$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: Mx/ct3J8m4ToOKpSFeaqml3e6Lwiu71MwM+cd6U7zwY= Subject key identifier: D1:FE:D2:7E:82:5B:06:8D:40:C8:24:63:49:AE:38:31:FF:6B:0C:B9 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019CA9B3DE6D33B290662C957A5B4208E70C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 1870 Signing time: Sun 01 Mar 2026 14:01:03 +0000 Manifest this update: Sun 01 Mar 2026 14:01:03 +0000 Manifest next update: Mon 02 Mar 2026 14:01:03 +0000 Files and hashes: 1: 0ld9oICrjkM9PiOBYi7PkCMaP7g.roa (hash: 7pPoPeKMxfAld72vWaWuaU3WiGoLWbNKS8HJfbCj2GY=) 2: 1BFQM936y9WGcLJKwy60Wg2ag-8.roa (hash: NTbQFXMY5QSvW0BgWqBt3HeqiX8tXZPRJi0IS+SKq2s=) 3: DT8TXPB7Zoh4Y9JFFdsSZ2RIgLg.roa (hash: cdCtaCnFbbokb4IxB6SbsLXr+yswcQckTbmvZnS/sJA=) 4: H3d0QP653F6Jo-epVSXBiVH1h6k.roa (hash: B2NZF4jz4UwnLzA3KbDxjNp0EF7Qv4Th+B09WImKi2I=) 5: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: qXAsDLyEhJXMy87zlnSb28ktmrtf6NeSTAddS35llWc=) 6: O2mRnCNeDokP5q-PUWLd28D1SG8.roa (hash: XL7s2EUC28zeBKoJlmCFsu+5IjkYrbxfH3a9YMWon60=) 7: XPPuMgWRNY1QAnjWn2LftTc8cH4.roa (hash: LqWi3Xbli/jxxlx74n8O7L6EJtxaJ1UA0GYHmPMDyEU=) 8: ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa (hash: SIg3ToChfd1+8YW/rxSI4oA419Stw5Sb9StcFL22beM=) 9: dY6eqUD4ykA92I5VKqHmYTX3q88.roa (hash: uvlx5CXBvfA8EWdxrFvclZnKJJH1HmhxtH5z6Fa+fBo=) 10: hCjWTJUhp9C-lxxCdRV4Jwzm4mk.roa (hash: ECwHPN5lxdIugX2ttk1L3l/uci2ps9CeCy1VAcBMeQs=) 11: lERL5Mrj2Bt3hRDr7br_N3d-JkE.roa (hash: /A5fyVRtCeR1gSok1lWq8T+wbRAaNz8PoEuYxSfdZSU=) 12: lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa (hash: qyL/Gv6WkVcsE18337JVKs2VK9z6GTYDQ6GMJ2m3/WQ=) 13: whyP5FxoblHoIHhMTAeqWb1jp8w.roa (hash: a7SodNhSARcbHydA3wymHLN4IRqMOWIhBwT2PU/EoPc=) 14: zd2dqaKa6O4wz9TxJzSxhbKbteU.roa (hash: Sv1+bPBughIj/le0hfMKADppbA91Co/u0NeJGW/Uifs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 14:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:b3:de:6d:33:b2:90:66:2c:95:7a:5b:42:08:e7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Mar 1 14:01:03 2026 GMT Not After : Mar 2 14:01:03 2026 GMT Subject: CN=d1fed27e825b068d40c8246349ae3831ff6b0cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:29:8e:a6:b5:73:ce:0d:51:c6:33:d2:31:a3: 90:52:43:ec:87:5d:48:02:6e:d0:6c:5e:2b:0e:91: 05:ae:24:ca:90:c7:6b:d4:d0:62:c4:23:11:53:9c: d8:62:d7:54:ca:00:19:ea:03:e1:b0:58:8d:28:f8: f4:51:cc:13:6a:17:b2:9a:0e:81:7c:1f:4e:cd:b6: 09:6f:c0:94:e5:42:f3:98:a0:43:99:22:ae:4c:2c: 6e:99:42:fc:b3:d8:06:ab:e3:21:06:36:bd:34:eb: 81:bf:ee:65:92:06:b1:6f:f6:8d:07:73:9c:60:17: 