$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: LWSwc7QsgQ067V0e5GVQUKryVrL60DDiB4UERyE4194= Subject key identifier: E4:80:B8:1D:01:FE:5F:39:BC:9E:2F:0C:2E:2E:B8:49:8C:E2:9D:E5 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019CE55B2F01BCA4272D1ECFC8229D689646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 1883 Signing time: Fri 13 Mar 2026 04:01:24 +0000 Manifest this update: Fri 13 Mar 2026 04:01:24 +0000 Manifest next update: Sat 14 Mar 2026 04:01:24 +0000 Files and hashes: 1: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: Jo4oeLGfynFxbYajPUckvAmuDFuTmZig8RXHx9kx1ws=) 2: 3gBGUy3u0kv0cMFfYhefm1zv6V4.roa (hash: wbVQO0NG95NJdUKsQ+Wjm9lVf3DsbDyNxF0jF2IdjBg=) 3: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (hash: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo=) 4: 7DBa_6nBybw3J8T8dr7yX7ebiwU.roa (hash: 9lkcVj8pg/THlhFClMP/jc7G+HKyv/jKnpXVV+mQkS4=) 5: 9VcWKWB5puA52wsDDDkNDjxeGR4.roa (hash: GlsIfnVs54CADMaRa3Sk/1oPA7tZtu4TEPhze/G9m8w=) 6: B7nfsbI7vpYat2Veoezdf_TcIy8.roa (hash: ZifWcufC5UurQhjWI81wwKVDTfPl5QEDU7f59ef2yA4=) 7: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (hash: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA=) 8: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (hash: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY=) 9: MAbKsaJixjU16-YxviDdUW3E9O0.roa (hash: G7uQcrymoMNiTSNS0GkaRs7zRkNHWrcTl4RG77CdYN0=) 10: RVfXd-D1ecB560CRD5YifVCpd1s.roa (hash: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc=) 11: TLi5DNB1nha4h6YESMgyGrCORWo.roa (hash: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw=) 12: a4e-5HcXuyyRW82YjyXKassrVo8.roa (hash: LjIo0mjkPTCoI0owtR5lNhwGCbcbFzLDlXxT76bUTMg=) 13: gjhjBLir8IRFlK670wG4nH4oaXk.roa (hash: cv4ygh/KOqNvTQ/oTMBYXfBkQ2u91AyKM5PUQ/5gKm8=) 14: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (hash: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e5:5b:2f:01:bc:a4:27:2d:1e:cf:c8:22:9d:68:96:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Mar 13 04:01:24 2026 GMT Not After : Mar 14 04:01:24 2026 GMT Subject: CN=e480b81d01fe5f39bc9e2f0c2e2eb8498ce29de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:6f:ff:da:91:35:18:92:9f:d9:bd:da:70: b3:a5:51:37:a6:d9:b9:d5:7c:3e:7b:3d:90:5a:29: 26:6a:60:f1:36:c1:a0:b7:ff:d4:40:89:ad:22:68: 93:6e:64:1a:cf:6c:9b:9c:b4:44:a9:8b:5d:9d:f5: 7b:07:9b:2f:d6:dd:9e:4f:cd:b6:13:c2:17:ab:83: 06:04:eb:6f:cb:96:f0:ce:a2:79:1e:f9:80:53:7e: 43:b4:4d:6b:6c:22:ab:88:89:22:f7:f7:ab:7e:f7: 29:fb:47:72:a7:96:96:8a:89:9e:18:f3:81:c3:3f: