$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: rkpeuz5ZZYKMcfkLEinfyFjMjJZOvSA+F3O4uVXYu0s= Subject key identifier: 9B:16:F5:ED:C2:99:20:43:DD:EB:39:A7:77:B2:2E:92:F4:24:B0:28 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019CAAC65E7F37632EC7AE88F369785B031C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 1507 Signing time: Sun 01 Mar 2026 19:00:52 +0000 Manifest this update: Sun 01 Mar 2026 19:00:52 +0000 Manifest next update: Mon 02 Mar 2026 19:00:52 +0000 Files and hashes: 1: 1-0M2Obo2Q8e967SGkmQDEfXZayM.roa (hash: fDXFZQjR8P2lB0fAkk+7Ytji6EhqtxGESPHwfw5J/OQ=) 2: 2wVSH7DbbBFamwMCif6XQUtTxIk.roa (hash: nRU5pIxzuuO27+LNhKgzJMI29vhQdEwZEamj8NL3TdU=) 3: 6iXU8EKk2ZvUEM-SfuUbb38nhQg.roa (hash: 5E//lm7xuj1KLaKmwKuy2vDVf/O+b6mxnpSRAQt5Fb0=) 4: 9KmD2QWCWBlnwQGlpEbIoP4V2l8.roa (hash: tmNVZ8FS/BqbujEOEGH/IyBGDDmBs9A8TZDITWSm8kc=) 5: Cc0WT5EG6n9oDAQd6h8lVsf8JaQ.roa (hash: Eb0kwzwy039z3kdPuDAhVSjmubzFKvvOj2jQKrMMEP8=) 6: TELMN1j3BWZ-Y7ZZjfQBqUpiQng.roa (hash: md2tirz0mP2OIU0FtRsAw71+7MT16uq7hTVoqxoBwJg=) 7: XtYBo7scN26cbmzcEVBSKA0js4k.roa (hash: V1uChYYVpkx2xi1qTYcQbi6Z/gGYxugEuQ9a8AaoEE4=) 8: ZiR6ZrA3XKmOMdSYn1nbkvoJfuc.roa (hash: H0dHPUEpABR63APcnlQrAzJqRe+rMqjbSQQKwlGf7xo=) 9: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: urXPbV9/NC16cUa7XPD70st2xcbfwIA3CrB3ZVheRNk=) 10: fsq1k5mE0wnzWb3NlSl4P3vADZk.roa (hash: mzeet7yvuxQ64fQ1GK4uugcHG+/Cbu3s5Ax6alp+kHE=) 11: nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa (hash: NjUVAsdLKWryk+3mwcD6964vU7goGX2Nf5HmoKEaetY=) 12: pEwiJAxkdxYz4y1_Eiyjt4HD-LQ.roa (hash: zNntPypAc/BTNmseu/NbwtVTxUXTvODLDW5Dni3vOfo=) 13: q2PFrb86M-sx3oGt2HPK3a2tuMo.roa (hash: dRMMjShGGPzyUsWgtJ/udfTIxmOFqTOi+aPEPCOEsA8=) 14: sflx_C0NTLGDBGXbovVvVoJubd0.roa (hash: 6zPtQTreVgkFM6C6TvdscESKrFS1e5qwp4OWXjvVi+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:c6:5e:7f:37:63:2e:c7:ae:88:f3:69:78:5b:03:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Mar 1 19:00:52 2026 GMT Not After : Mar 2 19:00:52 2026 GMT Subject: CN=9b16f5edc2992043ddeb39a777b22e92f424b028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1a:b8:d4:ff:7a:b3:e5:85:98:95:ac:1f:f0: 05:cc:4d:31:0c:07:89:70:71:e9:98:d2:47:f2:ef: 36:0b:af:83:a7:45:ee:7b:89:9b:c1:88:f0:33:ee: 50:5a:ba:ca:25:f2:58:1d:5c:57:10:d0:b7:d1:be: 4f:ea:47:73:89:30:f2:17:fa:19:3e:0a:96:d2:bd: 31:b4:0f:97:46:8b:17:94:1b:a0:43:9e:ac:73:a3: 58:55:52:5c:82:4e:45:0a:fd:b0:31:6e:18:07:f1: c4:f9:94:d3:b9:73:03:d4:29:74:7a:fa:29:89:a8: 45:ca:50:60:25:e5:61:e2:fe:fe:f5:1c:4d:73:79: 