$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft File: DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json) Hash identifier: BAKRt8RGDDmy7Lg1tYmQlXVlepEEX9ZsX506SKO5WCE= Subject key identifier: E4:47:DB:0B:01:98:72:77:EB:17:3C:51:FE:1F:58:6A:7E:59:05:03 Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019CA8D87850052EF0DF441C97034E04CEDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft Manifest number: 06DA Signing time: Sun 01 Mar 2026 10:01:24 +0000 Manifest this update: Sun 01 Mar 2026 10:01:24 +0000 Manifest next update: Mon 02 Mar 2026 10:01:24 +0000 Files and hashes: 1: 0kFTRKOE3jWGCAoyPfo6VNl6gNY.roa (hash: il4KXb3o4UsVQZBTVvlrB+YuKW6gXafGwP3odHFQM4k=) 2: 7dxEnT1CfSxLe7_sqKtwcYTqKsM.roa (hash: QclYUg3Wd/a2IKDACLA5HXN28WB2Yrc+C32YeqYRisk=) 3: 9B82YcNnUprt-4KUyQd_1s9v9Xs.roa (hash: 9bZCGC4PdB/89RTJWYuGX2hvdz0O1wHHsW+fifHAss8=) 4: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: kpHW+KPkGiJ7z9T874KMdWxiVIHfu4DbG3PwNc4ofq8=) 5: D_vjqcKu-RrA1L9-NPBKRQy6u2w.roa (hash: +7JpMBrIwFcMPab0ahGtI2QPpD0AvXli50PzvLVY2SU=) 6: F6ReykvnwBeQdGSlwzXJzlYN8dg.roa (hash: s4VCcqJJfryWhoNKP5oyEvMnzjY6svyk5wyKPWs9bvE=) 7: Gay3j7r5bMuL1O3lqGZJU_WbCJA.roa (hash: 8Z1yEawpjvuXMIl7aRVa0CurHKu9yij+BtnWRFN4QL4=) 8: HxYp59riIlza87eFARnMPYgySWE.roa (hash: IbWFXF9QrKF/nXu4+XYR7TDUvfZ6vCunnlKcD+Se6xU=) 9: bfjrc-oiggd1qo6rctoBZsBjqBA.roa (hash: gT8ybax2ALNt41GPsw02TSXazlNeSoaU2pZJZ58CxTY=) 10: gy_RIzTwo_3ivq0rBuKmnXuwaM4.roa (hash: tCWSNQOzb9A+PPchWiIZ5rJnBeXKzzZ8nzXvj/Dyy5Y=) 11: magE7Oqvt4vQBy0S0W-6ngBkDPE.roa (hash: lje+xFMlOYI2U2KnAHNmX1xI+2awOlplYxa8y2jo/S0=) 12: vcGSAq_UFOrKcbjq8gwdxfB1Ibo.roa (hash: 3NDxRub2Y5A+FcimvidA2GMSTgfLKOnltwEtyfMEJ1E=) 13: yB_CfrIGe_rOQ30-OH4e0E-bsAk.roa (hash: VN5DLkVVpohVvi5e8W8Tot76S9TCt+6OKSkdhXkpmYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:d8:78:50:05:2e:f0:df:44:1c:97:03:4e:04:ce:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Mar 1 10:01:24 2026 GMT Not After : Mar 2 10:01:24 2026 GMT Subject: CN=e447db0b01987277eb173c51fe1f586a7e590503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2b:b0:cf:dd:22:b3:94:e9:ff:63:48:a1:d1: 2d:69:ac:4a:04:51:6f:f3:17:c6:64:39:a8:08:e6: 62:ba:d2:f1:36:19:44:c9:ed:79:a3:1f:19:cc:8d: 05:34:aa:61:79:ed:28:d5:10:17:ca:8a:f9:d5:e7: 7c:e7:c6:0d:18:18:f4:ed:2d:06:b3:e8:87:0f:8f: ba:80:19:ca:08:49:86:d1:25:a0:54:8e:ed:5b:f2: fa:9f:90:d9:3c:24:ff:59:a4:08:c9:43:5a:4a:2d: 0f:43:7a:51:9d:78:d1:07:8f:02:34:fb:6d:51:2f: bc:7b:50:10:1e:db:d3:a0:85:26:b3:64:69:8f:39: