$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: CVTHCPum14mwkJosEoLJ0psm+IhhUSai1hbdPovmRJY= Subject key identifier: 9F:B3:D5:7D:A8:F3:B1:EF:5F:5C:9F:1D:FE:42:71:1A:70:2C:7D:D7 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 019CAD230DB2FF53155D79EC854FA0FAAFBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 1468 Signing time: Mon 02 Mar 2026 06:01:21 +0000 Manifest this update: Mon 02 Mar 2026 06:01:21 +0000 Manifest next update: Tue 03 Mar 2026 06:01:21 +0000 Files and hashes: 1: 4xaEdixeinTNAew5f36B5ogFapc.roa (hash: U+lj7Po2vIYbjteMOk724C6A7iSVfdA9w8Qr+wSn2EY=) 2: 6bp5_uY1eTTE0FRpgy0dJ0tGIWA.roa (hash: JQ6e3y/UZad8zx3alMXWmLY2Cs0ywtM7PcyjG1jGvp0=) 3: 8rDvMkxptJnltjzzUCN1e7h2mu0.roa (hash: bN6iyJOU8RYfCqW0mfWStueUrIARdx585ED2RX3ioso=) 4: 9561YDYiFuwA3cK9_Ao81cqPzyw.roa (hash: sI0N1MtQFC1Bs34l2HPoGh51MHvRDzLlzChm4jYV9bI=) 5: IrFs_aYDL98DrBmqXNeImOXYqVs.roa (hash: /du+UzfxF5Oy69bwitaws2QcGuPpQ2q/PzP+2+rlKmc=) 6: Mpb5tIfxbf_t0TleDipa0dPzQfg.roa (hash: dlPOC3LjslO4GRq7Su9TrpsYGXUfWyZVAl7s4ntuJgI=) 7: SnpB0ExR-bCAJLKknHnesUTaAWU.roa (hash: wlr5EY83KcqFkovq8AptI/Jy70VxHPVKk3n5WEh7t3w=) 8: W-auLweCazJVGZa2RWm9KCu-wKE.roa (hash: KDvTseiWMAdzP9ZuSgmWkkWqgGW79SkpbkY25PFZ98s=) 9: ZNVLkE0Hncpo1bsQ8SqkvCmjNMs.roa (hash: ckctwOhfUle+O6fK0mnv5ZMxRNGqbUG5lJdOX3nwnlo=) 10: djAPpFOBLqUtxJOa9UwBPjNac1E.roa (hash: 7Rj31INl1FIcMdN33laOh9K9+J+bHShe/BZUzyt8PUg=) 11: ggV7rBXwprR59jciPQhDDTZxxmQ.roa (hash: I4MtXY7ClGvNcIjMAoHA2mKMcNbnijfTuvNa/n/j6Xw=) 12: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: u4sSh3XE9t0Y9vECRLelwLvfDkY3Hma+dqBzjuTUXN4=) 13: nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa (hash: lYeXLJKim2pWsORoTqRVNykk1XTHGi948eQwJ6tFxj4=) 14: pnn2LDubyB-s2_PbTNDUNt7JA_8.roa (hash: vW3hxl2FPzWH44KmHJKXNpZV557F5Hczl/NZRDVCKlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 06:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:23:0d:b2:ff:53:15:5d:79:ec:85:4f:a0:fa:af:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Mar 2 06:01:21 2026 GMT Not After : Mar 3 06:01:21 2026 GMT Subject: CN=9fb3d57da8f3b1ef5f5c9f1dfe42711a702c7dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ec:85:d9:8a:ce:d0:eb:fb:38:8b:42:f0:f8: 9d:32:0b:14:4d:e5:c6:ef:39:33:fc:99:79:bb:ea: b1:49:f1:a3:b4:b3:21:65:fa:05:28:23:e0:38:6f: b5:cb:8d:ce:cc:55:44:05:f3:42:b1:ee:d4:ce:9f: 53:ad:ff:c9:66:db:ff:0d:d3:75:3e:84:9c:6f:23: 0b:60:5a:0a:4a:62:20:dc:83:8f:8a:c2:17:1b:5b: 10:24:d5:99:de:fe:de:44:84:43:92:22:04:f1:15: 6d:ae:94:a3:64:42:4f:c6:a2:10:ec:ea:0e:71:0b: