$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: wrdXFC/vvDIT3Skwnyf2OIJf1r3zE7n41NFlGhWUqq4= Subject key identifier: 0F:33:E5:18:E0:A1:4F:D3:88:2C:A4:0D:AE:71:82:D1:F4:30:E6:50 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019CAD22A696CA996718F3813397E3B2E211 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0BF5 Signing time: Mon 02 Mar 2026 06:00:54 +0000 Manifest this update: Mon 02 Mar 2026 06:00:54 +0000 Manifest next update: Tue 03 Mar 2026 06:00:54 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: QP9CNlQFuVB9wS0BW21smKX3lBU.roa (hash: dwNtwT/3EY1R/q2zrzRe6Xma12Bkc4BEFlUrU3pbm+Q=) 9: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: YlwbShdNw10OymZsJG1orT30GpVIRMQeTadMu3f3xA8=) 10: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: imTf8No1ZINbCYJNVjvMbyKdYDc.roa (hash: v7b/CtSyIh4Qh/63ZcyMa4HLHKrxYzw4yW2zbhrt2aQ=) 14: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 15: ye1vO91j3zEaNLIkUtTaqaqrzqo.roa (hash: CZnBVB6wY1pdHrVxfveoiFUyTPJ5AHcYnnd9cEm8rlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:22:a6:96:ca:99:67:18:f3:81:33:97:e3:b2:e2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Mar 2 06:00:54 2026 GMT Not After : Mar 3 06:00:54 2026 GMT Subject: CN=0f33e518e0a14fd3882ca40dae7182d1f430e650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e0:d3:94:42:25:6f:ed:23:84:3a:9b:53:9c: 4a:74:54:cd:b2:d2:93:52:6e:f5:06:6a:f7:53:85: 3d:41:2d:80:5c:51:9f:a7:5d:fb:00:59:07:00:e2: 32:5b:fd:e3:a5:ea:57:cc:78:9f:45:8d:49:e8:15: 0f:01:98:53:2d:dc:ac:db:02:a5:90:fb:85:98:8a: 02:be:b4:a1:80:1f:c7:35:f0:54:e4:46:34:2b:d3: c8:30:b2:09:ee:db:4d:a2:6a:b8:92:86:d8:46:56: ea:83:6a:80:ba:0c:8e:c4:33:74:45:ad:bf:f7:10: da:c4:7e:9a:29:dc:e9:5d:fc:4a:37:9a:e0:e5:a2: ce:f9:58:24:cb:94:41:0f:8b:9c:5a:9b:1c:55:e1: d6:2f:11:6b:4a:91:7d:2c:3c:e0:0d:9c:97:1c:e3: 23:01:7c:38:03:ac:52:4f:26:5a:dd:7e:29:e1:4a: 68:6e:3a:f3:96:92:63:12:69:e2:86:67:62:01:fd: a2:fd:54:2e:15:45:8c:fe:da:64:53:27:a8:0f:5a: 10:69:d5:64:6d:d0:9f:44:48:f9:78:a8:0a:8b:76: 06:8d:b9:f5:1d:cb:ec:32:55:2c:6b:3b:e3:12:46: 7a:9b:50:10:b4:be:13:15:74:bb:9c:57:42:59:c0: e5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:33:E5:18:E0:A1:4F:D3:88:2C:A4:0D:AE:71:82:D1:F4:30:E6:50 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:39:aa:e4:02:a8:89:d7:12:0e:65:32:c9:15:3b:00:8f:e3: 71:08:c5:1c:22:7e:f4:4e:da:6a:f7:bc:e4:a1:82:1f:dd:b2: 2e:52:f2:57:ff:ce:06:90:20:2f:a5:6d:2d:fd:ef:94:08:e3: c6:d6:99:84:f1:11:99:26:19:48:28:4c:00:c6:96:74:e0:d0: cf:e9:f2:8b:00:dd:88:0f:29:c6:d5:0f:ac:02:1b:5d:1c:f5: cd:17:3d:ec:f0:1f:9a:a9:58:b0:c7:aa:a8:86:9c:ff:ff:3b: aa:b2:73:71:df:cb:f1:25:a3:31:14:93:ae:30:11:dd:28:4d: bc:d9:89:36:ad:f1:30:17:62:43:3b:81:95:3c:ba:a3:dc:25: 34:cb:8f:a4:59:d8:1a:6e:be:a4:c1:73:4f:a0:7b:53:1a:88: 21:0e:b9:14:a7:9d:15:e3:85:9e:5f:27:bd:e9:f9:b4:89:f4: 89:8a:3b:a1:22:e1:5b:41:9f:08:13:6d:43:59:69:f7:50:3f: 16:df:a4:55:89:20:ec:80:d9:72:2a:25:54:e4:8c:b9:4d:ba: 19:3a:cc:77:11:c1:7a:b9:3d:97:1f:63:3b:15:7f:fc:02:ad: 76:f5:41:c5:76:38:31:2d:ed:19:ca:db:1d:dc:7f:13:26:8c: 10:c2:b1:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytIqaWyplnGPOBM5fjsuIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMzAyMDYwMDU0WhcNMjYwMzAzMDYwMDU0WjAzMTEwLwYDVQQD EygwZjMzZTUxOGUwYTE0ZmQzODgyY2E0MGRhZTcxODJkMWY0MzBlNjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eDTlEIlb+0jhDqbU5xKdFTNstKT Um71Bmr3U4U9QS2AXFGfp137AFkHAOIyW/3jpepXzHifRY1J6BUPAZhTLdys2wKl kPuFmIoCvrShgB/HNfBU5EY0K9PIMLIJ7ttNomq4kobYRlbqg2qAugyOxDN0Ra2/ 9xDaxH6aKdzpXfxKN5rg5aLO+Vgky5RBD4ucWpscVeHWLxFrSpF9LDzgDZyXHOMj AXw4A6xSTyZa3X4p4UpobjrzlpJjEmnihmdiAf2i/VQuFUWM/tpkUyeoD1oQadVk bdCfREj5eKgKi3YGjbn1HcvsMlUsazvjEkZ6m1AQtL4TFXS7nFdCWcDlFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8z5RjgoU/TiCykDa5xgtH0MOZQMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjmq5AKo idcSDmUyyRU7AI/jcQjFHCJ+9E7aave85KGCH92yLlLyV//OBpAgL6VtLf3vlAjj xtaZhPERmSYZSChMAMaWdODQz+nyiwDdiA8pxtUPrAIbXRz1zRc97PAfmqlYsMeq qIac//87qrJzcd/L8SWjMRSTrjAR3ShNvNmJNq3xMBdiQzuBlTy6o9wlNMuPpFnY Gm6+pMFzT6B7UxqIIQ65FKedFeOFnl8nven5tIn0iYo7oSLhW0GfCBNtQ1lp91A/ Ft+kVYkg7IDZciolVOSMuU26GTrMdxHBerk9lx9jOxV//AKtdvVBxXY4MS3tGcrb Hdx/EyaMEMKx3g== -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:51 2026 by rpki-client