$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: b567NZypJH8TeBJvZK8vptVUQtcWenPJbBM1KQhePFk= Subject key identifier: AD:B7:BD:37:9D:1E:AD:56:55:2D:DB:7E:85:2D:82:AE:F4:E5:5E:B7 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019CC03B243E0C3254BEC1B6160DAA2608A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 17F3 Signing time: Thu 05 Mar 2026 23:00:27 +0000 Manifest this update: Thu 05 Mar 2026 23:00:27 +0000 Manifest next update: Fri 06 Mar 2026 23:00:27 +0000 Files and hashes: 1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=) 2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=) 3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=) 4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=) 5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=) 6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=) 7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=) 8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=) 9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=) 10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=) 11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=) 12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=) 13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: Q3sV8yHWZIsvt2WLrBvyhKX7fGmt/UzgxLfrugPBljs=) 14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=) 15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=) 16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=) 17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Mar 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c0:3b:24:3e:0c:32:54:be:c1:b6:16:0d:aa:26:08:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Mar 5 23:00:27 2026 GMT Not After : Mar 6 23:00:27 2026 GMT Subject: CN=adb7bd379d1ead56552ddb7e852d82aef4e55eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:57:66:c1:ab:2e:2a:41:42:fc:9f:b2:f6:e6: 29:b5:6b:13:19:8d:ee:73:83:c5:2f:27:20:b3:37: 88:98:c4:fc:98:98:73:34:22:3e:27:49:b2:a9:f0: a1:66:57:8d:2e:2d:0b:dd:45:c4:8d:99:56:94:14: aa:62:3a:b6:39:0f:6d:ba:45:de:54:8d:1a:0e:8d: dd:1a:a2:5d:30:43:2a:d6:ac:80:a4:40:a2:7d:86: d9:99:e8:76:af:2d:04:4b:9c:f3:30:94:ad:bb:0b: be:fa:97:a6:f2:0a:56:36:7c:90:ce:c6:a1:8f:53: 5d:f7:eb:ed:be:e1:94:9b:a7:4f:06:42:db:14:01: 04:9c:b6:9d:9d:b6:3a:a6:bc:da:50:62:7f:c3:26: af:76:57:62:0a:5f:3b:ae:de:da:09:14:6b:1e:8b: f6:11:5c:dd:09:04:ac:7c:35:7b:e3:0b:fe:ca:94: 43:b5:21:f5:1b:17:88:a3:6e:d7:64:af:5e:45:8c: 85:72:69:0a:73:c4:d8:f2:3c:6a:cf:b8:66:37:89: 59:0a:b9:e5:0c:b1:85:80:96:c5:49:2a:be:56:75: e2:92:bb:9f:5c:5e:07:e2:11:bd:63:c4:e3:32:df: 41:30:58:9b:3a:a8:77:57:f1:6b:c7:a4:4e:e3:32: e6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B7:BD:37:9D:1E:AD:56:55:2D:DB:7E:85:2D:82:AE:F4:E5:5E:B7 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:14:b8:ee:b7:cb:26:06:ee:57:a0:86:81:3e:f9:4c:ee:ff: a5:81:0c:3b:32:25:56:2b:0f:08:c7:e5:df:e3:00:d9:b8:fb: f5:f6:46:be:45:c0:7b:14:71:00:cc:8f:0c:d3:6c:11:33:d9: 23:a4:bf:eb:36:91:e0:94:b9:68:f0:15:6f:ba:fe:1a:73:86: 76:aa:f4:4e:1b:ab:a8:12:03:e7:d5:d1:80:5c:24:80:64:40: 64:98:10:27:62:72:bf:66:53:ec:4b:7c:b7:a1:12:c6:6c:bd: 43:ba:39:6a:67:4d:f1:61:bb:ed:84:58:20:83:af:62:58:c9: ab:0d:7e:9f:5c:86:4a:0f:04:35:30:b8:86:70:0b:2d:77:bd: 3e:3c:5f:d5:eb:6e:1e:b6:84:3c:db:14:f3:cd:db:c6:da:f6: 72:11:95:57:66:75:a1:aa:a8:68:67:1c:e8:3b:a8:f0:02:2f: 47:ca:6c:1d:ec:4a:0e:cd:30:e2:38:f4:87:d0:ea:73:17:7b: 1f:bb:70:6b:25:c4:70:eb:10:54:bb:92:06:5d:fd:d0:ff:f1: 08:37:fb:60:4e:69:9d:79:bd:bd:64:bb:ad:58:e2:21:dd:d8: a6:d7:dd:8c:1e:88:8f:6a:77:30:2a:3b:8e:63:81:ff:b5:20: 55:86:17:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzAOyQ+DDJUvsG2Fg2qJgikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwMzA1MjMwMDI3WhcNMjYwMzA2MjMwMDI3WjAzMTEwLwYDVQQD EyhhZGI3YmQzNzlkMWVhZDU2NTUyZGRiN2U4NTJkODJhZWY0ZTU1ZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFdmwasuKkFC/J+y9uYptWsTGY3u c4PFLycgszeImMT8mJhzNCI+J0myqfChZleNLi0L3UXEjZlWlBSqYjq2OQ9tukXe VI0aDo3dGqJdMEMq1qyApECifYbZmeh2ry0ES5zzMJStuwu++pem8gpWNnyQzsah j1Nd9+vtvuGUm6dPBkLbFAEEnLadnbY6przaUGJ/wyavdldiCl87rt7aCRRrHov2 EVzdCQSsfDV74wv+ypRDtSH1GxeIo27XZK9eRYyFcmkKc8TY8jxqz7hmN4lZCrnl DLGFgJbFSSq+VnXikrufXF4H4hG9Y8TjMt9BMFibOqh3V/Frx6RO4zLmZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK23vTedHq1WVS3bfoUtgq705V63MB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxS47rfL JgbuV6CGgT75TO7/pYEMOzIlVisPCMfl3+MA2bj79fZGvkXAexRxAMyPDNNsETPZ I6S/6zaR4JS5aPAVb7r+GnOGdqr0ThurqBID59XRgFwkgGRAZJgQJ2Jyv2ZT7Et8 t6ESxmy9Q7o5amdN8WG77YRYIIOvYljJqw1+n1yGSg8ENTC4hnALLXe9Pjxf1etu HraEPNsU883bxtr2chGVV2Z1oaqoaGcc6Duo8AIvR8psHexKDs0w4jj0h9Dqcxd7 H7twayXEcOsQVLuSBl390P/xCDf7YE5pnXm9vWS7rVjiId3YptfdjB6Ij2p3MCo7 jmOB/7UgVYYXiw== -----END CERTIFICATE-----Generated at Fri Mar 6 04:53:26 2026 by rpki-client