$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: QfOJspSUs/08OTesc4PCpzMpk6ggG9fZ/ZGFoBbpk1o= Subject key identifier: E6:18:B5:0C:69:EB:58:AD:C9:DD:3F:CC:F5:0F:6A:C1:FD:09:EC:E0 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019CF8AAD02FF87830C762147403456EBB43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 0726 Signing time: Mon 16 Mar 2026 22:01:09 +0000 Manifest this update: Mon 16 Mar 2026 22:01:09 +0000 Manifest next update: Tue 17 Mar 2026 22:01:09 +0000 Files and hashes: 1: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=) 2: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: Ft8JwxHNYLFe40Rj+VqnWQYylJQ9K2QDCp0dvR0XL7Q=) 3: AuuFpGckEdWDmpSli6J4EvnBEFA.roa (hash: UWwZYirMViLQ4FhWk6naRNb3lf/S07gxbtcPGiaea3M=) 4: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=) 5: JRpzznWelvDGpNctUx-9YeQj91I.roa (hash: UWpK2mc+BRq0WDsXbRZApCIJ/yZuMuk8WsuIDijlk30=) 6: N8T1T4yzeC_svV7N6clN6YYuhS0.roa (hash: Zjsphs8xxbX+E2wFNgFNlo+S/FNhRonrcNCUdPBKUgo=) 7: VJhfwBMpKYGf6ops4QG8W2D9K5Y.roa (hash: BYsR2fxa81FQHh1Dxyok1UJdkjHu0vH5dq3diC+m0iI=) 8: XCau4ffd9wRsX7TYXIogzR2WqO4.roa (hash: ftqkiMajJgdI8EjDHWxMovMT410S0p0no+51o9gTIa8=) 9: YARBLfUZ9k_hQNuqCW-GW04WaQI.roa (hash: YYeeEXSa0og2pjEcv4jU32lCZBeHpaJXhmkA+TmvUbg=) 10: YfhOPAWRkHzsFNKQodjoA2IhLKM.roa (hash: 9/L6hUhQcrkiGTuXjLMFbE6LlWLBn2NBCH2Dr2RZSJA=) 11: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=) 12: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=) 13: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=) 14: aHuFfSOUYXmTmBwxHlPwh-EVryM.roa (hash: 4h0lpb8Jw+MnXWrJAhTnOT+WFcvU+QMAmEsFwZdu5/k=) 15: egsOE6bZvfKQiaDurlHql4l7FQo.roa (hash: BP8wlsBgKB6wKVje/kb04PbZKDtzqCLIojy+BbhlXD4=) 16: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (hash: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM=) 17: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (hash: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Mar 2026 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:f8:aa:d0:2f:f8:78:30:c7:62:14:74:03:45:6e:bb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Mar 16 22:01:09 2026 GMT Not After : Mar 17 22:01:09 2026 GMT Subject: CN=e618b50c69eb58adc9dd3fccf50f6ac1fd09ece0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:57:5c:13:34:ca:63:e4:b4:c7:8d:9a:5e:fa: f4:db:01:dd:e9:85:b3:57:fd:e2:18:9b:fd:7c:b3: c7:9f:87:16:7f:d2:15:48:fa:73:e1:2d:d4:ee:84: 79:96:e4:c6:13:71:be:24:71:52:8b:f4:80:bb:d0: 87:03:65:c0:53:2a:71:3e:1e:dd:97:de:6d:95:b7: 55:66:87:e0:89:1e:3c:0b:16:d2:43:f6:4d:f5:7f: 8e:68:f3:bf:74:3b:e3:bc:29:46:1b:c1:eb:b0:54: 