1d:45:c8:ec:61:70:ab:61:67:8c:b5:4f:61:ef:f5: 25:79:9a:21:03:53:82:7e:d2:fc:7b:65:f5:ea:66: 19:2c:20:e3:0e:0f:03:10:41:43:5d:20:37:34:85: 67:bf:4d:a5:73:95:fd:2b:c6:8a:16:1b:dc:17:35: bc:2b:89:17:04:73:a8:3b:a9:23:92:d0:6c:29:94: 27:76:c7:a6:2f:6b:c0:55:3f:10:47:6a:cf:ac:f0: 01:6f:a1:15:c7:a0:59:d7:c0:f9:5c:25:a1:f3:2e: 41:b9:81:bf:06:80:95:a6:17:fd:98:f9:a1:71:6b: ad:12:2e:5e:2c:0f:15:67:b0:9d:d8:0f:dd:73:f5: 2d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FE:D2:7E:82:5B:06:8D:40:C8:24:63:49:AE:38:31:FF:6B:0C:B9 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1c:80:a0:0d:3c:92:2d:fa:21:df:66:ee:42:75:9a:f6:0b: bb:d2:34:6e:d4:85:af:55:4e:ed:13:75:ff:10:3a:8a:1c:1d: 90:e2:e1:61:b7:e3:37:aa:ca:1d:d2:12:b1:02:84:0c:39:68: d4:f8:43:14:5a:72:cb:42:bd:c7:70:da:db:ac:ad:7d:09:a7: b3:2b:15:d5:d5:96:d2:84:b9:29:a8:6b:46:28:06:6a:1d:f3: a5:ae:07:db:81:58:22:76:83:59:c8:b0:9c:96:21:17:53:2f: 2e:c2:c9:63:3e:6f:b2:fc:71:9c:c9:14:d1:53:32:15:49:54: 7e:a5:58:70:b1:c3:41:11:16:59:a8:48:8c:82:f7:bf:29:9d: 5d:44:02:b2:c2:0d:69:a8:db:08:78:d2:25:0c:35:71:8e:51: c9:8a:3f:a2:b1:e4:df:00:8f:61:17:59:bf:ce:4e:f3:2c:06: d8:60:ff:5d:c8:9a:df:f5:51:6c:9c:49:56:2c:35:fe:2a:6d: 6a:70:0d:1a:44:43:0d:c5:57:41:67:7d:6f:6d:02:69:f8:cb: 0b:4f:32:b8:e0:7d:ff:5b:48:c1:a8:70:87:2c:86:5f:d8:cb: d5:d7:17:52:df:cc:2d:ab:0f:cc:b9:9f:49:ea:f7:68:3c:82: 78:db:b8:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyps95tM7KQZiyVeltCCOcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwMzAxMTQwMTAzWhcNMjYwMzAyMTQwMTAzWjAzMTEwLwYDVQQD EyhkMWZlZDI3ZTgyNWIwNjhkNDBjODI0NjM0OWFlMzgzMWZmNmIwY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CmOprVzzg1RxjPSMaOQUkPsh11I Am7QbF4rDpEFriTKkMdr1NBixCMRU5zYYtdUygAZ6gPhsFiNKPj0UcwTaheymg6B fB9OzbYJb8CU5ULzmKBDmSKuTCxumUL8s9gGq+MhBja9NOuBv+5lkgaxb/aNB3Oc YBcdRcjsYXCrYWeMtU9h7/UleZohA1OCftL8e2X16mYZLCDjDg8DEEFDXSA3NIVn v02lc5X9K8aKFhvcFzW8K4kXBHOoO6kjktBsKZQndsemL2vAVT8QR2rPrPABb6EV x6BZ18D5XCWh8y5BuYG/BoCVphf9mPmhcWutEi5eLA8VZ7Cd2A/dc/UtUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNH+0n6CWwaNQMgkY0muODH/awy5MB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxyAoA08 ki36Id9m7kJ1mvYLu9I0btSFr1VO7RN1/xA6ihwdkOLhYbfjN6rKHdISsQKEDDlo 1PhDFFpyy0K9x3Da26ytfQmnsysV1dWW0oS5KahrRigGah3zpa4H24FYInaDWciw nJYhF1MvLsLJYz5vsvxxnMkU0VMyFUlUfqVYcLHDQREWWahIjIL3vymdXUQCssIN aajbCHjSJQw1cY5RyYo/orHk3wCPYRdZv85O8ywG2GD/Xcia3/VRbJxJViw1/ipt anANGkRDDcVXQWd9b20CafjLC08yuOB9/1tIwahwhyyGX9jL1dcXUt/MLasPzLmf Ser3aDyCeNu4SQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:05:44 2026 by rpki-client