$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: KCAW1B40ukxdfZflasDbqioI35khHOLxHamSJnmfGjk= Subject key identifier: C1:6B:D0:5D:E7:88:59:5F:84:FC:BD:CF:E6:58:72:1D:37:0A:A9:C1 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019CAC100C22E944C98CC602DFE705CD2F9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 143C Signing time: Mon 02 Mar 2026 01:00:58 +0000 Manifest this update: Mon 02 Mar 2026 01:00:58 +0000 Manifest next update: Tue 03 Mar 2026 01:00:58 +0000 Files and hashes: 1: 1_FG2YBqdRhKKIdbfUoaXRIcZtY.roa (hash: DZwW0dAX0l87sLjk9z+qjZR2gAmIuChfWqvnjdJSHpE=) 2: ExLhkVGO_IcP9FKIq81f0oI-oCg.roa (hash: 5HCccmMIa3ZS3Rm7UZ7dWL9/99iZ3k4KgXviDu7U84Y=) 3: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (hash: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg=) 4: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (hash: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08=) 5: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (hash: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI=) 6: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: HGgTTiXNn2Ywzyl5Xt9lWb09Arg1itg1H/5CCz07FGg=) 7: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (hash: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU=) 8: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (hash: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU=) 9: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (hash: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4=) 10: k5tcy3X-bfkTgY-KuojhW38Hb84.roa (hash: /njehwBJ3hy+S6rVtCdBk1btpc3S6jZQpXCGPHURc0Y=) 11: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (hash: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M=) 12: omuRSlN3uxDC5Q-fxRiwTPk66HM.roa (hash: GxwNrXChKZTEhS9UT+A6aKihcuWe4QoSUJOCbKFbnmw=) 13: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (hash: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI=) 14: woLmD7M3XCh8hzd96HJkdchNmr0.roa (hash: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA=) 15: zEU1dCR-4rlXlEW4u-atk395zhk.roa (hash: Kfvh6mjf8zMx7Jx8eSoWtHWYqopwifCIKWlHo0qGGIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:10:0c:22:e9:44:c9:8c:c6:02:df:e7:05:cd:2f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Mar 2 01:00:58 2026 GMT Not After : Mar 3 01:00:58 2026 GMT Subject: CN=c16bd05de788595f84fcbdcfe658721d370aa9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bb:7c:9d:dc:d0:46:16:fe:5c:31:c6:9f:93: 77:e9:a3:18:07:39:5f:93:3a:b5:e7:49:fa:ba:bb: 40:01:1a:48:d8:3f:e8:e8:19:d2:2b:de:cd:22:a4: 60:49:d2:01:1d:f4:56:cf:aa:d2:87:79:7d:d2:9a: bf:0e:5d:e8:63:d5:33:12:51:fe:71:69:90:61:63: 35:c2:59:ce:9e:b5:c5:22:12:18:90:af:b7:79:da: 