$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: 04l5FVT2nb9uAHHtjg8dX4rgbFumtz3s7IRcUsg8RyI= Subject key identifier: EA:FF:7E:D4:C4:B4:97:F8:4D:1F:8A:02:B6:40:2A:F4:0F:45:FE:09 Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019CAA5905C4DBF488914118C3821D17909D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 18A4 Signing time: Sun 01 Mar 2026 17:01:26 +0000 Manifest this update: Sun 01 Mar 2026 17:01:26 +0000 Manifest next update: Mon 02 Mar 2026 17:01:26 +0000 Files and hashes: 1: 1onWddNgt-hbXxg-7fMMVDkSMv8.roa (hash: 6xbzz0JrjMO/4fz5zHo8PgQ0CyGaKVVD/UoDkWFGr1M=) 2: 4k3-HpRCXFW3j7_8C4stbYfFUYA.roa (hash: C8f2KuD10zOuLUQcMwm5C74B3yZTjBcW9yOV/aVWErg=) 3: 5UPZqCFDlJ5D1iQwuO7Whotg5SI.roa (hash: FxbZPuvP2Ml6gGQGICNHacA5M1J8tjtnjSqNFBDSXLU=) 4: 8MDk26A6HB8ESAemQVS635P3dlM.roa (hash: rxyUnW+DZGiT5coh/pmWc5vX6tfUq/igWAH5aJLS19c=) 5: KQn12ky7VJ-tAtskwp7iCPXzI1k.roa (hash: zGzNyPJigVx6eOde+xN7bw20k8KV75kMtISB9OstCUU=) 6: Mk0-N7mvZ3KWAly3iF5fwB7VcZE.roa (hash: NYmNk/By4ADW250NalqgvyLYgyA79aFXrC+VO1jjeiQ=) 7: QKaa5M_Ls464BGXTJZlXMkecYvk.roa (hash: VYfsIkTwFvkSA3FB9Pu7FhpTVM9hzat73ShbqylONR8=) 8: Un_qTs_qUw6Cr9rSAjxMcB_qwIQ.roa (hash: /NZAsUlQyUhQsDytYI9yrui4/CAPCfbgRtz4l6TLnkU=) 9: Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa (hash: cEsowcsrRQw+N5wEyAbdQXCFdceUeFzwtiYgytJDtj8=) 10: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: RClCRtq2VQR0wn04kCU2M4k5ySujciqOzgeVRhqBctk=) 11: aKvQ03F1bR1q6-Woc8m1q6jONu8.roa (hash: LcJqfZb4sulh5jvt0J4ioSYZjOzoPCpUud+7/IHHoW8=) 12: eTIL1VK4_PVdXFi5gF5woEPQkG8.roa (hash: NczJzTK4m8r22rHAsuaTAYefyiahprGtNN7PoBZHmEM=) 13: ip7XsN0-IlSnuEP_E--FUjD8qf0.roa (hash: CO94Nw8OySvoAWy5RjY0I0/eplwWsGb3UO5iKzV120U=) 14: mbB51hFS6jH8HK0-dJUSm4wpEpI.roa (hash: lDypwq+CBGjEuUL6RnWIfcm6fXix1eyyn3BTrn4SJ2c=) 15: nwyoORHnVLqfYrksvB0f6CfIa6k.roa (hash: e9CYwkBaqUibsyMU/gzh+rV4KhbNY883umfRTcrBM0Y=) 16: t0cVkqPZjARFv36ftR5F1LXB_P8.roa (hash: aH1VNEGWBhfBG6pKNECJ5Njp4Dom+Xvfv76b48XldZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:59:05:c4:db:f4:88:91:41:18:c3:82:1d:17:90:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Mar 1 17:01:26 2026 GMT Not After : Mar 2 17:01:26 2026 GMT Subject: CN=eaff7ed4c4b497f84d1f8a02b6402af40f45fe09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ee:60:54:4e:87:6b:d5:40:d0:53:32:75:9f: 0e:80:7c:51:e3:7e:2a:f2:4a:06:91:4f:28:73:57: 84:bd:e0:74:03:d6:b8:44:a3:dc:a3:72:bd:8e:4d: de:eb:28:78:e3:7e:79:13:b1:27:54:17:07:42:f8: 20:3e:03:61:54:76:64:90:e8:5f:d3:79:5a:f2:7d: 13:ff:53:3a:6b:18:86:97:6f:72:00:bd:66:58:7d: 14:1b:24:08:19:ff:39:51:02:01:8a:87:4c:5c:6d: 