$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft File: bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json) Hash identifier: Ri7XPYHY6pectUnAaWU8/XI7MkfaOBULHiz78c0fO7s= Subject key identifier: E9:4A:F8:47:1B:0E:0E:3D:25:B4:77:E6:07:A6:0D:F5:3A:47:EF:8B Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019CB09161D0669D1EA5C8F025EF12B4F641 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft Manifest number: 10E6 Signing time: Mon 02 Mar 2026 22:00:43 +0000 Manifest this update: Mon 02 Mar 2026 22:00:43 +0000 Manifest next update: Tue 03 Mar 2026 22:00:43 +0000 Files and hashes: 1: 01O1H3vr-Xg2_Kt_tRxOoSePvYw.roa (hash: DTK4FxlalSIuFNse2BYUOpmcSGMhnqSmE/87aEUEtrg=) 2: 1-EqD6vgoA3IVAsjiLQYVEyyKW0U.roa (hash: Of+IRZAD6r3ftFWFR7yxzKwNLfYZjre35Dmg5UJV5ds=) 3: 3oqgYKPHjP4c1L0WVBDxXqGTNKs.roa (hash: PdT5GAbt00ZEVCyICmg6bHJkYgLa1nkpbJxhAhA4vnk=) 4: HB0FIxc95bfbXI-7nw5kY1VNoMs.roa (hash: 236zwT5kbl7DOv0ChJB+B8PFAcfi388Ks1QJGiJxQlM=) 5: RSEZnKImClpjfvRbvyGXO7YCT30.roa (hash: nbl9nzX5UblCyKX8B1eZxPxYHLEkClkhmOAKVpl4rkY=) 6: TCGXmp-ZcJuoO-eDyOqbUVRKJXI.roa (hash: zb8J86h3WDmjGOxtQQnoZ3rsuxycMmwLx3S1o5snyrE=) 7: XR-EYzoeTJi_gNpw5v85R8iIDCI.roa (hash: hr4Ank/yR0Q5kl1E1WgAYLVhDPaCeCKIZMYB9E/hjDs=) 8: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: haR9SH2Nj/ePbE17dMHRqKiYvlQASknj7gqALkD7N5o=) 9: fv8hSy-qTmyzkAkKRiqf7Cbw4Q8.roa (hash: JVsfqbqPGUHeKikh7Yf/w82XL596L03oNIzuxFbcXEQ=) 10: ngXBDJqFRHqY02oCl22jHBT8QTU.roa (hash: J4yIx0/GQQvuBdXMZZvAxL9Vevspg59Zpn25unHuRA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 15:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:b0:91:61:d0:66:9d:1e:a5:c8:f0:25:ef:12:b4:f6:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Mar 2 22:00:43 2026 GMT Not After : Mar 3 22:00:43 2026 GMT Subject: CN=e94af8471b0e0e3d25b477e607a60df53a47ef8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:d6:df:3d:10:68:53:ff:52:d9:34:c0:39: 80:af:e9:f9:a8:7a:e9:47:94:7e:d2:e5:e3:3f:dc: 06:80:cc:fb:c2:91:c3:0f:70:ab:cb:10:a9:11:9b: 38:13:a6:e7:4b:6a:9f:2f:2e:4a:84:c8:18:f6:71: 5d:1c:1f:36:19:33:24:d5:e9:4b:a1:67:59:5e:35: a7:52:b9:2e:6c:e9:d3:fe:0b:0a:88:cd:48:d5:b9: e6:a9:31:61:82:79:f6:52:d0:da:47:bd:03:98:59: ec:b0:18:cf:d0:ab:bf:b3:39:c2:ac:31:f8:d6:f8: 60:f8:3e:61:69:00:74:46:80:4b:13:7d:df:29:db: bf:3e:29:ae:aa:6a:2e:a6:47:fb:3c:eb:18:7d:c5: 1b:22:39:b9:96:36:99:aa:e7:5c:7f:fd:8d:81:21: