$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: RkZm5d1jj+7de4h6eXmhDnFaO4zVvd22Ww32dsCXom0= Subject key identifier: 18:6F:11:AC:7B:78:3F:AA:49:5D:9A:0B:BC:84:31:C0:38:57:53:3E Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019CAA8FC9A2E95A0DF22239E07F5A05FAEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 1869 Signing time: Sun 01 Mar 2026 18:01:15 +0000 Manifest this update: Sun 01 Mar 2026 18:01:15 +0000 Manifest next update: Mon 02 Mar 2026 18:01:15 +0000 Files and hashes: 1: 3Uhad0KFSfjXI_TbydoftNMdE3g.roa (hash: j9tyqYt4el5e/EHBRQPaMKBm+kYVSqQDGKdC5+GV1fw=) 2: Bk6mhjbAPimoy9O8jJRqZHLZSJU.roa (hash: CRboPUG4oJolEwvE5c5jnLFpPL7/YyxyOdnbwDVhbDA=) 3: EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa (hash: BrnZ+O7PpPP2CgQz6l0MWy62IQSvfZEBI+G8ayJnLRE=) 4: GCKLMhjEZ4tgpahsAAW0b7v-pbY.roa (hash: vfauSOW8KSxhKm84diH34kDOUYgfp1RoadLmCV5cdWc=) 5: W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa (hash: fb2PFmFnYQYmWpVf2HANiiXyOyVRMMcnLRhOHSluDkI=) 6: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: xfv+1pDc5HeXMgCE4eNNcA8i++DSor5ABiX7nsqom24=) 7: fuQjo-R8V7RgupEifO88mUFsfq4.roa (hash: XgKKf+T/JHflu47fZ8lbK7Ea+coPaRrFsg001BzHny4=) 8: m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa (hash: RVNHVX31tSGpQABOxa6EqSIdwiAZEEfgy9G0c8Rv6CQ=) 9: njVUBNP2pawlmJYfjO-aqV7rHxg.roa (hash: KsrtTqSnlW3K+gpEPkMgT8sO+EsW0Fbd90twROTiMXk=) 10: qSxlathEcN6ZfWcqIYKI4rq_zNk.roa (hash: LYI2xAakIbFGxMC1GmxnDwbT1/w57IsHNS5Uguz6j68=) 11: tA_6j6gquShwOWQHuXqZmv-DGJ8.roa (hash: MBd1V9peNX1ONVT7gAUeTBj/y3gvMH+RO35qWdORDv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:8f:c9:a2:e9:5a:0d:f2:22:39:e0:7f:5a:05:fa:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Mar 1 18:01:15 2026 GMT Not After : Mar 2 18:01:15 2026 GMT Subject: CN=186f11ac7b783faa495d9a0bbc8431c03857533e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:ac:dd:84:6a:df:19:74:33:23:36:86:e8: a3:4e:b5:b4:55:26:49:7f:78:cd:b5:e7:75:db:f2: 88:12:07:d9:cb:11:4a:89:02:a7:33:ba:f8:fc:6a: da:23:37:72:85:a8:03:b3:bc:9f:36:91:33:7c:df: bf:7f:af:25:f3:de:b7:4e:28:37:e2:84:18:7d:31: cb:02:4c:65:a6:e7:30:d3:0b:5b:e6:9c:70:d0:07: b0:e6:22:9a:7f:db:97:91:f8:07:8d:85:b7:e9:59: fc:3a:00:aa:08:e0:35:77:ca:f5:52:f3:dd:bb:69: 24:b6:b8:bd:af:52:fc:31:6b:66:a6:87:4f:d7:b6: eb:8b:8d:04:e5:47:45:15:8f:50:c9:c4:26:48:11: 21:59:b0:15:b2:78:da:a1:7d:dc:44:b2:bb:85:d3: