$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: ak64qYN4wbAudpgB8IiylQMkcGhGfngOc9Vu2yLb/AY= Subject key identifier: 52:97:8E:21:7A:0B:F2:F6:3C:91:00:5D:62:36:EF:E6:99:F1:BA:A4 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019CAAC7125CDE15720468B7112D59AAD299 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 1891 Signing time: Sun 01 Mar 2026 19:01:38 +0000 Manifest this update: Sun 01 Mar 2026 19:01:38 +0000 Manifest next update: Mon 02 Mar 2026 19:01:38 +0000 Files and hashes: 1: 0xQr7SsuNbVkdglbPEuYeR908M4.roa (hash: OwNc5ie37GMpKkc5b6+YlsSSG7y7AT9vwxdWFk6XL+M=) 2: C2WOVwVQYwVr2nuLF8nZxh0HNso.roa (hash: dY3J82jDEAIC/rY1dL+3vS1oH5Nh7406smEXm0DFhew=) 3: IOHxcXYoTkPZ8SNGG2e5ArcFyZs.roa (hash: okIc8Ez3ehyNvt0MyrhxyHEumFu+GWw2/XRgSeYqOe4=) 4: PHo-_-c9dv_lcxCKA3owAiPB9_8.roa (hash: y6kd5vbSF0PMFFGGRnVqyERClzVeKGyZBN4ku3rQmPo=) 5: PpTOr4rXJzyV-q6NiqHNVjbAYZU.roa (hash: jQEomOlSvY4s8mgJ4+q3cKFP031XgY4ZDEypZ2ab0XY=) 6: QaIOKbnLhv0FBwr6_gZMcRUUWWg.roa (hash: BMFsOeiNuY49ojsyecDmxR9mnhel+ZMb42FzYYuLqW4=) 7: RdrkAht6yrbBbejxzIbrV5zVYpY.roa (hash: wQGlcUelcwGBq/KPznOjfBf3x9PZjoXBbyQ8KYPVMIk=) 8: WhADIH61bkJ2leuk_zArifd_fK0.roa (hash: BbhmWA4WKgNmNImPrf4BgLaJQFe/cOoj0PIkA8fbtMo=) 9: Ygn_c8zbC36xqFlDHNWeV-WM8pU.roa (hash: CXih/mSxLCAOHxPVZ72EgZHKzViKS2T68SjIziUjdEM=) 10: k71425zZrgvZnNmix7lRrfFGz8M.roa (hash: PiD2EpNiloJo/j8uv2nAjNLT1tlEQH/8b4eKQtnzMqI=) 11: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: F1EAmyJUETgLrW1KL3SN8fXHMei2e/uicoOPwj1IE5k=) 12: wj2ZjtXdslQyfWsEeK7AnuOn7Eo.roa (hash: 3hm1vbiygm//Ol0678bMckEoB1V0vwd58eFRGEubz9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 19:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:c7:12:5c:de:15:72:04:68:b7:11:2d:59:aa:d2:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Mar 1 19:01:38 2026 GMT Not After : Mar 2 19:01:38 2026 GMT Subject: CN=52978e217a0bf2f63c91005d6236efe699f1baa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9a:2b:9d:6e:74:7c:c7:99:97:08:9a:70:bd: 46:1c:c0:33:8d:35:70:b7:88:07:47:ea:98:78:79: 78:73:76:c5:bc:fd:0c:14:99:5b:3c:3b:7a:ed:64: 00:a0:be:92:89:78:71:cb:72:5a:64:44:36:70:a1: 41:40:22:49:54:09:02:28:67:2e:12:62:7b:a2:32: 47:e6:ad:1a:f3:ef:02:cc:4d:d4:6e:d5:e3:47:34: e9:64:0e:61:8d:3f:6b:9b:d9:81:c1:ba:c9:6b:ae: 2b:f1:75:3c:55:37:5e:3d:0d:13:bc:f4:44:fc:ad: 13:07:2c:b5:17:f0:e1:a9:10:a4:3d:84:0d:49:07: 0e:72:ef:74:5f:02:09:02:38:c4:61:a7:84:f9:9b: a9:94:47:62:8c:3a:06:85:a2:1e:b6:6e:31:6c:c6: