$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft File: D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft (raw, json) Hash identifier: b97s0AxS+Lm9MLK3+FDJmU9M94hafSNvUI0bnG8kugI= Subject key identifier: DE:F5:C3:61:10:9F:02:BE:55:41:25:30:11:C4:4D:83:CE:22:61:0A Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019CAC7DBB311BCC08BA860CB44DACE3E8DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft Manifest number: 135E Signing time: Mon 02 Mar 2026 03:00:46 +0000 Manifest this update: Mon 02 Mar 2026 03:00:46 +0000 Manifest next update: Tue 03 Mar 2026 03:00:46 +0000 Files and hashes: 1: D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl (hash: 0XSX+5GiqTDhv3CbW7Z5yCn6rHe9yIV2bLHWaq0ov8Y=) 2: SZnp-_Phd8jmh-2b9zRQNPI2XJU.roa (hash: 8E96iye7+dcWrMY4qjantdn4m4G4QLqJt0h0LNB4k/0=) 3: U53a-4wPR2mlAW4QMvyFBmFDPQI.roa (hash: DdkcUrbApGJMbtFryxRgCxJDEJ0loZBaVqM1N/UINOc=) 4: UXz0jpkUeBEw9xnHd9lIRQcm0Eg.roa (hash: fY8g4jQlyWJZWP6eg5ROj3tw/niaiE2PaDyYHZ89Ksg=) 5: Y_qh5r9T2xhCuxsghsFLFTjvGh0.roa (hash: sV9l7QyOFa5cFbGmFiIOjsobVZZWNkUdTEOXDxeETcY=) 6: eY4k3nVHNXhDpAbf9zD-eyh_Nvg.roa (hash: yBq3nhPr9ZGCP1KOMc5XIOBCBvNy7/PGtea/Nu+S5pA=) 7: gBuMC5ZIlenVCfEoDWl9XMDI2TQ.roa (hash: PNjPoq/O+QH/ekKxEuqJ2RgT0oUrWcGyrKZs7fbaS/Q=) 8: jIMqY7snwKcVll6pNg08z_Mqfgo.roa (hash: CPx8ujKVpCilbCNBBZEL0m50f6eFV0D5WThfqaq1JKE=) 9: o6CKLxYggPeiiX1D9vYaNcoUmok.roa (hash: yjKnYZloxvwn6n8eF6XO6CXodzrxTjJCVdcAnVEjNN4=) 10: qWM_b7eqNcpOTwzfE4MgdjSzkOA.roa (hash: wyyqXvUm05ZHHPtowot5o7qE0UcEvtNzL5CUqUCZR0Y=) 11: qrulOy0Coki4wn_-Qkde4O77Hns.roa (hash: 9SWbk/UztYZ7NcndOcjAJ8N03S/0ds8NsEMX2Ibcv78=) 12: s-3ruvcKud9U7370JDBXzcGQZys.roa (hash: tCp7O7pXDtx/sN3JpkwD8B4anvePfCGURA3ahQrQX/8=) 13: zGhncm-i1rjvD2kEZf1PVRbZys4.roa (hash: X0UKTaPuCW7quZznGBHXE4TKgZ7+lY9qZyCg4ygXK70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:7d:bb:31:1b:cc:08:ba:86:0c:b4:4d:ac:e3:e8:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Mar 2 03:00:46 2026 GMT Not After : Mar 3 03:00:46 2026 GMT Subject: CN=def5c361109f02be5541253011c44d83ce22610a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ec:bb:73:95:5f:ff:e9:fe:6a:8b:ea:02:54: bd:a8:44:f2:4a:99:3b:bd:20:28:9b:53:e0:ef:8e: 83:39:99:75:3c:09:23:12:cc:82:61:37:2d:e2:bb: 61:1a:33:89:18:e0:28:1d:ce:14:49:a8:d5:2c:ae: 40:d2:0c:a7:a8:32:af:1e:23:4b:ac:a6:5d:92:f7: 14:9a:d5:0c:94:6f:15:d6:56:53:b0:96:9e:f8:e6: 19:31:1e:20:c4:af:0b:69:6e:9d:8a:69:17:e5:7e: 90:38:78:b5:61:9e:84:15:ac:db:61:ba:10:c1:47: bc:75:72:b8:8d:08:50:fe:3c:fa:0f:ef:50:38:1f: