$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json) Hash identifier: tCeZ/P+tKqAES/JyWVfCo3K7bPi4bBWwrfFv9EPEqCM= Subject key identifier: A9:2F:B6:9D:AC:7F:7D:DD:33:BD:11:8B:F5:5D:15:09:E6:97:E0:62 Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b Certificate serial: 019CBD036BA6EE0CA8C31C8E516D0E5971CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft Manifest number: 1862 Signing time: Thu 05 Mar 2026 08:00:43 +0000 Manifest this update: Thu 05 Mar 2026 08:00:43 +0000 Manifest next update: Fri 06 Mar 2026 08:00:43 +0000 Files and hashes: 1: 1--f8TOFOHJxy913_bnxbbB_I8Ps.roa (hash: wDKAE8eJy4a/Xju9oL+J32sQIgyfZxer9kQNnDKALh8=) 2: 1-jH0g_JDLp_7206NgV5uijHSTJE.roa (hash: LRjP11l8Yg7jbG4bbfhfNEvQDZIpDubQ+TvWhkwjrcQ=) 3: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: mpy3xcgO909gCNkIJCEMkFT7i/3GLD/bUgdsoz9KkrM=) 4: 3GG8eWEP0AsTR5hlJBndfjSVqXE.roa (hash: OqQ6t5k1StJuUPb2wymY353zmLAJ5m9iQ1cfSGHhatc=) 5: Ew6t29Ei1xqX6fCJJvzPjV0QQx8.roa (hash: JiMbHLWrOkAjKxV/HgN8hcqfDizA3AaG0pNVT8kgBVI=) 6: JNr-UC5vFynVEDZr9p42nirYUp8.roa (hash: QrXLI/7uzYtPK46SlviW+E2Eaq5t1mr6I/kJpndD+lk=) 7: OS72UUjy1jIbO6SLm4_mGk1QjoA.roa (hash: JCjobLuVUg3x2yIR7Yj0jA3s02kdH2wYADkCYAZAm6M=) 8: hlYcdx1ybU4O_N_wWLe8kEQOPAA.roa (hash: g8sRkVv7AmG02gcDiKwncGvtRS2uuD1b8FmdkJIrmVQ=) 9: iY5E0iZ2YmwSRo1oZbuozkzcREs.roa (hash: XAB0LIhnvafntszSPTz4cfq/KAQxwohiu0F5a96UkOU=) 10: qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa (hash: MHfvuh3eLEasmU8bZ+QtTWQpVIX8pvTM+Puzp/lNHV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Mar 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:bd:03:6b:a6:ee:0c:a8:c3:1c:8e:51:6d:0e:59:71:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Validity Not Before: Mar 5 08:00:43 2026 GMT Not After : Mar 6 08:00:43 2026 GMT Subject: CN=a92fb69dac7f7ddd33bd118bf55d1509e697e062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5d:2f:6c:ca:58:8f:0a:13:ce:5d:7b:7a:94: 9b:dd:09:a8:15:68:c3:0c:85:ec:ba:88:82:65:59: 3b:29:22:23:10:82:76:e8:90:73:03:38:f0:95:d0: b4:b3:f3:37:56:d5:29:db:fc:31:cf:2d:31:a4:67: 17:da:13:4d:99:66:6f:7c:46:6a:b5:35:ae:6e:a7: 7f:23:54:f9:ad:3e:ec:0c:e9:e0:0e:7f:fd:75:f5: 05:44:26:59:b0:c4:13:4c:c0:00:97:97:09:70:80: 97:90:3f:8a:65:44:49:fa:28:fe:b1:82:c4:42:d9: 66:b5:ec:5f:43:e6:5c:d8:af:61:cd:bc:bb:e7:ab: a9:1e:be:50:e2:50:3a:08:2a:f6:ac:58:19:27:af: 36:b4:f3:2e:66:7c:85:aa:7e:3e:f6:6b:d6:fe:d7: 60:bc:fe:d1:02:fa:fb:27:fd:3d:e8:f8:aa:3a:ac: 7d:5f:31:0b:ce:73:ad:a1:70:77:9e:fe:1d:a3:5a: 02:b2:65:3b:f8:0e:b3:61:51:c8:87:8e:32:fc:69: 