$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: BZLkh3zZiedkEqv31Pk0+4OSw835D2S9SOAdx3teXig= Subject key identifier: BC:AF:6E:B3:80:38:0C:6A:AE:86:FF:32:A2:62:B9:60:3B:60:FA:03 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019CA9B3F8A943932641D6349798488635C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1857 Signing time: Sun 01 Mar 2026 14:01:09 +0000 Manifest this update: Sun 01 Mar 2026 14:01:09 +0000 Manifest next update: Mon 02 Mar 2026 14:01:09 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=) 4: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 5: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: 6rJ2GzakAACV5JlPYTZ50ZucVJmYEXwqMg/+8OK2w7g=) 6: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 7: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=) 8: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 9: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 10: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 11: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 12: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 13: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:b3:f8:a9:43:93:26:41:d6:34:97:98:48:86:35:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Mar 1 14:01:09 2026 GMT Not After : Mar 2 14:01:09 2026 GMT Subject: CN=bcaf6eb380380c6aae86ff32a262b9603b60fa03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:a8:bc:4e:a5:27:52:87:2d:bc:9b:2c:77: 21:c0:5d:0b:b7:cc:98:ef:1a:5c:4e:da:e4:87:a2: a3:1d:ab:4a:82:45:93:bc:5f:8c:5c:f6:14:dd:de: 1d:ec:32:88:6a:1b:fd:cc:24:76:f2:d4:a4:20:7c: 7b:d0:a0:ba:77:eb:29:c0:74:92:1a:79:4a:1d:e4: fd:1b:93:58:22:36:b7:0a:44:36:d7:0b:6f:d2:29: 20:71:cc:1a:53:3a:ff:f8:0a:1c:c3:9c:bb:70:a4: ff:c5:7d:39:1a:04:03:35:3e:53:70:a1:d8:44:f0: 6c:d0:cc:62:4b:70:9d:e8:70:56:2e:fb:0a:27:4d: 24:05:ce:7c:c9:82:6d:63:d3:6b:2a:78:5f:03:25: 19:66:a0:fd:cb:eb:b7:1f:dc:01:df:54:40:07:6f: f3:24:2c:af:c8:4d:a5:db:8a:a1:07:b6:0a:4e:b7: e8:2f:a1:34:cc:a3:8f:49:17:9a:39:95:9c:68:72: 81:6a:f3:21:ee:8e:28:41:07:fa:7f:df:bb:e2:e6: 26:c3:2b:7d:ec:ad:9e:c1:14:92:de:76:c6:cb:6a: 63:96:8e:8c:5e:0c:c9:28:1d:ed:bd:1a:83:a4:31: 61:aa:e9:57:5e:58:f9:7d:d4:b1:b3:f6:23:61:b6: 96:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AF:6E:B3:80:38:0C:6A:AE:86:FF:32:A2:62:B9:60:3B:60:FA:03 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:81:ab:e3:98:0f:53:fd:23:f3:43:4e:07:28:6e:1c:12:81: 6d:06:90:c0:4d:a7:f7:6d:8f:a5:6a:75:16:e4:5d:22:fb:d9: ff:ca:99:c0:91:2b:90:2f:e8:de:8e:6b:cd:e3:8a:1c:fb:04: a9:6a:e7:4d:33:06:75:f7:55:ba:fa:85:7a:b6:4b:e3:69:c6: 89:1f:ab:11:e1:6f:0a:a6:67:9a:80:a5:54:ef:5d:bb:b2:25: 32:83:cb:7c:df:6e:eb:fe:97:40:cc:1e:1c:e8:24:fc:4d:c1: 8e:67:7f:a9:df:f8:5d:3f:0e:3f:06:b3:43:b9:ed:1b:f1:d8: da:09:66:87:65:7b:4a:fc:45:93:4d:90:8c:b5:3b:5d:ef:bd: 9b:48:57:ef:41:55:bb:56:a8:7b:6c:78:9f:c3:2b:dc:4f:c5: 38:91:81:48:d9:c1:e2:9d:80:fd:bc:0d:34:c3:fd:4b:12:19: 54:df:33:17:c1:e3:dc:43:a9:05:ad:e5:0d:ab:c6:aa:70:be: 7a:b4:2a:49:dd:20:c6:a2:7d:13:df:ff:9a:af:d5:82:c3:3b: c5:7d:15:03:58:92:a8:f0:c1:f8:cc:e5:20:7e:50:85:9d:b8: ac:1c:4a:fc:a5:00:f6:88:20:0a:fa:84:ba:83:a0:4b:87:eb: e3:1d:4a:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyps/ipQ5MmQdY0l5hIhjXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwMzAxMTQwMTA5WhcNMjYwMzAyMTQwMTA5WjAzMTEwLwYDVQQD EyhiY2FmNmViMzgwMzgwYzZhYWU4NmZmMzJhMjYyYjk2MDNiNjBmYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspKovE6lJ1KHLbybLHchwF0Lt8yY 7xpcTtrkh6KjHatKgkWTvF+MXPYU3d4d7DKIahv9zCR28tSkIHx70KC6d+spwHSS GnlKHeT9G5NYIja3CkQ21wtv0ikgccwaUzr/+Aocw5y7cKT/xX05GgQDNT5TcKHY RPBs0MxiS3Cd6HBWLvsKJ00kBc58yYJtY9NrKnhfAyUZZqD9y+u3H9wB31RAB2/z JCyvyE2l24qhB7YKTrfoL6E0zKOPSReaOZWcaHKBavMh7o4oQQf6f9+74uYmwyt9 7K2ewRSS3nbGy2pjlo6MXgzJKB3tvRqDpDFhqulXXlj5fdSxs/YjYbaWcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyvbrOAOAxqrob/MqJiuWA7YPoDMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuYGr45gP U/0j80NOByhuHBKBbQaQwE2n922PpWp1FuRdIvvZ/8qZwJErkC/o3o5rzeOKHPsE qWrnTTMGdfdVuvqFerZL42nGiR+rEeFvCqZnmoClVO9du7IlMoPLfN9u6/6XQMwe HOgk/E3Bjmd/qd/4XT8OPwazQ7ntG/HY2glmh2V7SvxFk02QjLU7Xe+9m0hX70FV u1aoe2x4n8Mr3E/FOJGBSNnB4p2A/bwNNMP9SxIZVN8zF8Hj3EOpBa3lDavGqnC+ erQqSd0gxqJ9E9//mq/VgsM7xX0VA1iSqPDB+MzlIH5QhZ24rBxK/KUA9oggCvqE uoOgS4fr4x1K8g== -----END CERTIFICATE-----Generated at Sun Mar 1 16:37:57 2026 by rpki-client