e1:88:f4:a4:5b:d1:b1:cd:90:3c:a2:aa:e4:f6:69: 8c:ca:19:fd:35:56:b2:20:ab:f6:5a:33:87:ea:3c: 49:4c:fd:ea:21:88:2e:38:53:42:b8:0f:35:41:9b: c7:64:42:e0:91:68:52:a6:d9:83:90:a6:56:bf:b1: 4f:d3:43:2b:6f:47:9b:42:09:ac:ab:ee:0c:74:bc: de:41:19:61:47:b8:9a:15:65:48:be:5e:5a:9c:f8: db:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6F:11:AC:7B:78:3F:AA:49:5D:9A:0B:BC:84:31:C0:38:57:53:3E X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ad:5e:bf:c7:5a:9d:a5:04:c2:f4:9d:33:58:19:50:c4:ca: b5:b1:6c:a3:b3:33:95:82:d8:47:f9:32:0b:cb:67:f1:95:9a: da:32:82:04:14:b7:bd:ec:eb:0b:22:05:8f:85:1f:4a:b2:3b: 0b:60:62:3a:c9:11:13:d8:44:e9:26:98:da:df:9a:11:33:e8: 43:f8:43:4b:07:c5:87:52:db:7e:d7:4f:2d:47:e2:d5:54:58: cd:87:fa:bd:b1:7e:c9:ac:ac:bd:60:70:11:5e:c4:52:d8:73: 9e:c6:bb:d9:d9:4d:77:30:c5:c6:d3:cb:21:a2:b0:59:c1:2c: 6c:19:38:fb:b9:b2:19:73:b7:f9:6d:52:59:34:0a:cb:fe:32: a7:82:af:0c:6e:00:04:82:7f:34:09:35:34:56:47:3a:41:4e: 92:af:af:53:73:a5:6d:28:86:5b:7b:2b:9d:55:bc:df:57:00: 53:70:50:5d:78:f2:72:1d:96:4b:bb:12:10:46:bf:32:86:cc: 40:37:85:0a:92:00:51:07:e7:db:e2:e3:bd:da:b7:da:19:bf: b0:42:e0:73:f4:00:70:de:b9:61:4c:0b:82:03:46:4d:4e:53: 94:4f:db:b1:06:74:0e:a1:cb:d2:18:76:32:24:3f:d0:3b:8b: 1a:54:1b:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqj8mi6VoN8iI54H9aBfrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjYwMzAxMTgwMTE1WhcNMjYwMzAyMTgwMTE1WjAzMTEwLwYDVQQD EygxODZmMTFhYzdiNzgzZmFhNDk1ZDlhMGJiYzg0MzFjMDM4NTc1MzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLGs3YRq3xl0MyM2huijTrW0VSZJ f3jNted12/KIEgfZyxFKiQKnM7r4/GraIzdyhagDs7yfNpEzfN+/f68l8963Tig3 4oQYfTHLAkxlpucw0wtb5pxw0Aew5iKaf9uXkfgHjYW36Vn8OgCqCOA1d8r1UvPd u2kktri9r1L8MWtmpodP17bri40E5UdFFY9QycQmSBEhWbAVsnjaoX3cRLK7hdPh iPSkW9GxzZA8oqrk9mmMyhn9NVayIKv2WjOH6jxJTP3qIYguOFNCuA81QZvHZELg kWhSptmDkKZWv7FP00Mrb0ebQgmsq+4MdLzeQRlhR7iaFWVIvl5anPjb9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhvEax7eD+qSV2aC7yEMcA4V1M+MB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARK1ev8da naUEwvSdM1gZUMTKtbFso7MzlYLYR/kyC8tn8ZWa2jKCBBS3vezrCyIFj4UfSrI7 C2BiOskRE9hE6SaY2t+aETPoQ/hDSwfFh1LbftdPLUfi1VRYzYf6vbF+yaysvWBw EV7EUthznsa72dlNdzDFxtPLIaKwWcEsbBk4+7myGXO3+W1SWTQKy/4yp4KvDG4A BIJ/NAk1NFZHOkFOkq+vU3OlbSiGW3srnVW831cAU3BQXXjych2WS7sSEEa/MobM QDeFCpIAUQfn2+Ljvdq32hm/sELgc/QAcN65YUwLggNGTU5TlE/bsQZ0DqHL0hh2 MiQ/0DuLGlQbnA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:04:32 2026 by rpki-client