78:9a:de:52:40:24:8d:4c:9e:22:77:3a:36:fe:be: f0:c7:ed:cf:a3:30:b1:ce:51:8c:55:80:08:ef:e0: 05:02:e7:ed:9e:6a:14:72:a9:23:b8:51:9a:1e:6c: 04:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2F:B6:9D:AC:7F:7D:DD:33:BD:11:8B:F5:5D:15:09:E6:97:E0:62 X509v3 Authority Key Identifier: keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:7f:85:35:36:79:dd:6d:39:60:c3:91:83:89:b0:c0:81:ec: d1:db:ce:21:5c:79:9e:a6:c3:f6:3d:0a:a6:f8:73:3f:94:55: 48:7a:9f:fd:6a:8b:44:c3:ff:8c:9f:28:ab:1a:7c:ef:8d:7c: a9:76:f0:77:e5:ce:44:26:2c:47:67:ea:b1:67:50:77:be:1e: 94:e4:62:89:16:0a:78:9b:a4:31:0c:be:28:9d:f9:36:03:84: 9e:40:fb:1c:a2:cd:9a:d1:b1:40:be:9d:b8:34:57:14:98:b5: 54:ab:9c:a6:4f:58:67:d0:55:0e:66:8f:2e:14:88:66:01:40: b5:76:7a:a6:c8:6c:92:9c:58:0b:0f:72:22:60:24:9e:ce:56: 18:10:13:b1:ee:80:45:63:a8:2e:3a:58:76:a9:a3:d6:2a:37: 8f:a3:4e:fe:d1:0f:8c:a1:30:ed:b3:f3:e4:0a:88:bc:91:dc: d5:28:b3:6e:22:27:0b:53:8b:ca:b6:e0:ba:88:53:29:ca:34: c0:d2:d4:e6:75:b8:ca:3f:d1:f2:07:f6:41:b7:16:23:b9:f7: 21:00:59:a1:94:d7:80:9e:ae:22:eb:4e:ae:2e:23:dc:e2:2d: 97:2d:67:09:a1:4b:10:cf:63:09:f8:ba:4b:04:bb:f8:7c:23: f1:b4:ea:a0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZy9A2um7gyowxyOUW0OWXHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2 MDk4MmIwHhcNMjYwMzA1MDgwMDQzWhcNMjYwMzA2MDgwMDQzWjAzMTEwLwYDVQQD EyhhOTJmYjY5ZGFjN2Y3ZGRkMzNiZDExOGJmNTVkMTUwOWU2OTdlMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA510vbMpYjwoTzl17epSb3QmoFWjD DIXsuoiCZVk7KSIjEIJ26JBzAzjwldC0s/M3VtUp2/wxzy0xpGcX2hNNmWZvfEZq tTWubqd/I1T5rT7sDOngDn/9dfUFRCZZsMQTTMAAl5cJcICXkD+KZURJ+ij+sYLE QtlmtexfQ+Zc2K9hzby756upHr5Q4lA6CCr2rFgZJ682tPMuZnyFqn4+9mvW/tdg vP7RAvr7J/096PiqOqx9XzELznOtoXB3nv4do1oCsmU7+A6zYVHIh44y/Gl4mt5S QCSNTJ4idzo2/r7wx+3PozCxzlGMVYAI7+AFAuftnmoUcqkjuFGaHmwElwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKkvtp2sf33dM70Ri/VdFQnml+BiMB8GA1UdIwQY MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy LTc2YjBkZGEyYmYzZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNlLzAxZDQxMS1kOTE1LTQyNzctOGZlMi03NmIwZGRhMmJm M2UvMS8xLXRjUURuZnRrUm5XYmlNaHUyY1IxLWRnbUNzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAun+F NTZ53W05YMORg4mwwIHs0dvOIVx5nqbD9j0KpvhzP5RVSHqf/WqLRMP/jJ8oqxp8 7418qXbwd+XORCYsR2fqsWdQd74elORiiRYKeJukMQy+KJ35NgOEnkD7HKLNmtGx QL6duDRXFJi1VKucpk9YZ9BVDmaPLhSIZgFAtXZ6pshskpxYCw9yImAkns5WGBAT se6ARWOoLjpYdqmj1io3j6NO/tEPjKEw7bPz5AqIvJHc1SizbiInC1OLyrbguohT Kco0wNLU5nW4yj/R8gf2QbcWI7n3IQBZoZTXgJ6uIutOri4j3OItly1nCaFLEM9j Cfi6SwS7+Hwj8bTqoA== -----END CERTIFICATE-----Generated at Thu Mar 5 15:52:46 2026 by rpki-client