b1:18:3c:40:ee:93:ac:fc:4d:e0:7a:32:cf:e1:c6: 09:d9:af:c6:c8:13:70:ef:b1:7a:0d:fc:b8:8c:03: 7a:9b:e2:d9:eb:b5:ec:54:52:e3:c0:80:d5:05:bd: 0c:5a:a4:78:fc:8b:80:9e:3a:9c:58:d5:55:5a:52: f4:91:4f:58:fc:0e:2c:7c:eb:b0:bb:b7:18:10:2a: 04:c5:c7:a6:6e:6d:bf:1f:60:86:aa:65:26:b2:55: 00:dc:b2:46:07:e6:a0:18:d9:2b:0c:60:71:1b:e9: 01:ca:d5:8d:f3:7e:cc:d2:34:11:2f:d5:6d:3a:ce: 02:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:47:DB:0B:01:98:72:77:EB:17:3C:51:FE:1F:58:6A:7E:59:05:03 X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cb:d9:86:81:5b:4f:31:75:41:8d:ea:ac:15:b2:8c:80:d2: cd:80:22:73:cd:96:90:41:b2:89:89:c3:82:18:03:d1:fa:a9: 6a:a8:77:2a:38:4e:e9:7d:f2:9e:ac:39:4b:45:82:28:85:94: 93:c5:d9:f2:d8:6a:41:e9:8d:9e:51:60:9b:85:55:eb:6e:c4: 67:87:b9:91:54:4c:3d:95:ef:bb:87:81:59:14:4f:f1:e2:45: 5f:e6:87:f7:e7:c3:54:c3:95:0d:83:86:a3:dc:e7:4a:2a:44: 03:86:9f:27:41:4d:e8:fc:00:d7:b2:d2:42:ca:73:cc:d2:19: 01:1e:00:e1:cb:ee:9f:73:63:2f:b9:22:a8:37:2f:56:ce:3b: 72:fa:fd:c1:4d:6c:ed:d2:12:61:ce:ab:53:dd:e1:a6:e5:38: 01:73:81:43:31:3e:2f:9a:25:34:b4:f3:0a:ba:76:59:02:88: c5:9e:20:f5:e2:94:68:79:2f:65:fb:a5:63:4e:f5:88:93:27: cc:d2:24:d1:70:15:29:2f:20:09:bf:e0:1f:e6:aa:3a:21:d5: a1:63:d3:a6:f6:5d:e4:86:92:dc:af:f3:4a:2a:da:a6:a9:4c: 5c:0c:4c:28:13:54:9b:dc:42:fb:6b:0f:2e:bf:67:d1:72:32: c6:76:36:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyo2HhQBS7w30QclwNOBM7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjYwMzAxMTAwMTI0WhcNMjYwMzAyMTAwMTI0WjAzMTEwLwYDVQQD EyhlNDQ3ZGIwYjAxOTg3Mjc3ZWIxNzNjNTFmZTFmNTg2YTdlNTkwNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSuwz90is5Tp/2NIodEtaaxKBFFv 8xfGZDmoCOZiutLxNhlEye15ox8ZzI0FNKphee0o1RAXyor51ed858YNGBj07S0G s+iHD4+6gBnKCEmG0SWgVI7tW/L6n5DZPCT/WaQIyUNaSi0PQ3pRnXjRB48CNPtt US+8e1AQHtvToIUms2RpjzmxGDxA7pOs/E3gejLP4cYJ2a/GyBNw77F6Dfy4jAN6 m+LZ67XsVFLjwIDVBb0MWqR4/IuAnjqcWNVVWlL0kU9Y/A4sfOuwu7cYECoExcem bm2/H2CGqmUmslUA3LJGB+agGNkrDGBxG+kBytWN837M0jQRL9VtOs4CLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORH2wsBmHJ36xc8Uf4fWGp+WQUDMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8vZhoFb TzF1QY3qrBWyjIDSzYAic82WkEGyiYnDghgD0fqpaqh3KjhO6X3ynqw5S0WCKIWU k8XZ8thqQemNnlFgm4VV627EZ4e5kVRMPZXvu4eBWRRP8eJFX+aH9+fDVMOVDYOG o9znSipEA4afJ0FN6PwA17LSQspzzNIZAR4A4cvun3NjL7kiqDcvVs47cvr9wU1s 7dISYc6rU93hpuU4AXOBQzE+L5olNLTzCrp2WQKIxZ4g9eKUaHkvZfulY071iJMn zNIk0XAVKS8gCb/gH+aqOiHVoWPTpvZd5IaS3K/zSirapqlMXAxMKBNUm9xC+2sP Lr9n0XIyxnY20w== -----END CERTIFICATE-----Generated at Sun Mar 1 16:39:21 2026 by rpki-client