$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: la8f+K4wiq4ZFXs6letp31BBqfLQtgnqZ10goRUjHTc= Subject key identifier: D1:B2:3C:86:B1:81:E5:8C:EC:2E:7D:3F:8D:6A:9E:60:44:45:20:B5 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019D2584546234267D22ADE4A8F972E6FBEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1894 Signing time: Wed 25 Mar 2026 15:02:02 +0000 Manifest this update: Wed 25 Mar 2026 15:02:02 +0000 Manifest next update: Thu 26 Mar 2026 15:02:02 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 6: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 7: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: 1B5gecu91vjaP8Yf6xwDs0c8/kxUzBugUVIn36uCLMs=) 8: cYY9JWownI4dxUC113BsmeB-bPg.asa (hash: mzYcpAgDjivMiDigXGlTibFV5zqA/T/HUHr0MSI0Bk4=) 9: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 10: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 11: iaTyWoYRTwRbH-8Asj0TijaPuO4.asa (hash: Z8zpBbBj2fntekitrlPrQF77k8Fhh9yLKV2dUy8NxuU=) 12: lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa (hash: fjbHrRsPWcRvcVzpQntP9+B1NmK4Bi2Amk0MUakU4gE=) 13: z8lBi3aAEOzIA4rjFoQW2NBYnGI.roa (hash: WkLdmUjUmDG0OM0nogJaG3cgrVGCp28qMqMnj28ytDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:84:54:62:34:26:7d:22:ad:e4:a8:f9:72:e6:fb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Mar 25 15:02:02 2026 GMT Not After : Mar 26 15:02:02 2026 GMT Subject: CN=d1b23c86b181e58cec2e7d3f8d6a9e60444520b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:97:48:c2:e1:8c:cf:bd:49:b4:ca:2d:64:6f: ed:40:13:09:42:26:81:5d:c0:fc:f4:5d:54:bc:a6: d8:8a:d3:c4:8a:5c:16:66:39:f1:d9:9a:bc:26:2c: cd:32:78:9b:c4:6a:1a:ba:45:26:54:d7:79:d4:78: c9:0c:d4:da:94:2a:29:0a:10:fe:d0:a3:2f:76:4d: c0:ea:8c:4c:e5:63:89:99:27:94:5c:73:09:66:df: 95:9e:76:a6:76:ad:ea:8d:3b:0f:ea:19:74:c8:27: ac:62:49:fc:7c:46:30:9f:a8:a0:46:b8:50:f0:f2: 32:16:f2:fa:82:92:46:81:01:8c:e8:49:3e:8a:da: f7:d5:d8:24:ee:3f:30:a2:c8:95:55:d3:21:90:b5: 9f:5c:73:1e:02:22:77:92:b0:be:4e:ef:e9:79:09: d3:1b:e7:61:f4:15:71:01:f0:de:34:c1:28:8e:21: 1e:51:b3:b2:ce:f6:ed:a4:10:c7:d7:aa:5a:7f:70: fb:c5:33:78:34:9c:c9:52:f3:5e:52:2a:c2:34:ee: 62:68:79:22:bf:13:77:77:30:71:c5:ce:55:0a:01: 00:c9:85:de:35:d0:c7:49:43:63:d9:a6:a0:3d:69: 43:f4:e5:c8:1a:4e:07:33:62:00:8b:1a:fd:b9:95: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B2:3C:86:B1:81:E5:8C:EC:2E:7D:3F:8D:6A:9E:60:44:45:20:B5 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:99:73:51:17:a6:25:a5:8d:08:51:f0:52:f2:ad:1d:f3:ab: 85:e2:82:de:ab:2d:23:49:c6:ed:97:d3:88:41:44:00:2b:0d: 9b:bf:c1:e4:eb:1a:8f:58:52:fa:9f:b8:3c:a8:b3:d9:89:67: 00:f7:d4:18:a1:6a:0d:e2:a9:d6:db:c1:fc:1a:ab:48:36:98: 3b:74:f6:77:ca:85:51:37:46:bb:7c:9a:d8:9a:c4:1c:6b:e6: 0d:9f:f8:d4:d4:15:f6:51:d1:8c:38:37:a9:30:67:2d:a5:71: 71:5b:e0:02:61:bb:bc:71:d4:e5:f0:86:c9:72:41:5c:42:a3: f5:0f:55:b7:3b:73:67:f7:6c:9c:95:df:a8:4d:06:cf:aa:29: 63:c6:02:a0:8d:13:ab:d2:4e:56:32:5c:8d:50:b5:6e:ee:5b: f7:41:12:38:e9:16:17:16:9e:64:5e:17:da:49:6d:79:92:4f: b7:ea:94:45:47:c4:30:9c:f2:92:f9:79:84:9d:06:af:7f:ea: e7:98:81:74:f4:8d:4a:34:0d:ce:cf:51:45:ee:ab:09:95:d6: 7d:7c:81:7d:18:de:a7:47:a1:45:ea:a1:91:05:d3:5e:66:78: 88:07:e0:af:e3:d3:63:a5:1f:2b:70:ed:50:0e:e6:b0:e0:12: 0f:15:c2:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lhFRiNCZ9Iq3kqPly5vvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwMzI1MTUwMjAyWhcNMjYwMzI2MTUwMjAyWjAzMTEwLwYDVQQD EyhkMWIyM2M4NmIxODFlNThjZWMyZTdkM2Y4ZDZhOWU2MDQ0NDUyMGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JdIwuGMz71JtMotZG/tQBMJQiaB XcD89F1UvKbYitPEilwWZjnx2Zq8JizNMnibxGoaukUmVNd51HjJDNTalCopChD+ 0KMvdk3A6oxM5WOJmSeUXHMJZt+Vnnamdq3qjTsP6hl0yCesYkn8fEYwn6igRrhQ 8PIyFvL6gpJGgQGM6Ek+itr31dgk7j8wosiVVdMhkLWfXHMeAiJ3krC+Tu/peQnT G+dh9BVxAfDeNMEojiEeUbOyzvbtpBDH16paf3D7xTN4NJzJUvNeUirCNO5iaHki vxN3dzBxxc5VCgEAyYXeNdDHSUNj2aagPWlD9OXIGk4HM2IAixr9uZV3mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGyPIaxgeWM7C59P41qnmBERSC1MB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXplzURem JaWNCFHwUvKtHfOrheKC3qstI0nG7ZfTiEFEACsNm7/B5Osaj1hS+p+4PKiz2Yln APfUGKFqDeKp1tvB/BqrSDaYO3T2d8qFUTdGu3ya2JrEHGvmDZ/41NQV9lHRjDg3 qTBnLaVxcVvgAmG7vHHU5fCGyXJBXEKj9Q9VtztzZ/dsnJXfqE0Gz6opY8YCoI0T q9JOVjJcjVC1bu5b90ESOOkWFxaeZF4X2klteZJPt+qURUfEMJzykvl5hJ0Gr3/q 55iBdPSNSjQNzs9RRe6rCZXWfXyBfRjep0ehReqhkQXTXmZ4iAfgr+PTY6UfK3Dt UA7msOASDxXCvA== -----END CERTIFICATE-----Generated at Wed Mar 25 21:21:54 2026 by rpki-client