$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json) Hash identifier: fbaQ8619AdOclbRK/wJ5xC4KHj+0mVBqb7qUy9SidgE= Subject key identifier: 13:B6:83:C4:44:EC:80:0D:FB:80:DB:7B:D8:B7:2F:91:83:DE:DE:FE Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019CAAFC006162659D56C17DFAC2546C6AB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft Manifest number: 0977 Signing time: Sun 01 Mar 2026 19:59:27 +0000 Manifest this update: Sun 01 Mar 2026 19:59:27 +0000 Manifest next update: Mon 02 Mar 2026 19:59:27 +0000 Files and hashes: 1: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=) 2: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=) 3: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=) 4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=) 5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=) 6: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=) 7: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=) 8: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=) 9: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: D2RXtVlZ8SEvSCHntdb7BoB/tYbJT2MhkRmwnQqzwLw=) 10: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=) 11: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=) 12: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=) 13: dUjFQLESWsl_QXSBInmxoIlDaEw.roa (hash: pbE9s/6VGIS0LorujhO3ihuwl0L3NPmLHXN9zAPkenI=) 14: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=) 15: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=) 16: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=) 17: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fc:00:61:62:65:9d:56:c1:7d:fa:c2:54:6c:6a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Mar 1 19:59:27 2026 GMT Not After : Mar 2 19:59:27 2026 GMT Subject: CN=13b683c444ec800dfb80db7bd8b72f9183dedefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:a1:76:e3:f6:38:2c:5d:45:89:12:56:39: e2:5a:b1:17:a9:d0:6c:d2:82:a9:bf:6e:2a:f6:c2: 28:96:0c:0f:57:87:8d:9d:64:8f:ef:4b:4b:4b:19: d6:7b:8c:00:d0:0b:72:8a:8a:eb:85:30:da:c1:00: 66:5c:4c:93:b1:11:f6:30:41:70:3f:cb:3b:e7:01: 2a:09:df:bc:a3:22:c5:78:a7:82:50:7b:57:32:62: 80:06:4d:af:6f:46:b7:d2:aa:b1:c9:b9:e8:f7:7a: 5c:d3:b8:bf:9f:d8:f6:c8:fb:10:af:70:f8:69:db: 30:c8:e3:9d:6d:35:45:69:7c:97:60:ad:2e:52:59: 5d:81:5a:02:a1:89:3f:2e:50:64:5b:bf:5b:90:33: fe:1c:4a:75:4b:03:24:33:95:5c:fb:f7:1f:87:c6: 65:2c:cf:ee:a5:a2:07:f9:62:45:5a:d1:95:5a:35: 3e:41:72:23:cd:be:2b:17:db:4c:3d:7b:20:61:ff: 61:ef:65:29:aa:92:49:8d:97:95:9c:d8:c8:04:1b: 73:3c:89:20:3a:06:cd:b5:86:a4:1c:14:2a:2b:a1: 31:c6:40:68:76:84:2a:9b:bb:80:2c:5b:e0:26:2c: b1:28:f1:68:25:70:3c:84:7d:e3:6e:62:61:8c:6b: cb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B6:83:C4:44:EC:80:0D:FB:80:DB:7B:D8:B7:2F:91:83:DE:DE:FE X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:13:70:0b:95:1b:f1:db:78:a9:1f:1c:d1:f2:87:57:48:55: 87:ac:c7:38:93:0f:85:4f:6d:4a:a7:03:07:ad:97:25:f6:d7: 0c:df:27:93:f8:b9:47:85:b9:80:85:73:6e:3f:bf:9a:27:a6: 3a:c6:1b:a6:ff:09:32:46:48:71:17:2e:f0:3e:86:09:cf:73: 4d:1d:be:82:7d:e2:de:8b:c1:59:77:70:83:c9:f8:e3:f9:8b: 95:fb:a3:c9:1b:d8:f8:84:f5:b0:e8:03:d0:22:ea:5a:2b:c2: af:b5:05:33:aa:5f:59:3f:29:e3:02:f4:7e:ee:29:ed:63:4c: 4e:d1:fd:bd:5a:94:da:47:de:bc:18:cd:36:50:e5:c5:a9:e1: b6:1e:ca:3c:83:65:af:04:ef:8f:16:a8:1c:9d:05:6c:2d:dd: ba:e8:8a:1b:83:68:66:73:20:c2:8e:ad:6f:e9:c7:4b:6d:5a: d9:d3:4a:4f:54:29:b8:3f:6a:b7:35:6c:f5:11:e1:e5:9c:f9: f7:09:36:fe:b2:19:d5:ed:fa:96:62:7c:13:32:24:e7:06:af: 6f:ff:da:fa:19:ab:bf:9e:85:b4:59:42:3d:fa:bb:25:d5:c5: c4:fe:7d:db:50:88:aa:7a:66:30:c4:f4:30:3f:80:d0:98:77: 7c:52:e5:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/ABhYmWdVsF9+sJUbGqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwMzAxMTk1OTI3WhcNMjYwMzAyMTk1OTI3WjAzMTEwLwYDVQQD EygxM2I2ODNjNDQ0ZWM4MDBkZmI4MGRiN2JkOGI3MmY5MTgzZGVkZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAWhduP2OCxdRYkSVjniWrEXqdBs 0oKpv24q9sIolgwPV4eNnWSP70tLSxnWe4wA0AtyiorrhTDawQBmXEyTsRH2MEFw P8s75wEqCd+8oyLFeKeCUHtXMmKABk2vb0a30qqxybno93pc07i/n9j2yPsQr3D4 adswyOOdbTVFaXyXYK0uUlldgVoCoYk/LlBkW79bkDP+HEp1SwMkM5Vc+/cfh8Zl LM/upaIH+WJFWtGVWjU+QXIjzb4rF9tMPXsgYf9h72UpqpJJjZeVnNjIBBtzPIkg OgbNtYakHBQqK6ExxkBodoQqm7uALFvgJiyxKPFoJXA8hH3jbmJhjGvLowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBO2g8RE7IAN+4Dbe9i3L5GD3t7+MB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohNwC5Ub 8dt4qR8c0fKHV0hVh6zHOJMPhU9tSqcDB62XJfbXDN8nk/i5R4W5gIVzbj+/miem OsYbpv8JMkZIcRcu8D6GCc9zTR2+gn3i3ovBWXdwg8n44/mLlfujyRvY+IT1sOgD 0CLqWivCr7UFM6pfWT8p4wL0fu4p7WNMTtH9vVqU2kfevBjNNlDlxanhth7KPINl rwTvjxaoHJ0FbC3duuiKG4NoZnMgwo6tb+nHS21a2dNKT1QpuD9qtzVs9RHh5Zz5 9wk2/rIZ1e36lmJ8EzIk5wavb//a+hmrv56FtFlCPfq7JdXFxP5921CIqnpmMMT0 MD+A0Jh3fFLl6A== -----END CERTIFICATE-----Generated at Mon Mar 2 02:50:48 2026 by rpki-client