$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: xViIO2AaR3I593yTC8952QjqYUFEEpg9nZWHOJHt/Es= Subject key identifier: CE:D6:BB:83:A5:19:8D:AB:A7:AE:7B:B3:69:D2:81:E1:86:43:F7:36 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019CC93E654D7EEEBD80FFDB1D2342000CE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1958 Signing time: Sat 07 Mar 2026 17:00:35 +0000 Manifest this update: Sat 07 Mar 2026 17:00:35 +0000 Manifest next update: Sun 08 Mar 2026 17:00:35 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: mF5lOcUh7+vTMOj11sZs32BE3M9KH7/YLRw+gjybmAM=) 3: 2WrIc3-SP4DwQkwPJgua1bGNJ8U.roa (hash: 1n+jxmJd5F9eDLk5zWmpaiLv++ZbzD7Fd2FD1jx9EQI=) 4: 2tySjVTQSHiULWpIIHxe3UTXyKc.roa (hash: 11efIhc4jliYz5b7ccbbcBy+lueobimG/f4ImBFKSr4=) 5: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 6: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 7: CW-qcI1ohMNZFrtxwKP6h3IuUsY.roa (hash: Q0m3SYkmGKp057as4cDbrXW6Plo1d3nxk1JPEsbDaPY=) 8: EQGugxJGZZhy7ULlXu2xf-8SXLU.roa (hash: UznnK9y+/YnAzmFCMUsWlBbf7xpLU6GolAvI0bvVwdE=) 9: Hn6HT0rI8yw7OpMX6Ki5ydHEALE.roa (hash: zwMQqyYw0odC6f9bIE+RcXjMzhkbC7l0+euZhieJ6Hw=) 10: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 11: b9b4J-MZL7V3ZGeqeJgMGRcaM0U.asa (hash: 4N2HHHaR2GuXJ1UFnYx11sFy5wWNh7GfZPfqfmEWwDc=) 12: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 13: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 14: iyfIsG_zCzXslesxdnK347yeiF4.roa (hash: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=) 15: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 16: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c9:3e:65:4d:7e:ee:bd:80:ff:db:1d:23:42:00:0c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Mar 7 17:00:35 2026 GMT Not After : Mar 8 17:00:35 2026 GMT Subject: CN=ced6bb83a5198daba7ae7bb369d281e18643f736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:3e:63:cf:9c:81:46:8a:d8:a6:14:7c:c4: e7:7a:c6:59:bb:a0:90:8f:a5:49:1c:3a:b2:8b:2e: 17:2b:a7:6b:c8:85:f3:7e:2f:a2:ef:df:68:02:30: 0f:1d:bd:f7:26:83:94:c3:16:f6:26:9b:4c:bc:be: b0:9a:15:21:8e:e5:46:5d:ec:58:5b:72:9f:7e:ab: a4:72:00:ec:e6:07:c3:d4:d8:a7:ca:ce:77:cb:3f: 00:5b:44:df:e1:17:0e:c8:28:75:63:2a:47:21:49: 16:89:27:e6:2c:5d:52:c0:5b:6a:ff:d4:2c:e2:86: 2f:6e:50:26:c8:77:a2:85:9c:71:20:74:67:8a:78: 42:81:82:9b:63:65:ef:33:33:ee:a1:25:5d:91:63: b5:bd:4b:53:d7:e5:06:4f:cf:73:9d:1e:d3:4f:5f: