$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: XG2fkncseIx9p2saB38UeFF+IBQvl7Ns/odwSzl1/f8= Subject key identifier: 39:89:00:75:7B:BC:22:DB:2B:88:94:E0:A5:75:60:CC:FC:C1:46:61 Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019CABA217B7810E71B417E06154F34307E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 0B13 Signing time: Sun 01 Mar 2026 23:00:52 +0000 Manifest this update: Sun 01 Mar 2026 23:00:52 +0000 Manifest next update: Mon 02 Mar 2026 23:00:52 +0000 Files and hashes: 1: 6Qo_0tvV-nF1V3290tyCPcyJh_o.roa (hash: miQhI+W7erQXF0Elh5+jiDUej+PQhWgEiCLyU5iCciM=) 2: 9ookbD4ZU4VY6TDRIjyZKBvmQXI.roa (hash: M/Bs/iLa6unZww6rfQbsSA6jP0n4wnfBywF5HPWrEvA=) 3: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: fAuiMW4cpa5RTiaSMDhsMiPzHl1wUtTClK0XhFpDcF4=) 4: IFrY2kkAzLqt5nU6H0jjg7fOnfs.roa (hash: 3jLeNihZ7jH0KElGLvHndCBcoZfJ8baWrI/MSc9FDOM=) 5: KmiT_bFL6NVBkgtLbXi4ZisK1YU.roa (hash: tgNhq7zv9mTiPGPG9+7tVy0d58V7ydi8nCuBJyqvKtc=) 6: PgdFhXr4B5CibOVMVSzG8VZJbJI.roa (hash: ZVEiyh33egqUEszPE12gddvboVKjJ6wjLhbhT2yy81g=) 7: VwfnUo7iWGrwpmjYLkStkdsJWgc.roa (hash: 0vyTKG4s8Sxb6Vvga9d9VBfQgDaf6QryBCp9P8NqVAk=) 8: XKCSd_q8htYD2dRhnR0ZGHQd6aE.roa (hash: nrVIhJk0vcnWtX4bPvYtuPJXkD1qd5lmX9UObVE8TRk=) 9: czKDro5NX_B7iWJU3teZpH_MFjc.roa (hash: IaANvC54ocsGYfpcLfku3gzas0/nThyZNXREyxhjK4Q=) 10: sCTR8cDIH84F0OMO06djeXs_-PQ.roa (hash: ugj+brY/Z7Vee3VbgiQKLfHy9VAROXKxM5IhUTLTOGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:a2:17:b7:81:0e:71:b4:17:e0:61:54:f3:43:07:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Mar 1 23:00:52 2026 GMT Not After : Mar 2 23:00:52 2026 GMT Subject: CN=398900757bbc22db2b8894e0a57560ccfcc14661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f4:2d:95:fe:df:41:06:4a:7f:c0:e5:bb:1a: 70:e9:45:d1:06:47:10:80:87:37:49:65:6e:f1:90: ad:03:27:c4:bb:87:e3:1d:73:1f:98:0c:a7:4e:13: 9d:36:73:61:b9:fc:d5:55:43:f5:35:51:a7:ba:1a: 7d:da:54:70:cf:cc:7b:cd:e2:5e:60:47:44:9e:2e: 59:4b:9f:b2:ab:3f:bd:fc:3f:64:aa:5c:96:a0:49: 15:5f:01:c0:af:37:bf:48:ed:80:e6:8b:5e:46:b8: 67:b0:fb:6a:aa:97:ab:19:d3:71:79:e4:7f:43:c8: 21:81:cc:39:dc:7d:aa:2e:55:cf:27:c8:43:90:0a: 00:5a:89:cf:a6:9b:31:84:5f:1e:84:d4:5b:2a:c1: 83:3f:97:b0:1e:bf:21:8c:4e:0f:bf:7e:93:8f:49: 42:f0:6c:2c:a4:36:6e:51:5b:31:65:1f:e0:11:45: 56:c4:6a:37:76:ce:52:5e:05:60:04:0c:93:a9:77: 