$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: gCV5Td07lJGbl0D1v7j3FFI7nBiHkmnKZrDOZigDcRg= Subject key identifier: 0B:57:3C:0E:8B:25:FF:FF:9E:84:DA:E9:A7:EB:7D:9A:14:60:53:7E Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019CCB9B924D3DD3E1CA9ADCECA489418B4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 1264 Signing time: Sun 08 Mar 2026 04:01:36 +0000 Manifest this update: Sun 08 Mar 2026 04:01:36 +0000 Manifest next update: Mon 09 Mar 2026 04:01:36 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: LGYYJzVvI0SA1InEjiSr5tKpDSdc/C4TOJNkipMZYIQ=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 9: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 10: myFCIcbDjAfUFsTW0a-pFUEt6gs.roa (hash: TuRTyO0NRY/3a0axA5HneX8R1NypXuOC0siuMNuJ6sU=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 22:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:cb:9b:92:4d:3d:d3:e1:ca:9a:dc:ec:a4:89:41:8b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Mar 8 04:01:36 2026 GMT Not After : Mar 9 04:01:36 2026 GMT Subject: CN=0b573c0e8b25ffff9e84dae9a7eb7d9a1460537e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:ce:b0:79:53:6e:fb:c5:13:60:90:c2:f0: 52:d1:96:1e:e6:56:a8:b4:81:cc:99:b0:4c:90:4a: 25:7a:db:dd:a9:0e:89:b1:81:31:a7:14:f5:49:04: 31:7f:23:ac:7e:ac:7f:d0:11:b4:61:e2:32:36:0e: a1:c6:6f:90:30:7d:36:7e:f5:d8:f8:94:1e:30:5c: 4d:cb:38:2e:df:16:f0:73:4e:12:26:62:c0:c1:96: 28:45:aa:7d:c2:ea:97:e9:7f:55:29:e0:e5:ac:df: 11:e4:33:fb:db:02:b4:36:47:77:ef:b5:cc:21:42: 1f:7d:c9:00:1e:ef:6b:e0:26:c4:98:88:d4:9c:52: f0:eb:f1:aa:f3:a6:c0:80:f2:71:82:ae:71:45:85: 6d:b3:62:b3:98:dc:0e:55:d9:84:4c:ac:0b:62:54: e8:fd:b8:fc:6b:10:2c:11:5c:e2:37:67:39:fa:92: 50:3b:d1:1d:09:45:10:e5:fd:fb:51:53:88:82:6b: 5a:03:5c:ff:45:2d:e5:8e:24:4c:ae:2d:4b:4e:3a: 1e:b6:b8:7f:02:e6:1b:68:92:6f:03:3d:9a:8f:10: b0:00:94:81:5c:39:0c:2b:b5:61:d3:2e:e2:56:6a: 80:d3:d3:0f:4c:88:cd:8d:33:21:f4:38:63:a4:a0: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:57:3C:0E:8B:25:FF:FF:9E:84:DA:E9:A7:EB:7D:9A:14:60:53:7E X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d5:84:ad:5e:42:49:d6:61:06:a8:37:ce:3f:10:ae:93:c3: 28:e9:9e:36:41:31:c8:9f:9e:1f:48:db:50:92:dc:c3:9a:4d: 75:8b:60:2c:c1:59:87:50:0b:22:29:af:41:23:55:75:8e:bc: 62:e0:85:56:08:e8:72:78:82:5d:05:25:0a:b0:e3:05:bc:a7: 0a:c2:1f:57:22:f0:b2:c3:56:53:d4:48:33:f7:20:50:37:ae: 24:2f:9d:8d:fb:4b:fb:69:cc:30:8c:86:73:ca:11:9c:34:64: b5:a5:2d:e1:ab:fc:21:f0:c4:45:88:f0:44:66:03:fe:ac:68: 9d:50:2a:3c:b0:cb:29:ad:5a:3f:12:67:ff:6a:6a:db:c0:65: 90:e8:88:4a:e9:0e:06:ed:f4:ae:f4:f8:95:82:2e:7e:b1:ab: 51:34:b1:41:c5:c1:30:06:4d:17:f3:47:42:a5:3c:a1:ed:da: f6:fe:f8:93:78:6a:c7:8e:01:9a:d8:9e:43:ee:7d:a5:c8:d1: 56:c6:76:47:55:cb:3a:e7:46:f7:47:fb:48:de:08:35:a3:2a: 32:4a:ce:0a:86:36:61:51:7f:74:46:5d:8d:0b:73:04:9b:d1: 95:90:f2:fc:b7:56:33:eb:1b:5e:79:5d:20:39:56:56:3e:e2: 7a:85:7e:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzLm5JNPdPhyprc7KSJQYtPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwMzA4MDQwMTM2WhcNMjYwMzA5MDQwMTM2WjAzMTEwLwYDVQQD EygwYjU3M2MwZThiMjVmZmZmOWU4NGRhZTlhN2ViN2Q5YTE0NjA1MzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgbOsHlTbvvFE2CQwvBS0ZYe5lao tIHMmbBMkEoletvdqQ6JsYExpxT1SQQxfyOsfqx/0BG0YeIyNg6hxm+QMH02fvXY +JQeMFxNyzgu3xbwc04SJmLAwZYoRap9wuqX6X9VKeDlrN8R5DP72wK0Nkd377XM IUIffckAHu9r4CbEmIjUnFLw6/Gq86bAgPJxgq5xRYVts2KzmNwOVdmETKwLYlTo /bj8axAsEVziN2c5+pJQO9EdCUUQ5f37UVOIgmtaA1z/RS3ljiRMri1LTjoetrh/ AuYbaJJvAz2ajxCwAJSBXDkMK7Vh0y7iVmqA09MPTIjNjTMh9DhjpKD9rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtXPA6LJf//noTa6afrfZoUYFN+MB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtWErV5C SdZhBqg3zj8QrpPDKOmeNkExyJ+eH0jbUJLcw5pNdYtgLMFZh1ALIimvQSNVdY68 YuCFVgjocniCXQUlCrDjBbynCsIfVyLwssNWU9RIM/cgUDeuJC+djftL+2nMMIyG c8oRnDRktaUt4av8IfDERYjwRGYD/qxonVAqPLDLKa1aPxJn/2pq28BlkOiISukO Bu30rvT4lYIufrGrUTSxQcXBMAZNF/NHQqU8oe3a9v74k3hqx44BmtieQ+59pcjR VsZ2R1XLOudG90f7SN4INaMqMkrOCoY2YVF/dEZdjQtzBJvRlZDy/LdWM+sbXnld IDlWVj7ieoV+WQ== -----END CERTIFICATE-----Generated at Sun Mar 8 08:40:19 2026 by rpki-client