$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: 89R4V9zJmcZXCyHhT67pc3ER5BTx3CkOH27SR7f0phY= Subject key identifier: 19:01:C0:FB:67:A3:8E:8D:9F:FF:14:BC:19:0E:6B:3D:71:89:09:EA Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019CA8A11DD9C7AAA600DC3614FB21FB0F18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1447 Signing time: Sun 01 Mar 2026 09:00:56 +0000 Manifest this update: Sun 01 Mar 2026 09:00:56 +0000 Manifest next update: Mon 02 Mar 2026 09:00:56 +0000 Files and hashes: 1: 8qONZL-zarmB_Y1tqZfwTzYcBJo.roa (hash: uD7uxv7CcmmCwKrR/rRY/falCkFooXd096XuRKXA53M=) 2: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 3: H52_1NjStSe7bo70-a34b3HOvac.roa (hash: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA=) 4: P1pfIuguwdyriYi_GQFSe-izAhE.roa (hash: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: bdiVopGRMa8RC0mEnWv6wm6w_-0.roa (hash: WzAENNvVjV1DRRjD7yBjtCDo9tO1r/3BMLbac/ZE6p0=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: xeFKt09fYWfE3sl46Q+bsJf72uK9MjqjTcrS5ei0ISg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:a1:1d:d9:c7:aa:a6:00:dc:36:14:fb:21:fb:0f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Mar 1 09:00:56 2026 GMT Not After : Mar 2 09:00:56 2026 GMT Subject: CN=1901c0fb67a38e8d9fff14bc190e6b3d718909ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:e4:38:60:fc:86:f8:9d:15:66:6b:7a:75: bc:65:42:e3:dd:98:82:6d:ab:1b:bf:fa:e3:20:f3: 3e:69:74:4c:47:46:65:cc:bd:66:fd:f3:c7:3c:0c: 37:9e:2f:a1:70:c5:b8:47:d5:42:dc:a1:be:21:5c: 2f:fe:5b:7a:9d:66:ab:35:75:ce:f8:c9:8b:10:50: 1e:78:a0:d9:83:93:2a:30:ba:66:b3:1d:12:a9:64: cf:d0:c3:15:f6:ff:92:67:e6:5e:1b:a7:45:93:7b: 3b:2c:6c:e3:59:b7:25:10:50:c4:e0:10:5a:a1:b3: 86:1d:42:ad:cd:4d:cd:cd:80:e4:ea:76:91:c4:32: b0:8d:4a:73:d8:01:b1:14:c1:85:f8:9b:c7:69:4e: c9:5e:dd:32:df:fc:3c:0d:7f:d2:8d:67:32:f9:73: 00:6a:40:02:08:d5:92:68:23:fe:49:bb:aa:03:5c: a9:cf:cc:57:43:30:8f:2b:6e:9e:5b:cd:d6:71:bc: e5:d2:e4:75:e9:2d:82:a3:7c:e1:61:69:06:64:c1: 75:5c:ac:ac:8f:30:10:52:18:1f:b2:9c:37:9e:5d: 1b:0a:38:1e:9e:8b:02:0c:aa:6a:79:a2:89:7d:da: bf:43:a1:00:6e:32:8f:dc:5d:91:2c:bd:a1:5e:3b: 58:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:01:C0:FB:67:A3:8E:8D:9F:FF:14:BC:19:0E:6B:3D:71:89:09:EA X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:21:76:e3:4c:10:26:48:0c:39:46:22:8b:ef:d1:f0:0e:4d: 8c:d6:a2:e9:93:a3:94:33:f8:a3:a7:ce:51:2e:47:76:6c:bc: 48:a1:06:5c:22:b7:d3:be:2d:bc:43:71:25:39:e9:27:76:71: 6e:97:7b:20:03:64:c6:78:cd:12:b7:8d:d2:b2:c0:e6:7e:92: 8c:ec:12:80:0c:7a:b7:9d:cc:e8:f9:0e:5f:4d:4e:58:e0:67: 7b:76:e5:83:e7:8b:b9:f2:c0:10:19:cb:ff:bd:40:b1:83:d8: eb:7b:d9:08:64:81:b3:df:7a:87:0f:07:c4:09:e8:b7:8a:9b: 87:8a:55:78:53:b8:c9:ae:b1:2f:4e:81:62:7e:89:58:af:a9: 78:b7:0f:30:e2:2c:c4:8f:6c:1d:af:5e:b0:55:df:96:90:e9: 11:bf:b6:df:33:e1:5a:a1:b4:b4:ca:ab:09:a6:37:87:9b:f6: 32:9b:4c:f3:01:12:62:73:30:a9:c0:ca:58:4a:40:d3:1c:d5: ed:4d:af:7a:6e:a2:91:11:db:5d:39:40:f8:2b:16:be:94:58: 24:8d:9f:f4:7c:c3:08:50:0e:c8:b3:f2:c8:20:b4:e7:63:a7: 85:be:f8:2d:b9:49:cd:61:98:27:29:03:b0:47:e9:09:ef:72: 7a:34:2d:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyooR3Zx6qmANw2FPsh+w8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwMzAxMDkwMDU2WhcNMjYwMzAyMDkwMDU2WjAzMTEwLwYDVQQD EygxOTAxYzBmYjY3YTM4ZThkOWZmZjE0YmMxOTBlNmIzZDcxODkwOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9/kOGD8hvidFWZrenW8ZULj3ZiC basbv/rjIPM+aXRMR0ZlzL1m/fPHPAw3ni+hcMW4R9VC3KG+IVwv/lt6nWarNXXO +MmLEFAeeKDZg5MqMLpmsx0SqWTP0MMV9v+SZ+ZeG6dFk3s7LGzjWbclEFDE4BBa obOGHUKtzU3NzYDk6naRxDKwjUpz2AGxFMGF+JvHaU7JXt0y3/w8DX/SjWcy+XMA akACCNWSaCP+SbuqA1ypz8xXQzCPK26eW83Wcbzl0uR16S2Co3zhYWkGZMF1XKys jzAQUhgfspw3nl0bCjgenosCDKpqeaKJfdq/Q6EAbjKP3F2RLL2hXjtYmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkBwPtno46Nn/8UvBkOaz1xiQnqMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSF240wQ JkgMOUYii+/R8A5NjNai6ZOjlDP4o6fOUS5Hdmy8SKEGXCK3074tvENxJTnpJ3Zx bpd7IANkxnjNEreN0rLA5n6SjOwSgAx6t53M6PkOX01OWOBne3blg+eLufLAEBnL /71AsYPY63vZCGSBs996hw8HxAnot4qbh4pVeFO4ya6xL06BYn6JWK+peLcPMOIs xI9sHa9esFXflpDpEb+23zPhWqG0tMqrCaY3h5v2MptM8wESYnMwqcDKWEpA0xzV 7U2vem6ikRHbXTlA+CsWvpRYJI2f9HzDCFAOyLPyyCC052Onhb74LblJzWGYJykD sEfpCe9yejQtXw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:29:10 2026 by rpki-client