bd:09:3f:e3:80:88:ae:b2:a2:6a:f3:59:6a:06:7b: 23:b5:7f:a9:e9:97:eb:e3:5e:18:f3:a0:e4:0a:00: 81:bf:11:d5:c0:2b:6a:89:fe:38:1f:1a:69:35:6b: 3d:21:d7:7b:c6:d7:55:96:71:eb:7d:c9:38:cb:26: 05:c3:f5:c0:cd:2c:65:2a:d9:17:a2:7a:ab:da:a3: 47:aa:b4:d6:ea:11:db:62:38:87:ec:af:7e:c6:63: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:97:8E:21:7A:0B:F2:F6:3C:91:00:5D:62:36:EF:E6:99:F1:BA:A4 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:98:c2:a3:06:a3:16:cd:45:59:28:24:aa:8c:c7:29:17:37: 62:6b:4d:db:9d:3f:fd:ff:e8:53:cf:ab:3e:62:06:cd:ad:e3: 7c:69:58:9c:7a:a7:2f:be:b9:b1:be:2d:64:e7:a0:59:67:a9: 55:2d:6e:4b:70:59:0b:b3:cb:6c:09:14:88:a1:8d:69:d9:b3: b9:06:ac:9f:ad:82:ce:61:44:8b:44:e0:39:03:9c:20:42:39: f6:4d:80:2c:3a:48:24:9f:18:02:24:2c:63:be:6d:e9:9a:3d: c4:9e:a7:08:de:5f:15:0e:06:21:47:dc:7e:39:b9:61:2d:29: bf:de:f3:8f:c5:9c:c2:1f:9b:0b:ae:15:ec:27:e3:a8:2f:ec: b7:eb:5f:1d:8b:63:96:e1:21:c7:97:25:a4:a3:0d:da:a2:e1: a5:03:b3:5b:02:b5:30:fe:29:05:78:62:cb:1b:72:ce:ab:5d: 56:de:89:46:4f:5c:13:26:e5:76:8d:99:ab:85:5f:18:7a:a1: 60:6e:77:76:1e:47:2d:27:ee:cb:5b:05:16:56:74:de:d4:82: ff:8f:ad:0f:d0:3a:9a:4d:46:c7:6a:d9:af:f6:c8:7a:55:24: 42:1f:8e:58:f1:e8:ff:23:b2:92:4f:4e:d6:ce:5d:17:6f:d9: e8:b5:d7:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqxxJc3hVyBGi3ES1ZqtKZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjYwMzAxMTkwMTM4WhcNMjYwMzAyMTkwMTM4WjAzMTEwLwYDVQQD Eyg1Mjk3OGUyMTdhMGJmMmY2M2M5MTAwNWQ2MjM2ZWZlNjk5ZjFiYWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJornW50fMeZlwiacL1GHMAzjTVw t4gHR+qYeHl4c3bFvP0MFJlbPDt67WQAoL6SiXhxy3JaZEQ2cKFBQCJJVAkCKGcu EmJ7ojJH5q0a8+8CzE3UbtXjRzTpZA5hjT9rm9mBwbrJa64r8XU8VTdePQ0TvPRE /K0TByy1F/DhqRCkPYQNSQcOcu90XwIJAjjEYaeE+ZuplEdijDoGhaIetm4xbMa9 CT/jgIiusqJq81lqBnsjtX+p6Zfr414Y86DkCgCBvxHVwCtqif44HxppNWs9Idd7 xtdVlnHrfck4yyYFw/XAzSxlKtkXonqr2qNHqrTW6hHbYjiH7K9+xmPa+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKXjiF6C/L2PJEAXWI27+aZ8bqkMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZjCowaj Fs1FWSgkqozHKRc3YmtN250//f/oU8+rPmIGza3jfGlYnHqnL765sb4tZOegWWep VS1uS3BZC7PLbAkUiKGNadmzuQasn62CzmFEi0TgOQOcIEI59k2ALDpIJJ8YAiQs Y75t6Zo9xJ6nCN5fFQ4GIUfcfjm5YS0pv97zj8Wcwh+bC64V7CfjqC/st+tfHYtj luEhx5clpKMN2qLhpQOzWwK1MP4pBXhiyxtyzqtdVt6JRk9cEybldo2Zq4VfGHqh YG53dh5HLSfuy1sFFlZ03tSC/4+tD9A6mk1Gx2rZr/bIelUkQh+OWPHo/yOykk9O 1s5dF2/Z6LXXsw== -----END CERTIFICATE-----Generated at Mon Mar 2 06:39:23 2026 by rpki-client