$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: l0G5Umhb9TPWSxAncraEF4NULaoQuMOt7T7giuXSlNo= Subject key identifier: FB:06:6C:15:68:F9:52:52:CA:A8:02:6B:09:81:AC:B4:C6:42:B3:86 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019CE900D354E462609830F68967158F52B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 1234 Signing time: Fri 13 Mar 2026 21:01:11 +0000 Manifest this update: Fri 13 Mar 2026 21:01:11 +0000 Manifest next update: Sat 14 Mar 2026 21:01:11 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: vPfWQt/bXuQ7ghtbAqFrZvkNOdq+1KYi/r2I3s2HIF0=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e9:00:d3:54:e4:62:60:98:30:f6:89:67:15:8f:52:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Mar 13 21:01:11 2026 GMT Not After : Mar 14 21:01:11 2026 GMT Subject: CN=fb066c1568f95252caa8026b0981acb4c642b386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ff:d9:1a:0e:ac:2d:a2:4f:78:f7:31:89:7a: 70:38:b6:61:25:86:2b:09:ce:61:c9:9a:13:e5:9b: f9:bb:dd:a1:48:f5:db:89:18:66:20:6f:6a:94:1e: 38:60:4d:26:44:62:e0:7e:5c:26:1f:84:e8:8d:1f: f2:ab:12:2a:6a:b6:cc:6d:ef:ac:a7:08:af:4a:e7: c8:55:a7:81:21:73:b7:ba:59:2f:86:40:a2:03:a4: 0d:f1:4c:c4:a3:5e:30:ba:7c:df:23:f4:5f:27:d3: 52:da:dc:84:72:ee:7f:ac:1e:f3:fd:93:08:dd:51: 20:30:60:5a:72:d4:4d:ed:d3:4b:65:a3:67:c1:16: af:9d:cf:44:31:18:76:e5:d2:49:8f:30:dc:76:32: 48:94:d6:31:c8:56:0b:b2:85:c7:e6:42:41:a9:97: 2b:57:69:5a:ad:fa:e2:5a:0e:4d:b6:f9:be:ec:88: 6c:51:1f:92:06:dc:08:7d:14:eb:48:7d:b7:a5:e3: 63:06:53:b0:c6:56:47:ed:fa:3f:7e:74:fc:53:d8: bf:78:63:95:e1:a9:a4:65:a4:b2:1e:bb:83:1a:70: 81:1e:e9:b5:31:e8:fa:32:6b:05:16:ba:10:61:99: 9b:fe:d7:87:1f:31:ce:25:4f:ea:30:1d:15:ba:ea: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:06:6C:15:68:F9:52:52:CA:A8:02:6B:09:81:AC:B4:C6:42:B3:86 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:fb:5d:9e:96:7a:21:7e:5d:d1:92:e7:15:1b:19:27:25:82: b5:f4:f1:72:63:fc:63:d6:99:62:ed:5e:9d:b1:eb:f6:35:c9: 05:a8:e3:78:e6:95:08:f1:51:4a:5d:c7:8b:77:ba:8b:77:ac: 1c:1d:a5:f7:95:ea:6e:3e:e7:76:44:28:9b:d6:ba:54:cb:b6: c2:0a:6f:ac:d9:b0:ef:f8:fd:a8:18:b3:17:94:77:e4:97:af: 73:39:2e:93:33:4a:81:89:36:d8:9c:71:c3:45:73:80:69:37: 56:ec:8d:6b:19:38:74:27:68:17:d9:75:17:cc:ca:8c:96:b9: 8b:68:06:49:04:10:d9:1d:04:ba:ec:85:41:77:54:44:09:da: 8e:ca:a0:72:3e:e2:75:f5:4f:d3:5c:67:e2:95:fa:a7:11:83: 9e:9d:1e:16:78:03:89:cc:57:fd:5c:19:4f:d7:02:cf:cd:30: 35:9d:90:67:49:9d:ff:c6:43:9c:37:d1:6f:1c:40:ff:20:03: 05:f2:6f:2f:15:20:e4:0d:67:cc:06:3c:ad:f8:a8:2d:c3:b0: 55:a9:54:f3:00:92:86:fa:16:94:a4:00:12:b7:79:76:9a:f8: 07:4d:06:6c:fb:02:01:dc:3d:99:de:01:02:33:d0:84:01:1b: 3e:7f:24:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzpANNU5GJgmDD2iWcVj1K4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwMzEzMjEwMTExWhcNMjYwMzE0MjEwMTExWjAzMTEwLwYDVQQD EyhmYjA2NmMxNTY4Zjk1MjUyY2FhODAyNmIwOTgxYWNiNGM2NDJiMzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P/ZGg6sLaJPePcxiXpwOLZhJYYr Cc5hyZoT5Zv5u92hSPXbiRhmIG9qlB44YE0mRGLgflwmH4TojR/yqxIqarbMbe+s pwivSufIVaeBIXO3ulkvhkCiA6QN8UzEo14wunzfI/RfJ9NS2tyEcu5/rB7z/ZMI 3VEgMGBactRN7dNLZaNnwRavnc9EMRh25dJJjzDcdjJIlNYxyFYLsoXH5kJBqZcr V2larfriWg5Ntvm+7IhsUR+SBtwIfRTrSH23peNjBlOwxlZH7fo/fnT8U9i/eGOV 4amkZaSyHruDGnCBHum1Mej6MmsFFroQYZmb/teHHzHOJU/qMB0Vuuo+NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsGbBVo+VJSyqgCawmBrLTGQrOGMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/tdnpZ6 IX5d0ZLnFRsZJyWCtfTxcmP8Y9aZYu1enbHr9jXJBajjeOaVCPFRSl3Hi3e6i3es HB2l95Xqbj7ndkQom9a6VMu2wgpvrNmw7/j9qBizF5R35JevczkukzNKgYk22Jxx w0VzgGk3VuyNaxk4dCdoF9l1F8zKjJa5i2gGSQQQ2R0EuuyFQXdURAnajsqgcj7i dfVP01xn4pX6pxGDnp0eFngDicxX/VwZT9cCz80wNZ2QZ0md/8ZDnDfRbxxA/yAD BfJvLxUg5A1nzAY8rfioLcOwValU8wCShvoWlKQAErd5dpr4B00GbPsCAdw9md4B AjPQhAEbPn8kGA== -----END CERTIFICATE-----Generated at Sat Mar 14 03:47:28 2026 by rpki-client