$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json) Hash identifier: FjFuibCNeRi89RfGg1gED6cH2k/gojqMu4LOfJurnks= Subject key identifier: 29:21:7F:A6:C9:57:4D:D3:9A:7E:F3:31:A1:64:BE:76:B3:12:FB:1E Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019CBB15C35B54777FAC7912DEFCB13C5FEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft Manifest number: 043F Signing time: Wed 04 Mar 2026 23:01:31 +0000 Manifest this update: Wed 04 Mar 2026 23:01:31 +0000 Manifest next update: Thu 05 Mar 2026 23:01:31 +0000 Files and hashes: 1: 2IiWe1A18ODcftRT6YrkMfyygcw.roa (hash: wTczLqEW9RRWBHT/mYw12mmurAPtA5oq8MEFaFAjnu0=) 2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: CLwXNJ1d+aBcqebOVYq3uP73tvIYWRfWfEywqvAywqU=) 3: 40ZCLfu-hf54aZk4vS6thtcaz6Y.roa (hash: 6qlfEyZyTsr1GU+JJmssokqBIx7S6uv3hfgnFxarKbc=) 4: SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa (hash: kRtJ8SNMjyDbUxu98aNT/p/eOM2tAQZf30u+RPiQ1f8=) 5: Vgbpn4759RAXqogrheuz1qNcUzY.roa (hash: rIlObteXhXqYNyv4myeRnGyAvf8Ufp9JEo7G8JbHLcM=) 6: _msrPFl7j-h-scWfwUUyG5vmI0Q.roa (hash: C0U0oHsxASzeTthWbTeZAy4SqW+0azDdamHmVesAW1U=) 7: frMVgzQaPIs1Gz7R4vF3dTAHWzc.roa (hash: qpSuTjOUyEClBJcAXKNR1v6GJxRuHi1KjNiauEeSO7o=) 8: gA8K0uCGARt0iMHybj1fl0_l9iM.roa (hash: oF5vhF0FQd0hgOhUSqj7/e1FPt2MEHPpP+wGYckBTNY=) 9: klEpgcDgV3MNJLywxR3-VstKMaE.roa (hash: 76nMpG3WoKqOfhqvdWfqDmfgIocWXvBNiYDORl3wdTo=) 10: l8TSNwU2prw2gsntuaJ9QdkRHKw.roa (hash: gb+3/D4Y4zC34TYQcD7+qVWbJgAtu0xBM1r/dmFP8pw=) 11: ofDxB8O2MbjFIXFLf88e0INSGBo.roa (hash: ikjcPpCnHENpa86zzER4JQ6OTnpcpzdfcewDtUbt2Vg=) 12: tevOSAyMp-1DHWOc8A6PPAJZLUs.roa (hash: /4F2MJ2YCwSX6I/W4Ebbet4QyTAZ6jd4w/oq57g4Qcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 19:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:bb:15:c3:5b:54:77:7f:ac:79:12:de:fc:b1:3c:5f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Mar 4 23:01:31 2026 GMT Not After : Mar 5 23:01:31 2026 GMT Subject: CN=29217fa6c9574dd39a7ef331a164be76b312fb1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:c5:65:e9:c2:c7:20:66:58:b1:85:f2:c3: 97:29:a7:f8:a7:73:70:31:1a:12:18:3b:cc:d5:60: a7:8e:f8:6c:c2:e2:f7:52:8a:88:f2:97:b2:22:4c: 71:9d:b0:00:17:66:49:59:37:2a:41:18:d0:61:39: 98:13:75:2e:bc:48:c9:3e:d7:28:5e:01:e1:d4:f6: e7:d3:77:23:86:dd:01:10:24:fa:50:93:44:c2:b8: 4c:cf:96:4d:35:88:e2:4c:ac:c1:76:3e:3d:eb:29: 0f:29:2a:08:95:3b:ab:89:78:26:2a:8d:ad:00:47: 0c:d5:78:3a:3e:23:5e:29:5c:2a:4c:44:19:57:2b: 31:ee:e9:e0:ad:d6:93:5c:1d:db:aa:ba:41:b7:41: 