$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft File: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json) Hash identifier: Hxrfez8tMshTOFwD+0dvQwypJvQnhPev4a0do9HvHYc= Subject key identifier: 75:43:7A:EE:85:DD:22:29:D0:C8:F6:57:DE:BE:99:6F:F9:3A:AE:49 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019CB8EFF5C69EBD2BC2CA9156F469D2EE00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft Manifest number: 08DB Signing time: Wed 04 Mar 2026 13:00:59 +0000 Manifest this update: Wed 04 Mar 2026 13:00:59 +0000 Manifest next update: Thu 05 Mar 2026 13:00:59 +0000 Files and hashes: 1: DD8GlU-b7VspBkcI_iIvr_RGPjM.roa (hash: 1DKJJF4hfxzBvntYwqTBxwoFNy0hvNUjzhgFWAAfUuQ=) 2: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: 3FrE3nvgE2OvHyu6erLWoM1p0mdypsd4QIHL9Xl3uVM=) 3: OUk4bgGC3OCebo2r3JX7kFSxVtw.roa (hash: 3wGYjxsZ43jN+PMrritKLslUAurQFB46XPi5qVQJ22Y=) 4: RjQGNYymIhhTpLXsvAqFCRYlmK0.roa (hash: 7eWaoKsFK+dXrDDvViANKRbdVD7AqyGyUhoJ/7eX31o=) 5: TqnPMVDh9HpYev_FIZchp86-qnU.roa (hash: PYVLbHuRs4EcM0BL7ja7AFfgZkv0Ouc4hw35RTYQcM4=) 6: bUm9zhBDDheeAjH1Phzh6QeVwx0.roa (hash: nX9HfLwNd8RrklBkKB4N/M+Uec4jgpinRrWvqTbblWw=) 7: darhr2jXl3Y2Sj0q2YhpErawJTA.roa (hash: +2YSXVZu56cjmNQqpda6l8hnoAubEs72p1pcn5+Ljy8=) 8: hCl-0r0u30gY3X_QTYVrlxuoF0A.roa (hash: 7PsKvjXxiXeu119UcG4oPYszfeXApUMOiVMhsPclDPA=) 9: hLNuu_sbAvc6aYBd_nA5cx_gzt8.roa (hash: l0oUAYvx1+pRIjX6Aa7SZOYLA8siUWlxjSjZBHxavhM=) 10: jPE8eDy5sBpOJ0xF-JIqu7BD2Ew.roa (hash: 74IQiVstIh3KzJDiJivZ5vXC5OARjoNqNmVIrOMQl9I=) 11: jVEF_UAaRYmedHKGuIyseg1gcbY.roa (hash: tjDxlBVUYxs7z18gz8wlAFg0M0h3WVlIHdRrd9k9MOQ=) 12: l0NWcEB_fCMnIaGuYDA0vM-VAzk.roa (hash: asETUMWyauH7zadLdSq6MApEL56kP70KwYwJo1bqytM=) 13: pM5HyRJ0tXqa3u3HJO4MenSMSKA.roa (hash: eDbwn0mnmgvF86dDy5bv6IYDjmTGECKb7lV458qQ5XM=) 14: sKa8KGSQMDeu4xjp-76scAkNmoM.roa (hash: BDhEXOrhFxU6yRZ6pUCYht36ar+0175olhnKUrOoWm8=) 15: tRowsns90J8SVu4Vuk4KwWdxtlI.roa (hash: 8fa16LnJWtPW8DQIUED5RuRMWErqx7miQXyVpxamI30=) 16: thQeBvJ49lds_EA91PLLCSwLWIw.roa (hash: kGYpWoGUWthYejf7i/yF1EVl5j1QxZxFpEKnwmEBGZE=) 17: tqLA3niYgXo7rtb9KpiVm9YQRsI.roa (hash: JApSiGrHRmdCS2s34nRBKnv5Jb7erd5zPvaQUBbAO4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:b8:ef:f5:c6:9e:bd:2b:c2:ca:91:56:f4:69:d2:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Mar 4 13:00:59 2026 GMT Not After : Mar 5 13:00:59 2026 GMT Subject: CN=75437aee85dd2229d0c8f657debe996ff93aae49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3e:a8:67:ea:5d:ff:13:ba:cc:ba:3a:47:26: a9:76:81:44:1e:46:e6:ba:c4:3c:85:45:e2:75:6b: 3d:ed:61:42:49:09:d8:55:e4:78:f5:46:1e:2d:d5: 35:50:0d:c7:e9:ff:10:6a:d0:9d:32:b2:c3:de:19: d5:10:71:0f:2d:46:ba:66:ce:17:79:9c:6d:2d:7f: b9:5c:9e:aa:b8:69:f9:eb:d7:18:de:88:54:14:66: cc:4b:b5:5b:d0:ba:29:4a:f3:76:63:0e:64:09:37: 3e:14:f6:47:4e:8a:d6:cf:f7:f6:3e:4a:02:32:f7: 35:f7:50:2e:66:b2:16:7c:e7:21:8d:22:c7:fc:5b: b9:1c:6f:6f:5f:c0:b4:2d:82:78:e0:71:da:10:72: 82:3b:44:d3:da:b8:b1:67:9a:31:71:10:6b:8a:52: 57:be:04:2b:ee:ad:be:be:a4:21:34:93:e8:9c:31: c0:da:55:00:94:8f:53:54:13:64:96:13:92:a8:0d: 78:85:a5:97:1b:33:7a:4f:f5:ea:6a:66:76:77:2f: b3:c6:5e:07:6c:c4:1e:ea:17:f1:e2:97:27:d9:e4: e7:b0:b5:38:31:8d:49:ce:02:ce:3f:ff:6d:bc:e5: c1:73:c7:0e:29:7e:00:8b:ab:12:54:90:cb:18:3d: c1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:43:7A:EE:85:DD:22:29:D0:C8:F6:57:DE:BE:99:6F:F9:3A:AE:49 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:72:ee:30:49:43:23:8d:10:4f:bb:f1:f9:55:b0:39:d4:9f: 27:c5:fe:d2:2f:f2:ac:62:85:ef:3e:8d:61:52:a8:da:af:09: 09:b9:14:8e:27:7b:c6:dd:89:6a:93:99:40:49:27:05:21:f9: e5:2e:05:32:e1:00:b3:1c:ca:3b:fe:45:5e:06:be:5f:5c:02: 74:81:77:6d:ac:e0:6a:07:20:d0:ce:f6:3f:c3:0e:58:f5:ba: 12:1d:df:ec:16:73:2b:88:65:ab:5d:dc:03:c4:eb:08:27:fb: 6c:ea:53:d3:9d:dc:57:a7:e1:fd:6a:e7:4d:b0:01:c2:17:f3: 0b:6b:c2:f9:41:32:d4:e2:e2:fb:9f:50:67:82:3e:2d:da:68: 84:fd:1f:bc:94:88:65:e5:24:fd:88:c8:60:7d:18:6a:54:2d: 3a:d4:5c:71:5e:ec:dc:8a:85:27:76:f3:26:44:ad:d2:41:24: 4e:23:b8:c5:f4:10:1d:96:12:e7:5d:1f:d1:b0:7f:d0:3f:bb: 5a:3b:d2:39:22:c9:3a:b8:ee:7a:27:e1:0e:14:3a:95:33:2e: 2d:fc:76:c7:c6:10:a5:be:d4:94:e3:bd:ca:4e:28:97:1b:2b: f3:e2:07:df:d1:ad:31:88:91:00:f7:ec:27:85:ea:51:55:cb: f1:1a:cf:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZy47/XGnr0rwsqRVvRp0u4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMzA0MTMwMDU5WhcNMjYwMzA1MTMwMDU5WjAzMTEwLwYDVQQD Eyg3NTQzN2FlZTg1ZGQyMjI5ZDBjOGY2NTdkZWJlOTk2ZmY5M2FhZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T6oZ+pd/xO6zLo6RyapdoFEHkbm usQ8hUXidWs97WFCSQnYVeR49UYeLdU1UA3H6f8QatCdMrLD3hnVEHEPLUa6Zs4X eZxtLX+5XJ6quGn569cY3ohUFGbMS7Vb0LopSvN2Yw5kCTc+FPZHTorWz/f2PkoC Mvc191AuZrIWfOchjSLH/Fu5HG9vX8C0LYJ44HHaEHKCO0TT2rixZ5oxcRBrilJX vgQr7q2+vqQhNJPonDHA2lUAlI9TVBNklhOSqA14haWXGzN6T/XqamZ2dy+zxl4H bMQe6hfx4pcn2eTnsLU4MY1JzgLOP/9tvOXBc8cOKX4Ai6sSVJDLGD3BGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVDeu6F3SIp0Mj2V96+mW/5Oq5JMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnLuMElD I40QT7vx+VWwOdSfJ8X+0i/yrGKF7z6NYVKo2q8JCbkUjid7xt2JapOZQEknBSH5 5S4FMuEAsxzKO/5FXga+X1wCdIF3bazgagcg0M72P8MOWPW6Eh3f7BZzK4hlq13c A8TrCCf7bOpT053cV6fh/WrnTbABwhfzC2vC+UEy1OLi+59QZ4I+LdpohP0fvJSI ZeUk/YjIYH0YalQtOtRccV7s3IqFJ3bzJkSt0kEkTiO4xfQQHZYS510f0bB/0D+7 WjvSOSLJOrjueifhDhQ6lTMuLfx2x8YQpb7UlOO9yk4olxsr8+IH39GtMYiRAPfs J4XqUVXL8RrPjQ== -----END CERTIFICATE-----Generated at Wed Mar 4 16:05:54 2026 by rpki-client