$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json) Hash identifier: kY8yjd65qJ47nI5Y0e1TS3Eqn9zp6FV/xfdSMBqhhMw= Subject key identifier: F4:C6:F4:80:34:17:64:84:0A:3F:8B:C0:B0:09:EE:38:28:F4:31:88 Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019CACB569D4891F6B5857119956FA111EA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft Manifest number: 0978 Signing time: Mon 02 Mar 2026 04:01:36 +0000 Manifest this update: Mon 02 Mar 2026 04:01:36 +0000 Manifest next update: Tue 03 Mar 2026 04:01:36 +0000 Files and hashes: 1: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=) 2: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=) 3: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=) 4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=) 5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=) 6: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=) 7: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=) 8: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=) 9: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: 9VMXYuhSevg8AdYIGEH9WkbDXukxFIJ7zkGla4djqZ8=) 10: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=) 11: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=) 12: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=) 13: dUjFQLESWsl_QXSBInmxoIlDaEw.roa (hash: pbE9s/6VGIS0LorujhO3ihuwl0L3NPmLHXN9zAPkenI=) 14: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=) 15: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=) 16: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=) 17: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:b5:69:d4:89:1f:6b:58:57:11:99:56:fa:11:1e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Mar 2 04:01:36 2026 GMT Not After : Mar 3 04:01:36 2026 GMT Subject: CN=f4c6f480341764840a3f8bc0b009ee3828f43188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:5a:82:ca:68:b8:1a:1d:61:8c:a3:85:df: 01:53:71:35:c7:c5:d0:c8:2a:63:2f:bf:04:11:9a: c7:6f:96:2c:a4:3d:c9:49:48:d5:cb:76:f1:e2:bf: 9f:08:07:ac:b9:4f:37:a8:3b:05:8e:4a:51:e8:2e: c5:43:07:31:54:9f:96:de:a8:14:45:4b:0f:ac:6d: 28:fa:d1:f3:f1:90:41:7a:2e:f8:9b:59:4a:64:86: 51:eb:b7:22:e0:17:db:39:56:df:77:f1:ed:a6:09: 6e:be:54:cd:f8:b8:ce:c3:23:d1:87:69:6f:86:70: 1a:47:a4:0b:5d:45:07:0b:ab:17:74:98:6f:03:4d: d8:b7:ee:18:9f:11:56:28:01:97:59:67:d8:f3:f6: c8:95:1d:8a:b5:f2:f1:84:70:1e:30:2f:d2:2e:7a: 5f:e2:03:f2:fa:22:08:09:38:0c:74:0d:db:b6:22: c2:60:1d:29:53:06:61:0a:8b:00:b8:87:41:61:6f: 3a:65:4b:a5:ff:b4:89:80:50:fa:8a:99:4e:de:5c: f0:3f:b8:e0:c2:62:32:cd:5d:03:f9:10:55:73:f4: cf:e5:c0:6f:c6:22:f9:06:81:66:0a:5f:73:b0:0f: 76:41:0b:15:ad:81:33:ca:2c:a8:66:a7:27:e5:04: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C6:F4:80:34:17:64:84:0A:3F:8B:C0:B0:09:EE:38:28:F4:31:88 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7b:4c:f6:8f:bd:c0:86:13:71:bf:16:dd:b4:ce:29:3d:6a: cb:22:0c:cd:03:73:7b:18:7c:f0:7d:ff:23:a9:9a:82:d3:64: be:c2:15:a8:a2:6f:00:dd:79:d5:b7:9c:24:96:e0:f7:f4:01: f8:b0:88:d3:f6:00:5e:dc:28:b4:19:52:0d:2c:8a:e8:73:08: 7c:a6:46:ac:3d:b1:8f:ea:37:a5:bd:23:59:27:c6:75:68:b5: f0:5d:f5:97:2b:b3:4e:16:90:29:00:21:bb:1b:23:47:cf:41: b7:22:31:ff:11:01:87:c7:92:e9:bc:8a:fa:74:07:c6:9d:76: 0b:6a:e1:ca:f1:a0:33:92:ae:81:e6:09:c4:cb:76:3e:4e:79: ae:c7:3e:55:4d:d7:36:d8:32:14:ec:1d:dc:e5:16:f2:e5:df: df:11:9c:3c:2b:d9:e0:b6:5f:c4:ef:f0:6e:25:d1:00:b3:9a: fc:f8:af:aa:05:ae:9a:d3:42:c0:68:08:43:63:a2:e1:1c:69: 31:26:48:3f:e1:79:83:76:ab:9e:b8:4e:26:03:1d:d2:c2:58: 66:b3:ab:31:95:0e:23:3a:e2:31:75:c3:a6:ff:31:a1:ae:1b: f9:09:a6:e4:19:bd:fe:c0:be:b0:87:f7:70:45:79:38:58:e0: 73:ef:8a:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZystWnUiR9rWFcRmVb6ER6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwMzAyMDQwMTM2WhcNMjYwMzAzMDQwMTM2WjAzMTEwLwYDVQQD EyhmNGM2ZjQ4MDM0MTc2NDg0MGEzZjhiYzBiMDA5ZWUzODI4ZjQzMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl39agspouBodYYyjhd8BU3E1x8XQ yCpjL78EEZrHb5YspD3JSUjVy3bx4r+fCAesuU83qDsFjkpR6C7FQwcxVJ+W3qgU RUsPrG0o+tHz8ZBBei74m1lKZIZR67ci4BfbOVbfd/HtpgluvlTN+LjOwyPRh2lv hnAaR6QLXUUHC6sXdJhvA03Yt+4YnxFWKAGXWWfY8/bIlR2KtfLxhHAeMC/SLnpf 4gPy+iIICTgMdA3btiLCYB0pUwZhCosAuIdBYW86ZUul/7SJgFD6iplO3lzwP7jg wmIyzV0D+RBVc/TP5cBvxiL5BoFmCl9zsA92QQsVrYEzyiyoZqcn5QQIIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTG9IA0F2SECj+LwLAJ7jgo9DGIMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHtM9o+9 wIYTcb8W3bTOKT1qyyIMzQNzexh88H3/I6magtNkvsIVqKJvAN151becJJbg9/QB +LCI0/YAXtwotBlSDSyK6HMIfKZGrD2xj+o3pb0jWSfGdWi18F31lyuzThaQKQAh uxsjR89BtyIx/xEBh8eS6byK+nQHxp12C2rhyvGgM5KugeYJxMt2Pk55rsc+VU3X NtgyFOwd3OUW8uXf3xGcPCvZ4LZfxO/wbiXRALOa/PivqgWumtNCwGgIQ2Oi4Rxp MSZIP+F5g3arnrhOJgMd0sJYZrOrMZUOIzriMXXDpv8xoa4b+Qmm5Bm9/sC+sIf3 cEV5OFjgc++KUw== -----END CERTIFICATE-----Generated at Mon Mar 2 08:49:50 2026 by rpki-client