$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: v5+bhJN1HkZ+YvC+rmyLKJ7l1uP5ucn896masUzuQhg= Subject key identifier: 96:1C:D4:D8:DF:CA:A1:C7:52:6A:31:2E:72:95:30:E0:5A:46:53:16 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019CC3055A17B7B88F6F5E89868A3E3CBF77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 18AF Signing time: Fri 06 Mar 2026 12:00:33 +0000 Manifest this update: Fri 06 Mar 2026 12:00:33 +0000 Manifest next update: Sat 07 Mar 2026 12:00:33 +0000 Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=) 2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=) 3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=) 4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=) 5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=) 6: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=) 7: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=) 8: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=) 9: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=) 10: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=) 11: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=) 12: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=) 13: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=) 14: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=) 15: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=) 16: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=) 17: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=) 18: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=) 19: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=) 20: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=) 21: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: v8whG+oE/f1z4IYl4BXo/5/BVEtuQohQuJOmasNlK1M=) 22: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=) 23: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=) 24: hf-LXtiPSASNfLU-opAc0imYKDc.roa (hash: PJYOakcn0oxNr7y/9yoGBcKD4KrbPhwTqw8RW0ojmKE=) 25: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=) 26: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=) 27: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=) 28: pe68YeSBz3e5uy7r7bbOmGgL7EE.roa (hash: w8rsCAdGW4/9JqYBKY1otlqFhCY3uTORdfSVn2mblPE=) 29: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 10:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c3:05:5a:17:b7:b8:8f:6f:5e:89:86:8a:3e:3c:bf:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Mar 6 12:00:33 2026 GMT Not After : Mar 7 12:00:33 2026 GMT Subject: CN=961cd4d8dfcaa1c7526a312e729530e05a465316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:a5:b4:9a:e4:a8:9a:d3:f0:64:a7:59:c0: 1a:ea:5c:47:1c:4a:98:99:f7:14:25:5d:78:95:00: 74:53:b8:0d:cb:a1:fd:e4:e6:30:03:48:02:ca:e3: 96:d5:3c:ea:74:10:2b:ee:a0:d6:59:00:8e:cc:39: 71:e2:63:57:29:ff:7d:a0:87:8a:de:2e:3a:1d:8f: 78:8c:a6:31:97:4d:46:d1:e0:c3:fb:14:3d:1e:bf: 4f:28:f5:da:12:48:5f:dc:b0:a7:73:2b:3e:a6:c8: 87:bc:23:f8:68:40:3b:76:c9:a9:d5:a3:10:3a:aa: 22:0f:7a:b5:7b:0a:2e:ad:f8:11:a5:a0:60:f0:09: 30:ae:54:b0:a0:67:7b:9e:65:99:f9:f8:d7:00:b9: f7:fc:91:83:b7:bc:ee:ae:50:ac:71:72:c6:73:7d: 1a:a6:30:05:1e:4d:45:16:6e:f8:7c:a8:4e:e1:89: 63:63:d2:f0:82:51:3d:2f:7f:6c:c7:53:b0:8f:e9: e1:09:86:83:6a:97:04:c4:74:29:99:5a:79:87:d4: 86:71:80:06:0c:cf:05:a7:5e:fb:e8:41:56:87:66: 64:83:c7:08:17:2b:ea:e1:fc:3c:39:80:fc:4f:90: 87:22:c2:89:64:cf:6f:d0:dd:b4:30:26:6c:ff:d7: 89:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1C:D4:D8:DF:CA:A1:C7:52:6A:31:2E:72:95:30:E0:5A:46:53:16 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f3:d3:4e:cf:80:bd:c6:b7:ae:82:b7:a0:b2:d7:17:59:16: 39:ac:85:ac:e8:e1:51:f9:7a:42:17:40:d4:1d:46:8d:c5:45: 84:67:32:61:65:43:f6:7e:eb:4c:11:c9:a2:eb:02:19:69:f1: 9f:43:13:e8:8e:91:e0:23:c3:6c:c2:4c:82:1c:2c:cf:22:c8: 08:d7:26:90:cf:ef:9e:7d:bf:4f:14:8e:64:0d:bd:42:a5:17: 4b:18:96:43:c4:52:87:1d:93:f6:4f:30:fc:30:23:a0:1e:7b: 25:88:c8:91:54:78:c9:2e:08:61:80:78:18:cc:e6:49:77:2c: db:e0:6a:a5:a4:fc:9d:b8:3a:99:07:c7:0b:1c:d2:d7:a1:8e: b6:0a:90:7a:b8:f2:0f:69:69:bf:4e:8e:47:b6:3c:9a:1d:c4: e0:cb:78:ed:08:ea:15:38:c8:02:0d:0d:b8:8f:04:bd:d6:c9: 2b:9b:44:f3:3c:a6:12:99:85:20:df:b4:9a:25:34:b2:b7:ef: 5b:55:dc:e2:f9:96:0e:b0:81:53:c3:ac:b4:0b:0b:c2:83:3f: e4:d8:15:12:7a:b2:a0:d7:87:cd:39:63:be:c2:98:b5:28:c4: c1:21:8a:11:42:88:9c:fd:59:bd:c1:35:26:7f:c3:76:07:3a: 0a:93:33:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzDBVoXt7iPb16Jhoo+PL93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMzA2MTIwMDMzWhcNMjYwMzA3MTIwMDMzWjAzMTEwLwYDVQQD Eyg5NjFjZDRkOGRmY2FhMWM3NTI2YTMxMmU3Mjk1MzBlMDVhNDY1MzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhmltJrkqJrT8GSnWcAa6lxHHEqY mfcUJV14lQB0U7gNy6H95OYwA0gCyuOW1TzqdBAr7qDWWQCOzDlx4mNXKf99oIeK 3i46HY94jKYxl01G0eDD+xQ9Hr9PKPXaEkhf3LCncys+psiHvCP4aEA7dsmp1aMQ OqoiD3q1ewourfgRpaBg8AkwrlSwoGd7nmWZ+fjXALn3/JGDt7zurlCscXLGc30a pjAFHk1FFm74fKhO4YljY9LwglE9L39sx1Owj+nhCYaDapcExHQpmVp5h9SGcYAG DM8Fp1776EFWh2Zkg8cIFyvq4fw8OYD8T5CHIsKJZM9v0N20MCZs/9eJ5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYc1NjfyqHHUmoxLnKVMOBaRlMWMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfPTTs+A vca3roK3oLLXF1kWOayFrOjhUfl6QhdA1B1GjcVFhGcyYWVD9n7rTBHJousCGWnx n0MT6I6R4CPDbMJMghwszyLICNcmkM/vnn2/TxSOZA29QqUXSxiWQ8RShx2T9k8w /DAjoB57JYjIkVR4yS4IYYB4GMzmSXcs2+BqpaT8nbg6mQfHCxzS16GOtgqQerjy D2lpv06OR7Y8mh3E4Mt47QjqFTjIAg0NuI8EvdbJK5tE8zymEpmFIN+0miU0srfv W1Xc4vmWDrCBU8OstAsLwoM/5NgVEnqyoNeHzTljvsKYtSjEwSGKEUKInP1ZvcE1 Jn/Ddgc6CpMzKA== -----END CERTIFICATE-----Generated at Fri Mar 6 16:59:34 2026 by rpki-client