$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: S9Zo5/SYTy952SpG5bcxUSuqQtLqJeM5eRC1vNK3NJo= Subject key identifier: AC:38:08:D5:5C:63:E5:09:37:5C:EB:AF:27:43:D5:6F:95:51:EA:F0 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019CAE6C2D50ED1D9C3DA347C0F92BF26CF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1881 Signing time: Mon 02 Mar 2026 12:00:50 +0000 Manifest this update: Mon 02 Mar 2026 12:00:50 +0000 Manifest next update: Tue 03 Mar 2026 12:00:50 +0000 Files and hashes: 1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=) 2: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=) 3: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=) 4: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (hash: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=) 5: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=) 6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: Su/h3aEbdx5Uy4I9j92u+hUfc96hxV1eCQZnSUr7YAk=) 7: CpwjRHd-dlM6HLWtJRLo65vz3sE.roa (hash: ipcBkj7y8N+DKJBxCvsI7Zk0obHeYg4amjAZYyQnzfU=) 8: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=) 9: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=) 10: TWWxT-nCkmtPHnYGn6dWdhUMzGM.roa (hash: 7Vooj87eGlBm2XvcSGagn83xkeJCxQE8AEsJBuPCxmA=) 11: eUbHTyUSavH8iggt7_qSKew38qc.roa (hash: DkFbowlItExQYC/lsxmajYQ2K4RpBXLaJENP+PgEu2I=) 12: eu0CoO4MQ8ynKFtapNpQqOzhd5U.roa (hash: CE6Pwn13O7Jm2klRaAsz6obokQcz3Q5vJ5OCjk+3oLA=) 13: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=) 14: wIQN1qjszJK_EWTG2KZPYPb7pjY.roa (hash: gRnICZ8LPFfQ15En6Kpg0jEOMzCzPNmoOaQr/MOyZDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ae:6c:2d:50:ed:1d:9c:3d:a3:47:c0:f9:2b:f2:6c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Mar 2 12:00:50 2026 GMT Not After : Mar 3 12:00:50 2026 GMT Subject: CN=ac3808d55c63e509375cebaf2743d56f9551eaf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:11:8f:5d:09:18:6b:32:10:fc:8f:e7:69:a6: 2c:de:7b:b0:ab:2f:d3:7d:3f:4e:e1:d1:74:97:b0: 59:fd:e4:75:8a:ab:15:b9:bd:fa:b5:88:8d:33:a2: 90:67:63:9e:e1:d6:b8:41:c9:e2:7e:6a:78:1a:87: 85:5a:35:0a:da:b1:e0:6a:72:03:b5:38:d8:a8:fa: 70:34:c5:18:d8:b7:d2:78:11:53:ae:20:53:eb:8d: 84:7b:7f:3c:a8:0b:c9:e0:46:93:ea:af:bc:88:30: d1:3a:3a:55:5d:4b:73:5e:76:33:0a:69:c5:7e:45: 95:16:75:e8:ef:63:68:46:3b:fd:49:5e:9d:52:17: b1:48:a1:37:09:6f:58:e6:da:e4:01:01:ff:33:e7: b1:13:4f:d3:05:c4:48:20:11:e4:91:12:04:b9:e1: 05:0f:23:3f:9c:09:91:09:43:df:35:bf:e0:d8:7b: bb:a1:85:b5:2a:78:e6:ad:9e:73:3b:07:14:45:45: 56:b0:68:6d:78:b1:2a:54:fb:36:c4:a4:ed:ce:3b: 29:5e:ea:3f:e5:5b:da:89:a3:62:89:ee:a6:e4:d3: c5:f8:57:a5:d3:a1:e6:cb:d0:52:96:61:63:f2:6b: 3a:6b:47:98:03:a8:d1:1f:de:86:9a:d9:3d:93:f3: 1f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:38:08:D5:5C:63:E5:09:37:5C:EB:AF:27:43:D5:6F:95:51:EA:F0 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3d:a6:95:4b:09:ad:88:cd:d2:7a:7a:de:bd:7a:57:de:c3: e0:31:6d:37:63:5c:ed:0b:6e:c0:ef:a1:f4:a4:6a:49:d6:04: b6:69:a2:5e:5e:5b:23:31:f8:54:a0:c2:8a:10:b6:cc:c3:4f: 7a:62:a6:36:64:c0:9b:68:e3:cd:3d:b0:4f:d6:42:89:16:71: 76:14:fa:b8:35:d8:5c:bc:0f:f4:46:54:11:9f:15:59:59:26: e8:c4:e3:b5:19:1a:69:a7:c6:c1:30:4e:88:44:1b:df:d4:39: 36:8b:6b:62:59:e4:6d:18:89:d1:5c:d2:a3:00:71:b1:64:93: e2:90:5d:ef:0f:9c:dc:bd:5e:b5:a5:25:7c:b0:2f:26:6a:e5: 8e:29:e8:38:5b:67:68:c4:7d:f2:f3:f3:c8:89:de:02:89:05: 8b:52:0b:11:1f:08:b7:f9:d7:af:7f:ce:13:12:d0:fb:3c:b8: 44:20:83:0d:d9:fa:7a:eb:e3:39:d9:c6:06:d0:b1:2b:3a:5c: bb:f0:59:e6:a3:df:02:86:c5:79:79:03:d0:fa:2b:d4:4f:07: c6:f2:00:28:73:fc:21:15:c1:ad:d0:2a:10:ca:5c:ee:2d:6c: 1e:7b:85:5a:39:fd:74:c7:87:9a:fc:5f:63:55:f0:cc:2d:e6: 19:28:51:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyubC1Q7R2cPaNHwPkr8mz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwMzAyMTIwMDUwWhcNMjYwMzAzMTIwMDUwWjAzMTEwLwYDVQQD EyhhYzM4MDhkNTVjNjNlNTA5Mzc1Y2ViYWYyNzQzZDU2Zjk1NTFlYWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RGPXQkYazIQ/I/naaYs3nuwqy/T fT9O4dF0l7BZ/eR1iqsVub36tYiNM6KQZ2Oe4da4Qcnifmp4GoeFWjUK2rHganID tTjYqPpwNMUY2LfSeBFTriBT642Ee388qAvJ4EaT6q+8iDDROjpVXUtzXnYzCmnF fkWVFnXo72NoRjv9SV6dUhexSKE3CW9Y5trkAQH/M+exE0/TBcRIIBHkkRIEueEF DyM/nAmRCUPfNb/g2Hu7oYW1KnjmrZ5zOwcURUVWsGhteLEqVPs2xKTtzjspXuo/ 5VvaiaNiie6m5NPF+Fel06Hmy9BSlmFj8ms6a0eYA6jRH96Gmtk9k/MfiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKw4CNVcY+UJN1zrrydD1W+VUerwMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATD2mlUsJ rYjN0np63r16V97D4DFtN2Nc7QtuwO+h9KRqSdYEtmmiXl5bIzH4VKDCihC2zMNP emKmNmTAm2jjzT2wT9ZCiRZxdhT6uDXYXLwP9EZUEZ8VWVkm6MTjtRkaaafGwTBO iEQb39Q5NotrYlnkbRiJ0VzSowBxsWST4pBd7w+c3L1etaUlfLAvJmrljinoOFtn aMR98vPzyIneAokFi1ILER8It/nXr3/OExLQ+zy4RCCDDdn6euvjOdnGBtCxKzpc u/BZ5qPfAobFeXkD0Por1E8HxvIAKHP8IRXBrdAqEMpc7i1sHnuFWjn9dMeHmvxf Y1XwzC3mGShRgg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:28:27 2026 by rpki-client