$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: +igqcsbN2oH4Ie8Q5zgGqpU4G9KR8Dqzez+K5H8xOLI= Subject key identifier: 99:8C:70:0A:A1:A7:C2:3F:F8:51:91:58:F9:BF:E5:92:3C:11:E1:E2 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019CABD8F3B2DBDEE3B68B1F1A864AB8541C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 1615 Signing time: Mon 02 Mar 2026 00:00:47 +0000 Manifest this update: Mon 02 Mar 2026 00:00:47 +0000 Manifest next update: Tue 03 Mar 2026 00:00:47 +0000 Files and hashes: 1: 6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa (hash: oIH5kZRy4QQWIkNsi+TOmhTdqOjqPl4X4VEu5ZY7rrc=) 2: 6yY85OHD-46vFhP-wtPZWs3MeCY.roa (hash: hOno4SiXgMirUzFVpAXsEoPlI4QIn/ikV8WWQvXsoXg=) 3: 8McrGRfEqcovWnRSpklEmiBGADA.roa (hash: xszqUKxiKaCx1G5C+PDbNWuR86U3w6LgZy01FF25iiY=) 4: BooqKG4SsYSQxh6PGW72NBqbtuw.roa (hash: TU0xZxrNhYVeehRBPFf+LnBXvIDYoAVW0L6Hmfayq5M=) 5: Dib_4B7-59g2qlFon4U52XelorA.roa (hash: 7rKsJnSr5QX2uVe31jye987BgbcYNd7z/lfjZmUFdDY=) 6: J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa (hash: PhWWvX6X2tLUSE0WxzAfwrSrZ7vyehY98guTk5gmtdI=) 7: Td85PzLGixLgYgdBT3GS17rfwTQ.roa (hash: ZtLYgrcf2o9oO80ckMCQ8oe+MvEY9qGa8/wSqJ2K4VY=) 8: bpUtIFcpj0wFmx0CClP1L0TgIfY.roa (hash: JpwXWXow0nu1gKjNId4RQPrmV9a8gFVj5DrvmpBJ7Ac=) 9: dkSZC1vcgEsyqm56yAJmonI1P1E.roa (hash: Wn8sFewfyDAMaX3VNG1l/GCgIijws7/FwmZlH3//5Vk=) 10: eH8mEFUxJaD15bIkdrb0eoEm43Q.roa (hash: iVNXmnAd/Aq9qGpFjFCXba0ETiSTvXsmOGBSWpVw4y4=) 11: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: FdxuIp/8v7ev9DTDFgl53aIx0KoSjkktrasVxR2nTus=) 12: vJiRTEd6tTiZDm_JR7rLwIox0zw.roa (hash: IYF63rRulzFNBpbGnH/dDmLviCvKmUvwCJNoi515Gao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:d8:f3:b2:db:de:e3:b6:8b:1f:1a:86:4a:b8:54:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Mar 2 00:00:47 2026 GMT Not After : Mar 3 00:00:47 2026 GMT Subject: CN=998c700aa1a7c23ff8519158f9bfe5923c11e1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:35:d7:a9:17:1e:ee:7c:64:27:18:d6:3b: 54:06:b6:15:54:82:e4:ed:cf:72:68:d3:16:01:5f: 5e:d0:f5:28:22:ef:98:c0:d9:a3:0b:cc:c2:c7:c3: b7:85:9c:bc:77:1a:39:eb:bd:04:03:5d:1c:aa:45: d5:f4:7b:99:67:1b:80:ba:62:a1:f8:dc:ea:0d:ac: 84:4b:33:d0:02:ff:2d:3f:6c:64:3d:eb:05:62:b0: 7e:92:67:d3:06:8f:45:8b:ef:4b:20:f5:bb:bd:5c: d3:e6:08:fa:cf:c0:9b:86:ea:8b:87:8a:17:ab:79: 4f:06:c0:53:2e:83:f2:fb:f7:07:27:46:a4:32:a1: 46:fd:89:5a:ca:50:c1:3d:3d:65:bf:ed:48:32:9f: 6d:dd:89:39:61:28:4c:e1:8e:e8:10:0e:bd:ba:45: 