$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: Y9eePI793A6CJzUt7650TvCOl7C6pS/X0iG3r+ROVGA= Subject key identifier: B1:D0:47:1F:FB:4A:50:2F:7C:B4:68:EB:64:A0:02:00:8F:CD:3B:EE Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019CACEB71792C9940FCE046E2B1DA7DBCB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 033F Signing time: Mon 02 Mar 2026 05:00:37 +0000 Manifest this update: Mon 02 Mar 2026 05:00:37 +0000 Manifest next update: Tue 03 Mar 2026 05:00:37 +0000 Files and hashes: 1: 0hivjmx3zESdF4O-A2SSYqLGRzk.roa (hash: shH0/H2kUggaPw7GkO5zNoGa7K6ORDulOONVmqwNyzg=) 2: 34ts3PIYYIFWGi911YLJC_MNTy0.roa (hash: 4pjAppUY+fw8yDaAV/Qux+rVoBRiKl+Kw/H8kkGtDI4=) 3: 3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa (hash: 92O5pIZ5W4yGOk4rHe6wXslYmPaUdiXeWtRLQm4goss=) 4: 4BsASipyNhMfne7kcDB1nUMHv4U.roa (hash: gNxM9v4Ci9bVQzz6zMSsl4HxARtJa2mrpaEAF1ssvBc=) 5: 51oAIofJkFXpGxq0u0pMpGIor0Y.roa (hash: luFon6hTssLT0GVFCEnyosU6nzOcK0/WHgWU8mcIjfk=) 6: 6v6eeI5cY68j_2oFbpbr5jPTgdU.roa (hash: zqirwLCXgdjJFeXHZFQIYNjwkSF+pg6w51CqhX494MQ=) 7: HHVyXzUcc_YIy8baKZaV2Y45k38.roa (hash: ndUe7viQWWyFXFChfyWy877/Y7Q3qjUplP6K/mFzfDE=) 8: SodBob46gHvkE9f0X3aM1jnjv_0.roa (hash: USjt5jELYEu1iaW09TQw060b9YelZ/w0+6LrYh++vTo=) 9: bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa (hash: JYxMnFiCRaisfCjM99QzlqqTlxpJrwkoJa68usH9YxI=) 10: cHAy_4A-CMasQbGFupRjCXJRveA.roa (hash: Z5sX4UD5pwFqxzXI/4DJgcahhJVYCnCAo+Vk4S1WDik=) 11: fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa (hash: sPu4yXxTGRc2nkq1SBHu8c/xRYRB8YjHSE2w/qhSkXw=) 12: kEgukI4x5ATV385AVFHglji0HH0.roa (hash: 7W67j4OKnAJPYfKA7VB2yMPYazX4qvOU73e4/HvQ//o=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: m9KWNdnC9bkQ+ODjy+9MjB8GXYBclFxjrar57XQn+Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:eb:71:79:2c:99:40:fc:e0:46:e2:b1:da:7d:bc:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Mar 2 05:00:37 2026 GMT Not After : Mar 3 05:00:37 2026 GMT Subject: CN=b1d0471ffb4a502f7cb468eb64a002008fcd3bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:38:ff:76:03:75:a8:5e:35:d2:4d:a7:bc:b7: 8f:c0:a1:b2:d8:db:f0:37:34:2e:92:33:1a:6e:48: 1b:77:22:a5:1a:b3:8a:13:a0:82:9f:56:e2:86:c2: 8d:da:4f:19:61:94:87:5b:97:c9:f3:3e:f8:02:c9: 0e:83:49:13:ef:78:2a:62:a0:d0:8d:ff:a1:54:2e: 85:25:5f:c3:bb:3a:79:4d:3d:44:ab:34:65:69:6f: 1c:42:ed:f0:9a:d6:a8:4c:a0:45:f6:06:5e:fc:17: 23:d0:8a:92:5f:eb:bc:d4:52:0e:2e:6f:25:32:a3: 57:00:b1:13:dd:af:58:f0:b0:7e:3c:af:de:62:7a: f2:e0:d2:23:7d:84:d0:90:f0:7d:b8:f6:99:5f:17: ec:2b:35:26:3c:4a:75:c1:70:27:b0:e8:9a:2a:63: 91:3d:01:7d:7f:c0:b5:e3:31:e3:bf:72:27:7d:76: da:76:01:a1:25:2a:82:3a:ad:9d:e7:36:5f:a8:d0: ff:38:80:1e:9a:84:b6:a6:1f:cd:d9:36:3b:42:a3: 3a:ba:cc:51:e1:28:31:60:db:5d:a8:1d:82:37:18: 89:8d:56:38:5c:71:5c:94:1f:9f:21:62:7f:f5:9e: 29:86:0c:ee:cb:54:84:d5:4c:1e:c5:fb:1b:37:ff: 8c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D0:47:1F:FB:4A:50:2F:7C:B4:68:EB:64:A0:02:00:8F:CD:3B:EE X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b4:1b:a2:c6:81:e0:b6:4d:bb:3d:e1:81:a6:65:f2:5f:0b: 9c:f6:a0:bb:05:bf:c7:9a:2c:a8:ed:c1:79:3d:5c:c7:d8:ec: 94:59:ce:19:48:b0:ee:28:2b:78:51:06:90:2b:fb:0b:85:b1: 15:e3:78:5e:28:37:7e:a7:0c:3e:29:1c:63:ca:0a:5a:09:43: cd:ff:82:8d:c6:3a:e0:12:f8:18:4b:b4:0f:84:8a:5b:79:43: 3f:8d:4a:e0:0c:77:30:d8:53:72:25:8c:ce:0f:2b:f8:77:2d: c8:81:65:63:2d:2b:0f:93:16:d7:0d:37:25:2a:07:9c:ee:5c: f3:d5:d7:f8:a5:b9:15:b7:bc:85:e2:c8:4f:69:66:1e:e2:09: ff:21:fb:f2:0e:b9:b7:f9:5c:5a:46:5f:b0:af:5e:98:a0:6a: eb:ac:32:22:cd:21:1d:4c:4a:24:92:48:7f:d6:44:57:3d:4a: 93:13:32:89:ba:5b:c0:c6:af:9f:06:02:92:59:17:53:cc:93: 6a:06:8f:31:ad:ba:80:a9:1a:41:b0:f7:4f:5c:e1:f4:b3:cf: 7f:99:8c:34:c1:fa:92:46:16:1c:b6:d3:bd:fb:19:c6:01:66: 80:ae:6f:23:47:44:1d:f9:52:0e:4a:9a:43:b9:8f:37:f8:93: 68:70:00:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZys63F5LJlA/OBG4rHafby4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwMzAyMDUwMDM3WhcNMjYwMzAzMDUwMDM3WjAzMTEwLwYDVQQD EyhiMWQwNDcxZmZiNGE1MDJmN2NiNDY4ZWI2NGEwMDIwMDhmY2QzYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Dj/dgN1qF410k2nvLePwKGy2Nvw NzQukjMabkgbdyKlGrOKE6CCn1bihsKN2k8ZYZSHW5fJ8z74AskOg0kT73gqYqDQ jf+hVC6FJV/Duzp5TT1EqzRlaW8cQu3wmtaoTKBF9gZe/Bcj0IqSX+u81FIOLm8l MqNXALET3a9Y8LB+PK/eYnry4NIjfYTQkPB9uPaZXxfsKzUmPEp1wXAnsOiaKmOR PQF9f8C14zHjv3InfXbadgGhJSqCOq2d5zZfqND/OIAemoS2ph/N2TY7QqM6usxR 4SgxYNtdqB2CNxiJjVY4XHFclB+fIWJ/9Z4phgzuy1SE1UwexfsbN/+M0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHQRx/7SlAvfLRo62SgAgCPzTvuMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarQbosaB 4LZNuz3hgaZl8l8LnPaguwW/x5osqO3BeT1cx9jslFnOGUiw7igreFEGkCv7C4Wx FeN4Xig3fqcMPikcY8oKWglDzf+CjcY64BL4GEu0D4SKW3lDP41K4Ax3MNhTciWM zg8r+HctyIFlYy0rD5MW1w03JSoHnO5c89XX+KW5Fbe8heLIT2lmHuIJ/yH78g65 t/lcWkZfsK9emKBq66wyIs0hHUxKJJJIf9ZEVz1KkxMyibpbwMavnwYCklkXU8yT agaPMa26gKkaQbD3T1zh9LPPf5mMNMH6kkYWHLbTvfsZxgFmgK5vI0dEHflSDkqa Q7mPN/iTaHAATQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:50:03 2026 by rpki-client