79:90:5a:d2:88:10:53:7a:33:99:50:95:14:6f:09: 63:88:98:d1:09:9f:87:00:04:77:0a:ca:75:08:d0: 84:13:6b:6c:03:08:0d:cf:76:30:15:a0:8f:4e:ae: be:d1:11:dd:1a:63:36:95:94:9e:73:59:03:05:7f: 3b:39:34:d3:7b:09:f7:90:7a:74:f2:2b:e8:60:1e: a8:66:e9:5a:c2:c2:09:d9:d0:de:6d:aa:82:f5:1d: 91:ef:9c:3c:25:30:8f:3b:ac:eb:66:6a:5e:1f:24: eb:31:de:a0:be:1a:3e:22:06:dc:fe:43:f2:e9:49: e5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:16:F5:ED:C2:99:20:43:DD:EB:39:A7:77:B2:2E:92:F4:24:B0:28 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5b:c0:99:8e:80:b8:ed:f4:0f:e2:3e:db:ac:70:d6:55:b9: d8:70:d1:c4:cc:8d:e9:c7:eb:a9:0a:0e:ba:6c:6f:ec:7a:c8: 4f:68:c6:ff:9f:db:de:05:fc:f6:4b:6a:01:93:60:7c:ec:f3: 52:7c:43:f9:5e:95:c3:29:61:9a:18:2f:7b:bc:03:ba:4c:d9: d6:db:e4:f2:40:a4:a9:73:ca:fe:d2:30:3b:49:96:fc:e8:7f: 8b:ec:80:70:18:c0:1c:9f:4a:b8:b2:bf:a7:2e:fa:06:45:64: f1:c2:9b:c1:75:2c:51:b1:40:c7:88:b0:19:65:5a:eb:37:36: 1b:eb:8a:41:02:67:1b:87:82:22:e6:2d:ce:a9:22:0e:9f:8f: c3:10:4d:0a:c2:fc:3d:89:a3:2d:6d:64:c9:1c:3e:7f:93:0d: 82:e8:3e:4a:ba:4c:6e:b0:9f:ee:be:6a:0f:df:2e:9a:02:88: 27:4f:50:59:2a:b0:eb:d5:36:3a:93:ab:31:83:ec:33:95:e7: 6b:5b:9c:af:44:86:55:41:ff:64:f9:65:ea:77:19:24:3e:c4: 4e:ae:c3:a9:fa:1b:3c:18:7e:d7:33:79:07:f4:d4:0b:54:4a: dc:43:1a:90:28:56:7f:39:f9:6b:c0:a0:80:d4:07:5f:60:a1: 29:e0:c7:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqxl5/N2Mux66I82l4WwMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwMzAxMTkwMDUyWhcNMjYwMzAyMTkwMDUyWjAzMTEwLwYDVQQD Eyg5YjE2ZjVlZGMyOTkyMDQzZGRlYjM5YTc3N2IyMmU5MmY0MjRiMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBq41P96s+WFmJWsH/AFzE0xDAeJ cHHpmNJH8u82C6+Dp0Xue4mbwYjwM+5QWrrKJfJYHVxXENC30b5P6kdziTDyF/oZ PgqW0r0xtA+XRosXlBugQ56sc6NYVVJcgk5FCv2wMW4YB/HE+ZTTuXMD1Cl0evop iahFylBgJeVh4v7+9RxNc3l5kFrSiBBTejOZUJUUbwljiJjRCZ+HAAR3Csp1CNCE E2tsAwgNz3YwFaCPTq6+0RHdGmM2lZSec1kDBX87OTTTewn3kHp08ivoYB6oZula wsIJ2dDebaqC9R2R75w8JTCPO6zrZmpeHyTrMd6gvho+Igbc/kPy6UnlKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsW9e3CmSBD3es5p3eyLpL0JLAoMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlvAmY6A uO30D+I+26xw1lW52HDRxMyN6cfrqQoOumxv7HrIT2jG/5/b3gX89ktqAZNgfOzz UnxD+V6Vwylhmhgve7wDukzZ1tvk8kCkqXPK/tIwO0mW/Oh/i+yAcBjAHJ9KuLK/ py76BkVk8cKbwXUsUbFAx4iwGWVa6zc2G+uKQQJnG4eCIuYtzqkiDp+PwxBNCsL8 PYmjLW1kyRw+f5MNgug+SrpMbrCf7r5qD98umgKIJ09QWSqw69U2OpOrMYPsM5Xn a1ucr0SGVUH/ZPll6ncZJD7ETq7DqfobPBh+1zN5B/TUC1RK3EMakChWfzn5a8Cg gNQHX2ChKeDHsg== -----END CERTIFICATE-----Generated at Mon Mar 2 06:18:57 2026 by rpki-client