$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: bWZkek/kkFAp82nVNoepWQENDBz6wEYIyQ566rh0D64= Subject key identifier: A4:2C:7C:11:B3:BC:06:04:8F:41:FC:B9:D9:B1:A9:A7:C3:EC:27:02 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019CE25A0DAB22D2972829DEC07EC146807D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 08AE Signing time: Thu 12 Mar 2026 14:01:18 +0000 Manifest this update: Thu 12 Mar 2026 14:01:18 +0000 Manifest next update: Fri 13 Mar 2026 14:01:18 +0000 Files and hashes: 1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=) 2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=) 3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: DsL4xvNmfpINmqDA4ZGc1KZG04LidaVeAU0Lq2KiL/I=) 4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=) 5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=) 6: DC-2va12O2p4wJaztsxQYqxlteI.roa (hash: 8DuSeuFCejqmMZ/sp4dL3rLoQsC1vmmd0qUYceaaN1Y=) 7: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=) 8: GXpP16JP0Mjym_u_vszjldIXucM.roa (hash: 0GFGujZKcR3Ga+pFC/exC5L1CnjeKo6DgEs39y2hAc4=) 9: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=) 10: QxRT0q4FzTnTcacN8tWvzsCAarc.roa (hash: XiEdwKLVvGeQdfVFaF47mebbaJXtp25EOB5RwY48keA=) 11: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=) 12: SyWHbYOnHu_cvDaajuYM-To7M1w.roa (hash: YSRENKcj3fhKWRCWRTPdwxBLbJ6LeYaoc5YN/u+MBoM=) 13: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=) 14: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=) 15: _Hrgg9TwnO9PoE-2Cm9MNkAYl0w.roa (hash: bu/cyj5EwB3TDiwyIVSQeElzT+joOr0r21e4GEpp8jI=) 16: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=) 17: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=) 18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=) 19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 14:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e2:5a:0d:ab:22:d2:97:28:29:de:c0:7e:c1:46:80:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Mar 12 14:01:18 2026 GMT Not After : Mar 13 14:01:18 2026 GMT Subject: CN=a42c7c11b3bc06048f41fcb9d9b1a9a7c3ec2702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e4:51:db:f8:68:b0:97:f1:5a:ab:fd:e5:1f: de:20:be:b1:11:61:a4:09:a4:84:14:27:49:24:11: 0c:c7:c7:80:83:e3:6e:92:2a:c5:3b:f6:47:a2:ff: e4:72:1a:ab:7e:f6:08:87:4d:2f:13:66:78:91:e9: ca:f5:eb:87:eb:a2:84:2a:44:2e:87:c1:bf:b5:64: 12:ab:15:ac:55:28:ac:44:64:70:1e:ae:07:14:8f: 9c:67:8b:7d:a6:d7:c8:53:82:65:12:93:4f:53:a6: ce:7f:7d:5c:51:30:68:2a:fc:fb:7b:57:fe:b2:fe: 6c:b9:94:1a:90:db:f6:4e:43:8e:05:3e:f0:6c:70: 