$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: xJw+2EO80wpebqPgREPiDibYN0yw1jqnqrBoMO9zlPk= Subject key identifier: FB:22:18:4F:FF:70:A3:34:AB:A6:29:0E:93:69:44:7E:DC:F5:11:2E Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019CBEBB0D24950E21C3B6D46E92E481B06A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 121F Signing time: Thu 05 Mar 2026 16:00:55 +0000 Manifest this update: Thu 05 Mar 2026 16:00:55 +0000 Manifest next update: Fri 06 Mar 2026 16:00:55 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 3: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 4: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 5: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 6: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 7: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 8: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 9: hd0YhlJ9IDoyXw3U8pgJ3ceuKRI.roa (hash: /lIMMHgK4zk88anoXyRyBTEvoIowJEiVJJvaW0LTkSw=) 10: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: vz98GsbBHeC/YnFVXBgtM+yyuJJEAt7yIDGluSmZqBQ=) 11: ran8AN3AZ4R2r49zo9zOMgljp88.roa (hash: VSrPvf3ym2RdveR02NWlYwS27b6vZOatiWbKlgNRz08=) 12: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) 13: uCc138TA6I8oKDd9GfZ4DDo3vbk.roa (hash: 9QywaX+xNWWX8/eIoZHqrPbZhEsxSCi5Zlf0wOs/po0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Mar 2026 16:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:be:bb:0d:24:95:0e:21:c3:b6:d4:6e:92:e4:81:b0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Mar 5 16:00:55 2026 GMT Not After : Mar 6 16:00:55 2026 GMT Subject: CN=fb22184fff70a334aba6290e9369447edcf5112e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:4e:33:34:92:12:a4:d1:f2:43:e9:5f:7a: 18:17:34:d8:f5:2f:08:ae:2e:fa:a3:23:b9:1e:e7: b1:1f:05:24:f8:a7:25:d3:f3:8d:e8:26:15:55:68: 51:dc:ed:f2:86:8e:c1:8f:a4:94:1b:f0:15:05:19: be:73:5d:d8:0d:81:2f:8a:49:0a:ae:9b:96:61:3a: 83:9f:2b:3f:21:1e:68:7a:75:50:71:5e:b3:f5:4e: 10:83:2a:09:df:39:49:4d:46:da:f5:e1:68:5b:be: ab:57:17:57:99:d9:e6:7c:a9:de:e3:ef:ec:4d:29: 6f:40:96:16:d4:01:ab:3b:2e:9b:fe:79:e4:a1:5f: 38:f2:66:19:5f:51:85:ed:05:33:fa:a0:68:34:4b: 0f:dc:cf:a8:fe:4a:bb:64:91:dd:6d:52:b6:93:6e: 97:08:6e:f9:76:90:0e:b7:b9:ae:62:f9:58:85:eb: 4d:06:42:d9:9e:d5:fb:da:c9:ed:bd:4d:d7:3b:52: ef:7c:31:c0:4f:dc:b9:a4:2e:9a:7f:7a:bb:10:a5: f2:3f:fa:04:60:73:2c:47:73:e0:b5:90:2f:a9:80: 84:9e:9d:ef:91:95:6d:40:89:cb:96:f1:84:49:1d: 4e:fd:b0:a4:70:f3:08:3d:91:09:5b:b4:ba:08:1f: 84:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:22:18:4F:FF:70:A3:34:AB:A6:29:0E:93:69:44:7E:DC:F5:11:2E X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d5:35:63:af:ec:ed:20:10:e2:5f:58:8d:53:0c:66:22:c3: a2:57:c9:57:eb:54:11:05:2e:ab:1e:8c:45:67:69:9e:65:17: a7:86:d5:81:bc:1c:15:bd:ea:a9:1a:fa:3f:bb:86:6b:a8:13: e8:13:54:ca:a2:f7:2a:02:ad:af:80:fd:d6:16:56:a6:e5:d0: 4e:0c:d9:9e:54:4b:91:79:11:fa:22:bc:b9:76:e0:56:49:c4: dc:25:19:1e:6b:2d:fe:b7:2a:84:45:90:1a:3a:0d:04:31:dc: 67:51:33:a9:44:5f:a9:8c:39:38:c0:93:52:c2:cf:c9:22:db: bf:d4:27:77:18:57:b2:0d:7a:86:25:53:4b:8a:b0:b7:c3:94: 61:1d:5e:95:b6:b7:17:2a:b5:27:a9:03:b8:c6:9d:fe:bb:d1: 29:5f:e8:98:0f:0e:a3:bf:da:28:78:58:fa:cd:ab:3d:81:7c: 1c:ed:59:e0:e4:9b:bb:74:99:d5:31:48:1d:93:1c:35:ea:bc: 9d:45:21:70:8d:44:f5:56:48:67:8c:09:a2:1e:aa:e2:0d:2a: 15:49:6d:e3:81:d5:08:bb:09:f1:bb:93:b4:f2:13:b8:fc:18: 26:8b:6f:b1:e9:30:fd:34:4e:a2:31:2a:93:61:fa:22:bf:cd: 74:35:00:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZy+uw0klQ4hw7bUbpLkgbBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwMzA1MTYwMDU1WhcNMjYwMzA2MTYwMDU1WjAzMTEwLwYDVQQD EyhmYjIyMTg0ZmZmNzBhMzM0YWJhNjI5MGU5MzY5NDQ3ZWRjZjUxMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIROMzSSEqTR8kPpX3oYFzTY9S8I ri76oyO5HuexHwUk+Kcl0/ON6CYVVWhR3O3yho7Bj6SUG/AVBRm+c13YDYEvikkK rpuWYTqDnys/IR5oenVQcV6z9U4QgyoJ3zlJTUba9eFoW76rVxdXmdnmfKne4+/s TSlvQJYW1AGrOy6b/nnkoV848mYZX1GF7QUz+qBoNEsP3M+o/kq7ZJHdbVK2k26X CG75dpAOt7muYvlYhetNBkLZntX72sntvU3XO1LvfDHAT9y5pC6af3q7EKXyP/oE YHMsR3PgtZAvqYCEnp3vkZVtQInLlvGESR1O/bCkcPMIPZEJW7S6CB+EOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsiGE//cKM0q6YpDpNpRH7c9REuMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9U1Y6/s 7SAQ4l9YjVMMZiLDolfJV+tUEQUuqx6MRWdpnmUXp4bVgbwcFb3qqRr6P7uGa6gT 6BNUyqL3KgKtr4D91hZWpuXQTgzZnlRLkXkR+iK8uXbgVknE3CUZHmst/rcqhEWQ GjoNBDHcZ1EzqURfqYw5OMCTUsLPySLbv9QndxhXsg16hiVTS4qwt8OUYR1elba3 Fyq1J6kDuMad/rvRKV/omA8Oo7/aKHhY+s2rPYF8HO1Z4OSbu3SZ1TFIHZMcNeq8 nUUhcI1E9VZIZ4wJoh6q4g0qFUlt44HVCLsJ8buTtPITuPwYJotvsekw/TROojEq k2H6Ir/NdDUATw== -----END CERTIFICATE-----Generated at Thu Mar 5 23:43:58 2026 by rpki-client