$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: yMwNA9kbOVtvb7n0EDMleIG4vM31G6OARhAj8Nm0bJE= Subject key identifier: EB:02:4C:66:48:53:58:D6:4E:A1:35:CC:83:24:79:53:85:65:F3:14 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019CAAFD0C5ABACBA1685FF43F4A88C497C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 0471 Signing time: Sun 01 Mar 2026 20:00:36 +0000 Manifest this update: Sun 01 Mar 2026 20:00:36 +0000 Manifest next update: Mon 02 Mar 2026 20:00:36 +0000 Files and hashes: 1: 1-zfvela3gTtSU0Zxk_qmMqiWGy0.roa (hash: OQAOpz82CSjUEMjy/IwaBDn+AK3uYtqBMtS2qxamScE=) 2: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: 6yWS6EKUDLEf/nyeRvtGDvo8ML0I61Y6UUBb3XJktKM=) 3: 3IIIbSHlsPEX9RgLw-Kb17hhjPE.roa (hash: Uesym/7PxOu6F5IAqXjQ/0zdOEg1mfv/28criAnhfi8=) 4: 8SAtM8IMR2YkrpygIGIpM4TdRCA.roa (hash: paNW3tKH+SaFHT3KIqEpy4lTXiy0sBoaMdBNqSt4tE8=) 5: BEfiB8Ofj3dy9k6ut7ucAiAaeWA.roa (hash: ld2i/c644xy/PeKcwaW0wlZ1HJhat/nQKOKjClAcII4=) 6: BlYKNaebEqnJcG7MjHMYllll4W4.roa (hash: 5rOtsWwUTndJqNVTM18t297dcWOrG9S+X6OosQK/cJ8=) 7: KDJCV2KWqxqP4itFZc0vnyWHg-M.roa (hash: ZdQlom/XrmZVTovIG/Wu0KyZZPE8vYBX2PPuyHGQT0o=) 8: Q5g7wLZTD8XLozUMz9rvETHj4qo.roa (hash: WR87uKYOBvXSCMlWbhymrPvITDRKwZFSqQyfVG6XUKM=) 9: SMUYHJGqPA3wQQI63UlSS2FCfUY.roa (hash: J7ZEbIf8CEpYVZLgafo0n+Ok/RB6jdMafFrTE9kMXrM=) 10: cI-L7pef_AdHI_QGBFTE5PiVJ0U.roa (hash: jgu+5sRPCpckA/cZ1yBuc9ZXcWSw0y0C+/Lk+J+5CkI=) 11: cbh1si2A2Ydkejw2Rg2PChEcZkI.roa (hash: g8srghuNNX3ZtaA38+TVjTMeN5WNvR+zb2DXvokXiYM=) 12: g-Dw0lZsOsb9XuKWb3g0E47UyIs.roa (hash: nsgNEhjHAiGOzBMeJvhHNadyfL9YZc5PQ6L4B/Mp7pU=) 13: iWLnguhSOb7-X7cfTiILpKUal74.roa (hash: SwM3PBqqQru24uepnr2dP9tkAA5XkqKgSM154kLrCcM=) 14: lIG1b91dGC5ndWbmzjIp_fubDNE.roa (hash: Bvl3uk2S1zwHFCA6eMLSAsz9eN2bKrsslaZc1w8UTMY=) 15: n2qaysiqOxYybG2o_t96d-JWP-0.roa (hash: eHISssRI0wVI8jcyz3iPD9ed/F8IfOhPuqU8QqlNado=) 16: nOjA58wyDiQ_zRw7avoPEh5_s40.roa (hash: V7B/P97cRl0fsQwMRzVez4oDaZWFnkjVorYQBWfrtpg=) 17: rf9KTHpYwkkNInVQ5EifsWm0nxA.roa (hash: djP7Njwn08dcs5j6JOQWdwZwxz1jVEkhEi92YG/q5uQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fd:0c:5a:ba:cb:a1:68:5f:f4:3f:4a:88:c4:97:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Mar 1 20:00:36 2026 GMT Not After : Mar 2 20:00:36 2026 GMT Subject: CN=eb024c66485358d64ea135cc832479538565f314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cc:9b:48:f0:81:b7:bc:f0:52:ce:41:72:5a: e5:2c:8e:77:05:f7:65:65:f5:c4:11:ed:a7:c0:a3: d3:45:f5:d8:0d:f7:48:2c:f9:69:4f:74:0a:d4:91: 61:1e:71:2b:20:06:fa:6e:f2:20:49:08:72:5b:41: f4:ed:1a:ae:fd:d5:f8:44:d2:eb:5f:60:50:64:c2: 35:f0:6e:ad:0f:c4:c7:8e:4f:86:68:81:66:82:60: