$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: hMrds0GgpWO/qcliz7jRxSQ9s5/TXcLAonfjN3Cowf8= Subject key identifier: 36:97:D3:03:BE:FE:EE:FD:5C:95:F5:57:FC:D0:B9:2C:B3:96:2E:E6 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019CAB3414D5C8C58192B42226CDD2C9C4C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0BF4 Signing time: Sun 01 Mar 2026 21:00:42 +0000 Manifest this update: Sun 01 Mar 2026 21:00:42 +0000 Manifest next update: Mon 02 Mar 2026 21:00:42 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: QP9CNlQFuVB9wS0BW21smKX3lBU.roa (hash: dwNtwT/3EY1R/q2zrzRe6Xma12Bkc4BEFlUrU3pbm+Q=) 9: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: fGk2tQLNgr+9GMwpdqGDCEM/GmQytXnaXw4gz6oa7Ug=) 10: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: imTf8No1ZINbCYJNVjvMbyKdYDc.roa (hash: v7b/CtSyIh4Qh/63ZcyMa4HLHKrxYzw4yW2zbhrt2aQ=) 14: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 15: ye1vO91j3zEaNLIkUtTaqaqrzqo.roa (hash: CZnBVB6wY1pdHrVxfveoiFUyTPJ5AHcYnnd9cEm8rlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:14:d5:c8:c5:81:92:b4:22:26:cd:d2:c9:c4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Mar 1 21:00:42 2026 GMT Not After : Mar 2 21:00:42 2026 GMT Subject: CN=3697d303befeeefd5c95f557fcd0b92cb3962ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:5f:b8:8e:a2:1c:a7:35:ce:1e:5d:25:74: b1:6d:56:97:e3:0e:68:2b:0f:b9:08:5b:ad:ed:59: fa:48:07:47:e8:e2:cc:79:6d:2c:dd:68:5f:64:16: 8f:77:32:04:65:b6:69:52:86:b3:e4:4a:c0:64:49: 58:84:02:67:e3:f0:90:9a:ac:f6:6e:86:06:77:aa: 5a:4a:32:be:8c:bc:47:7c:e4:8c:54:d9:9a:54:f6: ce:39:90:4a:59:af:c2:f3:46:90:08:a0:4e:aa:93: bd:df:37:f8:0f:31:fc:8e:e6:4f:6a:74:56:12:ed: d4:84:86:60:ee:f4:f9:45:8e:a4:b0:a5:55:cd:60: ec:4a:c2:87:6f:bb:71:3a:d9:9f:18:63:14:a2:ba: f0:85:df:98:a5:a0:15:04:6f:a0:1b:2f:44:d3:24: 42:d4:8c:27:c3:75:97:3a:00:8a:5b:fc:68:ec:1b: 4d:46:21:56:11:29:4d:12:52:75:5b:43:a6:d4:14: 1f:e4:9e:ac:56:a6:0e:9e:9b:dd:ba:f3:cc:bf:b3: 5e:7d:5f:a9:30:c6:1e:be:05:94:f3:52:46:fd:74: 6b:36:f4:87:4c:45:a3:21:a6:1a:51:32:77:df:31: c0:2e:a3:ac:d8:8c:5e:81:d5:e6:81:71:b6:8e:cc: 0e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:97:D3:03:BE:FE:EE:FD:5C:95:F5:57:FC:D0:B9:2C:B3:96:2E:E6 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:25:d8:34:de:a3:41:71:c5:c3:20:d5:f7:30:a3:b6:c7:bf: e1:c0:7a:60:d1:e4:f9:ec:bb:50:42:d5:30:74:e0:3b:0f:db: 5c:b9:d9:80:36:5b:90:1c:86:0e:71:ca:9a:76:cc:7d:0f:f7: fc:37:20:91:6a:13:70:ef:dd:a8:44:a0:7e:2f:1a:20:b3:b3: 4d:9d:5e:dd:0f:85:01:c5:ca:78:20:0b:ca:6e:8d:75:7f:cd: e0:43:bc:6f:fc:00:32:4d:e5:40:cb:83:30:b4:5f:fe:c5:c7: d7:2b:3a:d7:dd:07:4b:bb:af:7f:29:00:83:39:16:eb:71:41: 29:8a:50:a0:e8:f9:b7:0b:00:2d:76:bd:99:33:2b:89:79:ad: 02:70:d6:92:62:73:ba:93:13:43:41:57:fe:98:29:94:0d:00: 58:c1:84:e7:a8:b4:f7:32:c4:13:40:62:6f:16:0d:7f:51:19: 7c:ca:a7:4a:e6:b0:39:08:b8:35:d3:d8:37:a7:7f:5c:2b:f8: 8c:ba:1d:b2:c8:ee:07:9f:e5:2f:b2:0a:98:e1:e2:a7:a1:9f: 44:b2:ac:9e:81:82:8a:8c:bd:df:49:cf:0f:e5:c2:22:e4:83: 9c:49:e0:9d:92:25:2b:91:91:31:0c:14:83:44:aa:e2:67:9a: 7a:81:cf:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNBTVyMWBkrQiJs3SycTJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMzAxMjEwMDQyWhcNMjYwMzAyMjEwMDQyWjAzMTEwLwYDVQQD EygzNjk3ZDMwM2JlZmVlZWZkNWM5NWY1NTdmY2QwYjkyY2IzOTYyZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/xfuI6iHKc1zh5dJXSxbVaX4w5o Kw+5CFut7Vn6SAdH6OLMeW0s3WhfZBaPdzIEZbZpUoaz5ErAZElYhAJn4/CQmqz2 boYGd6paSjK+jLxHfOSMVNmaVPbOOZBKWa/C80aQCKBOqpO93zf4DzH8juZPanRW Eu3UhIZg7vT5RY6ksKVVzWDsSsKHb7txOtmfGGMUorrwhd+YpaAVBG+gGy9E0yRC 1Iwnw3WXOgCKW/xo7BtNRiFWESlNElJ1W0Om1BQf5J6sVqYOnpvduvPMv7NefV+p MMYevgWU81JG/XRrNvSHTEWjIaYaUTJ33zHALqOs2IxegdXmgXG2jswOzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaX0wO+/u79XJX1V/zQuSyzli7mMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSXYNN6j QXHFwyDV9zCjtse/4cB6YNHk+ey7UELVMHTgOw/bXLnZgDZbkByGDnHKmnbMfQ/3 /DcgkWoTcO/dqESgfi8aILOzTZ1e3Q+FAcXKeCALym6NdX/N4EO8b/wAMk3lQMuD MLRf/sXH1ys6190HS7uvfykAgzkW63FBKYpQoOj5twsALXa9mTMriXmtAnDWkmJz upMTQ0FX/pgplA0AWMGE56i09zLEE0BibxYNf1EZfMqnSuawOQi4NdPYN6d/XCv4 jLodssjuB5/lL7IKmOHip6GfRLKsnoGCioy930nPD+XCIuSDnEngnZIlK5GRMQwU g0Sq4meaeoHPyw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:18:55 2026 by rpki-client