e9:f9:04:76:2a:3b:1e:55:ff:8f:03:7e:09:f7:bf: 33:97:d7:95:0d:10:7c:ae:fe:fc:51:f6:1e:62:4f: ee:5c:6f:2c:93:16:27:2a:85:01:bc:01:7f:68:dd: 5c:25:18:d5:4c:58:52:cf:cc:5c:ad:36:e5:dd:fa: de:89:4d:ab:66:7e:e7:c7:be:fc:82:0f:9f:fe:15: 83:cc:b6:6d:03:dd:ab:d8:da:66:1e:5a:5a:ae:08: 49:23:14:55:74:90:fc:1d:00:74:a2:97:c2:5a:e0: fa:66:36:07:1e:f9:de:f4:05:68:01:2e:5a:66:c7: d5:9c:a3:dd:55:9b:11:f9:2c:43:23:89:f2:91:94: 12:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:80:B8:1D:01:FE:5F:39:BC:9E:2F:0C:2E:2E:B8:49:8C:E2:9D:E5 X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:77:21:cf:87:0f:d6:e8:47:22:9a:d3:09:f9:7e:59:c5:4a: 46:29:89:2c:e4:2c:77:1f:89:a4:61:25:b3:1f:8c:04:f0:b1: 59:7f:05:6a:db:ba:47:23:d3:8c:37:ab:20:48:79:d9:16:b3: 66:5f:8d:b5:9f:2d:83:97:cc:5e:af:42:2e:d0:26:3b:14:97: 46:6d:c5:82:40:f6:36:0e:ba:a5:c3:50:9f:14:0a:d2:1d:62: b0:ef:a7:ea:89:4e:66:9e:09:58:9e:46:87:4e:40:5c:31:93: 0c:0b:89:1d:7a:de:3f:49:8d:32:14:13:43:54:49:a8:c4:cf: b1:d9:4d:4c:b8:87:63:57:f8:0a:74:0c:78:b6:ed:f6:2c:9f: 41:db:6a:91:ce:1f:b0:5b:a4:e8:c4:8f:fe:bb:1f:7d:f2:11: d9:d5:17:4c:8a:86:a1:96:09:b1:a9:e8:e5:47:a6:45:bc:b2: 49:b0:6e:ac:9f:74:39:20:ef:f3:9f:ef:83:af:14:fc:dc:21: 19:69:01:a4:9c:c0:9f:ef:c8:c9:76:9e:e7:d8:1b:18:24:52: 89:23:f1:37:b3:88:fb:3d:db:1e:c2:94:0a:e2:1b:a0:9c:83: 55:fb:56:a1:24:95:25:38:69:4d:6b:d2:38:15:94:38:a0:dd: 29:76:5c:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzlWy8BvKQnLR7PyCKdaJZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwMzEzMDQwMTI0WhcNMjYwMzE0MDQwMTI0WjAzMTEwLwYDVQQD EyhlNDgwYjgxZDAxZmU1ZjM5YmM5ZTJmMGMyZTJlYjg0OThjZTI5ZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLNv/9qRNRiSn9m92nCzpVE3ptm5 1Xw+ez2QWikmamDxNsGgt//UQImtImiTbmQaz2ybnLREqYtdnfV7B5sv1t2eT822 E8IXq4MGBOtvy5bwzqJ5HvmAU35DtE1rbCKriIki9/erfvcp+0dyp5aWiomeGPOB wz/p+QR2KjseVf+PA34J978zl9eVDRB8rv78UfYeYk/uXG8skxYnKoUBvAF/aN1c JRjVTFhSz8xcrTbl3freiU2rZn7nx778gg+f/hWDzLZtA92r2NpmHlparghJIxRV dJD8HQB0opfCWuD6ZjYHHvne9AVoAS5aZsfVnKPdVZsR+SxDI4nykZQSdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSAuB0B/l85vJ4vDC4uuEmM4p3lMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHchz4cP 1uhHIprTCfl+WcVKRimJLOQsdx+JpGElsx+MBPCxWX8Fatu6RyPTjDerIEh52Raz Zl+NtZ8tg5fMXq9CLtAmOxSXRm3FgkD2Ng66pcNQnxQK0h1isO+n6olOZp4JWJ5G h05AXDGTDAuJHXreP0mNMhQTQ1RJqMTPsdlNTLiHY1f4CnQMeLbt9iyfQdtqkc4f sFuk6MSP/rsfffIR2dUXTIqGoZYJsano5UemRbyySbBurJ90OSDv85/vg68U/Nwh GWkBpJzAn+/IyXae59gbGCRSiSPxN7OI+z3bHsKUCuIboJyDVftWoSSVJThpTWvS OBWUOKDdKXZceQ== -----END CERTIFICATE-----Generated at Fri Mar 13 09:27:12 2026 by rpki-client