2D:80:44:7E:6F:D8:87:3C:3B:02:D3:8A:8D:FC Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019CAB6B3A3D3EC0B9C51DC4AC8163F867C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 1826 Signing time: Sun 01 Mar 2026 22:00:57 +0000 Manifest this update: Sun 01 Mar 2026 22:00:57 +0000 Manifest next update: Mon 02 Mar 2026 22:00:57 +0000 Files and hashes: 1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=) 2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=) 3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=) 4: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=) 5: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=) 6: XN2j2ZnyCgistBzzXo98ceyqR5E.roa (hash: /uVeuVZywozOmzMeKf0pUlvlMBObR5bHXnc9LBKX9hg=) 7: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: IbTU+wpaAmZ6P/BLa1wdjYoHTW/rpjQTk0BoYnYj3QI=) 8: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=) 9: cV7dC0pNAKEULz7tUevMHVPoO2I.roa (hash: adieXG5yJS9ZLy1/S1WWQwhI/4aQn97j+i1QEsFv1q4=) 10: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=) 11: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=) 12: roN-7lMrJBJshC3odG7CfsyJC9w.roa (hash: HgaVm7vJPKp3DvkA5zpgY89s+4B3e4bWrP23hUJHt/k=) 13: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:6b:3a:3d:3e:c0:b9:c5:1d:c4:ac:81:63:f8:67:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Mar 1 22:00:57 2026 GMT Not After : Mar 2 22:00:57 2026 GMT Subject: CN=a055e0ec20b92d80447e6fd8873c3b02d38a8dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:66:ad:58:29:94:6c:f3:06:99:53:76:16:26: 38:ac:99:45:66:ff:d1:35:21:e3:a3:20:88:48:0f: 6c:63:5d:b7:f5:90:9f:64:fd:67:9b:6c:54:e2:a4: bc:28:11:f9:2a:7e:de:42:00:55:f7:58:5b:6c:1b: 36:b5:c6:e6:c0:87:be:87:e2:e7:00:7b:3f:dc:2a: aa:c1:3b:e2:f0:1f:3d:0a:5b:98:66:c7:cb:e8:1e: f1:68:33:28:fa:08:53:ac:4e:d7:4a:ba:69:b6:b7: 40:10:49:ed:ab:c1:1f:c4:ed:a6:bf:a9:67:aa:d3: f2:c6:f4:f0:13:a1:92:42:90:f6:2b:f2:24:19:6d: 72:c8:4a:60:76:4a:4d:0d:d4:54:ae:fd:09:a4:e3: 31:b1:f9:b2:78:3d:55:d7:31:26:c1:32:5d:1f:87: f2:fc:e3:4b:2e:06:06:20:e0:a6:82:77:0b:66:5a: 9a:a8:9a:cf:3a:87:52:01:37:86:0d:87:c2:a1:62: 2f:a6:f1:76:d5:fb:07:56:01:3c:b2:6c:48:52:c6: 58:f1:93:a4:4e:44:25:fe:98:ef:37:a4:b2:6c:d4: 4a:3c:c3:cd:ea:97:33:c2:b4:9b:6d:da:7a:fc:3d: 7f:4d:eb:ca:2a:83:f4:e0:33:2e:20:ba:f3:28:d0: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:55:E0:EC:20:B9:2D:80:44:7E:6F:D8:87:3C:3B:02:D3:8A:8D:FC X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7e:8b:18:ba:6f:64:bb:ea:9c:3f:4e:68:40:12:45:8d:f0: 68:9d:80:49:ed:bf:33:f8:33:4a:c1:d6:45:fd:a2:2e:5c:92: a1:c8:e5:da:8c:bf:a2:ee:74:4e:7c:96:22:91:86:31:39:6b: e7:d8:c5:02:97:51:fa:cf:aa:7b:f7:3c:2a:d4:c7:53:6a:ba: a1:5f:53:d7:cf:a4:1b:12:dd:80:7d:31:20:2c:d0:13:e2:92: 14:78:50:53:22:8d:f9:2f:73:72:d4:73:7b:a1:95:27:34:b9: 7f:f0:da:c1:55:4e:e6:99:c5:06:e0:e5:0a:6f:eb:d1:d2:df: 74:5b:9b:03:4c:0a:75:c4:13:5b:cc:c0:bd:6e:b5:88:18:9e: 84:79:b3:f7:07:97:8d:94:c0:4e:e1:16:a6:97:87:29:39:6c: fa:ff:2d:68:ec:d7:c1:21:1d:19:cb:d3:7b:55:a5:dc:c6:e7: 33:a7:7c:06:14:91:4e:10:0c:9a:dc:08:a0:05:d7:8c:ad:1f: 78:7d:36:47:2b:b8:cb:84:db:59:40:26:8a:7c:05:38:db:70: 38:2e:e3:80:36:c0:dd:20:3d:1d:7f:48:c7:97:59:18:77:4c: 6c:bc:7d:f7:81:28:ea:64:d0:f1:a0:9c:d8:01:11:0c:34:20: 4b:76:4d:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrazo9PsC5xR3ErIFj+GfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwMzAxMjIwMDU3WhcNMjYwMzAyMjIwMDU3WjAzMTEwLwYDVQQD EyhhMDU1ZTBlYzIwYjkyZDgwNDQ3ZTZmZDg4NzNjM2IwMmQzOGE4ZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWatWCmUbPMGmVN2FiY4rJlFZv/R NSHjoyCISA9sY1239ZCfZP1nm2xU4qS8KBH5Kn7eQgBV91hbbBs2tcbmwIe+h+Ln AHs/3CqqwTvi8B89CluYZsfL6B7xaDMo+ghTrE7XSrpptrdAEEntq8EfxO2mv6ln qtPyxvTwE6GSQpD2K/IkGW1yyEpgdkpNDdRUrv0JpOMxsfmyeD1V1zEmwTJdH4fy /ONLLgYGIOCmgncLZlqaqJrPOodSATeGDYfCoWIvpvF21fsHVgE8smxIUsZY8ZOk TkQl/pjvN6SybNRKPMPN6pczwrSbbdp6/D1/TevKKoP04DMuILrzKNBKCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBV4OwguS2ARH5v2Ic8OwLTio38MB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAin6LGLpv ZLvqnD9OaEASRY3waJ2ASe2/M/gzSsHWRf2iLlySocjl2oy/ou50TnyWIpGGMTlr 59jFApdR+s+qe/c8KtTHU2q6oV9T18+kGxLdgH0xICzQE+KSFHhQUyKN+S9zctRz e6GVJzS5f/DawVVO5pnFBuDlCm/r0dLfdFubA0wKdcQTW8zAvW61iBiehHmz9weX jZTATuEWppeHKTls+v8taOzXwSEdGcvTe1Wl3MbnM6d8BhSRThAMmtwIoAXXjK0f eH02Ryu4y4TbWUAminwFONtwOC7jgDbA3SA9HX9Ix5dZGHdMbLx994Eo6mTQ8aCc 2AERDDQgS3ZNsg== -----END CERTIFICATE-----Generated at Mon Mar 2 06:04:47 2026 by rpki-client