c6:f5:f6:5d:7b:51:dc:72:3d:77:90:44:08:f8:cc: f9:fa:ca:8d:e6:89:7c:3c:58:6a:a5:0e:76:3a:f8: 4a:2f:55:74:18:0b:76:3f:54:fe:2f:37:a2:53:c1: a6:2e:88:fa:9d:2d:7b:b0:a2:1e:3f:e1:7d:94:71: 42:9b:42:08:e8:e3:f6:15:1a:3f:a7:72:fe:5d:28: 8e:b3:d5:26:67:c4:a8:d0:fa:49:98:76:4d:bb:8d: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D6:BB:83:A5:19:8D:AB:A7:AE:7B:B3:69:D2:81:E1:86:43:F7:36 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:95:38:2d:a7:49:2f:9a:bb:c5:fc:ca:66:7d:bc:64:3c:3d: 23:31:f9:5e:bd:08:0f:7a:bd:82:8c:95:42:39:88:8c:b6:ef: a4:6e:dd:5c:a3:f5:ce:87:47:4a:c9:ae:04:21:81:20:07:49: af:56:6e:1b:8a:75:51:95:50:06:23:90:bf:29:11:a0:1d:d7: fd:5b:12:a6:10:3e:10:11:c5:ca:07:5d:bf:40:69:b4:23:44: 45:c6:97:c3:68:0c:84:12:df:60:d3:02:a3:95:64:43:cc:c9: b0:18:7d:64:c4:85:07:bc:8c:64:c0:1f:ad:b4:b6:42:04:04: a8:fa:0e:df:fb:6b:49:c0:e2:d1:03:78:ba:b9:ec:a6:46:21: 1e:93:18:9b:ee:ca:00:d9:6d:48:81:69:d8:f8:80:58:63:a4: 29:14:c4:17:d0:3e:c3:c5:ee:67:9e:2b:53:5f:6d:10:a0:d5: a7:19:4d:b4:15:0a:fc:2c:06:80:c5:c6:88:a9:f8:84:a7:82: 43:66:f1:e8:e2:f3:2e:eb:01:b9:63:a4:3e:cc:2f:fd:75:92: d9:11:fc:d4:a6:f1:88:cc:05:28:8e:4b:1f:34:6d:6c:c9:b7: c5:90:68:65:41:13:5b:d3:14:a1:8c:21:f1:a5:ce:d5:0e:1b: 45:ab:a1:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzJPmVNfu69gP/bHSNCAAzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwMzA3MTcwMDM1WhcNMjYwMzA4MTcwMDM1WjAzMTEwLwYDVQQD EyhjZWQ2YmI4M2E1MTk4ZGFiYTdhZTdiYjM2OWQyODFlMTg2NDNmNzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Yg+Y8+cgUaK2KYUfMTnesZZu6CQ j6VJHDqyiy4XK6dryIXzfi+i799oAjAPHb33JoOUwxb2JptMvL6wmhUhjuVGXexY W3KffqukcgDs5gfD1Ninys53yz8AW0Tf4RcOyCh1YypHIUkWiSfmLF1SwFtq/9Qs 4oYvblAmyHeihZxxIHRninhCgYKbY2XvMzPuoSVdkWO1vUtT1+UGT89znR7TT1/G 9fZde1Hccj13kEQI+Mz5+sqN5ol8PFhqpQ52OvhKL1V0GAt2P1T+LzeiU8GmLoj6 nS17sKIeP+F9lHFCm0II6OP2FRo/p3L+XSiOs9UmZ8So0PpJmHZNu43xbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7Wu4OlGY2rp657s2nSgeGGQ/c2MB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZU4LadJ L5q7xfzKZn28ZDw9IzH5Xr0ID3q9goyVQjmIjLbvpG7dXKP1zodHSsmuBCGBIAdJ r1ZuG4p1UZVQBiOQvykRoB3X/VsSphA+EBHFygddv0BptCNERcaXw2gMhBLfYNMC o5VkQ8zJsBh9ZMSFB7yMZMAfrbS2QgQEqPoO3/trScDi0QN4urnspkYhHpMYm+7K ANltSIFp2PiAWGOkKRTEF9A+w8XuZ54rU19tEKDVpxlNtBUK/CwGgMXGiKn4hKeC Q2bx6OLzLusBuWOkPswv/XWS2RH81KbxiMwFKI5LHzRtbMm3xZBoZUETW9MUoYwh 8aXO1Q4bRauh9Q== -----END CERTIFICATE-----Generated at Sun Mar 8 03:33:53 2026 by rpki-client