10:5b:d5:11:30:18:76:11:2e:ba:96:58:75:ee:a2: a6:95:16:b0:4c:4a:6b:b1:a9:81:e6:ca:2d:33:a0: c4:de:a8:91:1b:47:78:9b:b4:af:2b:80:55:52:f0: 30:90:97:72:0c:2e:2f:94:e7:90:30:83:28:eb:25: 61:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:89:00:75:7B:BC:22:DB:2B:88:94:E0:A5:75:60:CC:FC:C1:46:61 X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c7:55:0f:2e:fb:8c:fc:3f:68:66:52:4f:8b:6b:dd:6d:ab: eb:3a:55:7f:f6:69:f3:88:56:10:5c:56:9b:a2:19:c0:1d:e8: 1f:44:c6:e5:0d:a4:e7:9a:16:12:4e:72:3e:84:1a:12:85:b7: 30:7c:93:16:f7:f1:f8:89:a0:f0:c4:e3:5e:cb:c3:69:d3:4b: df:17:63:95:dc:fe:97:28:c9:a4:66:a5:83:56:ad:c4:1c:f8: 64:ca:0a:87:db:89:91:8e:15:96:f8:4a:6f:ba:56:d5:28:45: 8e:2e:83:5d:a1:3c:61:ab:63:16:d3:f6:39:12:27:5d:1c:8d: f8:00:72:9c:41:cf:35:a8:cd:b5:13:bf:e4:8a:0e:8b:a8:9c: ef:62:79:cf:ae:59:79:eb:54:4e:77:b9:5c:a3:67:4e:1a:82: 07:67:14:f6:e1:db:9d:0f:f2:f8:8b:57:ac:20:8c:87:d6:18: bf:81:64:ea:af:ba:69:da:99:de:5c:b0:46:8a:a4:b3:58:a5: 5f:4d:b5:12:ed:63:02:72:81:b1:4b:ef:4d:d6:3e:d6:e7:23: fa:99:47:ad:fa:bd:ce:73:2c:22:a1:38:47:d4:27:ea:d8:0b: 0e:7c:d8:e5:74:29:10:b1:62:d0:ac:34:05:66:60:6f:30:99: 80:c7:b2:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrohe3gQ5xtBfgYVTzQwfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjYwMzAxMjMwMDUyWhcNMjYwMzAyMjMwMDUyWjAzMTEwLwYDVQQD EygzOTg5MDA3NTdiYmMyMmRiMmI4ODk0ZTBhNTc1NjBjY2ZjYzE0NjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vQtlf7fQQZKf8Dluxpw6UXRBkcQ gIc3SWVu8ZCtAyfEu4fjHXMfmAynThOdNnNhufzVVUP1NVGnuhp92lRwz8x7zeJe YEdEni5ZS5+yqz+9/D9kqlyWoEkVXwHArze/SO2A5oteRrhnsPtqqperGdNxeeR/ Q8ghgcw53H2qLlXPJ8hDkAoAWonPppsxhF8ehNRbKsGDP5ewHr8hjE4Pv36Tj0lC 8GwspDZuUVsxZR/gEUVWxGo3ds5SXgVgBAyTqXcQW9URMBh2ES66llh17qKmlRaw TEprsamB5sotM6DE3qiRG0d4m7SvK4BVUvAwkJdyDC4vlOeQMIMo6yVhSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmJAHV7vCLbK4iU4KV1YMz8wUZhMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8dVDy77 jPw/aGZST4tr3W2r6zpVf/Zp84hWEFxWm6IZwB3oH0TG5Q2k55oWEk5yPoQaEoW3 MHyTFvfx+Img8MTjXsvDadNL3xdjldz+lyjJpGalg1atxBz4ZMoKh9uJkY4VlvhK b7pW1ShFji6DXaE8YatjFtP2ORInXRyN+ABynEHPNajNtRO/5IoOi6ic72J5z65Z eetUTne5XKNnThqCB2cU9uHbnQ/y+ItXrCCMh9YYv4Fk6q+6adqZ3lywRoqks1il X021Eu1jAnKBsUvvTdY+1ucj+plHrfq9znMsIqE4R9Qn6tgLDnzY5XQpELFi0Kw0 BWZgbzCZgMeylg== -----END CERTIFICATE-----Generated at Mon Mar 2 03:50:48 2026 by rpki-client