$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: wpbkuCOz55lMcfAegScM6mhBp3x087lG5FE1EDL0+iI= Subject key identifier: C4:4C:AE:52:DB:AF:18:A1:95:8D:69:36:E8:26:5E:53:22:0C:A9:2E Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019CAAFD394FA950AB5C942B4B08A5CE0C2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0D47 Signing time: Sun 01 Mar 2026 20:00:47 +0000 Manifest this update: Sun 01 Mar 2026 20:00:47 +0000 Manifest next update: Mon 02 Mar 2026 20:00:47 +0000 Files and hashes: 1: 0C3-RBDeBEJHq-GMCpkbepyqeas.roa (hash: R8WsGdih9UgzIgy88xBMPJbYD5HZmR7kpCNGX1pKVbQ=) 2: 1BUsNPvxh-nEaW12HiIotyTOmeE.roa (hash: Eb+LrSVeh6nCpX6RDLUkP/OBvISRkTfhNDgbqOiV4vY=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: +Ix2I2Nlmu1P0+lWEMi4JvHcXD8bXNTgJXQxd7gQmBE=) 4: ARSSC9zHIGL8uPCTzOB-i0uK97g.roa (hash: xCWcyeUZ+Gey9KypecDF2UwLJVOuDsCEWO1xuzT51Jc=) 5: DNw48YVZHSvMBEUuvya7j6ydIIE.roa (hash: GQAHxbg19rDLpPVxP7BsuOIaocVhRmeV7czR8XW3KEM=) 6: Hc1-eWA2FbYrQtAUjfotRVnvebo.roa (hash: +wyBxaU8SXxYP9llfsxrS9RJyhJbGb3UqzpK5s4+GG4=) 7: SkR9OA9_dcUyBRQNQpyR0J3fL7U.roa (hash: ZkaVuswuFGESnBKz9fl3MI+QLEQQbxe2PSzXDPH+HoU=) 8: Yi680tyzJGfIAumOzsiKpDqyZ-g.roa (hash: k3JeaICryRPO3kOoypJyQPVZrn3TdIMe/T4lvOZb9yo=) 9: fJW7EYfD-50gKtZxv7Uhc3IrH24.roa (hash: w436OnY6qjYWmprn/yHiq2hzXNy8k69Hv/EWXbmw8n0=) 10: kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa (hash: CrMe+KpHmjRar77RkffCDnmY1XQPJsNcEG8vS6cPsZI=) 11: mFW4zADWbotzoU0wzEidrSWH-UQ.roa (hash: v8M/uk7P0Ux+9wY32sSP1YJp6v/XbIvApRLKBpQlUaU=) 12: o0J93e2ynPAO_ooBBrsbWpkJmVk.roa (hash: 9+ceM91NO20zNjq2ssN5ZXrUJuK961JXQqmxnpqcpFM=) 13: qIXOSdQAmM-9W59tIvFrjCOacag.roa (hash: t9/LH8Ao84MhMXwBIeg/CGYXSM84XUqQW9CXizDPd2g=) 14: scmHvFPvVyV9IKgskiPXIFZZliA.roa (hash: x+i//mSRz34wAqe4SEf89qg0Z8YDvymsxjLahBkl1LM=) 15: tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa (hash: Ptc+FGC+cpAZyzLKTVYPy89IR+7KjxXcG3j40Vai/9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fd:39:4f:a9:50:ab:5c:94:2b:4b:08:a5:ce:0c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Mar 1 20:00:47 2026 GMT Not After : Mar 2 20:00:47 2026 GMT Subject: CN=c44cae52dbaf18a1958d6936e8265e53220ca92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:05:62:3b:81:20:d9:8a:a5:e6:34:c3:ce: 65:65:b3:34:c7:49:07:2d:58:3e:e6:b0:aa:e4:fc: 98:6c:d0:1e:52:d3:30:5f:4a:b9:77:03:31:35:63: 3d:39:c1:ad:24:12:0f:c3:83:dc:ef:38:3a:c2:16: 30:97:14:42:00:75:df:f3:8a:3f:dc:b7:cd:d2:54: 26:93:54:85:8f:d0:f6:ee:70:5f:c7:ea:98:71:e7: e8:a9:48:32:26:dc:1b:41:12:9a:c1:c2:37:77:56: 27:80:45:17:aa:a0:1b:df:22:f2:0f:52:21:a2:25: