$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: T/irBHlr+HOkxQCb90ZSI+yAAimcfm2Dn+M73uqkBek= Subject key identifier: 9D:A9:0E:28:AF:1B:F4:C7:E6:C4:D3:DD:AB:A1:2E:3D:6C:CC:27:80 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019CC899F1F55C1A0219B084226BE404FD4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 1615 Signing time: Sat 07 Mar 2026 14:00:57 +0000 Manifest this update: Sat 07 Mar 2026 14:00:57 +0000 Manifest next update: Sun 08 Mar 2026 14:00:57 +0000 Files and hashes: 1: 5izoM-ae0viPYeMa8vG_OMdcCFM.roa (hash: TwuLhMgA2SHR4gXSc9/RCEg/7dBujziBPA56lp4yzpw=) 2: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=) 3: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=) 4: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=) 5: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: JnhGOhz2p/YUm+8AcYqE5u+NvhaT3mm+4yBDBVMFPfg=) 6: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=) 7: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=) 8: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=) 9: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=) 10: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=) 11: qJOi4zVPIJeiBz6kzCUQLpwMngk.roa (hash: vqduf5OrqJ9boER+M0PF82VqTnPYijX9elPDZEa03wo=) 12: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=) 13: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=) 14: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 10:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c8:99:f1:f5:5c:1a:02:19:b0:84:22:6b:e4:04:fd:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Mar 7 14:00:57 2026 GMT Not After : Mar 8 14:00:57 2026 GMT Subject: CN=9da90e28af1bf4c7e6c4d3ddaba12e3d6ccc2780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:47:ea:9e:c4:cd:e7:5e:ff:76:ff:69:73:ca: cb:71:78:33:10:ee:e9:40:0c:d2:c4:2c:a7:2a:b0: e0:75:a1:f6:2a:30:6f:0c:1a:7e:b9:f0:2e:16:97: c9:36:28:72:f1:39:ea:86:a3:05:e7:d5:00:cc:60: 9e:68:42:58:e4:b9:a4:cf:c5:22:c2:3c:30:57:7f: 06:5e:77:a4:d3:b5:97:a9:c6:36:33:78:61:64:fb: 20:aa:41:16:0a:58:d3:fc:7c:8a:c8:86:7e:53:ee: 44:ba:c4:c1:12:66:80:c3:25:c0:e0:70:b8:10:a0: 73:29:80:82:e0:4a:4f:e0:96:eb:29:a3:ce:86:b5: 55:87:cf:6b:5a:48:e6:ee:89:c9:1a:96:b0:21:be: 7b:47:c2:3d:e9:66:14:36:94:65:38:a8:05:d9:0a: 54:a9:73:03:df:6a:3f:e6:79:0b:43:3f:25:7c:f5: 22:98:64:a1:f6:23:c8:21:cd:ee:a7:20:a4:1b:e3: 4c:da:68:48:13:6b:0f:a7:6f:69:a7:5c:b1:47:07: 65:5a:10:c3:0e:a3:bb:85:8a:9e:e9:da:4b:d0:63: 4c:ff:4c:af:d4:a6:3a:6d:21:74:ac:09:43:a5:78: 40:04:0a:93:d9:93:22:3b:67:9a:51:51:9e:e7:ff: 3c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A9:0E:28:AF:1B:F4:C7:E6:C4:D3:DD:AB:A1:2E:3D:6C:CC:27:80 X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:53:bd:2f:05:92:6c:55:37:74:eb:99:09:df:66:7c:0c:01: ea:08:04:f4:17:d4:88:0e:66:f4:54:fc:85:20:06:7f:1a:a4: c1:e2:02:f3:c6:a8:7a:21:31:a3:41:74:56:08:33:57:a9:3c: 5a:9a:63:96:e4:e2:60:10:3d:39:6d:e1:64:28:33:86:e8:28: 99:9c:50:64:4f:d3:13:74:c3:46:f4:7d:99:49:f2:b8:62:21: 8f:91:18:b8:e3:74:3f:27:48:52:57:73:1d:54:cc:d9:f5:16: 35:5a:91:ec:4e:49:ee:46:2e:92:50:a9:67:81:08:29:41:77: 7c:98:32:29:4c:78:f3:17:e5:e1:ca:72:46:20:1d:f7:bc:9a: 11:28:49:01:7f:a5:e0:d9:d9:26:42:c9:7f:83:9f:a3:66:7c: 3e:cc:8a:7a:bf:c4:65:1a:04:dd:c7:90:21:f2:30:c6:e0:9b: 90:cf:98:38:f8:7f:5e:1d:15:6a:a8:b1:ad:dd:ad:f9:66:9d: 44:9a:8c:dd:f5:bd:77:0f:3a:c5:23:05:0a:49:33:17:fd:c8: dd:11:06:21:80:0d:fc:b2:6e:db:fb:d5:52:40:2e:3e:c3:0b: 70:c7:7c:0d:f0:de:6b:e5:72:02:8f:ac:ed:74:dd:72:fc:58: 54:81:eb:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzImfH1XBoCGbCEImvkBP1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYwMzA3MTQwMDU3WhcNMjYwMzA4MTQwMDU3WjAzMTEwLwYDVQQD Eyg5ZGE5MGUyOGFmMWJmNGM3ZTZjNGQzZGRhYmExMmUzZDZjY2MyNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EfqnsTN517/dv9pc8rLcXgzEO7p QAzSxCynKrDgdaH2KjBvDBp+ufAuFpfJNihy8TnqhqMF59UAzGCeaEJY5Lmkz8Ui wjwwV38GXnek07WXqcY2M3hhZPsgqkEWCljT/HyKyIZ+U+5EusTBEmaAwyXA4HC4 EKBzKYCC4EpP4JbrKaPOhrVVh89rWkjm7onJGpawIb57R8I96WYUNpRlOKgF2QpU qXMD32o/5nkLQz8lfPUimGSh9iPIIc3upyCkG+NM2mhIE2sPp29pp1yxRwdlWhDD DqO7hYqe6dpL0GNM/0yv1KY6bSF0rAlDpXhABAqT2ZMiO2eaUVGe5/88NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2pDiivG/TH5sTT3auhLj1szCeAMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1O9LwWS bFU3dOuZCd9mfAwB6ggE9BfUiA5m9FT8hSAGfxqkweIC88aoeiExo0F0VggzV6k8 WppjluTiYBA9OW3hZCgzhugomZxQZE/TE3TDRvR9mUnyuGIhj5EYuON0PydIUldz HVTM2fUWNVqR7E5J7kYuklCpZ4EIKUF3fJgyKUx48xfl4cpyRiAd97yaEShJAX+l 4NnZJkLJf4Ofo2Z8PsyKer/EZRoE3ceQIfIwxuCbkM+YOPh/Xh0Vaqixrd2t+Wad RJqM3fW9dw86xSMFCkkzF/3I3REGIYAN/LJu2/vVUkAuPsMLcMd8DfDea+VyAo+s 7XTdcvxYVIHrTg== -----END CERTIFICATE-----Generated at Sat Mar 7 19:25:57 2026 by rpki-client