$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: 26Vwem1WIYL/6QQTTrtuq8bV8IehW6PMrg4hu4CeTW0= Subject key identifier: 62:C4:D3:83:3F:31:7A:4D:23:B3:B8:42:1D:7B:0F:08:D8:38:D9:39 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019CFA9931DE823BB5B6437111048204656E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 0727 Signing time: Tue 17 Mar 2026 07:01:09 +0000 Manifest this update: Tue 17 Mar 2026 07:01:09 +0000 Manifest next update: Wed 18 Mar 2026 07:01:09 +0000 Files and hashes: 1: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=) 2: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: zN14H6RfyQF5OYV0Kvt2dcJ4iFqDnM/BGtauzg9HcM4=) 3: AuuFpGckEdWDmpSli6J4EvnBEFA.roa (hash: UWwZYirMViLQ4FhWk6naRNb3lf/S07gxbtcPGiaea3M=) 4: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=) 5: JRpzznWelvDGpNctUx-9YeQj91I.roa (hash: UWpK2mc+BRq0WDsXbRZApCIJ/yZuMuk8WsuIDijlk30=) 6: N8T1T4yzeC_svV7N6clN6YYuhS0.roa (hash: Zjsphs8xxbX+E2wFNgFNlo+S/FNhRonrcNCUdPBKUgo=) 7: VJhfwBMpKYGf6ops4QG8W2D9K5Y.roa (hash: BYsR2fxa81FQHh1Dxyok1UJdkjHu0vH5dq3diC+m0iI=) 8: XCau4ffd9wRsX7TYXIogzR2WqO4.roa (hash: ftqkiMajJgdI8EjDHWxMovMT410S0p0no+51o9gTIa8=) 9: YARBLfUZ9k_hQNuqCW-GW04WaQI.roa (hash: YYeeEXSa0og2pjEcv4jU32lCZBeHpaJXhmkA+TmvUbg=) 10: YfhOPAWRkHzsFNKQodjoA2IhLKM.roa (hash: 9/L6hUhQcrkiGTuXjLMFbE6LlWLBn2NBCH2Dr2RZSJA=) 11: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=) 12: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=) 13: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=) 14: aHuFfSOUYXmTmBwxHlPwh-EVryM.roa (hash: 4h0lpb8Jw+MnXWrJAhTnOT+WFcvU+QMAmEsFwZdu5/k=) 15: egsOE6bZvfKQiaDurlHql4l7FQo.roa (hash: BP8wlsBgKB6wKVje/kb04PbZKDtzqCLIojy+BbhlXD4=) 16: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (hash: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM=) 17: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (hash: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Mar 2026 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:fa:99:31:de:82:3b:b5:b6:43:71:11:04:82:04:65:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Mar 17 07:01:09 2026 GMT Not After : Mar 18 07:01:09 2026 GMT Subject: CN=62c4d3833f317a4d23b3b8421d7b0f08d838d939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:af:aa:4e:a4:85:6d:8d:d3:8a:bf:2a:42:b0: 44:69:5b:58:54:cc:b1:a0:5b:79:c6:96:f9:91:44: 4e:9d:80:2d:af:81:07:46:b0:18:c8:04:56:e4:e9: f8:20:43:88:c9:d4:d6:b5:9c:6d:d2:29:f0:0d:ea: 88:b8:87:7d:4a:79:98:89:c3:56:95:de:c3:8c:64: 55:4f:e4:b0:a7:f9:fd:14:92:57:ac:0a:52:49:ff: 2c:82:aa:4d:8a:53:4d:76:1e:dc:8f:f7:46:75:53: 