$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: EwKINtkWfVRNl7EcQQxKt62sCihIiH5bQe6o974VKk4= Subject key identifier: 48:D3:2C:5E:3F:D4:47:85:4A:B6:48:32:42:D5:59:19:79:85:20:4D Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019CE3DA776530EA2DDB0B99971611C82B7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 188D Signing time: Thu 12 Mar 2026 21:01:11 +0000 Manifest this update: Thu 12 Mar 2026 21:01:11 +0000 Manifest next update: Fri 13 Mar 2026 21:01:11 +0000 Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=) 2: 1CdaDEMYuczsE5fB0W--_kjgKz4.roa (hash: eLlevVfSpCGIySbdmJVMxY3O6xhqpu9HHp+hjTsXa+Y=) 3: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=) 4: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: WLBNpMAFqc6QyGb++KXqQbgJiGumAr5a/MnfwQcKK68=) 5: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=) 6: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=) 7: XfKFQ0jrYjUJX2-xXdeOtI2PwBA.roa (hash: Dv4g2hdF2DWTn9KmOFquly3+gEa0c48Mrasajz85cj8=) 8: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=) 9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=) 10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=) 11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=) 12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e3:da:77:65:30:ea:2d:db:0b:99:97:16:11:c8:2b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Mar 12 21:01:11 2026 GMT Not After : Mar 13 21:01:11 2026 GMT Subject: CN=48d32c5e3fd447854ab6483242d559197985204d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0a:b7:14:d5:52:e0:79:0a:87:1a:df:2a:f4: 0f:7b:16:b5:49:58:55:8b:fa:8a:b5:16:ac:4e:55: 67:2b:47:34:a4:c8:4b:0a:48:97:7f:b9:a7:be:fe: 2f:c1:02:78:dd:d2:f2:cb:b5:90:bc:9a:05:6b:85: 7d:7a:f0:59:87:ce:9b:3d:85:ee:d2:0f:5c:f9:aa: 53:55:72:b7:16:3a:b1:7d:ad:17:be:29:d4:ec:8c: 0f:96:c8:98:d9:3a:ae:bf:01:fe:f9:1f:d9:01:96: ce:95:db:09:1b:3b:e2:54:68:ed:70:3a:0a:49:23: 88:4c:58:ae:8b:f0:1d:8e:d3:23:7e:44:ab:1d:60: fc:80:a2:d0:44:58:2c:16:16:d3:6c:e4:57:72:00: c2:fe:57:91:12:ea:e7:83:a8:8f:bb:2c:d6:95:d5: 61:47:69:aa:86:3b:00:70:5c:02:12:9e:09:92:d1: 12:b0:40:f0:d6:28:b8:b2:2d:60:0e:1c:ac:a5:89: c9:0c:d2:a1:ce:95:d7:3c:10:8e:69:05:d1:3c:66: 74:c9:5b:89:9d:ed:60:5c:19:ff:0f:67:89:de:6f: 2b:72:54:c6:9e:4f:ef:b4:5e:dc:ba:6e:3e:db:a7: 4c:fa:75:9c:c9:c5:ba:00:b6:ab:e6:97:7a:0a:5e: 6a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D3:2C:5E:3F:D4:47:85:4A:B6:48:32:42:D5:59:19:79:85:20:4D X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:81:d8:05:77:b8:cb:9f:5d:20:c5:72:38:7b:e2:54:9f:66: cd:29:15:4a:e8:0b:5b:36:99:57:e2:7f:f1:bf:46:91:97:97: 0e:a0:5a:53:00:82:f7:aa:8d:5c:97:0f:81:cb:eb:74:2f:1c: 8e:34:30:ab:96:d7:13:fc:c1:e6:6c:77:16:05:dd:56:29:54: 17:fc:25:47:10:e4:6f:73:71:56:e8:59:bf:09:a0:ed:72:a9: 5a:e2:59:b7:f0:e0:98:3d:95:d7:08:94:3f:9b:22:37:1f:77: 29:ca:8f:9d:67:62:b9:f2:4a:88:87:d4:b2:1a:1b:26:ab:d7: af:db:e9:56:3d:40:37:89:71:a5:2b:66:2f:61:08:2d:99:47: ce:e5:ab:3f:56:6d:c2:e7:29:1c:4e:06:b4:de:6e:b9:4c:5a: 6c:bd:fd:8d:a1:2a:75:e7:95:8e:55:af:0d:30:f2:8e:79:aa: da:07:0f:81:bd:c9:35:e0:f8:53:b3:23:7c:1f:e3:ec:30:d6: 9d:07:ed:f0:36:b5:4a:87:03:20:48:6b:e0:46:f1:09:78:db: 22:b1:0e:b8:75:5e:39:1e:e1:09:7e:f9:b5:18:88:1b:14:b5: 73:26:dd:cc:b0:40:fc:a0:05:88:a7:15:7f:aa:7d:59:49:5e: fa:07:ac:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzj2ndlMOot2wuZlxYRyCt/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwMzEyMjEwMTExWhcNMjYwMzEzMjEwMTExWjAzMTEwLwYDVQQD Eyg0OGQzMmM1ZTNmZDQ0Nzg1NGFiNjQ4MzI0MmQ1NTkxOTc5ODUyMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wq3FNVS4HkKhxrfKvQPexa1SVhV i/qKtRasTlVnK0c0pMhLCkiXf7mnvv4vwQJ43dLyy7WQvJoFa4V9evBZh86bPYXu 0g9c+apTVXK3Fjqxfa0XvinU7IwPlsiY2TquvwH++R/ZAZbOldsJGzviVGjtcDoK SSOITFiui/AdjtMjfkSrHWD8gKLQRFgsFhbTbORXcgDC/leREurng6iPuyzWldVh R2mqhjsAcFwCEp4JktESsEDw1ii4si1gDhyspYnJDNKhzpXXPBCOaQXRPGZ0yVuJ ne1gXBn/D2eJ3m8rclTGnk/vtF7cum4+26dM+nWcycW6ALar5pd6Cl5q1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjTLF4/1EeFSrZIMkLVWRl5hSBNMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyYHYBXe4 y59dIMVyOHviVJ9mzSkVSugLWzaZV+J/8b9GkZeXDqBaUwCC96qNXJcPgcvrdC8c jjQwq5bXE/zB5mx3FgXdVilUF/wlRxDkb3NxVuhZvwmg7XKpWuJZt/DgmD2V1wiU P5siNx93KcqPnWdiufJKiIfUshobJqvXr9vpVj1AN4lxpStmL2EILZlHzuWrP1Zt wucpHE4GtN5uuUxabL39jaEqdeeVjlWvDTDyjnmq2gcPgb3JNeD4U7MjfB/j7DDW nQft8Da1SocDIEhr4EbxCXjbIrEOuHVeOR7hCX75tRiIGxS1cybdzLBA/KAFiKcV f6p9WUle+gespA== -----END CERTIFICATE-----Generated at Fri Mar 13 01:29:53 2026 by rpki-client