5d:89:e6:d4:20:6b:3c:1d:65:28:9d:76:93:23:9b: 59:b2:92:26:b1:fe:7f:c2:ce:e7:1f:1a:54:e4:d0: 15:16:e6:83:ed:84:9e:f0:bf:b2:75:8c:f7:da:87: a9:09:e2:2e:02:51:0b:c1:64:76:d1:6e:84:be:ad: 02:3c:d9:ce:95:5d:e2:bd:f6:78:60:e9:c2:e5:0e: 31:50:c6:45:e9:23:c4:f5:9f:1a:70:ba:7b:4f:45: e7:86:5e:2d:e6:27:0e:df:13:2a:2f:41:37:b5:7d: ac:e8:81:e2:55:d1:8b:bc:47:47:f6:2a:48:0c:f7: 08:88:46:b2:58:1e:1e:3d:e2:da:77:b5:c5:73:69: b0:7b:1f:04:70:ff:7d:2d:ad:f6:ef:d2:51:ce:c2: 72:4b:49:d4:c1:56:1a:f3:65:ed:bf:30:b2:46:23: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6B:D0:5D:E7:88:59:5F:84:FC:BD:CF:E6:58:72:1D:37:0A:A9:C1 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d7:19:5b:85:9d:5f:7b:5e:39:8e:3c:ba:88:f2:4e:2c:be: 86:ea:c7:cd:f6:97:d5:bd:df:32:7f:9b:b2:c9:f0:ff:fd:27: 85:1a:0d:d4:fa:70:fc:2e:a3:a4:17:8a:02:2e:b3:0f:f8:33: 05:e1:dd:f0:c4:b4:f8:af:a7:9b:f9:a8:2a:56:70:a6:34:30: dd:7c:2b:90:d5:c8:7d:88:74:f3:48:f8:fb:df:17:08:d2:97: 64:61:02:c6:76:f2:72:51:b1:54:e4:91:6d:8b:27:dc:ce:05: 00:63:49:3f:76:2c:46:81:a2:a9:bf:80:1d:3e:94:48:d8:d1: e2:d3:8c:e7:e9:e7:87:14:d6:82:69:65:af:ac:87:94:41:3f: 76:f0:b1:47:c0:d9:c7:77:ef:dd:18:98:38:63:22:2b:68:5d: b8:4c:9c:f6:a5:60:ab:13:19:4b:c0:e9:32:57:e5:e2:3d:25: a7:2f:53:8d:f5:6f:71:48:24:18:a8:75:d7:98:9a:da:0b:a7: 06:4e:cb:06:89:c6:7e:d7:d0:60:7c:97:a0:bb:c7:eb:ac:f9: d2:26:21:15:e7:6c:eb:b3:af:0a:1f:09:91:52:fd:ba:f6:d3: d2:a3:da:c4:85:96:a8:5d:c5:c3:49:a8:7a:60:6f:1d:c2:05: 3b:dd:eb:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysEAwi6UTJjMYC3+cFzS+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwMzAyMDEwMDU4WhcNMjYwMzAzMDEwMDU4WjAzMTEwLwYDVQQD EyhjMTZiZDA1ZGU3ODg1OTVmODRmY2JkY2ZlNjU4NzIxZDM3MGFhOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47t8ndzQRhb+XDHGn5N36aMYBzlf kzq150n6urtAARpI2D/o6BnSK97NIqRgSdIBHfRWz6rSh3l90pq/Dl3oY9UzElH+ cWmQYWM1wlnOnrXFIhIYkK+3edpdiebUIGs8HWUonXaTI5tZspImsf5/ws7nHxpU 5NAVFuaD7YSe8L+ydYz32oepCeIuAlELwWR20W6Evq0CPNnOlV3ivfZ4YOnC5Q4x UMZF6SPE9Z8acLp7T0Xnhl4t5icO3xMqL0E3tX2s6IHiVdGLvEdH9ipIDPcIiEay WB4ePeLad7XFc2mwex8EcP99La3279JRzsJyS0nUwVYa82XtvzCyRiPycQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFr0F3niFlfhPy9z+ZYch03CqnBMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9cZW4Wd X3teOY48uojyTiy+hurHzfaX1b3fMn+bssnw//0nhRoN1Ppw/C6jpBeKAi6zD/gz BeHd8MS0+K+nm/moKlZwpjQw3XwrkNXIfYh080j4+98XCNKXZGECxnbyclGxVOSR bYsn3M4FAGNJP3YsRoGiqb+AHT6USNjR4tOM5+nnhxTWgmllr6yHlEE/dvCxR8DZ x3fv3RiYOGMiK2hduEyc9qVgqxMZS8DpMlfl4j0lpy9TjfVvcUgkGKh115ia2gun Bk7LBonGftfQYHyXoLvH66z50iYhFeds67OvCh8JkVL9uvbT0qPaxIWWqF3Fw0mo emBvHcIFO93rvw== -----END CERTIFICATE-----Generated at Mon Mar 2 10:39:17 2026 by rpki-client