5f:e8:76:dd:db:eb:85:5e:2c:d6:d8:e4:b9:c8:62: bb:57:ea:db:66:19:ba:df:25:58:5a:e9:5a:d3:7d: 05:3d:09:c0:82:8b:fc:37:c7:f5:d4:9d:af:37:0d: b8:52:eb:35:9c:07:6c:e8:b8:60:9e:0b:8b:d9:a8: dd:bc:6d:8f:e9:0c:2e:e1:a7:4a:6e:2c:37:47:0d: 94:e9:52:12:73:4d:f3:11:21:3c:fd:9e:34:9c:86: 59:3f:03:3d:9e:dd:16:6f:44:e1:de:f4:2e:0f:e5: f9:9e:a3:37:0e:60:f3:96:c4:a1:a0:bc:b9:d9:7a: b6:81:e0:97:72:60:7a:69:b1:30:3f:38:ed:f7:35: 76:80:c2:eb:d1:f2:82:c1:3e:4c:67:e3:56:2d:b0: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FF:7E:D4:C4:B4:97:F8:4D:1F:8A:02:B6:40:2A:F4:0F:45:FE:09 X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:a7:e0:25:2e:7d:2d:35:ce:18:25:41:49:27:92:f5:2f:f0: 6f:16:ac:0d:9d:7c:b9:6c:36:00:27:a0:09:ac:23:f0:b6:ae: b4:99:17:64:a5:3b:ff:ac:67:77:d4:c9:d5:60:47:51:35:9f: 1b:a8:f7:7e:d0:65:d7:5c:e2:30:9b:60:f9:60:62:78:f1:ae: 43:ad:79:02:9c:4c:6b:d1:8b:b8:48:4e:7b:d0:99:d8:d0:5c: ca:1f:f4:de:61:98:0f:2c:27:94:7f:c8:f6:00:87:7d:a6:b0: bd:3e:59:83:1b:45:67:4d:f0:1f:d4:3e:06:19:63:c1:30:09: 25:f2:25:ea:4e:75:20:d4:98:7f:59:64:17:1c:9a:b6:90:c6: 77:8a:8b:93:5d:3d:8e:bc:9c:55:0b:4b:1a:04:d5:0f:d5:44: 3f:99:13:d7:b1:2c:91:3e:12:8e:93:e9:22:15:3d:82:69:70: 18:3c:ab:0c:74:61:75:75:69:cf:3e:dd:1a:44:65:56:ff:b2: 73:ea:15:b7:de:f0:73:67:37:ea:37:bf:30:60:c7:83:6e:e2: 47:6c:6c:78:42:e1:4b:00:9c:42:42:e8:12:7e:9b:31:6f:e3: f3:fa:21:2d:16:76:45:21:c8:04:79:a2:c1:7c:40:88:0d:4b: 35:a1:80:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqWQXE2/SIkUEYw4IdF5CdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjYwMzAxMTcwMTI2WhcNMjYwMzAyMTcwMTI2WjAzMTEwLwYDVQQD EyhlYWZmN2VkNGM0YjQ5N2Y4NGQxZjhhMDJiNjQwMmFmNDBmNDVmZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O5gVE6Ha9VA0FMydZ8OgHxR434q 8koGkU8oc1eEveB0A9a4RKPco3K9jk3e6yh44355E7EnVBcHQvggPgNhVHZkkOhf 03la8n0T/1M6axiGl29yAL1mWH0UGyQIGf85UQIBiodMXG1f6Hbd2+uFXizW2OS5 yGK7V+rbZhm63yVYWula030FPQnAgov8N8f11J2vNw24Uus1nAds6LhgnguL2ajd vG2P6Qwu4adKbiw3Rw2U6VISc03zESE8/Z40nIZZPwM9nt0Wb0Th3vQuD+X5nqM3 DmDzlsShoLy52Xq2geCXcmB6abEwPzjt9zV2gMLr0fKCwT5MZ+NWLbBfdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOr/ftTEtJf4TR+KArZAKvQPRf4JMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuafgJS59 LTXOGCVBSSeS9S/wbxasDZ18uWw2ACegCawj8LautJkXZKU7/6xnd9TJ1WBHUTWf G6j3ftBl11ziMJtg+WBiePGuQ615ApxMa9GLuEhOe9CZ2NBcyh/03mGYDywnlH/I 9gCHfaawvT5ZgxtFZ03wH9Q+BhljwTAJJfIl6k51INSYf1lkFxyatpDGd4qLk109 jrycVQtLGgTVD9VEP5kT17EskT4SjpPpIhU9gmlwGDyrDHRhdXVpzz7dGkRlVv+y c+oVt97wc2c36je/MGDHg27iR2xseELhSwCcQkLoEn6bMW/j8/ohLRZ2RSHIBHmi wXxAiA1LNaGAAQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:56:59 2026 by rpki-client