$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: fErQWOUUIGXvmORQ+7+P4jXEwQmAhcuqral2uOJpTs8= Subject key identifier: 25:C3:72:51:A2:8F:FB:CB:5D:CC:47:7C:23:A2:4C:A1:8A:2A:6C:0B Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 01A0CB594A23A070CFBB68B0335C5A63AB58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 0D61 Signing time: Tue 22 Sep 2026 23:00:21 +0000 Manifest this update: Tue 22 Sep 2026 23:00:21 +0000 Manifest next update: Wed 23 Sep 2026 23:00:21 +0000 Files and hashes: 1: 1lESD01m5gbJyA-braAOgm-nsxs.roa (hash: LKvU7E9DI8H+f3xZF2Ibb4ZAlOKiTpfnzxmAzY3Zmkw=) 2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: eK0k4vXOSR0np5EiZD8y5vSNsjEi4+ffvg17M44k6j8=) 3: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=) 4: 61nxpqdan0uvkgRYS9p3WXMt0is.roa (hash: +Etzf8iyPB8hG3RY9d2BBNlzK8ZhQf8I9wkNpl+P4s4=) 5: C9CUr-PFwRxBqveQc9JRexz5FUs.roa (hash: lYbCEmweFZ4ggkWxLIShDolBIH8LVCAHfTyc91SJwy0=) 6: FsSNPUWjwDIlPVEHY__f13MutvI.roa (hash: ParcKE8qGlMpeOMYcmP/zF1xOvvVsHqjFGUJ9CbIYcQ=) 7: LmasvFTLE11mrCxdzPNrrKlYdc0.roa (hash: cro6qKPl5KcW1vG37gAcGVH3Wnv66eL0SBKTzxopYzw=) 8: OnExh771ZtOXTYHIXE8BRYIv3I8.roa (hash: iBanqCcjQhcLJzTqVwfRApVqXKWA6vIc0dQd8k0fLnI=) 9: SUEavrAvbJYi-09a6QVI2M_eSIc.roa (hash: hAAmC8KjoRR+ZLoagJaC8chUvGr6KdS0WhlLhZ1Tw9Y=) 10: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=) 11: _TZcDPZzpFhla5KXCrewBSv_afs.roa (hash: F0O1jt3D7eDKUVGno8fQyg0oYO+Zw0jzvuEgWmXzed0=) 12: _r7e3jySBWFxAqLAWSDEbmMpjF8.roa (hash: 0s13Gjs3CYsISYzYweJ7h7lIWvgl86R0YjE4dZPqH/A=) 13: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=) 14: d8tYjTMOm2iLi-JD46yX3lK67ec.roa (hash: R7k5LiqgpO3uW9dYKT9Gf8MpGa5+R/ekeb18H+cE9bo=) 15: g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa (hash: nYVi4YC9fVishrPOTjgH2hJlXxcspFsYbheNk/bE1wY=) 16: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=) 17: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=) 18: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=) 19: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=) 20: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=) 21: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=) 22: wsknEjm24Tmqnj5AbQzSZKLiyUk.roa (hash: 1F0f934WY0AhELOowB6/aUmK8URa7DHUIj0Gci4bhIA=) 23: xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa (hash: 81EBYCMb1JChmS1xYbhUHSpsd2Mkl7rE43HaypoVrxw=) 24: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:59:4a:23:a0:70:cf:bb:68:b0:33:5c:5a:63:ab:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Sep 22 23:00:21 2026 GMT Not After : Sep 23 23:00:21 2026 GMT Subject: CN=25c37251a28ffbcb5dcc477c23a24ca18a2a6c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:16:32:74:df:a8:d8:6c:b4:20:58:cf:a5:55: d0:7e:ac:dd:d8:ab:b5:05:95:db:c3:5c:2d:8d:91: