$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: uJ28pjKQ5ux6mXXXZx4hm5JFql3EZWuQ6czvX+gNvRA= Subject key identifier: 1F:1C:3E:64:E5:97:90:B6:CF:59:0A:2C:2B:2E:AA:33:CE:4E:AE:FB Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019D1D5C1765C62CD1EC1DA8F7C263638BEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 0727 Signing time: Tue 24 Mar 2026 01:01:07 +0000 Manifest this update: Tue 24 Mar 2026 01:01:07 +0000 Manifest next update: Wed 25 Mar 2026 01:01:07 +0000 Files and hashes: 1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=) 2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=) 3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=) 4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=) 5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=) 6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=) 7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: FhWpaeHgPyHRwdihhlk4EnAFlNjk6xm1arjM1CVtJBA=) 8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=) 9: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=) 10: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=) 11: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=) 12: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=) 13: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 25 Mar 2026 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:1d:5c:17:65:c6:2c:d1:ec:1d:a8:f7:c2:63:63:8b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Mar 24 01:01:07 2026 GMT Not After : Mar 25 01:01:07 2026 GMT Subject: CN=1f1c3e64e59790b6cf590a2c2b2eaa33ce4eaefb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:a5:47:f0:ad:61:1a:0d:c0:70:58:2b:3f: f5:0c:c3:05:cb:31:d3:b5:d1:0e:bd:6a:4e:b5:06: 58:2f:7b:12:c3:23:82:32:7f:83:4c:b9:3a:df:16: 6f:2d:57:70:a0:12:96:d6:ef:c0:aa:cd:5d:f8:d9: a6:40:e9:54:7d:81:4a:a1:1f:34:14:15:d5:18:8e: 92:ac:33:54:32:52:a9:cf:0e:44:40:5b:77:d7:e4: 60:7a:0e:8a:18:a2:4d:2a:3a:b3:76:dc:69:8d:e4: e8:9c:5c:23:9a:08:8e:c8:4b:49:3f:1d:b4:b9:21: 5b:c7:17:18:90:7e:8b:2a:8f:33:14:27:9c:ae:7d: b6:4e:4e:5b:79:7a:5e:b0:4e:0f:f5:e0:1b:a3:8f: 9b:b6:ca:2f:cd:c4:17:93:11:c9:32:15:4f:22:74: a0:1a:0c:a0:fe:54:23:0a:7c:a3:82:8a:61:3a:ab: b0:e6:36:bc:d0:c4:be:2f:90:bf:66:9e:57:c3:1c: 8f:35:7d:83:49:54:e4:c3:a5:5d:c1:18:41:ae:7c: ac:41:79:2e:3e:4f:15:23:e8:87:8e:88:fe:f9:be: 53:53:84:d4:6a:40:d1:8c:a1:bd:d1:c9:a0:ad:79: 4a:7d:ab:03:8c:4e:41:a5:4f:a2:e8:d0:c5:e6:3f: 20:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1C:3E:64:E5:97:90:B6:CF:59:0A:2C:2B:2E:AA:33:CE:4E:AE:FB X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3b:7b:5d:cc:d8:30:e8:2c:ec:99:3b:1f:72:04:81:82:37: 28:82:dc:6c:9d:b3:1f:b1:e7:40:27:6a:24:84:07:bd:d9:57: a0:94:34:df:92:99:16:7b:34:fd:ce:cc:62:dd:b7:eb:94:8a: 36:8b:40:fb:fc:e9:29:da:f1:cf:f7:f5:10:86:6f:79:4f:29: 44:cf:c1:b9:cd:35:97:86:8a:31:d8:f7:2c:54:69:9f:b7:aa: b1:d0:a5:cb:16:02:f7:8b:38:6d:9b:38:c9:6a:61:5d:99:ea: e1:e9:c8:dc:08:fc:5d:58:a8:d6:dd:5e:9a:6f:f7:7e:54:bf: fb:de:a2:3b:cd:10:d4:8c:61:d0:d0:ad:30:07:16:e9:f8:ad: ea:df:4d:25:19:c7:e6:2c:3c:a4:24:a2:16:ef:f2:e7:3f:a9: 45:a1:54:38:d6:29:7e:dd:d9:93:1d:c9:79:8b:a8:73:0c:4a: 5f:51:a7:d9:a2:12:3a:1f:3e:59:f8:c6:1d:73:ba:93:2e:03: 79:0d:cf:6c:83:53:63:47:bc:39:88:9d:b5:0b:a2:df:01:88: 2f:dc:e9:bb:3d:db:0e:ff:2b:45:d6:e8:46:52:77:39:33:0b: 03:c9:d8:ef:23:c6:a3:5e:32:cb:9b:06:44:cc:7d:a4:4d:9c: d3:0c:7a:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0dXBdlxizR7B2o98JjY4vvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwMzI0MDEwMTA3WhcNMjYwMzI1MDEwMTA3WjAzMTEwLwYDVQQD EygxZjFjM2U2NGU1OTc5MGI2Y2Y1OTBhMmMyYjJlYWEzM2NlNGVhZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuClR/CtYRoNwHBYKz/1DMMFyzHT tdEOvWpOtQZYL3sSwyOCMn+DTLk63xZvLVdwoBKW1u/Aqs1d+NmmQOlUfYFKoR80 FBXVGI6SrDNUMlKpzw5EQFt31+Rgeg6KGKJNKjqzdtxpjeTonFwjmgiOyEtJPx20 uSFbxxcYkH6LKo8zFCecrn22Tk5beXpesE4P9eAbo4+btsovzcQXkxHJMhVPInSg Ggyg/lQjCnyjgophOquw5ja80MS+L5C/Zp5XwxyPNX2DSVTkw6VdwRhBrnysQXku Pk8VI+iHjoj++b5TU4TUakDRjKG90cmgrXlKfasDjE5BpU+i6NDF5j8gHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8cPmTll5C2z1kKLCsuqjPOTq77MB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzt7XczY MOgs7Jk7H3IEgYI3KILcbJ2zH7HnQCdqJIQHvdlXoJQ035KZFns0/c7MYt2365SK NotA+/zpKdrxz/f1EIZveU8pRM/Buc01l4aKMdj3LFRpn7eqsdClyxYC94s4bZs4 yWphXZnq4enI3Aj8XVio1t1emm/3flS/+96iO80Q1Ixh0NCtMAcW6fit6t9NJRnH 5iw8pCSiFu/y5z+pRaFUONYpft3Zkx3JeYuocwxKX1Gn2aISOh8+WfjGHXO6ky4D eQ3PbINTY0e8OYidtQui3wGIL9zpuz3bDv8rRdboRlJ3OTMLA8nY7yPGo14yy5sG RMx9pE2c0wx62Q== -----END CERTIFICATE-----Generated at Tue Mar 24 09:18:49 2026 by rpki-client