$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: 4d/IgTEvtO9ZcIcvEzeha3ekKdi5fRQQbmv83txffT0= Subject key identifier: 0A:CF:54:A7:0B:0B:80:06:EC:2A:5F:69:9F:1D:3F:76:5E:D4:9C:C3 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019CAE3544B20E43E407D30B644B8A2667CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 185B Signing time: Mon 02 Mar 2026 11:00:52 +0000 Manifest this update: Mon 02 Mar 2026 11:00:52 +0000 Manifest next update: Tue 03 Mar 2026 11:00:52 +0000 Files and hashes: 1: 1-Av5slqVQGl13SrEfsDMUE9C8xw.roa (hash: fHxcC/pLnuuTMmJ/MEePK0x7KhULD48H+HBYLlLnLM0=) 2: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=) 3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=) 4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=) 5: E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa (hash: 5MnQxHTjDi2NDKJrwnJ1AAzWp+hIpNaMlweOYJUqXj8=) 6: HfpMqcQpb_Oyo8q91Gxgrjfcnfs.roa (hash: 3z+4GXfqGZOD8OYrsC4T9FL0WEjQRqb08RZme3k48Lw=) 7: JsVZuQIKNIHzo3qKU_aGaN9TGy0.roa (hash: W7p0gBk862eedQpONG4wyoOk08n0osQClMT4stp+hJs=) 8: PyPswdGk1ZVrHOm_LMSZBjhQB1A.roa (hash: +8V8Dt++uOTSXhRHoCWJ+fxEyoBe8YcJTvD0shhiPWM=) 9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=) 10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=) 11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=) 12: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: FrO67tPOQEZPIvLFHdbXwpioHvaJHNk9YJOT0FZX868=) 13: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=) 14: oYXyy77jFFZFt2039BhjAw8G3L0.roa (hash: Cn7bnwSGye9UBPsmnOsVK1mE3z5k0eAVuqmgNwd2Ik4=) 15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=) 16: s1pXuGWW8y0eMDg2PLAPlJOS44g.roa (hash: 65AbhQkFbG41XkwAPCWwnfEfJS7XNkEvl4ocnYbT4oA=) 17: tKQOFu4gDtiR9E_Fs5E_WSdxqYs.roa (hash: WdBgiiX6jEX+9nf9y/4sf97cV0r9Y0+TqLFDE6JwVjA=) 18: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=) 19: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=) 20: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ae:35:44:b2:0e:43:e4:07:d3:0b:64:4b:8a:26:67:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Mar 2 11:00:52 2026 GMT Not After : Mar 3 11:00:52 2026 GMT Subject: CN=0acf54a70b0b8006ec2a5f699f1d3f765ed49cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:4b:2d:91:25:91:00:65:db:26:5f:87:39: e4:26:33:81:e8:45:12:b0:85:62:d7:82:9f:67:43: 7e:e6:11:b1:63:a8:3a:bf:07:5a:a0:09:c6:e2:52: 84:b5:74:f9:d3:59:99:fc:c8:77:42:32:ea:46:41: 90:e9:82:88:2b:65:78:fc:4b:1d:30:81:76:37:3c: a7:50:d7:65:72:31:f3:3b:5e:af:87:77:fd:c2:86: 65:0c:34:fc:87:df:8c:32:b8:84:6f:f2:70:f8:4a: