$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: WRK1CRhaybyZhIrEJPYey4t18AcpJ1iymS7er5fw5b0= Subject key identifier: 4B:89:D5:F4:E0:29:D9:97:6F:A0:11:78:CD:BD:42:5E:6E:A2:C5:DF Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019CAEDA308C2246DB4B3DA806E4F751C0CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 0340 Signing time: Mon 02 Mar 2026 14:01:00 +0000 Manifest this update: Mon 02 Mar 2026 14:01:00 +0000 Manifest next update: Tue 03 Mar 2026 14:01:00 +0000 Files and hashes: 1: 0hivjmx3zESdF4O-A2SSYqLGRzk.roa (hash: shH0/H2kUggaPw7GkO5zNoGa7K6ORDulOONVmqwNyzg=) 2: 34ts3PIYYIFWGi911YLJC_MNTy0.roa (hash: 4pjAppUY+fw8yDaAV/Qux+rVoBRiKl+Kw/H8kkGtDI4=) 3: 3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa (hash: 92O5pIZ5W4yGOk4rHe6wXslYmPaUdiXeWtRLQm4goss=) 4: 4BsASipyNhMfne7kcDB1nUMHv4U.roa (hash: gNxM9v4Ci9bVQzz6zMSsl4HxARtJa2mrpaEAF1ssvBc=) 5: 51oAIofJkFXpGxq0u0pMpGIor0Y.roa (hash: luFon6hTssLT0GVFCEnyosU6nzOcK0/WHgWU8mcIjfk=) 6: 6v6eeI5cY68j_2oFbpbr5jPTgdU.roa (hash: zqirwLCXgdjJFeXHZFQIYNjwkSF+pg6w51CqhX494MQ=) 7: HHVyXzUcc_YIy8baKZaV2Y45k38.roa (hash: ndUe7viQWWyFXFChfyWy877/Y7Q3qjUplP6K/mFzfDE=) 8: SodBob46gHvkE9f0X3aM1jnjv_0.roa (hash: USjt5jELYEu1iaW09TQw060b9YelZ/w0+6LrYh++vTo=) 9: bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa (hash: JYxMnFiCRaisfCjM99QzlqqTlxpJrwkoJa68usH9YxI=) 10: cHAy_4A-CMasQbGFupRjCXJRveA.roa (hash: Z5sX4UD5pwFqxzXI/4DJgcahhJVYCnCAo+Vk4S1WDik=) 11: fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa (hash: sPu4yXxTGRc2nkq1SBHu8c/xRYRB8YjHSE2w/qhSkXw=) 12: kEgukI4x5ATV385AVFHglji0HH0.roa (hash: 7W67j4OKnAJPYfKA7VB2yMPYazX4qvOU73e4/HvQ//o=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: l8QGqusEo6HDWPUa4EaRYQtJ1IAjEaDlqg166j1faJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ae:da:30:8c:22:46:db:4b:3d:a8:06:e4:f7:51:c0:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Mar 2 14:01:00 2026 GMT Not After : Mar 3 14:01:00 2026 GMT Subject: CN=4b89d5f4e029d9976fa01178cdbd425e6ea2c5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:dc:b0:38:8e:5d:3d:5f:3e:75:94:ed:ac:8d: fc:82:99:7f:d0:91:a0:55:f9:06:83:e1:0a:ad:a1: e0:16:8b:91:bc:f9:5c:0a:f9:1b:df:14:75:49:e1: 60:4b:52:ce:9a:5f:e4:17:e7:fd:76:c3:a6:57:1d: e0:98:34:6d:51:e5:b9:cf:31:38:16:40:71:cb:2c: 31:c6:91:52:99:d7:b1:70:82:14:37:db:c9:7c:78: 77:81:3e:79:f3:8c:78:03:7c:45:ff:08:ef:20:ab: 94:18:93:21:2a:82:18:fe:46:7c:af:43:99:58:37: 9f:c0:f0:65:52:66:2a:a3:42:42:e2:28:02:75:4c: 74:c6:76:8c:f2:34:59:37:24:d6:31:70:36:10:00: e7:f0:3d:e6:27:20:37:c6:a9:dc:12:87:ec:3b:19: c0:53:8a:72:91:db:24:6c:11:d2:fc:3c:7d:95:0d: 7f:24:b3:db:6f:01:6b:ab:37:8a:d7:ee:15:c0:d7: 4d:d2:01:7a:96:d5:b0:16:b2:9b:c1:2c:bd:b7:2a: 3f:9c:e9:e4:67:57:f6:d5:ef:1d:75:b6:01:7d:49: 85:98:3e:cf:24:41:2d:9d:96:c3:c9:b4:f0:3a:e3: 16:22:38:a1:26:0d:c4:61:b4:97:dc:4a:c1:44:9d: 37:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:89:D5:F4:E0:29:D9:97:6F:A0:11:78:CD:BD:42:5E:6E:A2:C5:DF X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:15:ad:13:6d:69:dc:3c:b9:af:6b:b1:c1:aa:48:95:62:05: f9:67:ab:a3:54:e1:54:43:62:fd:1c:c6:c0:ce:76:0a:7b:59: 8e:ac:ae:34:a8:8a:81:06:f9:e7:04:4b:cf:3c:b7:4e:4d:b3: 0a:e9:65:66:de:a1:2d:b0:ac:98:07:c1:c2:0e:64:c9:b5:e1: db:c3:83:c6:1b:5c:bc:51:d6:24:72:83:fa:4c:bc:d4:43:09: 9b:38:d9:1e:72:2a:f9:21:76:a1:31:91:de:64:40:d8:a6:cc: 18:9d:ce:78:63:f7:dc:71:91:ee:71:de:b0:1b:7d:3b:d9:49: 01:0d:84:bf:e3:cc:3f:ba:82:f1:98:6f:54:35:34:a6:31:1c: 8d:de:76:7e:30:6f:12:1d:6a:69:45:2c:24:c7:ce:22:70:c8: 3b:75:22:57:7e:76:66:22:a6:2f:75:02:ef:ab:4d:81:97:67: 27:04:75:22:0b:35:fc:7b:5d:35:67:2e:2b:b0:4c:17:4b:0c: 1c:71:9c:ca:5d:cf:6a:4c:3b:ce:34:7e:db:2e:33:95:3d:25: 18:91:73:2f:94:45:ac:94:4b:71:47:49:6c:49:16:0c:5f:bf: 03:35:42:3d:de:5a:c3:5d:07:57:84:77:b3:23:f6:f2:3f:c0: c4:8a:f2:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyu2jCMIkbbSz2oBuT3UcDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwMzAyMTQwMTAwWhcNMjYwMzAzMTQwMTAwWjAzMTEwLwYDVQQD Eyg0Yjg5ZDVmNGUwMjlkOTk3NmZhMDExNzhjZGJkNDI1ZTZlYTJjNWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69ywOI5dPV8+dZTtrI38gpl/0JGg VfkGg+EKraHgFouRvPlcCvkb3xR1SeFgS1LOml/kF+f9dsOmVx3gmDRtUeW5zzE4 FkBxyywxxpFSmdexcIIUN9vJfHh3gT5584x4A3xF/wjvIKuUGJMhKoIY/kZ8r0OZ WDefwPBlUmYqo0JC4igCdUx0xnaM8jRZNyTWMXA2EADn8D3mJyA3xqncEofsOxnA U4pykdskbBHS/Dx9lQ1/JLPbbwFrqzeK1+4VwNdN0gF6ltWwFrKbwSy9tyo/nOnk Z1f21e8ddbYBfUmFmD7PJEEtnZbDybTwOuMWIjihJg3EYbSX3ErBRJ038QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuJ1fTgKdmXb6AReM29Ql5uosXfMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBWtE21p 3Dy5r2uxwapIlWIF+Wero1ThVENi/RzGwM52CntZjqyuNKiKgQb55wRLzzy3Tk2z CullZt6hLbCsmAfBwg5kybXh28ODxhtcvFHWJHKD+ky81EMJmzjZHnIq+SF2oTGR 3mRA2KbMGJ3OeGP33HGR7nHesBt9O9lJAQ2Ev+PMP7qC8ZhvVDU0pjEcjd52fjBv Eh1qaUUsJMfOInDIO3UiV352ZiKmL3UC76tNgZdnJwR1Igs1/HtdNWcuK7BMF0sM HHGcyl3Pakw7zjR+2y4zlT0lGJFzL5RFrJRLcUdJbEkWDF+/AzVCPd5aw10HV4R3 syP28j/AxIryuQ== -----END CERTIFICATE-----Generated at Mon Mar 2 21:11:08 2026 by rpki-client