$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft (raw, json) Hash identifier: rHrasZsMCdS8zJiNTtuY2f7fu9HAQURBdZQR9h6aTNo= Subject key identifier: 54:84:66:21:AE:11:4C:E5:E1:65:7E:7B:AF:33:9B:77:FE:01:E2:3B Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e Certificate serial: 019C98C08C83D7B41A2CB24F3C9CE3A892A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft Manifest number: 2A Signing time: Thu 26 Feb 2026 07:01:21 +0000 Manifest this update: Thu 26 Feb 2026 07:01:21 +0000 Manifest next update: Fri 27 Feb 2026 07:01:21 +0000 Files and hashes: 1: 0PHbd041nxhJwiuoDVCJZX9k2kI.roa (hash: vMF7OV/5w78TRBmyIIsW1PnX6MN9O6252wqjv9MFG+U=) 2: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (hash: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=) 3: 6iQfTYqoXvmViLJLe7e0ImnPEoU.roa (hash: bmzgQ+lo0I+77ZI600dSAP/2C2bN9eOhU3VKZg/+e1w=) 4: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (hash: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=) 5: GfxkS2K6bpBkpuzC0376hBbXUlk.roa (hash: J+Z21dJYBOM51LPU+ya0g/MXujhtG4pDOLjeLt4cOJo=) 6: IAzqisjxP23pxHIZNU2PwOnCvLM.roa (hash: Dx8Ru9bk+rrGzgV8uzgjB8VkPAyaJl87lUuZPbol+S8=) 7: KcezENyvvYrXXswSVtxzDv92fDQ.roa (hash: +/oYFxIQJASX+00zmlIPC2X6q4G3vMScM1rVA0R+aAw=) 8: M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl (hash: EGlHkVT1KgsnsfwxvanXB2/XmZ7oOES21NkPWg3ABBY=) 9: UywiNukAKqHV5KQalLlSjvBklY0.roa (hash: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=) 10: i2Iqgb7idyZNQ1KHFqC7txe0qCU.roa (hash: QC2A2Wn7DMzIRhF3e3yWliEcf95P8bWix34mNMmNsw8=) 11: v8UWvksKyApjoGkpVQk-f77SIjs.roa (hash: AWjQmre4TrBhKT07KOw+400SUJ7NB0n9U3rnKiTax+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Feb 2026 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:98:c0:8c:83:d7:b4:1a:2c:b2:4f:3c:9c:e3:a8:92:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e Validity Not Before: Feb 26 07:01:21 2026 GMT Not After : Feb 27 07:01:21 2026 GMT Subject: CN=54846621ae114ce5e1657e7baf339b77fe01e23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:7b:db:ed:33:d7:40:b8:e8:90:2a:b5:08:98: 62:9a:12:5b:5a:d7:80:b1:64:56:0d:72:09:af:16: 70:11:22:0b:f8:54:75:69:8d:8d:16:af:a8:45:58: d3:29:1f:e8:fd:2e:d2:0a:5a:c1:79:26:79:31:5a: cc:dc:2e:cb:4d:3d:5a:d3:0c:62:0b:c7:28:d7:1b: 88:41:b8:fe:58:a3:62:a2:da:dd:e5:30:47:5d:b8: af:15:7b:7a:a8:32:33:56:42:31:4c:e2:69:66:85: df:53:9c:be:6a:e4:a1:60:e0:5e:53:00:15:e9:40: 2b:11:55:92:99:dc:ea:09:e2:b4:8f:7c:03:78:fa: 8c:ce:d4:88:fc:13:a8:e1:12:6e:01:94:90:87:f0: 6b:d0:a0:c5:a8:c8:10:a5:73:02:27:52:31:29:38: 65:b9:fc:44:42:b4:83:ad:9b:6f:58:10:a1:2c:e8: 05:9d:10:66:93:b3:68:60:a6:1a:fb:52:e9:07:6b: