$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json) Hash identifier: 7RQjdlTsahqMI8hmiV1Iv6IUKHyyEXCdF6iYCTyhKkw= Subject key identifier: B4:30:AC:E5:41:32:27:FB:79:C4:B6:2B:4C:BE:2B:AB:0B:53:0D:C2 Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 019CA8A145DB14F51320B34143966BD5D4D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft Manifest number: 185C Signing time: Sun 01 Mar 2026 09:01:07 +0000 Manifest this update: Sun 01 Mar 2026 09:01:07 +0000 Manifest next update: Mon 02 Mar 2026 09:01:07 +0000 Files and hashes: 1: 0ub9OUDvq-GTk6vbG0qa7XcgLqo.roa (hash: VMePWqYKWwHlm0UpLz+l5ddrcipvR5l3jj4E/ERuLCs=) 2: FRNi3sk0ZONfKtQJpcFEsCtLeHc.roa (hash: 7YUc6wfgN+sYhdx1cpmGPpDGVuugRkWqHt6/wHp1CDk=) 3: FYi2op6EKF00E1GgCH9P1pwsWKA.roa (hash: SVnGJLKooRqonEdOpAassNIuL9GssfXn7HsbxdU+WUA=) 4: HkwuJu9io020PbxRWDFjsBLDBY0.roa (hash: 54qGpDCHJR33ZIOHfgUlFjHcaUi+BAqkWs7Zaq0wwz8=) 5: L-To8dTceN5xxbEJ2QWl3_lVx0Y.roa (hash: VwojFWUhMCERU0Ki7bA5wqTbNgVL6QvW7R1KnsktuYI=) 6: RUdkYB7gYtQia_NavoRTMoG3pvE.roa (hash: T6PW2Xl5c1A8FrzU6sJtHxxL5BTjblBQGY54ZziHyw0=) 7: VQsDH7SGd5hal_nlNR8i5lyIdTU.asa (hash: CUgzrAYaMR8T7BZPdashoUewG1Aed1T1TxeGji8a5Ac=) 8: cv77Irhy5dPJnyDB6jtQBBErfyI.roa (hash: TFMqYf00E8OIGlevPHCz73zJ5wru7ob9Ok+KkCgVHW0=) 9: dAaMYiYLCt-JKsfqH8L1mO62SE4.roa (hash: 8F5ikjoR545cGQjGt6dNQ2qvuIjqcyMjrmcAdDILXDM=) 10: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: H4IRe9vEQSN3yYuw8r56YBfXhclrXW7/PJZeyEzaIJo=) 11: tDIPyCeJ6lwABqJN9BvBHe0hGng.roa (hash: Ct8rOWY/RQns6Y0hISopyHYEG2NvtwUoOdKLUr3Niy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:a1:45:db:14:f5:13:20:b3:41:43:96:6b:d5:d4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Mar 1 09:01:07 2026 GMT Not After : Mar 2 09:01:07 2026 GMT Subject: CN=b430ace5413227fb79c4b62b4cbe2bab0b530dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:1a:75:71:d9:ad:f6:c9:55:f5:11:40:d9: 46:ba:b5:3a:47:72:c3:b6:a2:9c:8a:6f:67:e1:e5: 3a:20:cc:e6:05:92:e9:a0:f6:43:c4:6b:0e:7d:9f: 28:e0:8f:1d:fc:80:30:74:99:a6:9d:5e:9a:9b:bc: 57:25:1c:d2:ea:1f:16:2e:7c:61:ba:26:49:61:1e: 45:79:70:3f:38:25:55:24:d2:27:a6:52:40:6c:b8: 9a:a3:4b:95:06:a9:70:a0:6e:17:ea:09:0c:21:8b: dc:75:e0:28:a3:67:40:60:c5:78:8f:22:e3:ca:73: a8:32:1e:76:07:80:e5:d5:d2:c9:67:37:51:68:ef: b6:7a:21:dd:49:ec:57:d6:c8:14:7f:95:c7:ad:ef: 0b:a4:d0:d2:7c:f1:b2:57:56:33:be:bc:fa:4b:7c: cd:e8:2d:38:af:34:dd:f2:2b:ff:cd:f3:ce:e5:65: 