b4:ec:31:30:23:28:cd:10:89:7d:0f:be:48:fb:b4: 82:31:52:2d:3c:e1:ca:9f:51:59:de:b5:87:57:0f: a3:73:ef:94:de:61:90:c2:53:f1:8b:eb:30:1e:b6: 8b:fc:7e:f3:ba:66:4b:62:3e:86:fb:cd:a7:e2:4f: 60:0d:4e:b2:1a:f8:2c:ea:5b:5d:4f:9a:f1:16:6f: 19:1f:78:bb:e7:28:50:96:02:52:72:26:9d:56:ee: 6c:54:66:8a:ff:48:d3:77:18:39:ff:17:2b:c4:ec: 9e:7c:ab:e1:84:27:a4:57:2e:a9:ef:f3:38:aa:e7: 21:0c:fc:e7:af:1c:4d:90:2c:67:d7:24:e7:31:2d: a3:07:79:65:26:e1:b8:98:7f:ab:43:8c:4a:a1:e6: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CF:54:A7:0B:0B:80:06:EC:2A:5F:69:9F:1D:3F:76:5E:D4:9C:C3 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f7:17:92:1a:cc:08:0d:e2:29:b6:6d:7c:fa:ca:7e:64:92: 94:5b:71:a1:47:d8:c3:23:45:06:6f:7f:65:f0:48:17:52:6f: 9a:ea:4c:67:a1:4e:e8:77:79:8e:ee:3a:cb:c9:68:ec:d0:ec: 55:12:da:9f:67:a9:b6:01:21:ec:5e:f3:77:29:3b:c6:b4:a9: 0f:43:57:56:27:81:a5:6c:c0:27:54:e5:4b:fa:bf:9c:66:fa: 6a:ff:32:3c:f7:b0:ca:9a:88:bd:d8:8a:b5:73:cf:0f:a6:92: 3a:89:3e:11:80:9d:71:aa:cd:c7:e9:bf:3b:93:7b:b8:04:7a: a3:f6:fc:26:45:3e:a1:57:ed:5e:45:b4:e1:53:33:9b:8c:bc: 61:a5:0d:83:b4:59:67:e3:77:00:03:57:2a:ef:6a:b0:27:f9: ea:e5:d5:8c:bd:fd:7f:61:a7:ce:52:28:11:be:4a:b9:37:4f: f3:da:52:66:70:da:cc:46:c3:91:08:27:25:41:5d:60:d4:de: 12:51:87:0c:6e:a5:be:a6:46:47:db:05:2f:dc:c4:c4:1c:a9: 16:a9:8f:b5:99:d6:cc:41:15:4d:ed:85:42:7b:fd:3e:84:86: ca:55:a8:38:26:ce:16:5b:1a:01:58:04:c8:39:81:95:08:26: 24:f8:81:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyuNUSyDkPkB9MLZEuKJmfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMzAyMTEwMDUyWhcNMjYwMzAzMTEwMDUyWjAzMTEwLwYDVQQD EygwYWNmNTRhNzBiMGI4MDA2ZWMyYTVmNjk5ZjFkM2Y3NjVlZDQ5Y2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtadLLZElkQBl2yZfhznkJjOB6EUS sIVi14KfZ0N+5hGxY6g6vwdaoAnG4lKEtXT501mZ/Mh3QjLqRkGQ6YKIK2V4/Esd MIF2NzynUNdlcjHzO16vh3f9woZlDDT8h9+MMriEb/Jw+Eq07DEwIyjNEIl9D75I +7SCMVItPOHKn1FZ3rWHVw+jc++U3mGQwlPxi+swHraL/H7zumZLYj6G+82n4k9g DU6yGvgs6ltdT5rxFm8ZH3i75yhQlgJSciadVu5sVGaK/0jTdxg5/xcrxOyefKvh hCekVy6p7/M4quchDPznrxxNkCxn1yTnMS2jB3llJuG4mH+rQ4xKoeZYrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArPVKcLC4AG7CpfaZ8dP3Ze1JzDMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvcXkhrM CA3iKbZtfPrKfmSSlFtxoUfYwyNFBm9/ZfBIF1JvmupMZ6FO6Hd5ju46y8lo7NDs VRLan2eptgEh7F7zdyk7xrSpD0NXVieBpWzAJ1TlS/q/nGb6av8yPPewypqIvdiK tXPPD6aSOok+EYCdcarNx+m/O5N7uAR6o/b8JkU+oVftXkW04VMzm4y8YaUNg7RZ Z+N3AANXKu9qsCf56uXVjL39f2GnzlIoEb5KuTdP89pSZnDazEbDkQgnJUFdYNTe ElGHDG6lvqZGR9sFL9zExBypFqmPtZnWzEEVTe2FQnv9PoSGylWoOCbOFlsaAVgE yDmBlQgmJPiBmg== -----END CERTIFICATE-----Generated at Mon Mar 2 15:50:59 2026 by rpki-client