e3:2e:aa:c8:bf:5a:5d:74:34:e2:c7:a2:41:a2:39: 39:29:a7:5a:b0:5c:d7:d6:e4:61:3e:00:d8:64:7f: 4b:07:21:64:aa:60:82:47:43:5e:64:76:b0:4f:68: 5b:64:33:8c:2f:bc:79:c1:6e:72:21:f6:d5:52:80: f4:8d:a7:3e:b0:e0:5f:ae:94:58:4b:f0:1a:f7:6e: f9:1f:5d:3f:eb:11:c8:69:de:81:ca:c5:40:84:0b: db:3a:38:5a:ac:31:0f:bd:fc:0a:9f:cf:70:18:2f: 28:f0:04:d3:9d:d1:74:cf:31:fd:a2:12:0a:3b:b8: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F5:C3:61:10:9F:02:BE:55:41:25:30:11:C4:4D:83:CE:22:61:0A X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1c:f7:88:42:4e:13:b1:22:ae:06:0a:c0:dd:5a:18:db:47: 03:38:2e:e2:20:85:b7:0c:5a:9a:20:b7:05:43:3c:2f:c6:36: 41:c6:0e:b0:0b:9e:16:44:13:5e:6d:65:5b:20:b0:0e:76:a6: 0a:42:ab:42:d5:0f:df:dc:db:cf:4a:33:7c:df:c3:af:e8:8d: fd:44:ae:9d:1d:a6:7e:45:73:52:af:3e:63:f4:bd:99:14:9d: 6a:74:5e:e0:ad:bf:73:5a:2b:78:1e:3b:1b:e7:70:b0:37:07: a0:75:ef:7a:3a:2b:b9:72:9e:29:8c:8f:1c:e1:39:77:2e:ec: 5b:b7:ac:0f:fa:fe:84:12:d6:a4:fe:fb:47:d2:85:72:88:c5: 8f:f0:0d:35:69:2d:58:7d:5e:62:7b:fb:e8:67:ec:81:c9:12: 77:7e:fc:cb:8d:fe:b4:4b:e9:ae:88:1f:04:e7:a7:0e:5e:a5: ed:6b:36:9d:d6:a9:3d:79:54:06:c7:70:dc:1b:08:d1:e3:d3: 46:55:72:82:d9:64:c3:26:78:aa:5e:6e:0e:fc:e0:a0:62:6c: 99:f0:10:00:6e:1f:5c:d3:9b:2c:76:89:34:0a:84:45:55:9a: 0d:fd:6f:fc:08:52:67:2c:e6:9a:db:5f:25:e9:47:c9:50:d6: 8e:ab:dc:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysfbsxG8wIuoYMtE2s4+jcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjYwMzAyMDMwMDQ2WhcNMjYwMzAzMDMwMDQ2WjAzMTEwLwYDVQQD EyhkZWY1YzM2MTEwOWYwMmJlNTU0MTI1MzAxMWM0NGQ4M2NlMjI2MTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwey7c5Vf/+n+aovqAlS9qETySpk7 vSAom1Pg746DOZl1PAkjEsyCYTct4rthGjOJGOAoHc4USajVLK5A0gynqDKvHiNL rKZdkvcUmtUMlG8V1lZTsJae+OYZMR4gxK8LaW6dimkX5X6QOHi1YZ6EFazbYboQ wUe8dXK4jQhQ/jz6D+9QOB/jLqrIv1pddDTix6JBojk5KadasFzX1uRhPgDYZH9L ByFkqmCCR0NeZHawT2hbZDOML7x5wW5yIfbVUoD0jac+sOBfrpRYS/Aa9275H10/ 6xHIad6BysVAhAvbOjharDEPvfwKn89wGC8o8ATTndF0zzH9ohIKO7h0KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN71w2EQnwK+VUElMBHETYPOImEKMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBz3iEJO E7EirgYKwN1aGNtHAzgu4iCFtwxamiC3BUM8L8Y2QcYOsAueFkQTXm1lWyCwDnam CkKrQtUP39zbz0ozfN/Dr+iN/USunR2mfkVzUq8+Y/S9mRSdanRe4K2/c1oreB47 G+dwsDcHoHXvejoruXKeKYyPHOE5dy7sW7esD/r+hBLWpP77R9KFcojFj/ANNWkt WH1eYnv76GfsgckSd378y43+tEvprogfBOenDl6l7Ws2ndapPXlUBsdw3BsI0ePT RlVygtlkwyZ4ql5uDvzgoGJsmfAQAG4fXNObLHaJNAqERVWaDf1v/AhSZyzmmttf JelHyVDWjqvcrA== -----END CERTIFICATE-----Generated at Mon Mar 2 06:06:17 2026 by rpki-client