$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json) Hash identifier: DXUBke659nF79vrRJZSaWPZeYDTDLBQ93kQGZ8oXuW0= Subject key identifier: 1E:CA:87:1C:0F:C0:45:8A:2E:BE:BC:14:76:81:C0:D7:A5:D0:0B:B8 Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 019CE222478CA586273DF387EC43B1C16F4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft Manifest number: 1877 Signing time: Thu 12 Mar 2026 13:00:23 +0000 Manifest this update: Thu 12 Mar 2026 13:00:23 +0000 Manifest next update: Fri 13 Mar 2026 13:00:23 +0000 Files and hashes: 1: 1KzAL4WrD5dhhGZJOCxuUIPFwOk.roa (hash: aO9dX9fJ0rrae7yQKAQfFledrNyIupTZnT+cq07JYUA=) 2: 2fnNi2RG50nUnV2NcaaKxkNfurs.roa (hash: YjCnMRPFuN3k5TRvL6rGrwmbFWVhQVPPpGvWD61uUkg=) 3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: P6jyfLYhmNMLWJdv6ZKk9blhBlNfO65cQOt3KLev7wE=) 4: 88YNLmciNd0j13-H2-rZxVQMdGQ.roa (hash: PZ0hEGC0oEs598gQ8xeAY2EzI4szP3Vs9gNvciW2BKM=) 5: AnqEtz5hZkYAy4yO8qlLikZWRJw.roa (hash: j2OhR3ENDnTZP9Lf8x78QsTXcfAZEG3FS513keiFcpI=) 6: HQdRd7-uxpWaApI_yUxbm_9_dzg.roa (hash: i48eXcWynnm44Ui4IjxVTSgQ+VI6di3z/zykGcaGJUk=) 7: OCuIuLoTyx6UI4cRdqXTZdZqrRE.roa (hash: NtYeBn7vObBSrZet17ESmCNvYRE2bEdCvdV04YI1os0=) 8: RBopAdVF60vgkqykUfTCW-bkIG8.roa (hash: QhamcW1yECyAqJIZtVxwyJIdNVMOgAFF2TzQ8FAjUVo=) 9: RahkU4tOoQngjkSl9mhdDwc4pFU.roa (hash: JWZJdzvFdiQ85WtuycaeUgc1cy9Tzhri/PcDTONVm3Q=) 10: Rsj6R_5dXiHi1eUSKzpDKZzkTiE.roa (hash: nMPA233TUV9gqlw8aP+/RPCmhirOQucfaoSyNAu6fXc=) 11: YUsCKqNl16pDs_8KVE5VLmDFj5M.roa (hash: enLSqBELUYJ70Ss/6MuXxuUTa0RNR44fL5GLxYESEBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 13:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e2:22:47:8c:a5:86:27:3d:f3:87:ec:43:b1:c1:6f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Mar 12 13:00:23 2026 GMT Not After : Mar 13 13:00:23 2026 GMT Subject: CN=1eca871c0fc0458a2ebebc147681c0d7a5d00bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:80:92:b6:6f:b7:6c:cd:19:86:36:45:11:28: 02:78:c0:9e:dd:7b:82:76:27:97:e9:95:95:d5:31: 16:8b:49:9d:aa:51:4d:27:51:25:71:45:09:e6:f9: 1c:20:f2:4e:81:29:4d:9a:31:9b:d3:6e:c0:c3:2e: a1:59:90:4e:1f:05:f3:b3:f5:40:40:72:28:cf:5d: 5e:e9:f1:88:67:51:42:f7:3d:f2:98:44:db:6f:ca: 2e:83:bd:dc:38:11:42:f2:07:82:1e:27:49:87:11: 25:6d:35:a9:7c:38:4b:30:9b:7e:c9:a0:e6:ac:f2: 95:dd:56:3e:f5:76:9f:0a:37:7c:61:74:6a:c8:2e: 3b:22:9e:65:8b:a1:ad:51:33:12:8c:86:54:ed:38: 7f:55:e7:a0:a9:3b:b0:ce:0a:03:1d:ed:1d:ee:df: 