$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: lJJhUXYt7JpMJZq7I3TB9bQlr4Fbw31QT+37I5OawHY= Subject key identifier: A4:0D:50:53:77:41:93:0D:21:8F:45:63:2D:4D:3A:94:F3:1D:DF:98 Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019CD8B16954D4B316B7C2A4ED59619165EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 1230 Signing time: Tue 10 Mar 2026 17:00:31 +0000 Manifest this update: Tue 10 Mar 2026 17:00:31 +0000 Manifest next update: Wed 11 Mar 2026 17:00:31 +0000 Files and hashes: 1: 2JOxayZ4kxrtihpkJSNfTVv34wU.roa (hash: zOn78CRIowaCVixyqjErS7L368UV3aEuLomuXw4ifTk=) 2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=) 3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=) 4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=) 5: Hp0vnK6LsH978scPrAVFBl2kfG4.roa (hash: MiTGwbJzWQLF/5BUrcBlVLuqzCKJBbep6wp6tPRmCrg=) 6: JGgBlVIY2oUSh_HFDVRqyLKytmE.roa (hash: RKsfB4gNYffazBWvIDvr2El30bylWlzUFL7S8HQbwRU=) 7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=) 8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=) 9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=) 10: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: zoVJ111E5gvveINjIAMn0Pye91qefl8dcOAu60rlKfg=) 11: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=) 12: iyrSz_wsF9CBGgcuXGLfggTWLUc.roa (hash: hTAJ5z1uKngFKR3nayC40cEb7tmnFdoOcWdYxUuDRsQ=) 13: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=) 14: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=) 15: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Mar 2026 15:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:d8:b1:69:54:d4:b3:16:b7:c2:a4:ed:59:61:91:65:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Mar 10 17:00:31 2026 GMT Not After : Mar 11 17:00:31 2026 GMT Subject: CN=a40d50537741930d218f45632d4d3a94f31ddf98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:26:6e:36:18:96:b0:84:0f:30:17:68:c2: 02:c2:31:ca:24:e8:d3:7b:5f:35:e2:77:d4:d5:f7: ce:e4:3a:66:61:5b:92:90:14:eb:93:8b:30:12:53: dc:1e:dc:13:91:65:d5:f6:f4:0d:65:e2:97:2b:ff: ed:e6:ba:f1:f6:67:94:b6:a5:20:41:b4:93:62:0f: ea:8a:78:0a:f8:57:ef:70:6e:28:17:b7:b1:20:9b: 86:bc:33:b1:1b:01:97:2e:7a:a4:1b:33:4d:3f:9d: 56:21:a3:cd:8e:b7:05:b3:7c:76:6a:4b:3f:7c:46: 74:10:42:22:27:1d:72:1d:25:8d:b9:0b:0f:4a:6f: 05:bc:34:fe:2c:0a:69:79:aa:e9:9f:c9:f4:13:0b: e5:bc:f2:da:de:61:38:99:3a:47:5b:e4:d5:c5:d5: 3c:cb:b5:04:dd:bc:3f:42:b8:9d:9d:da:62:e0:88: 5d:15:11:05:f0:cf:11:33:c4:37:06:a2:28:58:f2: 34:89:82:6e:53:86:af:ca:33:71:78:62:9f:ba:b3: ec:85:f8:79:95:b0:7a:cc:2c:4a:70:fa:2b:22:0f: 3f:37:6f:f8:da:67:97:59:df:25:ce:d5:a6:12:61: 6d:3d:2b:65:73:aa:74:8b:21:6b:59:4b:f3:b1:9f: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0D:50:53:77:41:93:0D:21:8F:45:63:2D:4D:3A:94:F3:1D:DF:98 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a1:31:47:8a:d9:b0:a4:39:87:03:ba:b7:d9:35:17:de:e3: 23:88:dd:5c:b6:71:ad:a5:24:44:34:10:8b:80:ad:8f:78:3a: b8:3b:22:bf:6d:a5:3b:07:6a:07:49:98:a8:b5:65:f4:31:0a: 3d:06:e7:6b:73:71:e0:de:f2:ff:50:21:60:d2:fc:5c:66:b9: 96:36:e1:2a:cf:2d:0c:a6:96:26:96:e3:76:2b:87:42:73:d1: 63:17:aa:14:c6:12:5b:06:9d:bf:e1:45:eb:5a:82:4c:be:94: a5:be:e1:a5:dc:65:48:f6:4a:47:ed:43:31:8e:4e:9d:41:8f: 14:a3:53:99:14:10:dc:f8:4e:9f:7f:60:02:78:80:19:9a:bf: dc:92:b2:a7:94:a3:c5:16:f3:14:bb:57:31:90:a9:76:63:c1: 4e:2b:2d:fc:c5:03:26:44:50:83:db:ca:e6:94:ab:8e:15:c5: 3a:6f:6a:ba:53:fa:01:dc:cd:32:d3:44:88:dd:17:4c:8e:8c: e3:56:23:43:e1:ce:24:f5:8b:72:a5:b0:ee:fe:76:06:15:db: f0:f6:08:ed:cd:02:27:14:9c:19:69:b0:50:53:50:a2:aa:e8: d7:86:a1:57:4a:94:5c:83:a2:07:72:9e:11:f8:4c:f4:04:1b: 6c:3e:32:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzYsWlU1LMWt8Kk7VlhkWXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwMzEwMTcwMDMxWhcNMjYwMzExMTcwMDMxWjAzMTEwLwYDVQQD EyhhNDBkNTA1Mzc3NDE5MzBkMjE4ZjQ1NjMyZDRkM2E5NGYzMWRkZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJsmbjYYlrCEDzAXaMICwjHKJOjT e1814nfU1ffO5DpmYVuSkBTrk4swElPcHtwTkWXV9vQNZeKXK//t5rrx9meUtqUg QbSTYg/qingK+FfvcG4oF7exIJuGvDOxGwGXLnqkGzNNP51WIaPNjrcFs3x2aks/ fEZ0EEIiJx1yHSWNuQsPSm8FvDT+LAppearpn8n0EwvlvPLa3mE4mTpHW+TVxdU8 y7UE3bw/Qridndpi4IhdFREF8M8RM8Q3BqIoWPI0iYJuU4avyjNxeGKfurPshfh5 lbB6zCxKcPorIg8/N2/42meXWd8lztWmEmFtPStlc6p0iyFrWUvzsZ8ErQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQNUFN3QZMNIY9FYy1NOpTzHd+YMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6ExR4rZ sKQ5hwO6t9k1F97jI4jdXLZxraUkRDQQi4Ctj3g6uDsiv22lOwdqB0mYqLVl9DEK PQbna3Nx4N7y/1AhYNL8XGa5ljbhKs8tDKaWJpbjdiuHQnPRYxeqFMYSWwadv+FF 61qCTL6Upb7hpdxlSPZKR+1DMY5OnUGPFKNTmRQQ3PhOn39gAniAGZq/3JKyp5Sj xRbzFLtXMZCpdmPBTist/MUDJkRQg9vK5pSrjhXFOm9qulP6AdzNMtNEiN0XTI6M 41YjQ+HOJPWLcqWw7v52BhXb8PYI7c0CJxScGWmwUFNQoqro14ahV0qUXIOiB3Ke EfhM9AQbbD4yZQ== -----END CERTIFICATE-----Generated at Tue Mar 10 18:26:00 2026 by rpki-client