dc:5d:66:d2:ad:b0:41:ad:f1:2b:24:6c:84:7b:ec: a0:5a:70:0b:ae:66:6e:4a:6a:58:f8:77:58:7c:bb: ef:39:de:5d:2c:c7:0f:b6:6a:93:91:68:05:bb:9b: df:5f:c1:9e:55:ce:0d:5c:fc:b0:03:9c:f4:91:59: 74:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:84:66:21:AE:11:4C:E5:E1:65:7E:7B:AF:33:9B:77:FE:01:E2:3B X509v3 Authority Key Identifier: keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:04:5b:db:d1:36:88:7e:e8:d6:54:cd:b0:28:7c:54:ca:cd: 37:69:8a:79:04:1f:67:67:26:9d:e5:57:c0:49:4e:13:6d:96: dc:df:5d:2b:5f:6d:78:eb:af:6f:ff:26:48:e6:01:06:e3:e2: 59:b1:e8:a6:8f:28:c2:01:fa:c1:7e:15:5c:a7:9a:33:c3:46: b4:a7:ef:34:8a:73:77:97:72:e5:1d:9b:38:d8:df:0e:4a:f7: 11:1f:76:6b:b1:b8:d5:59:59:a5:13:f7:4a:b6:7b:7d:d8:70: a8:15:b8:f9:f5:ce:29:a1:a0:ac:ae:fa:31:f1:8e:fb:79:a0: e9:0e:72:cf:7f:94:d8:c8:78:ce:47:56:9e:37:b7:58:b2:8e: 71:b7:99:9a:c1:e2:ac:9c:99:1e:f5:7e:5c:0f:4a:ca:d3:75: 08:59:0b:d7:ca:fd:4c:7a:30:40:a6:1d:72:25:32:e7:1b:4d: 76:4e:b8:f5:53:a8:79:e2:4d:c4:8e:c1:03:3d:a2:80:aa:24: d0:8c:fe:bd:1c:7f:ff:83:71:a6:b8:5d:5a:77:49:3b:83:14: ad:36:0a:6f:fe:76:04:42:16:cb:cf:66:5d:99:af:78:13:0e: b8:c1:44:b6:80:07:c6:0c:cc:38:2f:c9:13:9f:68:2b:d9:69: 9c:67:a0:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyYwIyD17QaLLJPPJzjqJKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGMxODY4YjU2MzgwZTA4YzQ1ZjgxZmZlNjFkZDMyODFk NjY5N2UwHhcNMjYwMjI2MDcwMTIxWhcNMjYwMjI3MDcwMTIxWjAzMTEwLwYDVQQD Eyg1NDg0NjYyMWFlMTE0Y2U1ZTE2NTdlN2JhZjMzOWI3N2ZlMDFlMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Xvb7TPXQLjokCq1CJhimhJbWteA sWRWDXIJrxZwESIL+FR1aY2NFq+oRVjTKR/o/S7SClrBeSZ5MVrM3C7LTT1a0wxi C8co1xuIQbj+WKNiotrd5TBHXbivFXt6qDIzVkIxTOJpZoXfU5y+auShYOBeUwAV 6UArEVWSmdzqCeK0j3wDePqMztSI/BOo4RJuAZSQh/Br0KDFqMgQpXMCJ1IxKThl ufxEQrSDrZtvWBChLOgFnRBmk7NoYKYa+1LpB2vcXWbSrbBBrfErJGyEe+ygWnAL rmZuSmpY+HdYfLvvOd5dLMcPtmqTkWgFu5vfX8GeVc4NXPywA5z0kVl0TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSEZiGuEUzl4WV+e68zm3f+AeI7MB8GA1UdIwQY MBaAFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGIt MTZkYmE1NDNiNTU4LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80MjQxMWUtZTdhYi00NjQ1LTlhNGItMTZkYmE1NDNiNTU4 LzEvTTR3WWFMVmpnT0NNUmZnZl9tSGRNb0hXYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigRb29E2 iH7o1lTNsCh8VMrNN2mKeQQfZ2cmneVXwElOE22W3N9dK19teOuvb/8mSOYBBuPi WbHopo8owgH6wX4VXKeaM8NGtKfvNIpzd5dy5R2bONjfDkr3ER92a7G41VlZpRP3 SrZ7fdhwqBW4+fXOKaGgrK76MfGO+3mg6Q5yz3+U2Mh4zkdWnje3WLKOcbeZmsHi rJyZHvV+XA9KytN1CFkL18r9THowQKYdciUy5xtNdk649VOoeeJNxI7BAz2igKok 0Iz+vRx//4NxprhdWndJO4MUrTYKb/52BEIWy89mXZmveBMOuMFEtoAHxgzMOC/J E59oK9lpnGegnA== -----END CERTIFICATE-----Generated at Thu Feb 26 17:11:01 2026 by rpki-client