$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: cq8o9HE8RPeL/xnnU4xhsDpisEsRU/+hDlEwlLgu9Q4= Subject key identifier: 60:86:A9:2D:D5:E1:69:F1:5F:13:AA:04:01:61:55:18:AB:F3:5F:EE Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019CAAFD9795950B4CAB96BF8D1684AE9B37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 180E Signing time: Sun 01 Mar 2026 20:01:11 +0000 Manifest this update: Sun 01 Mar 2026 20:01:11 +0000 Manifest next update: Mon 02 Mar 2026 20:01:11 +0000 Files and hashes: 1: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=) 2: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=) 3: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=) 4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=) 5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=) 6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=) 7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=) 8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=) 9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=) 10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: OWBo51JkDgOl/kTZXkiFCDfyUUuOwPakUmBMaWLsS/0=) 11: dbO5CKnLQTTJh3eDR9I8bGXedlY.roa (hash: tPxsmGUbFFDCPaVcd/ukZ/6WBXMPRTeyul9lkIVarMA=) 12: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fd:97:95:95:0b:4c:ab:96:bf:8d:16:84:ae:9b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Mar 1 20:01:11 2026 GMT Not After : Mar 2 20:01:11 2026 GMT Subject: CN=6086a92dd5e169f15f13aa0401615518abf35fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:31:b2:b3:c3:b3:fd:a3:91:93:9e:8d:0e:36: 26:17:54:66:b5:c7:42:ea:9f:af:84:75:68:cf:d8: 92:7b:78:1c:b0:aa:75:c8:3e:07:c7:47:f4:7c:8e: d2:3f:fd:00:87:57:c9:87:70:09:28:46:43:48:87: 29:76:e4:ec:e5:c8:d7:70:4a:ac:75:e8:54:39:b8: 03:ab:dc:26:c9:90:0f:ea:9b:84:d0:3f:90:dc:b8: 62:26:fe:4f:f8:57:81:1b:8f:64:ca:af:5b:06:a5: cc:20:ff:81:f6:3d:02:00:2f:b4:66:47:32:ab:d9: 54:20:0b:1a:d2:ec:90:2f:fc:da:7f:57:87:f3:59: 10:d2:07:ef:58:5e:5a:05:b0:d4:56:c0:ef:9f:e4: b8:c6:89:73:7f:97:5e:6a:09:81:b2:b6:16:73:f7: 86:c3:6a:b1:85:85:5e:01:5f:99:79:25:c5:20:02: 19:b5:e5:5b:5b:6c:5a:d0:ce:43:f6:fb:15:12:ea: 3b:dd:f1:ac:13:41:91:e0:16:57:ef:09:d7:24:8b: e2:e4:65:6c:5b:75:2b:27:86:8d:95:89:64:83:f2: 4a:01:3a:1a:93:07:5c:1d:12:75:26:4a:5a:73:91: 6c:67:c7:c1:b2:b5:8a:dc:f8:9f:1c:06:2d:e7:98: f9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:86:A9:2D:D5:E1:69:F1:5F:13:AA:04:01:61:55:18:AB:F3:5F:EE X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:7d:5b:f9:46:69:57:fa:bb:02:4a:7c:e5:f7:25:10:71:38: ac:e2:11:16:0c:14:62:3d:41:18:12:cd:b9:91:2a:eb:c2:66: a6:a5:2b:f1:6c:a9:5c:77:b7:f7:ee:5c:c6:03:fc:e6:0f:c1: 18:35:64:ba:09:8b:95:fb:01:42:60:6e:8b:a2:02:00:27:ea: 85:6e:64:99:75:da:34:5e:7e:44:80:5c:db:2d:6a:16:6c:b7: e8:77:b1:17:62:0c:38:ae:b7:42:3d:ee:0f:8e:27:a1:f7:a9: f1:d7:11:ea:f3:9e:05:53:d9:d2:86:46:6e:b1:28:2d:b9:29: ac:e9:ea:f1:6c:d2:06:bd:dc:b0:44:25:58:b5:ee:43:74:5a: 76:68:79:54:df:ae:00:e1:f8:9e:51:0f:5e:85:87:4b:f1:00: 20:fc:e6:e7:58:35:08:49:d0:5b:40:a1:65:30:15:9d:0a:ae: 24:2b:d4:8d:35:a3:03:f4:87:db:c8:88:26:b0:c5:22:38:77: 71:2a:a3:7e:74:ba:9a:4c:b2:35:8c:47:3c:89:a0:fd:ee:b4: 0a:8f:d7:92:1e:a1:b1:d3:26:67:ab:ae:92:2c:41:ee:28:61: 77:da:b5:bd:5f:88:a0:c6:2b:50:bb:54:20:23:a9:c9:6b:69: 5f:e3:61:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/ZeVlQtMq5a/jRaErps3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwMzAxMjAwMTExWhcNMjYwMzAyMjAwMTExWjAzMTEwLwYDVQQD Eyg2MDg2YTkyZGQ1ZTE2OWYxNWYxM2FhMDQwMTYxNTUxOGFiZjM1ZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjGys8Oz/aORk56NDjYmF1RmtcdC 6p+vhHVoz9iSe3gcsKp1yD4Hx0f0fI7SP/0Ah1fJh3AJKEZDSIcpduTs5cjXcEqs dehUObgDq9wmyZAP6puE0D+Q3LhiJv5P+FeBG49kyq9bBqXMIP+B9j0CAC+0Zkcy q9lUIAsa0uyQL/zaf1eH81kQ0gfvWF5aBbDUVsDvn+S4xolzf5deagmBsrYWc/eG w2qxhYVeAV+ZeSXFIAIZteVbW2xa0M5D9vsVEuo73fGsE0GR4BZX7wnXJIvi5GVs W3UrJ4aNlYlkg/JKAToakwdcHRJ1Jkpac5FsZ8fBsrWK3PifHAYt55j5LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCGqS3V4WnxXxOqBAFhVRir81/uMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABH1b+UZp V/q7Akp85fclEHE4rOIRFgwUYj1BGBLNuZEq68JmpqUr8WypXHe39+5cxgP85g/B GDVkugmLlfsBQmBui6ICACfqhW5kmXXaNF5+RIBc2y1qFmy36HexF2IMOK63Qj3u D44nofep8dcR6vOeBVPZ0oZGbrEoLbkprOnq8WzSBr3csEQlWLXuQ3Radmh5VN+u AOH4nlEPXoWHS/EAIPzm51g1CEnQW0ChZTAVnQquJCvUjTWjA/SH28iIJrDFIjh3 cSqjfnS6mkyyNYxHPImg/e60Co/Xkh6hsdMmZ6uukixB7ihhd9q1vV+IoMYrULtU ICOpyWtpX+NhRA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:57:58 2026 by rpki-client