73:66:52:a6:2e:6c:78:a2:c2:7d:ea:fc:cf:97:7a: 14:9c:8b:d2:48:66:f1:e8:d9:2b:b9:a7:a2:1d:4e: 08:4b:2e:51:bb:f6:d4:be:c0:48:06:2f:d6:a7:ca: 19:fe:12:e9:25:bd:ea:8a:47:a7:a7:c2:87:ef:7b: dd:4f:a0:74:20:56:90:40:37:8c:a1:a5:88:fa:af: 7c:b6:33:80:13:e4:74:86:c2:80:4b:13:59:e1:bc: f6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CA:87:1C:0F:C0:45:8A:2E:BE:BC:14:76:81:C0:D7:A5:D0:0B:B8 X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:13:65:d1:ec:89:02:06:cf:09:b7:ba:d5:fe:8e:6a:07:ca: 3b:f4:73:d3:6f:71:45:ad:16:0b:d3:f6:6c:8f:85:94:c4:fe: 26:2d:25:31:92:07:a9:fd:47:f5:da:b2:b7:aa:48:e0:53:82: 5c:57:50:ad:3c:88:68:0e:da:bb:d9:9e:e3:e6:59:f0:38:5e: bb:25:cb:74:aa:90:41:62:b7:07:d1:ea:4a:a1:a4:29:64:37: 7b:5d:c5:05:00:b3:ac:68:27:cf:d5:bb:76:00:24:2c:0b:84: a4:73:fc:85:fb:0e:4d:0f:aa:29:c6:a0:bd:5c:00:f4:4f:64: ef:1f:c1:b9:6b:81:d3:61:00:b3:8c:e2:49:37:77:29:2c:e6: 12:af:c1:47:b4:ee:74:08:66:6d:f4:48:46:2b:1c:d7:19:6c: f8:56:5b:2c:b9:af:8b:18:71:dd:e8:d0:f8:23:4c:2a:3d:c8: 98:85:69:6c:03:97:70:44:aa:ea:4a:2d:12:6d:06:0a:ca:93: 91:3a:ca:14:71:dd:85:ab:21:48:59:92:66:ae:0f:17:12:c3: 23:d3:e4:5a:1c:30:b8:68:80:69:58:8b:3a:85:0d:26:a2:9d: 3b:06:3c:4a:bd:d6:77:33:f7:7f:a5:f1:a6:af:59:4d:da:e3: 15:32:88:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZziIkeMpYYnPfOH7EOxwW9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjYwMzEyMTMwMDIzWhcNMjYwMzEzMTMwMDIzWjAzMTEwLwYDVQQD EygxZWNhODcxYzBmYzA0NThhMmViZWJjMTQ3NjgxYzBkN2E1ZDAwYmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YCStm+3bM0ZhjZFESgCeMCe3XuC dieX6ZWV1TEWi0mdqlFNJ1ElcUUJ5vkcIPJOgSlNmjGb027Awy6hWZBOHwXzs/VA QHIoz11e6fGIZ1FC9z3ymETbb8oug73cOBFC8geCHidJhxElbTWpfDhLMJt+yaDm rPKV3VY+9XafCjd8YXRqyC47Ip5li6GtUTMSjIZU7Th/VeegqTuwzgoDHe0d7t9z ZlKmLmx4osJ96vzPl3oUnIvSSGbx6NkruaeiHU4ISy5Ru/bUvsBIBi/Wp8oZ/hLp Jb3qikenp8KH73vdT6B0IFaQQDeMoaWI+q98tjOAE+R0hsKASxNZ4bz2fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7KhxwPwEWKLr68FHaBwNel0Au4MB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxNl0eyJ AgbPCbe61f6OagfKO/Rz029xRa0WC9P2bI+FlMT+Ji0lMZIHqf1H9dqyt6pI4FOC XFdQrTyIaA7au9me4+ZZ8DheuyXLdKqQQWK3B9HqSqGkKWQ3e13FBQCzrGgnz9W7 dgAkLAuEpHP8hfsOTQ+qKcagvVwA9E9k7x/BuWuB02EAs4ziSTd3KSzmEq/BR7Tu dAhmbfRIRisc1xls+FZbLLmvixhx3ejQ+CNMKj3ImIVpbAOXcESq6kotEm0GCsqT kTrKFHHdhashSFmSZq4PFxLDI9PkWhwwuGiAaViLOoUNJqKdOwY8Sr3WdzP3f6Xx pq9ZTdrjFTKIyA== -----END CERTIFICATE-----Generated at Fri Mar 13 00:14:39 2026 by rpki-client