a1:d6:9f:4f:54:3d:fc:3c:64:fd:f5:2e:b7:f7:95: 23:84:f1:3a:29:60:e5:93:34:96:78:42:e5:56:3b: a6:24:ee:95:0b:7e:f0:6e:76:f9:11:12:39:f3:dc: 1f:df:64:2e:e2:8c:4c:d2:c2:f0:ec:67:0e:60:77: 8a:2c:28:f4:b7:7c:69:16:d4:f9:a7:34:88:55:d6: 38:f8:d6:b0:83:98:77:4c:70:f8:f7:de:8d:91:11: 9a:d4:06:99:08:bb:f7:13:d5:09:75:c6:83:51:d3: 5f:67:bd:b6:d9:48:4a:f2:ed:ae:ed:1b:77:71:21: a5:2b:8a:32:41:7a:90:7b:e4:4c:a7:5d:bb:18:36: bc:d0:db:22:d6:ac:ab:38:dd:49:61:6e:60:f6:b3: ce:19:31:e1:52:8c:2c:fe:2a:11:b7:7d:31:e0:98: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:02:4C:66:48:53:58:D6:4E:A1:35:CC:83:24:79:53:85:65:F3:14 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:85:78:79:ef:bc:6d:22:f8:ec:d5:62:8a:5c:21:90:71:4d: a9:56:82:ab:c4:bc:df:ae:36:7a:e8:c3:76:77:5e:72:3d:be: 41:13:67:97:70:23:e0:30:13:26:6c:1e:27:fc:fd:5f:79:b1: ee:4c:ad:ad:6c:30:1f:92:93:40:46:95:70:df:1b:09:b0:7f: 4c:b7:9a:91:f3:cc:71:71:81:6b:21:e8:0a:9d:6f:2e:89:cd: a1:6c:36:d8:06:f7:ef:b8:78:57:55:df:ce:4e:d2:28:07:6a: 74:fb:72:21:0f:22:66:c0:a0:7e:09:cb:3f:3b:4d:d3:f6:85: 6f:c9:69:69:3a:ff:d8:57:48:98:ea:c1:4c:f0:f0:07:0b:7b: fb:6f:71:73:39:2f:65:f8:54:92:a4:9a:23:de:0f:9f:b6:7e: 5a:7a:5a:03:f9:7e:6a:88:70:59:00:b5:59:88:08:d6:b5:96: 18:83:7f:ad:e6:fc:e9:99:8a:d6:0b:6d:d2:1a:52:ae:01:aa: d1:d9:67:04:2e:37:39:2d:68:45:0a:c7:83:7d:6f:71:f4:ff: 97:00:ed:dc:65:82:fc:5b:13:8e:d6:6e:72:4f:8a:ac:a8:42: 63:86:39:e4:ab:3a:29:7f:0c:44:c1:08:02:63:54:ec:b8:52: 2f:39:c5:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/QxausuhaF/0P0qIxJfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjYwMzAxMjAwMDM2WhcNMjYwMzAyMjAwMDM2WjAzMTEwLwYDVQQD EyhlYjAyNGM2NjQ4NTM1OGQ2NGVhMTM1Y2M4MzI0Nzk1Mzg1NjVmMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cybSPCBt7zwUs5BclrlLI53Bfdl ZfXEEe2nwKPTRfXYDfdILPlpT3QK1JFhHnErIAb6bvIgSQhyW0H07Rqu/dX4RNLr X2BQZMI18G6tD8THjk+GaIFmgmCh1p9PVD38PGT99S6395UjhPE6KWDlkzSWeELl VjumJO6VC37wbnb5ERI589wf32Qu4oxM0sLw7GcOYHeKLCj0t3xpFtT5pzSIVdY4 +Nawg5h3THD4996NkRGa1AaZCLv3E9UJdcaDUdNfZ7222UhK8u2u7Rt3cSGlK4oy QXqQe+RMp127GDa80Nsi1qyrON1JYW5g9rPOGTHhUows/ioRt30x4JikHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsCTGZIU1jWTqE1zIMkeVOFZfMUMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4V4ee+8 bSL47NViilwhkHFNqVaCq8S83642eujDdndecj2+QRNnl3Aj4DATJmweJ/z9X3mx 7kytrWwwH5KTQEaVcN8bCbB/TLeakfPMcXGBayHoCp1vLonNoWw22Ab377h4V1Xf zk7SKAdqdPtyIQ8iZsCgfgnLPztN0/aFb8lpaTr/2FdImOrBTPDwBwt7+29xczkv ZfhUkqSaI94Pn7Z+WnpaA/l+aohwWQC1WYgI1rWWGIN/reb86ZmK1gtt0hpSrgGq 0dlnBC43OS1oRQrHg31vcfT/lwDt3GWC/FsTjtZuck+KrKhCY4Y55Ks6KX8MRMEI AmNU7LhSLznFrA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:40:53 2026 by rpki-client