89:30:56:9a:47:58:4e:60:c6:e5:6c:2b:7f:3a:2d: 7d:0e:41:56:88:90:bd:19:bc:38:c0:4e:b3:61:a6: 00:3d:3d:c8:52:7c:3d:21:79:4e:3c:49:89:55:e9: 75:59:ce:8f:36:ff:d4:10:e4:5d:69:bb:00:d9:2b: 22:e5:b1:67:3d:42:7b:7d:0e:7f:64:a7:46:44:41: 21:5e:42:75:4b:cf:fc:97:d9:68:90:fe:bb:0d:29: 25:68:e9:3f:b3:b3:3e:8d:ba:a2:db:38:89:5a:af: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:21:7F:A6:C9:57:4D:D3:9A:7E:F3:31:A1:64:BE:76:B3:12:FB:1E X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f8:67:d2:e0:e0:74:9f:fe:60:83:c3:da:0d:c4:1e:9e:b4: c7:7b:8d:27:35:64:c3:79:02:fa:51:7f:23:60:38:50:be:64: 2b:80:97:2f:fa:71:6c:8b:6b:01:99:f1:61:71:38:f3:3e:28: 55:06:2b:a3:41:25:ef:53:b5:8a:a3:f9:62:9c:e3:9d:c0:fa: b8:80:75:89:f3:3e:dd:04:f8:d3:dd:f4:22:85:11:aa:e0:26: 11:02:30:3b:49:20:15:ec:85:77:b8:5d:8c:63:fe:b2:2f:39: 13:b7:89:02:5f:18:8e:dd:70:bb:3a:12:13:da:41:c2:ea:f8: 8a:17:15:c9:0b:ef:64:6a:0a:83:cb:c1:74:11:45:c6:b4:21: 73:6e:81:6a:12:60:1c:2e:0c:29:33:36:4c:7a:c6:db:ea:62: 43:1b:9f:4f:4f:de:af:6f:fd:34:29:43:e9:94:31:9d:f3:d5: 2a:de:ef:f6:c1:4a:8b:79:be:9b:78:66:9d:95:37:e7:78:08: 3c:02:ac:f4:43:37:6d:28:07:5b:29:cb:fe:97:aa:54:36:b9: 26:e2:f1:96:1b:cf:48:47:d9:f5:a3:b3:21:70:97:9d:88:87: 74:17:bf:cb:35:71:4f:88:5a:94:59:8c:52:7c:79:d0:61:b7: e8:3b:e5:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZy7FcNbVHd/rHkS3vyxPF/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwMzA0MjMwMTMxWhcNMjYwMzA1MjMwMTMxWjAzMTEwLwYDVQQD EygyOTIxN2ZhNmM5NTc0ZGQzOWE3ZWYzMzFhMTY0YmU3NmIzMTJmYjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW/FZenCxyBmWLGF8sOXKaf4p3Nw MRoSGDvM1WCnjvhswuL3UoqI8peyIkxxnbAAF2ZJWTcqQRjQYTmYE3UuvEjJPtco XgHh1Pbn03cjht0BECT6UJNEwrhMz5ZNNYjiTKzBdj496ykPKSoIlTuriXgmKo2t AEcM1Xg6PiNeKVwqTEQZVysx7ungrdaTXB3bqrpBt0GJMFaaR1hOYMblbCt/Oi19 DkFWiJC9Gbw4wE6zYaYAPT3IUnw9IXlOPEmJVel1Wc6PNv/UEORdabsA2Ssi5bFn PUJ7fQ5/ZKdGREEhXkJ1S8/8l9lokP67DSklaOk/s7M+jbqi2ziJWq89DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkhf6bJV03Tmn7zMaFkvnazEvseMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/hn0uDg dJ/+YIPD2g3EHp60x3uNJzVkw3kC+lF/I2A4UL5kK4CXL/pxbItrAZnxYXE48z4o VQYro0El71O1iqP5YpzjncD6uIB1ifM+3QT40930IoURquAmEQIwO0kgFeyFd7hd jGP+si85E7eJAl8Yjt1wuzoSE9pBwur4ihcVyQvvZGoKg8vBdBFFxrQhc26BahJg HC4MKTM2THrG2+piQxufT0/er2/9NClD6ZQxnfPVKt7v9sFKi3m+m3hmnZU353gI PAKs9EM3bSgHWynL/peqVDa5JuLxlhvPSEfZ9aOzIXCXnYiHdBe/yzVxT4halFmM Unx50GG36DvluA== -----END CERTIFICATE-----Generated at Thu Mar 5 01:23:12 2026 by rpki-client