45:d0:3f:02:d4:74:0a:87:81:e0:0a:eb:f7:8e:da: 65:9d:e0:b8:bf:51:1d:c5:48:50:c2:05:64:e2:b3: de:b2:b3:5f:03:e6:c5:ae:05:a7:9e:c9:ae:eb:21: 4b:5d:b6:b1:4a:da:23:1d:13:b2:60:eb:a4:f3:22: ed:2b:c7:39:07:be:a4:2e:b6:cf:17:06:be:b3:b6: 3c:68:cb:8b:8e:58:e9:73:37:d4:d0:c1:e8:f6:fa: 2c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8C:70:0A:A1:A7:C2:3F:F8:51:91:58:F9:BF:E5:92:3C:11:E1:E2 X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:26:a3:89:ba:8b:52:db:30:ae:e1:69:65:1c:ef:42:45:f2: 38:33:73:1b:9e:d5:92:0d:2e:ed:7a:20:36:ef:43:42:5a:4b: 56:e7:70:1c:5b:95:f9:79:5a:21:1a:5d:f2:75:d7:66:25:0a: 91:13:59:c3:86:4a:b5:fc:08:20:da:82:82:18:cc:b5:7a:07: c3:05:d6:77:1d:d3:59:43:fc:0d:79:61:5d:d7:42:3f:d8:90: 65:02:d7:d1:7c:74:26:86:c5:c1:0f:6a:8e:88:ad:65:d7:9e: 71:a1:69:19:99:06:7c:f5:16:f4:4f:b5:9b:02:21:ca:51:d6: a2:c5:49:7a:a2:3e:4f:f7:9b:d4:a0:2b:7f:51:61:0e:31:57: e6:15:6f:fe:42:25:b1:e5:15:cf:c3:fc:24:30:63:6d:e6:41: 35:62:7b:69:81:bb:a9:7b:d7:75:8b:5e:8d:dc:a8:f2:28:cc: e7:af:34:26:3b:13:d9:aa:b5:24:51:e4:7a:4a:e0:c7:dc:d6: 29:60:e6:11:23:58:e6:e9:17:fa:5d:f1:80:f4:c5:f2:66:4d: 0d:70:4e:2b:2b:1e:08:e7:6b:03:89:f4:33:ff:a4:35:a9:98: 6e:9f:e3:5f:34:18:cb:29:75:e7:26:0e:ee:b9:9a:f8:08:52: 3a:fa:99:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyr2POy297jtosfGoZKuFQcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwMzAyMDAwMDQ3WhcNMjYwMzAzMDAwMDQ3WjAzMTEwLwYDVQQD Eyg5OThjNzAwYWExYTdjMjNmZjg1MTkxNThmOWJmZTU5MjNjMTFlMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgc116kXHu58ZCcY1jtUBrYVVILk 7c9yaNMWAV9e0PUoIu+YwNmjC8zCx8O3hZy8dxo5670EA10cqkXV9HuZZxuAumKh +NzqDayESzPQAv8tP2xkPesFYrB+kmfTBo9Fi+9LIPW7vVzT5gj6z8CbhuqLh4oX q3lPBsBTLoPy+/cHJ0akMqFG/YlaylDBPT1lv+1IMp9t3Yk5YShM4Y7oEA69ukVF 0D8C1HQKh4HgCuv3jtplneC4v1EdxUhQwgVk4rPesrNfA+bFrgWnnsmu6yFLXbax StojHROyYOuk8yLtK8c5B76kLrbPFwa+s7Y8aMuLjljpczfU0MHo9vosYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmMcAqhp8I/+FGRWPm/5ZI8EeHiMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCajibqL UtswruFpZRzvQkXyODNzG57Vkg0u7XogNu9DQlpLVudwHFuV+XlaIRpd8nXXZiUK kRNZw4ZKtfwIINqCghjMtXoHwwXWdx3TWUP8DXlhXddCP9iQZQLX0Xx0JobFwQ9q joitZdeecaFpGZkGfPUW9E+1mwIhylHWosVJeqI+T/eb1KArf1FhDjFX5hVv/kIl seUVz8P8JDBjbeZBNWJ7aYG7qXvXdYtejdyo8ijM5680JjsT2aq1JFHkekrgx9zW KWDmESNY5ukX+l3xgPTF8mZNDXBOKyseCOdrA4n0M/+kNamYbp/jXzQYyyl15yYO 7rma+AhSOvqZ0w== -----END CERTIFICATE-----Generated at Mon Mar 2 10:57:30 2026 by rpki-client