9b:fb:05:50:f6:96:5c:15:23:fe:4f:2f:e1:3f:f2: 86:bb:d0:c3:7f:c1:a4:88:12:73:4d:c6:f8:7d:65: e9:17:5b:d9:8d:63:02:d1:18:5c:20:fb:50:39:f3: 2a:19:1e:cc:64:bd:7e:ba:bc:29:17:70:f0:ea:b3: 4c:cc:56:19:d6:8c:2c:e0:80:c5:49:20:29:5c:3a: 8f:c8:c8:3c:1f:77:0f:09:12:5a:3b:d9:2c:c3:ff: 47:a2:4c:5d:43:ef:b2:c1:17:59:2f:dd:fd:97:4c: c1:56:7b:f8:3a:48:35:35:28:38:7c:1e:fc:3d:b2: f7:87:3d:b3:90:8d:e2:b6:49:8d:c8:31:3c:92:7a: 76:5a:c6:fd:5f:9c:26:7a:19:3f:c8:75:62:d8:93: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C4:D3:83:3F:31:7A:4D:23:B3:B8:42:1D:7B:0F:08:D8:38:D9:39 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:dc:3b:5a:f8:12:12:81:9c:ab:b9:52:e0:91:d6:47:34:5d: a8:41:1e:2e:e0:9f:96:c0:07:72:d2:45:25:c2:d6:df:1e:a5: 1f:30:05:87:38:70:35:0e:7e:d1:da:30:66:bf:c1:33:bb:1c: b8:1f:89:d0:48:d5:51:ec:f9:48:99:3c:c6:1e:8a:0e:79:95: 08:d5:76:22:de:d9:a1:5d:fa:c4:43:50:65:9b:ff:45:20:a0: de:e2:5c:03:7f:2c:b9:9a:cb:f7:7b:67:0f:7a:b2:5a:62:c3: 46:67:27:a0:67:72:a5:40:25:2b:2a:f4:91:61:7a:47:20:80: 46:e0:a1:15:f4:30:ac:f5:0d:8a:61:dd:13:f5:d7:57:70:0e: eb:d0:d3:54:a4:79:e0:b3:e8:2f:fa:59:f8:ff:bc:34:71:08: 5d:10:02:57:42:dd:22:f7:80:21:89:7b:d6:da:04:03:4b:19: 0b:e9:ef:dd:7a:72:8b:7b:82:85:fd:19:1c:57:77:b2:e7:23: 07:08:88:6e:90:b5:03:18:f8:4f:25:16:62:c3:fe:a6:88:73: 2b:c7:8b:29:a4:80:65:6c:f1:47:67:df:18:c0:93:bb:5d:00: 13:fc:ed:59:6a:63:df:e8:cb:79:e3:8f:9f:84:02:8e:c7:49: 5a:af:10:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZz6mTHegju1tkNxEQSCBGVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMzE3MDcwMTA5WhcNMjYwMzE4MDcwMTA5WjAzMTEwLwYDVQQD Eyg2MmM0ZDM4MzNmMzE3YTRkMjNiM2I4NDIxZDdiMGYwOGQ4MzhkOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6+qTqSFbY3Tir8qQrBEaVtYVMyx oFt5xpb5kUROnYAtr4EHRrAYyARW5On4IEOIydTWtZxt0inwDeqIuId9SnmYicNW ld7DjGRVT+Swp/n9FJJXrApSSf8sgqpNilNNdh7cj/dGdVOb+wVQ9pZcFSP+Ty/h P/KGu9DDf8GkiBJzTcb4fWXpF1vZjWMC0RhcIPtQOfMqGR7MZL1+urwpF3Dw6rNM zFYZ1ows4IDFSSApXDqPyMg8H3cPCRJaO9ksw/9HokxdQ++ywRdZL939l0zBVnv4 Okg1NSg4fB78PbL3hz2zkI3itkmNyDE8knp2Wsb9X5wmehk/yHVi2JOmIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLE04M/MXpNI7O4Qh17DwjYONk5MB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActw7WvgS EoGcq7lS4JHWRzRdqEEeLuCflsAHctJFJcLW3x6lHzAFhzhwNQ5+0dowZr/BM7sc uB+J0EjVUez5SJk8xh6KDnmVCNV2It7ZoV36xENQZZv/RSCg3uJcA38suZrL93tn D3qyWmLDRmcnoGdypUAlKyr0kWF6RyCARuChFfQwrPUNimHdE/XXV3AO69DTVKR5 4LPoL/pZ+P+8NHEIXRACV0LdIveAIYl71toEA0sZC+nv3Xpyi3uChf0ZHFd3sucj BwiIbpC1Axj4TyUWYsP+pohzK8eLKaSAZWzxR2ffGMCTu10AE/ztWWpj3+jLeeOP n4QCjsdJWq8Qtw== -----END CERTIFICATE-----Generated at Tue Mar 17 14:39:56 2026 by rpki-client