79:62:18:6e:0a:b1:dc:4b:29:39:62:8a:f5:cc:65: f2:d4:ac:6f:82:d8:3d:45:78:7c:3a:29:32:ef:46: 7b:3e:2d:9f:09:60:59:e9:32:b7:e7:7f:22:70:24: bd:d7:fe:eb:93:23:49:69:ad:aa:e7:29:c5:99:cd: 9d:e9:d5:1c:c0:65:7b:f5:6f:72:b4:3f:ac:a3:f9: 91:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:30:AC:E5:41:32:27:FB:79:C4:B6:2B:4C:BE:2B:AB:0B:53:0D:C2 X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:24:39:59:50:39:eb:a3:4d:77:33:e8:8a:21:e8:ac:4a:e8: c8:da:b7:cf:50:5d:34:fb:a6:15:bf:51:1d:0b:ef:e2:8b:7f: fb:3d:16:cd:6a:aa:2b:38:a9:1b:ee:a5:fe:fd:f3:ac:0f:6b: 07:36:ce:54:d3:63:46:fb:5a:91:40:1e:49:64:c2:1e:89:84: a9:68:17:fb:95:84:e5:9c:7f:b2:29:1e:a6:56:c0:1a:25:a6: 76:89:42:41:cd:c6:28:0c:a4:f2:4f:28:89:e6:03:47:ad:0d: d1:f2:4b:b1:c4:12:53:de:e9:69:08:1b:8d:bc:fa:6e:21:d3: 6d:c4:56:a0:0e:ff:fb:07:c1:ce:7c:1b:44:64:98:8e:c3:c8: 23:0f:99:76:7a:36:bc:93:62:69:4d:ee:82:19:6e:39:a3:f4: c0:7c:26:16:40:02:f9:49:39:e8:c3:cc:2a:cd:af:97:a7:79: 94:93:60:89:44:a5:da:f1:63:ab:19:a7:d7:6a:31:2d:ca:4f: 51:4d:8d:d8:06:fd:ba:a7:5a:0b:32:d0:06:6f:d1:1f:3b:e2: 3d:20:dd:92:8a:06:dc:21:d5:09:1e:71:be:0e:21:0e:b5:f8: 33:4f:4c:d9:f1:8e:61:55:8a:68:af:96:c9:d2:ab:ab:43:f2: dd:76:cb:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyooUXbFPUTILNBQ5Zr1dTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjYwMzAxMDkwMTA3WhcNMjYwMzAyMDkwMTA3WjAzMTEwLwYDVQQD EyhiNDMwYWNlNTQxMzIyN2ZiNzljNGI2MmI0Y2JlMmJhYjBiNTMwZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwssadXHZrfbJVfURQNlGurU6R3LD tqKcim9n4eU6IMzmBZLpoPZDxGsOfZ8o4I8d/IAwdJmmnV6am7xXJRzS6h8WLnxh uiZJYR5FeXA/OCVVJNInplJAbLiao0uVBqlwoG4X6gkMIYvcdeAoo2dAYMV4jyLj ynOoMh52B4Dl1dLJZzdRaO+2eiHdSexX1sgUf5XHre8LpNDSfPGyV1Yzvrz6S3zN 6C04rzTd8iv/zfPO5WV5YhhuCrHcSyk5Yor1zGXy1Kxvgtg9RXh8Oiky70Z7Pi2f CWBZ6TK3538icCS91/7rkyNJaa2q5ynFmc2d6dUcwGV79W9ytD+so/mRowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQwrOVBMif7ecS2K0y+K6sLUw3CMB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiQ5WVA5 66NNdzPoiiHorEroyNq3z1BdNPumFb9RHQvv4ot/+z0WzWqqKzipG+6l/v3zrA9r BzbOVNNjRvtakUAeSWTCHomEqWgX+5WE5Zx/sikeplbAGiWmdolCQc3GKAyk8k8o ieYDR60N0fJLscQSU97paQgbjbz6biHTbcRWoA7/+wfBznwbRGSYjsPIIw+Zdno2 vJNiaU3ughluOaP0wHwmFkAC+Uk56MPMKs2vl6d5lJNgiUSl2vFjqxmn12oxLcpP UU2N2Ab9uqdaCzLQBm/RHzviPSDdkooG3CHVCR5xvg4hDrX4M09M2fGOYVWKaK+W ydKrq0Py3XbLhw== -----END CERTIFICATE-----Generated at Sun Mar 1 18:21:09 2026 by rpki-client