$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: /EjS9cEcmxPnUVx6oCkRhE7ASYxzeg8P4uNf4jvURpU= Subject key identifier: 35:79:3D:C3:C8:66:BC:4C:15:32:F0:4E:F7:5B:2D:0F:9C:EE:92:CB Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019CA90F4537B4D842C1E6B46FA31851A151 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 180D Signing time: Sun 01 Mar 2026 11:01:16 +0000 Manifest this update: Sun 01 Mar 2026 11:01:16 +0000 Manifest next update: Mon 02 Mar 2026 11:01:16 +0000 Files and hashes: 1: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=) 2: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=) 3: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=) 4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=) 5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=) 6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=) 7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=) 8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=) 9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=) 10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: 56m6HPua71edjesCaxQ2spSyOmXop3aJqoGivaMcAf4=) 11: dbO5CKnLQTTJh3eDR9I8bGXedlY.roa (hash: tPxsmGUbFFDCPaVcd/ukZ/6WBXMPRTeyul9lkIVarMA=) 12: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:0f:45:37:b4:d8:42:c1:e6:b4:6f:a3:18:51:a1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Mar 1 11:01:16 2026 GMT Not After : Mar 2 11:01:16 2026 GMT Subject: CN=35793dc3c866bc4c1532f04ef75b2d0f9cee92cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:be:0d:df:10:54:87:15:b0:28:cb:1c:38: 47:a0:53:72:24:0d:7f:70:37:8a:2a:8f:ec:44:7a: b3:b1:e7:67:59:c8:df:39:bb:ae:e8:80:16:be:6f: f3:1d:10:94:a5:40:87:ab:35:8b:da:cc:c1:52:a8: 55:2a:5f:96:59:b3:a4:89:1e:40:d1:c1:37:15:81: 5d:e7:54:93:40:83:97:5b:ca:30:9a:6e:81:a4:38: 48:80:d2:2a:ba:c5:0c:b9:19:75:9b:6a:75:4e:1f: e4:b2:ff:77:fd:0f:bf:83:c5:7f:52:30:e6:bc:89: e3:14:bd:06:94:2d:31:24:97:18:58:ce:fd:77:87: 7a:30:db:a4:d5:14:3b:e6:13:aa:a7:43:93:b0:5d: 7c:f5:c2:d2:89:3e:a6:74:95:51:d4:7c:56:cc:a2: da:f2:f4:ca:24:2a:ba:d5:ed:86:0e:7b:25:4e:a9: 96:cd:43:02:71:96:89:30:bc:52:20:c0:12:e3:d2: e0:3c:bf:20:96:67:b9:de:24:41:61:9b:e4:2a:b7: ad:c0:a7:e8:96:03:31:dc:b4:e9:c2:c6:a2:bf:5a: d6:ca:e2:f3:23:02:7e:57:2c:ba:88:be:49:6b:19: 69:6b:2d:2c:5b:8f:5a:01:bc:6e:82:ff:5d:12:e6: de:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:79:3D:C3:C8:66:BC:4C:15:32:F0:4E:F7:5B:2D:0F:9C:EE:92:CB X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:97:de:ec:bb:4f:96:ff:1f:41:31:ad:30:a0:41:bd:26:27: 76:ad:c3:4d:b9:05:13:9f:a6:49:7f:1d:21:0a:ac:5d:be:11: e0:18:d1:03:1a:16:56:59:3d:c4:96:fd:cf:47:4c:53:ab:2e: f1:42:5b:cb:09:49:70:f5:1f:bd:03:3f:c1:cd:af:c4:9d:dc: 1c:22:37:5e:d6:2c:ad:93:d8:9c:95:9f:ef:a4:a3:48:a9:0f: f0:f7:43:6c:32:3d:66:d8:6e:57:0e:33:58:66:08:08:9b:74: 5c:0f:67:b1:c2:61:c8:a8:74:4a:25:75:42:86:60:96:37:39: fa:c4:84:1b:3d:27:e9:f1:aa:c0:50:1b:75:0f:74:7f:b1:06: bc:5a:17:f8:93:26:ae:b5:c1:3d:42:54:23:d8:5e:a2:b5:0c: 1d:e1:fa:cc:09:be:03:c1:d7:59:1e:a2:59:79:0d:6b:7b:d7: 47:10:7b:6d:eb:fe:17:fc:a3:aa:0f:50:f9:8d:7a:03:59:f6: c9:64:c6:cf:e2:62:b2:22:22:60:76:a6:bb:0d:ab:3c:de:f5: 46:b7:c7:c4:b1:42:66:ac:12:d1:a8:98:0b:34:79:90:8b:bc: cc:30:a4:1f:bb:7f:e8:d8:fd:e3:f7:11:1b:e5:cb:c9:de:4e: cb:ca:55:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypD0U3tNhCwea0b6MYUaFRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwMzAxMTEwMTE2WhcNMjYwMzAyMTEwMTE2WjAzMTEwLwYDVQQD EygzNTc5M2RjM2M4NjZiYzRjMTUzMmYwNGVmNzViMmQwZjljZWU5MmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroK+Dd8QVIcVsCjLHDhHoFNyJA1/ cDeKKo/sRHqzsednWcjfObuu6IAWvm/zHRCUpUCHqzWL2szBUqhVKl+WWbOkiR5A 0cE3FYFd51STQIOXW8owmm6BpDhIgNIqusUMuRl1m2p1Th/ksv93/Q+/g8V/UjDm vInjFL0GlC0xJJcYWM79d4d6MNuk1RQ75hOqp0OTsF189cLSiT6mdJVR1HxWzKLa 8vTKJCq61e2GDnslTqmWzUMCcZaJMLxSIMAS49LgPL8glme53iRBYZvkKretwKfo lgMx3LTpwsaiv1rWyuLzIwJ+Vyy6iL5Jaxlpay0sW49aAbxugv9dEubecQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDV5PcPIZrxMFTLwTvdbLQ+c7pLLMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJfe7LtP lv8fQTGtMKBBvSYndq3DTbkFE5+mSX8dIQqsXb4R4BjRAxoWVlk9xJb9z0dMU6su 8UJbywlJcPUfvQM/wc2vxJ3cHCI3XtYsrZPYnJWf76SjSKkP8PdDbDI9ZthuVw4z WGYICJt0XA9nscJhyKh0SiV1QoZgljc5+sSEGz0n6fGqwFAbdQ90f7EGvFoX+JMm rrXBPUJUI9heorUMHeH6zAm+A8HXWR6iWXkNa3vXRxB7bev+F/yjqg9Q+Y16A1n2 yWTGz+JisiIiYHamuw2rPN71RrfHxLFCZqwS0aiYCzR5kIu8zDCkH7t/6Nj94/cR G+XLyd5Oy8pVBw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:39:27 2026 by rpki-client