$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: yKcMaQMlUJ7gEaZtHfhNDJqVUA5qhHLJdC0Xqh0/684= Subject key identifier: 0D:83:38:BF:8E:F0:0E:B1:E1:4E:D8:62:29:27:9C:79:8A:98:CA:D2 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019CB882030C0A7A51D305D6FFA518563C8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 1854 Signing time: Wed 04 Mar 2026 11:00:53 +0000 Manifest this update: Wed 04 Mar 2026 11:00:53 +0000 Manifest next update: Thu 05 Mar 2026 11:00:53 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: 3+3xbVLv6dl35TF9C0YjgV+5iNCthWKVqafCvcvD9uA=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:b8:82:03:0c:0a:7a:51:d3:05:d6:ff:a5:18:56:3c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Mar 4 11:00:53 2026 GMT Not After : Mar 5 11:00:53 2026 GMT Subject: CN=0d8338bf8ef00eb1e14ed86229279c798a98cad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:00:a3:61:91:85:63:c8:14:6a:79:b5:92: 25:5f:f5:8e:fe:d7:9d:7d:0c:99:ee:9f:4d:d2:07: 19:0a:0b:d6:63:43:64:be:c0:a8:6f:ff:87:c5:e8: 3e:b5:a9:df:ea:15:15:58:0d:26:19:fb:45:90:c0: e8:fe:77:af:8f:b1:a7:97:f1:29:be:af:60:dd:87: dc:8b:4a:e2:a7:4d:04:d9:4d:56:88:a8:5e:2d:9c: d3:1a:e3:a5:63:ad:b9:d9:19:e3:79:74:86:55:8c: 4d:7e:59:b4:ae:c1:24:60:80:0c:c1:9c:77:3c:a4: b1:09:19:54:b5:ad:51:4b:81:3f:17:6f:a0:36:50: be:bd:43:58:dd:0f:60:b2:b8:08:76:66:e0:70:fa: f2:17:02:d6:94:71:0a:05:0a:3e:8f:12:7d:79:9a: 24:84:8b:86:2b:0e:54:c7:42:ae:53:3a:5a:0b:1a: fe:aa:2e:54:a5:47:62:aa:3c:54:1b:c4:11:cc:72: 5c:4b:b6:54:5c:18:12:ec:d3:28:48:9f:b4:13:02: 00:bf:7b:8f:70:ab:37:8f:1a:3d:ba:c4:a9:62:c5: a6:93:43:20:de:87:54:93:75:cc:3c:c0:1b:95:52: e9:61:c9:dc:08:51:32:d6:74:0e:56:12:9a:06:58: 93:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:83:38:BF:8E:F0:0E:B1:E1:4E:D8:62:29:27:9C:79:8A:98:CA:D2 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8d:a2:37:1c:e4:98:4b:60:98:db:f7:cc:98:19:fe:c7:83: 41:af:fc:ad:90:7d:73:01:11:fa:56:fe:a7:b8:3d:b7:c5:84: c3:87:a6:df:34:6e:b6:b8:7e:80:21:9f:28:54:ce:03:e5:49: a0:1c:1c:ff:ed:42:9f:64:34:cb:fd:22:88:3d:ae:f0:99:c6: b4:7f:4b:a4:27:0b:cb:41:cc:de:a7:a6:4b:4e:06:91:cd:36: 75:6d:c0:14:32:c0:15:99:ee:50:bd:db:bc:8f:b4:3f:29:57: 56:7a:18:1e:aa:19:f4:84:d7:02:7c:5a:d9:97:61:bb:df:61: 41:0a:f8:f3:e2:71:cf:13:5c:7c:02:76:3b:d9:7d:4f:3c:6e: 88:a5:d8:24:ac:93:cb:07:af:27:00:ed:91:f0:a7:3f:06:31: a0:a6:69:67:7b:e5:20:b8:13:ec:c3:9a:85:a2:1a:fa:b0:82: bf:70:92:f1:01:1f:77:a1:e0:cf:c3:c8:df:cd:1e:c0:73:4a: 52:d7:dd:24:4e:48:5f:d2:43:db:23:26:20:1c:91:7f:4a:e6: d4:27:3b:41:4d:d1:65:cc:21:ee:79:5c:e8:8e:8c:79:5a:0d: 3a:1b:6d:b5:e5:bd:2d:31:7a:40:46:d4:44:0b:6e:6d:d8:e2: 9c:91:e1:11 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZy4ggMMCnpR0wXW/6UYVjyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwMzA0MTEwMDUzWhcNMjYwMzA1MTEwMDUzWjAzMTEwLwYDVQQD EygwZDgzMzhiZjhlZjAwZWIxZTE0ZWQ4NjIyOTI3OWM3OThhOThjYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB0Ao2GRhWPIFGp5tZIlX/WO/ted fQyZ7p9N0gcZCgvWY0NkvsCob/+Hxeg+tanf6hUVWA0mGftFkMDo/nevj7Gnl/Ep vq9g3Yfci0rip00E2U1WiKheLZzTGuOlY6252RnjeXSGVYxNflm0rsEkYIAMwZx3 PKSxCRlUta1RS4E/F2+gNlC+vUNY3Q9gsrgIdmbgcPryFwLWlHEKBQo+jxJ9eZok hIuGKw5Ux0KuUzpaCxr+qi5UpUdiqjxUG8QRzHJcS7ZUXBgS7NMoSJ+0EwIAv3uP cKs3jxo9usSpYsWmk0Mg3odUk3XMPMAblVLpYcncCFEy1nQOVhKaBliTIwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA2DOL+O8A6x4U7YYiknnHmKmMrSMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaY2i NxzkmEtgmNv3zJgZ/seDQa/8rZB9cwER+lb+p7g9t8WEw4em3zRutrh+gCGfKFTO A+VJoBwc/+1Cn2Q0y/0iiD2u8JnGtH9LpCcLy0HM3qemS04Gkc02dW3AFDLAFZnu UL3bvI+0PylXVnoYHqoZ9ITXAnxa2Zdhu99hQQr48+JxzxNcfAJ2O9l9TzxuiKXY JKyTywevJwDtkfCnPwYxoKZpZ3vlILgT7MOahaIa+rCCv3CS8QEfd6Hgz8PI380e wHNKUtfdJE5IX9JD2yMmIByRf0rm1Cc7QU3RZcwh7nlc6I6MeVoNOhttteW9LTF6 QEbURAtubdjinJHhEQ== -----END CERTIFICATE-----Generated at Wed Mar 4 16:54:31 2026 by rpki-client