66:ee:b8:62:40:98:89:ca:c4:51:b3:2c:22:a4:47: 0d:a5:c3:7c:58:04:8d:dd:7b:90:0e:3b:4c:3b:ea: 82:d1:74:8e:46:65:ac:f5:3b:24:2e:a4:45:bd:ce: fe:c4:38:be:c4:60:a6:7e:10:39:c4:9c:00:42:4c: 33:74:6a:74:d0:8c:8f:16:7d:28:26:98:89:ac:36: 89:df:94:a7:a5:06:0c:80:62:6e:00:89:fe:c2:4f: 37:60:33:b3:ce:c2:8b:47:51:10:41:af:72:54:19: c0:fa:5a:03:f6:76:ca:87:58:d6:3b:de:59:6b:59: 52:5f:93:a0:5b:0f:5d:70:9c:33:a0:30:21:04:74: e6:06:5b:84:4c:e7:2f:8c:c4:6e:c9:a5:67:fc:a3: 18:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:18:B5:0C:69:EB:58:AD:C9:DD:3F:CC:F5:0F:6A:C1:FD:09:EC:E0 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:55:ed:1b:50:61:72:ac:34:48:99:80:63:42:fe:e6:37:1b: bf:05:df:9e:9b:76:85:2b:53:16:85:c5:7f:da:15:93:cb:1f: 73:ca:a1:b8:52:7c:2f:94:90:82:1c:9e:de:d7:e0:fc:c9:d7: b6:fe:c1:99:6b:b9:f1:45:4d:45:87:9c:2e:d6:4b:de:15:3c: 35:e2:30:d5:dd:68:be:65:f8:b4:f9:b3:ee:ef:b7:67:5d:42: 24:e3:1a:2d:77:73:96:e5:90:9c:3e:0a:cd:4b:c0:16:dd:67: 73:ca:36:26:a3:33:03:6b:23:6a:b2:0d:ea:da:30:12:b0:af: 85:3e:15:ea:06:9d:5d:fb:24:7a:6c:55:09:7e:75:fd:41:e8: 17:96:43:87:64:0a:ac:f2:69:ef:5f:1b:74:b2:92:39:52:85: 1a:a7:74:d3:32:ec:4f:82:2b:c6:09:8b:e2:c2:0e:3a:e6:58: 07:9d:60:58:49:7e:43:32:0c:12:e4:43:14:5a:4e:55:1e:a0: 9d:4c:5b:50:27:df:a9:d3:d4:83:79:f7:14:f4:33:5f:7e:0a: f8:20:5d:e2:d8:eb:42:f4:a2:bf:d2:cd:14:48:87:90:48:7e: 0d:fd:c5:f0:ef:e2:af:cf:29:66:5e:2d:59:c1:68:11:0c:03: d6:1f:b2:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZz4qtAv+Hgwx2IUdANFbrtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMzE2MjIwMTA5WhcNMjYwMzE3MjIwMTA5WjAzMTEwLwYDVQQD EyhlNjE4YjUwYzY5ZWI1OGFkYzlkZDNmY2NmNTBmNmFjMWZkMDllY2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFdcEzTKY+S0x42aXvr02wHd6YWz V/3iGJv9fLPHn4cWf9IVSPpz4S3U7oR5luTGE3G+JHFSi/SAu9CHA2XAUypxPh7d l95tlbdVZofgiR48CxbSQ/ZN9X+OaPO/dDvjvClGG8HrsFRm7rhiQJiJysRRsywi pEcNpcN8WASN3XuQDjtMO+qC0XSORmWs9TskLqRFvc7+xDi+xGCmfhA5xJwAQkwz dGp00IyPFn0oJpiJrDaJ35SnpQYMgGJuAIn+wk83YDOzzsKLR1EQQa9yVBnA+loD 9nbKh1jWO95Za1lSX5OgWw9dcJwzoDAhBHTmBluETOcvjMRuyaVn/KMYPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYYtQxp61ityd0/zPUPasH9CezgMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVXtG1Bh cqw0SJmAY0L+5jcbvwXfnpt2hStTFoXFf9oVk8sfc8qhuFJ8L5SQghye3tfg/MnX tv7BmWu58UVNRYecLtZL3hU8NeIw1d1ovmX4tPmz7u+3Z11CJOMaLXdzluWQnD4K zUvAFt1nc8o2JqMzA2sjarIN6towErCvhT4V6gadXfskemxVCX51/UHoF5ZDh2QK rPJp718bdLKSOVKFGqd00zLsT4IrxgmL4sIOOuZYB51gWEl+QzIMEuRDFFpOVR6g nUxbUCffqdPUg3n3FPQzX34K+CBd4tjrQvSiv9LNFEiHkEh+Df3F8O/ir88pZl4t WcFoEQwD1h+yNg== -----END CERTIFICATE-----Generated at Tue Mar 17 07:31:43 2026 by rpki-client