$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: H/EX3+T9YM2C9d2av2nsghuGljkeOcMuSCoPgT8ba3E= Subject key identifier: 87:59:37:07:CD:D8:CD:15:E5:5D:BA:A3:00:50:24:80:84:AA:64:6D Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019D265F1024A925B798A2DF647F27AEE94B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 1293 Signing time: Wed 25 Mar 2026 19:00:57 +0000 Manifest this update: Wed 25 Mar 2026 19:00:57 +0000 Manifest next update: Thu 26 Mar 2026 19:00:57 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: ycPvwye6WWjHzBXVzp8XDArsIUzUsNai34nfuSII4SU=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 9: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 10: myFCIcbDjAfUFsTW0a-pFUEt6gs.roa (hash: TuRTyO0NRY/3a0axA5HneX8R1NypXuOC0siuMNuJ6sU=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5f:10:24:a9:25:b7:98:a2:df:64:7f:27:ae:e9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Mar 25 19:00:57 2026 GMT Not After : Mar 26 19:00:57 2026 GMT Subject: CN=87593707cdd8cd15e55dbaa30050248084aa646d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:03:07:73:9a:e0:1a:47:31:91:60:6f:ca: ce:7b:ad:1d:c2:dc:37:c6:74:20:18:a6:8a:a0:39: ec:27:a5:ed:79:e4:ee:44:42:23:4b:e9:be:f8:c9: b0:4e:f7:92:21:00:41:67:52:09:8c:67:66:df:5e: 03:c4:b6:d2:24:7d:89:d4:7a:9c:20:cb:a1:44:1f: e2:51:ca:7a:18:dd:3b:cb:fe:ec:86:de:4f:1f:27: fe:a6:99:5a:34:e6:b8:03:d6:1c:1b:8f:a4:8f:41: 94:39:33:51:cb:2f:35:75:29:4f:3e:f1:80:65:47: 22:d7:d6:dd:95:4d:20:dd:c1:47:1c:2f:12:2b:d7: 0a:3c:f7:a1:87:f2:11:b8:05:fe:dd:8a:43:1f:3f: ff:91:28:56:b6:57:02:d8:70:db:dc:03:ae:08:7b: 23:4b:6d:b5:a6:c4:9b:2e:18:6c:0d:ca:27:8a:94: 4e:df:19:d6:9d:3b:42:e6:c6:d5:2c:7e:9f:19:e2: bc:d5:74:a6:b8:90:e8:6b:f1:02:28:ff:65:bb:aa: 3b:ef:87:64:0a:df:51:54:7c:30:13:6f:62:1e:31: e6:c1:aa:8d:20:56:b0:11:6b:64:4e:6b:c7:43:aa: 03:68:e6:31:d4:3b:0a:09:8d:a9:0f:1c:29:77:3e: a2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:59:37:07:CD:D8:CD:15:E5:5D:BA:A3:00:50:24:80:84:AA:64:6D X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:48:a1:9d:6f:51:1d:cd:43:d6:90:f8:32:81:6c:7e:94:ba: 48:34:a1:f8:41:c1:44:47:3f:65:17:5b:c6:bf:33:64:47:a9: 98:67:23:7e:a2:7e:61:71:3a:7c:b7:90:fa:63:9b:f0:1e:74: ff:6a:76:17:c0:ff:2b:e1:43:45:a6:d1:57:75:ee:c2:07:a9: 08:44:06:08:aa:b3:eb:1d:f4:7a:65:49:ef:7b:f3:cf:31:8b: f0:d2:3e:74:ae:68:4d:eb:86:45:aa:21:38:97:f4:9e:5a:d7: 13:9a:69:5b:95:f0:92:c1:05:4b:e8:a8:28:88:17:e2:ca:c1: c0:45:46:64:10:26:ad:63:26:25:c1:7e:88:6f:d0:cb:be:74: 10:b3:23:c4:44:00:72:e3:5c:63:fe:22:1c:21:df:a5:f8:a9: b1:87:5e:d9:e2:54:39:83:2b:0e:83:6b:dc:c8:a1:53:b9:5a: 51:c2:6f:80:b8:eb:2f:a3:66:b2:12:a3:77:a2:2e:37:99:34: 76:d7:41:a3:a0:02:83:0e:58:6c:a9:f6:05:13:a9:a3:b4:1b: 33:59:3b:f3:f6:8e:da:74:de:cc:4e:73:13:7a:a1:a6:11:95: ab:88:89:90:28:1b:ea:41:da:55:64:be:17:e9:51:fc:d7:44: 21:97:99:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mXxAkqSW3mKLfZH8nrulLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwMzI1MTkwMDU3WhcNMjYwMzI2MTkwMDU3WjAzMTEwLwYDVQQD Eyg4NzU5MzcwN2NkZDhjZDE1ZTU1ZGJhYTMwMDUwMjQ4MDg0YWE2NDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4QDB3Oa4BpHMZFgb8rOe60dwtw3 xnQgGKaKoDnsJ6XteeTuREIjS+m++MmwTveSIQBBZ1IJjGdm314DxLbSJH2J1Hqc IMuhRB/iUcp6GN07y/7sht5PHyf+pplaNOa4A9YcG4+kj0GUOTNRyy81dSlPPvGA ZUci19bdlU0g3cFHHC8SK9cKPPehh/IRuAX+3YpDHz//kShWtlcC2HDb3AOuCHsj S221psSbLhhsDconipRO3xnWnTtC5sbVLH6fGeK81XSmuJDoa/ECKP9lu6o774dk Ct9RVHwwE29iHjHmwaqNIFawEWtkTmvHQ6oDaOYx1DsKCY2pDxwpdz6iowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdZNwfN2M0V5V26owBQJICEqmRtMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0ihnW9R Hc1D1pD4MoFsfpS6SDSh+EHBREc/ZRdbxr8zZEepmGcjfqJ+YXE6fLeQ+mOb8B50 /2p2F8D/K+FDRabRV3XuwgepCEQGCKqz6x30emVJ73vzzzGL8NI+dK5oTeuGRaoh OJf0nlrXE5ppW5XwksEFS+ioKIgX4srBwEVGZBAmrWMmJcF+iG/Qy750ELMjxEQA cuNcY/4iHCHfpfipsYde2eJUOYMrDoNr3MihU7laUcJvgLjrL6NmshKjd6IuN5k0 dtdBo6ACgw5YbKn2BROpo7QbM1k78/aO2nTezE5zE3qhphGVq4iJkCgb6kHaVWS+ F+lR/NdEIZeZUw== -----END CERTIFICATE-----Generated at Thu Mar 26 01:01:22 2026 by rpki-client