e5:3a:14:78:75:cb:44:d8:14:c4:ec:6c:a9:02:74: 93:5b:57:be:a8:75:2e:4c:76:99:4a:6b:9b:a4:9c: c8:df:a6:26:16:6e:73:ce:c5:48:b0:cc:13:cf:fa: b2:c9:dd:87:38:1e:82:2e:a3:34:1f:63:ab:54:fc: f2:66:e7:b7:ce:5e:f4:5e:f4:b8:bc:6d:c8:c3:1a: ed:e5:2b:79:3d:ae:57:5b:9d:9c:62:9e:b3:22:93: 86:c5:de:9c:40:f5:16:e2:73:b2:49:3a:bd:a2:1b: fd:2a:9e:8f:53:d4:d5:97:d1:3d:13:08:02:c9:d8: ac:d1:3c:d4:1a:9f:37:90:f8:45:cd:8e:73:e6:a0: 61:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4C:AE:52:DB:AF:18:A1:95:8D:69:36:E8:26:5E:53:22:0C:A9:2E X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:87:93:09:5f:ae:08:09:60:7e:68:30:ee:a5:d6:5f:ea:44: 01:e4:6f:67:b8:55:c0:56:10:14:27:be:02:2b:6c:3d:b9:e0: 20:80:c5:af:d8:e4:98:8b:c5:6f:7c:ea:80:6e:18:29:07:f6: ca:a0:86:40:63:f7:d3:3c:61:fa:c5:2f:99:1a:d4:a9:2c:89: 7a:3a:38:dc:4c:29:20:fe:65:f5:75:d8:62:09:d1:b8:dd:f0: 04:e1:f3:ca:6f:86:43:74:d5:e1:06:d6:3e:09:d4:a2:d1:d6: fb:45:be:ec:a7:4d:25:83:27:9c:65:31:a6:76:8a:51:87:ab: dd:b1:ad:0b:cb:87:c8:76:f4:01:d4:aa:3a:ef:c3:60:ca:a4: ab:31:f2:54:e3:f1:7a:36:22:1a:79:fb:da:66:04:2e:61:90: bc:3b:32:de:34:ec:e5:a7:0e:dc:b1:a0:3f:cf:05:24:9a:c3: df:50:80:ea:91:b2:a8:7f:06:ec:ec:36:bd:ca:29:a1:6a:56: 85:8b:50:e2:51:0f:d0:0f:9d:ef:89:94:39:5c:48:3d:b7:c0: 61:0e:a6:de:68:38:ef:76:e5:f5:e4:38:f7:f6:4c:cc:7d:5d: ff:ff:99:42:ba:a6:c3:76:ee:e7:a6:7c:22:e4:df:f1:05:36: bb:a0:c1:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/TlPqVCrXJQrSwilzgwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMzAxMjAwMDQ3WhcNMjYwMzAyMjAwMDQ3WjAzMTEwLwYDVQQD EyhjNDRjYWU1MmRiYWYxOGExOTU4ZDY5MzZlODI2NWU1MzIyMGNhOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtQFYjuBINmKpeY0w85lZbM0x0kH LVg+5rCq5PyYbNAeUtMwX0q5dwMxNWM9OcGtJBIPw4Pc7zg6whYwlxRCAHXf84o/ 3LfN0lQmk1SFj9D27nBfx+qYcefoqUgyJtwbQRKawcI3d1YngEUXqqAb3yLyD1Ih oiXlOhR4dctE2BTE7GypAnSTW1e+qHUuTHaZSmubpJzI36YmFm5zzsVIsMwTz/qy yd2HOB6CLqM0H2OrVPzyZue3zl70XvS4vG3Iwxrt5St5Pa5XW52cYp6zIpOGxd6c QPUW4nOySTq9ohv9Kp6PU9TVl9E9EwgCydis0TzUGp83kPhFzY5z5qBhSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRMrlLbrxihlY1pNugmXlMiDKkuMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYeTCV+u CAlgfmgw7qXWX+pEAeRvZ7hVwFYQFCe+AitsPbngIIDFr9jkmIvFb3zqgG4YKQf2 yqCGQGP30zxh+sUvmRrUqSyJejo43EwpIP5l9XXYYgnRuN3wBOHzym+GQ3TV4QbW PgnUotHW+0W+7KdNJYMnnGUxpnaKUYer3bGtC8uHyHb0AdSqOu/DYMqkqzHyVOPx ejYiGnn72mYELmGQvDsy3jTs5acO3LGgP88FJJrD31CA6pGyqH8G7Ow2vcopoWpW hYtQ4lEP0A+d74mUOVxIPbfAYQ6m3mg473bl9eQ49/ZMzH1d//+ZQrqmw3bu56Z8 IuTf8QU2u6DB8Q== -----END CERTIFICATE-----Generated at Mon Mar 2 05:38:41 2026 by rpki-client