$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: hP4VNgnkZHaG/8c8vlxm27J/V8iRlfoWMSnDkOjvSfo= Subject key identifier: 17:FA:FE:3A:F9:62:F2:09:3D:3B:6F:E0:E7:55:76:F4:F2:AD:A0:47 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019CAB6B1AB0297E31F611D021D43DC01270 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0B9A Signing time: Sun 01 Mar 2026 22:00:48 +0000 Manifest this update: Sun 01 Mar 2026 22:00:48 +0000 Manifest next update: Mon 02 Mar 2026 22:00:48 +0000 Files and hashes: 1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=) 2: 7j7JXBXMyr8Ic6XpBpphOUDRZcI.roa (hash: MHH4V/WoyGohF1n2EFtKGZHg+Qh7CQ9k4mUtJ9/Z04Q=) 3: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: A2GWzNRvx8IBzpyXTAdBlM06srmmOr5dLY6dbvr2ddM=) 4: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=) 5: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=) 6: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=) 7: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=) 8: X0aB-vX6EDVAhk8JdQ1Jw4jClx4.roa (hash: rh/WCgNGpWe5SFzXuknTX7T5+ylOXQCOCuQbZtqKNPA=) 9: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=) 10: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=) 11: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=) 12: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=) 13: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=) 14: kGneqi-DhIJThQbxo8k8aRtzhC0.roa (hash: LH1+UqmotTldhBb3/js9nM0r1q8ixXwicRK2tem2Z4A=) 15: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=) 16: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=) 17: uPX022VTJ_bMjiHSPx4Do1vlriY.roa (hash: aq4O2cq08j8Fn88DS5wNdITiPLigSYRE0hYFpbgZqVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:6b:1a:b0:29:7e:31:f6:11:d0:21:d4:3d:c0:12:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Mar 1 22:00:48 2026 GMT Not After : Mar 2 22:00:48 2026 GMT Subject: CN=17fafe3af962f2093d3b6fe0e75576f4f2ada047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:ea:64:34:4b:ae:fc:8f:0f:15:36:cb:ad: ac:1e:41:e7:a7:c1:81:94:5d:ee:07:61:b7:77:6f: 9b:12:b1:e8:4a:e9:6b:78:b2:45:ac:dd:6c:67:92: 03:98:91:37:d4:d9:6d:1d:a2:ef:cb:4a:81:8b:6f: 4c:86:93:38:45:d6:15:4c:96:d2:5e:3c:3c:4e:34: 4a:7b:79:71:31:cf:1d:c8:92:8e:21:2d:e2:6c:14: 06:e9:a9:cd:96:75:7c:2d:89:84:d6:1d:d8:49:dc: 5f:46:17:eb:b3:66:5f:e6:46:f2:07:9c:16:b9:68: 5d:32:aa:b8:40:4c:b9:49:9b:cf:98:4a:7b:8e:05: e2:bb:29:da:91:4b:6b:7c:f7:61:08:48:e3:0a:08: e3:7b:50:17:6d:d9:49:b5:3d:5f:65:52:85:11:12: d1:59:d7:a2:98:5e:e1:68:91:40:ee:65:56:9a:d5: 66:fc:e6:0b:82:ee:08:58:92:c4:c7:1e:e3:f5:8d: a8:f3:52:e7:b8:49:1b:9f:1a:8e:16:d4:ad:f6:03: e9:89:54:b3:f9:8d:12:e9:b9:87:80:74:cd:5a:8a: 8c:50:3f:36:96:1f:0a:74:93:c5:4a:3c:57:d7:be: ea:98:81:68:d3:74:1d:d8:85:63:76:af:ee:f0:f7: f3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FA:FE:3A:F9:62:F2:09:3D:3B:6F:E0:E7:55:76:F4:F2:AD:A0:47 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3c:30:60:aa:6f:33:a2:73:5d:d9:3a:e3:40:5b:6a:9a:41: d8:30:15:0c:bd:3b:63:42:24:05:f4:14:b8:4b:90:ca:a7:3a: 12:00:37:ea:d5:2d:73:3c:a4:f6:b9:cc:1b:c1:63:24:a0:fd: f2:d1:61:5b:c0:c6:f7:cf:65:e0:54:69:e4:64:6c:14:62:ee: 14:23:77:e0:df:ad:1b:a4:b0:69:ef:8f:e4:b6:cc:b5:7a:0d: 0c:75:da:fc:22:bd:36:e8:b0:0b:0b:d6:2a:8c:4f:ee:1e:06: 54:87:8d:ab:d6:72:e2:d1:bf:8d:01:2d:f3:b1:57:b1:f4:21: cd:1e:f0:d2:94:58:a3:2e:a5:f2:31:45:05:5e:5c:01:89:4f: c3:73:be:7a:34:06:74:e0:f7:f9:6b:31:f1:b6:78:87:40:1b: ae:e4:d4:5e:95:c6:33:4e:59:0e:51:a0:23:f7:dc:b3:cb:ea: ef:10:f3:0b:8b:bf:9b:e1:9e:c7:74:99:12:b8:fa:45:8c:c6: ab:88:f4:a6:cb:bc:ab:16:f7:7b:eb:f7:0d:a8:f6:0b:70:c8: 6d:ce:a5:ae:26:bf:c1:a5:cc:13:b9:9a:4c:5d:fc:ce:9d:64: a1:1d:75:a5:f5:37:01:a3:f7:af:b6:1a:80:e2:ad:cb:aa:4e: e8:da:31:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyraxqwKX4x9hHQIdQ9wBJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwMzAxMjIwMDQ4WhcNMjYwMzAyMjIwMDQ4WjAzMTEwLwYDVQQD EygxN2ZhZmUzYWY5NjJmMjA5M2QzYjZmZTBlNzU1NzZmNGYyYWRhMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL3qZDRLrvyPDxU2y62sHkHnp8GB lF3uB2G3d2+bErHoSulreLJFrN1sZ5IDmJE31NltHaLvy0qBi29MhpM4RdYVTJbS Xjw8TjRKe3lxMc8dyJKOIS3ibBQG6anNlnV8LYmE1h3YSdxfRhfrs2Zf5kbyB5wW uWhdMqq4QEy5SZvPmEp7jgXiuynakUtrfPdhCEjjCgjje1AXbdlJtT1fZVKFERLR WdeimF7haJFA7mVWmtVm/OYLgu4IWJLExx7j9Y2o81LnuEkbnxqOFtSt9gPpiVSz +Y0S6bmHgHTNWoqMUD82lh8KdJPFSjxX177qmIFo03Qd2IVjdq/u8PfzCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf6/jr5YvIJPTtv4OdVdvTyraBHMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzwwYKpv M6JzXdk640BbappB2DAVDL07Y0IkBfQUuEuQyqc6EgA36tUtczyk9rnMG8FjJKD9 8tFhW8DG989l4FRp5GRsFGLuFCN34N+tG6Swae+P5LbMtXoNDHXa/CK9NuiwCwvW KoxP7h4GVIeNq9Zy4tG/jQEt87FXsfQhzR7w0pRYoy6l8jFFBV5cAYlPw3O+ejQG dOD3+Wsx8bZ4h0AbruTUXpXGM05ZDlGgI/fcs8vq7xDzC4u/m+Gex3SZErj6RYzG q4j0psu8qxb3e+v3Daj2C3DIbc6lria/waXME7maTF38zp1koR11pfU3AaP3r7Ya gOKty6pO6NoxJA== -----END CERTIFICATE-----Generated at Mon Mar 2 06:35:45 2026 by rpki-client