$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: 96cK3zRLDvwM79tLBGOKMNczg19FYvvK8i4laCQOcRk= Subject key identifier: 30:D0:9B:2B:B9:3E:A0:59:55:38:F5:0F:7E:C2:40:A3:B9:43:5C:61 Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019CACB47EAFA3E8BFC3EE77AC97972C8552 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 170B Signing time: Mon 02 Mar 2026 04:00:35 +0000 Manifest this update: Mon 02 Mar 2026 04:00:35 +0000 Manifest next update: Tue 03 Mar 2026 04:00:35 +0000 Files and hashes: 1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=) 2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=) 3: hAy8VtAwci_v3cGOO19dEdefvMA.roa (hash: g1nY4ONoPi4/cXPph4hFcjnMaUzSfWsZYHkL3fHcL7Y=) 4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=) 5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=) 6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=) 7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: WZ3Oj5eWVDOuscWkwygVpJNta/F68k574T/UUOA/N/c=) 8: suUbWGeNBw5ePtioMY9U94S7lSw.roa (hash: M06oDkMYsepjO/1pxSEeQ8cUvDUMgzU9aQtQ7cy78x8=) 9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=) 10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:b4:7e:af:a3:e8:bf:c3:ee:77:ac:97:97:2c:85:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Mar 2 04:00:35 2026 GMT Not After : Mar 3 04:00:35 2026 GMT Subject: CN=30d09b2bb93ea0595538f50f7ec240a3b9435c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:e8:75:42:53:20:75:16:68:f3:27:68:5e: a6:65:2e:6c:42:5b:49:5a:db:23:f1:12:b5:68:80: 7d:49:48:b8:6f:6c:83:72:73:9f:92:fc:6a:32:dd: 3e:8c:b1:4a:a8:a8:31:82:16:9f:1c:f3:48:c8:03: b8:3b:5d:06:3d:e5:e6:77:bb:b9:c7:8c:d2:70:79: 70:aa:69:c9:6e:37:dc:c7:3a:b6:fc:f4:62:5c:cd: 0d:57:32:ce:7f:27:d7:95:14:b2:61:59:69:9e:da: c4:db:a2:57:3a:6a:47:46:54:24:de:18:ee:e9:88: 0c:a9:b8:c6:3c:d6:3d:8b:56:8d:a7:52:06:29:ed: 2a:30:3f:48:8d:57:e0:79:95:ce:53:96:a8:cc:8d: 40:4e:2e:2d:75:c8:26:28:bf:d9:ef:55:45:cc:ba: 7d:f9:95:87:cc:7a:af:dd:eb:3c:ef:95:8d:c7:1b: 8d:39:7e:9a:1b:53:0a:0b:c8:19:21:17:ba:35:64: c9:53:4b:d0:03:3c:cd:c9:a3:30:a3:f8:c7:69:a4: 22:fb:21:07:62:01:da:ec:92:4a:95:80:63:85:87: 2d:36:2d:ea:7b:eb:3a:8b:12:00:73:08:35:06:84: ec:6f:09:d6:1c:0e:8a:8d:da:12:fd:ce:f9:92:d7: b7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D0:9B:2B:B9:3E:A0:59:55:38:F5:0F:7E:C2:40:A3:B9:43:5C:61 X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c0:a5:5b:53:38:0d:2e:b5:d2:41:4a:69:54:59:f0:0f:b5: b2:3f:9d:e4:70:d6:03:bb:0f:d4:19:5d:94:b3:e9:ee:76:db: 03:4b:c6:bf:8c:e2:45:ee:fe:36:c9:63:6f:dd:49:ce:14:51: ce:b6:c9:a8:8e:5f:bc:d0:97:f4:b9:18:e5:66:32:fa:16:e0: ee:ab:3b:6f:33:a7:41:f5:ec:f7:b8:2d:9f:e7:a2:43:3d:16: 69:31:ac:0a:23:12:f9:f7:23:75:26:d8:bc:fc:78:94:e7:5f: 1d:da:39:9d:7e:93:f1:c4:10:c0:44:e2:a5:19:34:f4:3d:f6: 40:b0:b9:52:f2:8f:b7:95:5f:d0:bb:76:1a:50:c4:e0:92:44: f7:18:b0:60:73:d2:73:03:f9:df:b4:9d:04:bf:79:32:92:7f: 01:84:f2:d9:1a:b0:c0:79:71:96:98:c0:00:9a:f7:e7:71:9f: fa:da:47:ee:01:e1:48:2c:b8:1c:85:3d:f9:5a:86:e2:d6:88: dc:39:73:83:e8:55:56:cf:83:9d:67:c2:c1:67:26:bd:48:81: 93:37:03:0d:33:e8:43:d6:a3:b1:1a:12:fd:6e:27:b9:fa:f1: 03:f8:8c:81:53:a9:ef:88:ec:1e:59:85:30:75:13:3c:d6:7a: 7e:48:73:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZystH6vo+i/w+53rJeXLIVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYwMzAyMDQwMDM1WhcNMjYwMzAzMDQwMDM1WjAzMTEwLwYDVQQD EygzMGQwOWIyYmI5M2VhMDU5NTUzOGY1MGY3ZWMyNDBhM2I5NDM1YzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWXodUJTIHUWaPMnaF6mZS5sQltJ Wtsj8RK1aIB9SUi4b2yDcnOfkvxqMt0+jLFKqKgxghafHPNIyAO4O10GPeXmd7u5 x4zScHlwqmnJbjfcxzq2/PRiXM0NVzLOfyfXlRSyYVlpntrE26JXOmpHRlQk3hju 6YgMqbjGPNY9i1aNp1IGKe0qMD9IjVfgeZXOU5aozI1ATi4tdcgmKL/Z71VFzLp9 +ZWHzHqv3es875WNxxuNOX6aG1MKC8gZIRe6NWTJU0vQAzzNyaMwo/jHaaQi+yEH YgHa7JJKlYBjhYctNi3qe+s6ixIAcwg1BoTsbwnWHA6KjdoS/c75kte3BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDQmyu5PqBZVTj1D37CQKO5Q1xhMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucClW1M4 DS610kFKaVRZ8A+1sj+d5HDWA7sP1BldlLPp7nbbA0vGv4ziRe7+Nsljb91JzhRR zrbJqI5fvNCX9LkY5WYy+hbg7qs7bzOnQfXs97gtn+eiQz0WaTGsCiMS+fcjdSbY vPx4lOdfHdo5nX6T8cQQwETipRk09D32QLC5UvKPt5Vf0Lt2GlDE4JJE9xiwYHPS cwP537SdBL95MpJ/AYTy2RqwwHlxlpjAAJr353Gf+tpH7gHhSCy4HIU9+VqG4taI 3Dlzg+hVVs+DnWfCwWcmvUiBkzcDDTPoQ9ajsRoS/W4nufrxA/iMgVOp74jsHlmF MHUTPNZ6fkhzlQ== -----END CERTIFICATE-----Generated at Mon Mar 2 08:20:41 2026 by rpki-client