f0:22:9e:a6:9c:0f:79:91:22:87:b4:8b:9d:a9:33: 6e:24:64:6b:2f:fe:13:83:10:ae:47:e9:e3:3f:e3: 5c:56:d2:c1:0b:d0:38:fa:e1:f2:63:7d:fd:52:66: 98:1b:06:60:a8:73:4b:40:57:ed:62:2a:4f:13:d3: 1b:36:aa:25:16:13:ad:5d:a4:7a:40:e2:ac:03:ef: a6:7c:6b:17:b6:c1:e2:58:25:ea:aa:ef:d1:28:f8: a8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4A:F8:47:1B:0E:0E:3D:25:B4:77:E6:07:A6:0D:F5:3A:47:EF:8B X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:00:04:08:85:f2:29:36:67:a9:42:1e:09:c2:7f:c1:b0:8e: 81:a2:d2:2c:8f:05:1e:8d:c7:0e:54:8f:28:cc:18:10:b2:53: f1:d2:fe:04:fd:9b:61:4d:51:c4:27:77:82:98:08:19:5b:df: 37:b5:04:b2:21:cd:06:ce:26:98:c0:c4:3a:a3:8b:c2:a2:48: 48:38:6d:b4:cf:b9:e7:70:0a:14:f0:3b:36:e7:ef:b2:ec:4b: d9:f6:d9:1e:88:fc:44:79:a6:26:9d:de:8d:32:e5:47:14:d3: b5:8a:74:20:48:ec:eb:c1:2f:39:51:69:35:c6:d9:eb:fa:44: 64:45:87:91:6a:ee:57:f8:06:65:6c:e5:bd:0b:3d:c8:b0:19: ce:cb:2d:61:34:49:1d:04:d6:bf:5c:d8:ef:c2:a9:4e:9b:8c: 82:73:cb:09:5b:15:46:a1:87:4d:2f:47:5c:87:b4:ec:cc:aa: ca:06:91:b9:8e:2e:ed:18:c3:64:1d:74:be:e7:b0:6a:a7:82: 7b:91:2a:aa:45:7e:67:87:7f:e3:ff:16:94:b2:8d:c6:39:d6: 60:5c:2b:13:b8:83:8a:60:84:6a:bc:ee:3c:fb:0c:1c:6c:a7: cd:e3:4e:91:2c:e2:de:3d:5a:f0:30:59:d2:d2:85:5e:13:35: fe:8a:b2:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZywkWHQZp0epcjwJe8StPZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjYwMzAyMjIwMDQzWhcNMjYwMzAzMjIwMDQzWjAzMTEwLwYDVQQD EyhlOTRhZjg0NzFiMGUwZTNkMjViNDc3ZTYwN2E2MGRmNTNhNDdlZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV3W3z0QaFP/Utk0wDmAr+n5qHrp R5R+0uXjP9wGgMz7wpHDD3CryxCpEZs4E6bnS2qfLy5KhMgY9nFdHB82GTMk1elL oWdZXjWnUrkubOnT/gsKiM1I1bnmqTFhgnn2UtDaR70DmFnssBjP0Ku/sznCrDH4 1vhg+D5haQB0RoBLE33fKdu/Pimuqmoupkf7POsYfcUbIjm5ljaZqudcf/2NgSHw Ip6mnA95kSKHtIudqTNuJGRrL/4TgxCuR+njP+NcVtLBC9A4+uHyY339UmaYGwZg qHNLQFftYipPE9MbNqolFhOtXaR6QOKsA++mfGsXtsHiWCXqqu/RKPiopwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlK+EcbDg49JbR35gemDfU6R++LMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQAECIXy KTZnqUIeCcJ/wbCOgaLSLI8FHo3HDlSPKMwYELJT8dL+BP2bYU1RxCd3gpgIGVvf N7UEsiHNBs4mmMDEOqOLwqJISDhttM+553AKFPA7NufvsuxL2fbZHoj8RHmmJp3e jTLlRxTTtYp0IEjs68EvOVFpNcbZ6/pEZEWHkWruV/gGZWzlvQs9yLAZzsstYTRJ HQTWv1zY78KpTpuMgnPLCVsVRqGHTS9HXIe07MyqygaRuY4u7RjDZB10vuewaqeC e5EqqkV+Z4d/4/8WlLKNxjnWYFwrE7iDimCEarzuPPsMHGynzeNOkSzi3j1a8DBZ 0tKFXhM1/oqyuA== -----END CERTIFICATE-----Generated at Tue Mar 3 00:41:26 2026 by rpki-client