02:eb:a6:1f:3d:83:6f:43:27:4b:81:29:04:57:7e: cd:f9:22:8d:f6:71:a4:8c:ca:19:d1:ba:b4:f5:ab: 3a:0a:a4:64:e1:73:26:ba:24:87:0b:00:79:e5:29: e5:8a:da:b1:16:da:54:df:02:cc:1d:6c:dc:3f:9e: 9d:e6:36:0b:21:e8:f1:77:c6:a9:ca:35:ac:ce:b3: 00:60:06:dd:d4:cf:09:4b:51:43:8f:5e:52:6d:cb: a8:38:f4:38:89:36:de:7b:74:2c:4a:3e:a1:90:d4: ae:05:53:e6:b2:b2:15:a2:23:89:96:08:64:a0:f2: 32:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2C:7C:11:B3:BC:06:04:8F:41:FC:B9:D9:B1:A9:A7:C3:EC:27:02 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:78:60:b6:b5:02:63:b1:64:6c:5c:cf:1a:d2:1d:00:80:af: d7:c2:5a:15:90:a7:c7:c2:b1:7e:07:af:2c:30:e0:13:3b:ea: cf:6e:9d:1b:06:9b:1e:ae:48:ea:df:aa:52:42:71:3f:d9:22: b9:28:d3:90:be:b1:1e:5e:d3:f0:92:07:35:b2:f0:35:50:9b: c1:a1:86:35:67:f9:65:69:d4:7e:9c:34:81:f6:ee:3d:61:42: 57:48:b8:02:a0:fd:c0:d2:87:42:ca:77:e3:a3:1d:f3:6a:e9: 27:ac:eb:c0:13:3d:89:4b:0b:71:e9:6a:14:37:60:73:f4:2b: 7a:47:38:f2:f3:1a:23:0f:82:1a:7d:87:ab:a1:ee:12:20:97: b9:80:bb:0b:4d:df:6f:56:5d:ec:0d:54:21:e4:3b:2e:4c:94: ab:7d:46:01:06:e2:4a:04:31:b3:97:3f:9d:eb:4d:52:83:2e: 1d:8a:43:b3:d5:00:5a:af:98:e0:db:2b:40:07:03:77:4e:43: 8f:53:75:34:a1:dd:4e:7e:15:80:00:1c:93:3a:0f:86:25:04: ec:ca:bb:98:e9:1c:dd:14:c6:2e:39:12:e4:ec:42:df:e9:49: d5:d3:42:2d:26:3f:4f:06:97:f2:8e:84:82:1b:77:cf:1c:63: 20:0a:14:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZziWg2rItKXKCnewH7BRoB9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwMzEyMTQwMTE4WhcNMjYwMzEzMTQwMTE4WjAzMTEwLwYDVQQD EyhhNDJjN2MxMWIzYmMwNjA0OGY0MWZjYjlkOWIxYTlhN2MzZWMyNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+RR2/hosJfxWqv95R/eIL6xEWGk CaSEFCdJJBEMx8eAg+NukirFO/ZHov/kchqrfvYIh00vE2Z4kenK9euH66KEKkQu h8G/tWQSqxWsVSisRGRwHq4HFI+cZ4t9ptfIU4JlEpNPU6bOf31cUTBoKvz7e1f+ sv5suZQakNv2TkOOBT7wbHAC66YfPYNvQydLgSkEV37N+SKN9nGkjMoZ0bq09as6 CqRk4XMmuiSHCwB55SnlitqxFtpU3wLMHWzcP56d5jYLIejxd8apyjWszrMAYAbd 1M8JS1FDj15SbcuoOPQ4iTbee3QsSj6hkNSuBVPmsrIVoiOJlghkoPIydQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQsfBGzvAYEj0H8udmxqafD7CcCMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3hgtrUC Y7FkbFzPGtIdAICv18JaFZCnx8KxfgevLDDgEzvqz26dGwabHq5I6t+qUkJxP9ki uSjTkL6xHl7T8JIHNbLwNVCbwaGGNWf5ZWnUfpw0gfbuPWFCV0i4AqD9wNKHQsp3 46Md82rpJ6zrwBM9iUsLcelqFDdgc/Qrekc48vMaIw+CGn2Hq6HuEiCXuYC7C03f b1Zd7A1UIeQ7LkyUq31GAQbiSgQxs5c/netNUoMuHYpDs9UAWq+Y4NsrQAcDd05D j1N1NKHdTn4VgAAckzoPhiUE7Mq7mOkc3RTGLjkS5OxC3+lJ1dNCLSY/TwaX8o6E ght3zxxjIAoUcA== -----END CERTIFICATE-----Generated at Thu Mar 12 20:56:13 2026 by rpki-client