$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: ZhXX8VCt50ZtjklX3kNDaL5rzLCkkvg8vXJ5wAheds4= Subject key identifier: B2:14:1C:65:00:06:97:A2:90:02:13:47:30:2F:D4:EF:CD:E4:CC:D0 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019CAC7E6B373389D63A77A555B3EFB0294F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1880 Signing time: Mon 02 Mar 2026 03:01:31 +0000 Manifest this update: Mon 02 Mar 2026 03:01:31 +0000 Manifest next update: Tue 03 Mar 2026 03:01:31 +0000 Files and hashes: 1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=) 2: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=) 3: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=) 4: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (hash: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=) 5: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=) 6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: ZmV7AI1xAqOnYgk9dly6vNu8LfpV+7FYnXyeXLs97gs=) 7: CpwjRHd-dlM6HLWtJRLo65vz3sE.roa (hash: ipcBkj7y8N+DKJBxCvsI7Zk0obHeYg4amjAZYyQnzfU=) 8: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=) 9: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=) 10: TWWxT-nCkmtPHnYGn6dWdhUMzGM.roa (hash: 7Vooj87eGlBm2XvcSGagn83xkeJCxQE8AEsJBuPCxmA=) 11: eUbHTyUSavH8iggt7_qSKew38qc.roa (hash: DkFbowlItExQYC/lsxmajYQ2K4RpBXLaJENP+PgEu2I=) 12: eu0CoO4MQ8ynKFtapNpQqOzhd5U.roa (hash: CE6Pwn13O7Jm2klRaAsz6obokQcz3Q5vJ5OCjk+3oLA=) 13: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=) 14: wIQN1qjszJK_EWTG2KZPYPb7pjY.roa (hash: gRnICZ8LPFfQ15En6Kpg0jEOMzCzPNmoOaQr/MOyZDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:7e:6b:37:33:89:d6:3a:77:a5:55:b3:ef:b0:29:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Mar 2 03:01:31 2026 GMT Not After : Mar 3 03:01:31 2026 GMT Subject: CN=b2141c65000697a290021347302fd4efcde4ccd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:91:79:fb:2f:3a:bc:f0:f5:c0:d1:a7:16: 75:2e:93:e9:0a:60:8c:6f:33:d2:29:17:81:24:f7: 2d:da:77:a3:ed:55:ad:76:75:d7:f9:c2:ce:12:39: 17:bc:f1:9e:dd:21:aa:eb:2d:9c:ab:04:c2:e8:c8: 3c:69:24:1f:33:79:96:8e:6a:82:83:10:43:0a:6c: cc:7c:96:97:95:56:c4:92:57:b5:22:c7:aa:82:39: 64:1b:02:d5:18:76:28:11:27:19:e7:c5:54:1f:2b: f8:78:b8:c3:7b:6b:93:93:d2:fa:52:26:3a:25:50: b9:10:3d:f2:0a:a8:b5:df:f4:bd:ce:90:cc:cb:d1: b8:d3:a6:30:4c:0c:8a:c8:0c:4a:e9:a4:60:aa:b0: 63:5d:57:ec:43:47:f5:84:98:fe:f2:ba:51:e4:4c: 20:4c:ed:1e:76:0d:49:79:7c:5b:39:36:45:9a:14: 96:88:a1:8e:8b:2b:eb:87:5b:19:2c:22:fd:5b:84: d1:49:25:34:4d:33:8b:27:f8:32:bd:e7:df:5e:de: 13:a6:da:d7:0c:73:ac:4e:89:59:16:90:78:a1:4a: 17:4f:39:5c:27:b3:22:d1:e0:6e:34:da:84:dc:b3: 21:3e:17:ab:cc:41:a0:9f:80:5e:71:db:55:5f:8f: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:14:1C:65:00:06:97:A2:90:02:13:47:30:2F:D4:EF:CD:E4:CC:D0 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:1a:23:04:49:92:e3:29:65:44:5b:32:33:88:4f:ab:0e:26: 61:4b:5a:65:33:03:ee:e3:35:d9:8c:d7:a2:33:cc:a3:a8:6a: ea:da:c1:c7:0c:05:c9:e0:2b:48:f5:5f:47:7d:12:ad:0d:35: d4:90:ae:49:aa:23:95:f0:a0:ca:95:93:e3:36:0d:3c:08:18: 4f:77:de:55:74:2f:18:e9:82:54:54:71:45:a3:2e:f3:5c:38: a0:21:bc:25:82:13:1f:ce:8d:d6:cd:a1:42:31:8f:68:23:8c: 0d:91:23:93:5c:08:31:72:42:96:68:24:0c:ab:8d:f9:a0:0a: 55:09:74:8d:8d:1b:5c:bc:72:6c:b3:b6:11:fd:6c:bb:45:14: c3:26:81:3d:9e:b6:38:42:d4:36:d2:6d:2f:1a:bd:2a:a3:5d: c1:c5:08:90:67:0d:13:f4:70:c9:04:88:ff:5c:a8:45:b8:38: 96:73:cf:a9:e9:10:47:a6:a0:e0:e4:db:65:ea:4e:d4:8d:21: 57:ba:bb:7b:42:4d:4a:85:d8:9e:6f:f7:9c:44:9b:90:90:04: d7:48:e7:93:ff:fe:a0:76:b5:93:fb:ef:b7:5d:02:13:74:2f: da:4c:c8:d5:98:aa:56:58:05:1b:9d:d3:f1:6e:37:26:2c:31: 01:c6:6a:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysfms3M4nWOnelVbPvsClPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwMzAyMDMwMTMxWhcNMjYwMzAzMDMwMTMxWjAzMTEwLwYDVQQD EyhiMjE0MWM2NTAwMDY5N2EyOTAwMjEzNDczMDJmZDRlZmNkZTRjY2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTORefsvOrzw9cDRpxZ1LpPpCmCM bzPSKReBJPct2nej7VWtdnXX+cLOEjkXvPGe3SGq6y2cqwTC6Mg8aSQfM3mWjmqC gxBDCmzMfJaXlVbEkle1IseqgjlkGwLVGHYoEScZ58VUHyv4eLjDe2uTk9L6UiY6 JVC5ED3yCqi13/S9zpDMy9G406YwTAyKyAxK6aRgqrBjXVfsQ0f1hJj+8rpR5Ewg TO0edg1JeXxbOTZFmhSWiKGOiyvrh1sZLCL9W4TRSSU0TTOLJ/gyveffXt4TptrX DHOsTolZFpB4oUoXTzlcJ7Mi0eBuNNqE3LMhPherzEGgn4BecdtVX4/UUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIUHGUABpeikAITRzAv1O/N5MzQMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRojBEmS 4yllRFsyM4hPqw4mYUtaZTMD7uM12YzXojPMo6hq6trBxwwFyeArSPVfR30SrQ01 1JCuSaojlfCgypWT4zYNPAgYT3feVXQvGOmCVFRxRaMu81w4oCG8JYITH86N1s2h QjGPaCOMDZEjk1wIMXJClmgkDKuN+aAKVQl0jY0bXLxybLO2Ef1su0UUwyaBPZ62 OELUNtJtLxq9KqNdwcUIkGcNE/RwyQSI/1yoRbg4lnPPqekQR6ag4OTbZepO1I0h V7q7e0JNSoXYnm/3nESbkJAE10jnk//+oHa1k/vvt10CE3Qv2kzI1ZiqVlgFG53T 8W43JiwxAcZqQg== -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:09 2026 by rpki-client