f7:96:d6:3d:d2:c1:8c:4b:a3:58:57:9a:dc:de:38: 7d:f6:c7:f5:dc:94:59:76:f9:4c:f7:2e:b3:de:9f: 73:e6:1c:68:8f:a2:41:c3:c6:d4:2e:3c:bd:c6:0e: 99:bd:96:20:91:eb:d2:2c:fc:96:e4:3a:c7:6c:7d: fd:9e:2f:a8:02:60:d7:5e:69:9e:da:52:9d:2e:b3: e5:80:dc:a9:70:93:ff:09:70:ec:91:8b:d0:16:bb: c0:44:02:7d:c8:15:67:23:e8:51:c7:e7:13:28:f0: ed:5f:27:2a:a9:db:7e:2b:b0:cb:5f:e3:4d:0a:94: 1e:48:b8:a6:89:ba:33:14:c2:82:18:7b:a0:d8:35: 45:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B3:D5:7D:A8:F3:B1:EF:5F:5C:9F:1D:FE:42:71:1A:70:2C:7D:D7 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c4:07:f4:e7:bc:31:9a:bd:36:37:d5:d4:67:37:c8:a8:35: f4:32:c5:18:2d:3b:59:b1:e3:22:b9:44:a9:da:a9:52:ad:54: 36:93:fe:a5:46:dc:25:c0:0a:06:43:f7:ab:9a:fb:4b:d3:e0: 54:60:57:40:52:1f:60:7b:2b:43:18:a5:f4:86:96:1b:08:65: 31:e9:dc:0d:aa:4c:78:77:fe:01:8e:c8:12:dd:06:b4:00:4f: 7f:2c:4c:10:22:b5:81:06:b1:e8:bf:5a:8b:d4:bd:71:0f:47: af:2e:73:77:3d:05:62:db:bd:24:9f:c1:3c:8c:a3:cb:1d:2b: 1e:61:3f:05:01:77:f5:ce:bb:5a:82:6f:81:39:de:3f:7c:a9: e5:fa:ec:a7:b0:d5:6b:d1:eb:bc:da:6c:58:72:70:cf:f3:61: 18:8f:26:81:cf:93:64:ac:aa:aa:e6:be:0d:69:ef:8c:c5:ae: 9c:e7:5c:73:75:79:ee:40:28:92:57:aa:d8:83:34:75:25:4d: de:b7:6c:07:6c:26:34:e0:1d:f4:a1:63:84:87:78:33:be:d2: 83:7c:fb:94:de:0a:e0:f1:29:37:a9:a4:eb:2a:8b:41:e3:ac: f1:1f:81:74:fc:33:e3:80:1a:11:9c:a8:77:23:67:1d:b7:ad: b6:20:92:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytIw2y/1MVXXnshU+g+q+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYwMzAyMDYwMTIxWhcNMjYwMzAzMDYwMTIxWjAzMTEwLwYDVQQD Eyg5ZmIzZDU3ZGE4ZjNiMWVmNWY1YzlmMWRmZTQyNzExYTcwMmM3ZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeyF2YrO0Ov7OItC8PidMgsUTeXG 7zkz/Jl5u+qxSfGjtLMhZfoFKCPgOG+1y43OzFVEBfNCse7Uzp9Trf/JZtv/DdN1 PoScbyMLYFoKSmIg3IOPisIXG1sQJNWZ3v7eRIRDkiIE8RVtrpSjZEJPxqIQ7OoO cQv3ltY90sGMS6NYV5rc3jh99sf13JRZdvlM9y6z3p9z5hxoj6JBw8bULjy9xg6Z vZYgkevSLPyW5DrHbH39ni+oAmDXXmme2lKdLrPlgNypcJP/CXDskYvQFrvARAJ9 yBVnI+hRx+cTKPDtXycqqdt+K7DLX+NNCpQeSLimibozFMKCGHug2DVFqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+z1X2o87HvX1yfHf5CcRpwLH3XMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8QH9Oe8 MZq9NjfV1Gc3yKg19DLFGC07WbHjIrlEqdqpUq1UNpP+pUbcJcAKBkP3q5r7S9Pg VGBXQFIfYHsrQxil9IaWGwhlMencDapMeHf+AY7IEt0GtABPfyxMECK1gQax6L9a i9S9cQ9Hry5zdz0FYtu9JJ/BPIyjyx0rHmE/BQF39c67WoJvgTneP3yp5frsp7DV a9HrvNpsWHJwz/NhGI8mgc+TZKyqqua+DWnvjMWunOdcc3V57kAokleq2IM0dSVN 3rdsB2wmNOAd9KFjhId4M77Sg3z7lN4K4PEpN6mk6yqLQeOs8R+BdPwz44AaEZyo dyNnHbettiCSKA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:43:24 2026 by rpki-client