be:d6:59:3e:45:37:9e:37:cf:df:72:17:ce:68:df: 34:ea:a5:dc:67:ec:4b:35:9c:f4:19:82:a2:cd:0d: 94:82:9f:e6:2a:fa:cd:d7:03:55:03:69:7a:ef:12: f6:10:a5:a1:af:ed:7a:a9:ff:18:51:76:90:12:d0: e2:95:c5:11:46:e0:c0:06:9a:ff:76:5d:73:3a:1d: 48:41:59:84:96:a7:33:d1:0d:df:68:9a:cd:a6:57: 58:a7:9a:9c:94:bc:32:9b:9c:13:47:8d:1c:48:15: 6c:d7:73:f2:cb:37:c6:bb:d6:06:26:f5:4b:99:8a: 98:b6:b8:05:1b:6a:3d:4c:10:90:3e:df:d0:ae:1d: bc:cf:81:f9:7a:0a:78:49:72:3d:ce:e8:f8:81:61: 0a:70:aa:47:3e:d8:25:1a:bc:37:d2:43:88:8b:dd: 80:68:4e:f3:17:de:38:7a:0d:a6:20:30:53:f9:65: ac:20:4e:c7:2c:38:8f:63:3c:fc:06:41:af:a0:51: 6b:a4:0e:b7:1f:aa:dd:f1:23:9c:ac:1f:5e:74:0a: ed:15:bc:a6:e4:c2:90:cd:ac:9e:9b:5f:67:0a:c2: 23:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C3:72:51:A2:8F:FB:CB:5D:CC:47:7C:23:A2:4C:A1:8A:2A:6C:0B X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:dd:06:da:b6:2a:ba:f9:f7:30:7d:c0:01:95:e0:a0:7c:c0: 27:68:94:f4:8d:37:2c:97:5e:f5:69:f1:f2:b4:0b:8b:c1:12: 4b:25:49:f0:d3:ce:36:80:cd:bc:34:45:b1:0b:8d:32:42:a6: e0:6e:40:3d:ac:92:09:20:ba:bd:40:d0:ec:46:20:65:70:07: a4:6d:e6:04:3d:54:e6:17:40:4e:b2:97:e5:84:6a:56:3f:a4: 09:19:61:b0:24:da:97:0a:f3:48:93:e6:4e:0a:52:8a:ac:23: 43:f2:7f:c6:0c:29:5a:81:18:f3:6c:fb:3b:2c:3c:03:8b:a8: 60:e4:05:0b:29:51:09:a1:2d:5b:89:aa:51:df:37:9e:18:54: 8a:90:20:6b:f5:4e:25:32:f8:17:7a:1d:36:27:39:54:ef:e3: 32:3e:f7:4f:6b:1a:83:fb:1b:82:d1:d1:70:72:d9:32:39:ee: 00:c9:f3:17:ab:8c:01:62:1f:cf:2c:2d:91:b4:de:57:88:1d: bd:b3:64:bb:18:a2:bb:cd:b2:51:b9:76:14:6b:37:25:f3:ac: b5:3a:68:b1:33:00:7c:96:e6:de:df:60:e2:e5:89:53:56:9c: 86:25:8d:e0:25:68:0f:8c:15:01:51:46:d9:f7:93:c4:ac:ef: 65:63:40:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLWUojoHDPu2iwM1xaY6tYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwOTIyMjMwMDIxWhcNMjYwOTIzMjMwMDIxWjAzMTEwLwYDVQQD EygyNWMzNzI1MWEyOGZmYmNiNWRjYzQ3N2MyM2EyNGNhMThhMmE2YzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRYydN+o2Gy0IFjPpVXQfqzd2Ku1 BZXbw1wtjZG+1lk+RTeeN8/fchfOaN806qXcZ+xLNZz0GYKizQ2Ugp/mKvrN1wNV A2l67xL2EKWhr+16qf8YUXaQEtDilcURRuDABpr/dl1zOh1IQVmElqcz0Q3faJrN pldYp5qclLwym5wTR40cSBVs13PyyzfGu9YGJvVLmYqYtrgFG2o9TBCQPt/Qrh28 z4H5egp4SXI9zuj4gWEKcKpHPtglGrw30kOIi92AaE7zF944eg2mIDBT+WWsIE7H LDiPYzz8BkGvoFFrpA63H6rd8SOcrB9edArtFbym5MKQzayem19nCsIjfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXDclGij/vLXcxHfCOiTKGKKmwLMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwd0G2rYq uvn3MH3AAZXgoHzAJ2iU9I03LJde9Wnx8rQLi8ESSyVJ8NPONoDNvDRFsQuNMkKm 4G5APaySCSC6vUDQ7EYgZXAHpG3mBD1U5hdATrKX5YRqVj+kCRlhsCTalwrzSJPm TgpSiqwjQ/J/xgwpWoEY82z7Oyw8A4uoYOQFCylRCaEtW4mqUd83nhhUipAga/VO JTL4F3odNic5VO/jMj73T2sag/sbgtHRcHLZMjnuAMnzF6uMAWIfzywtkbTeV4gd vbNkuxiiu82yUbl2FGs3JfOstTposTMAfJbm3t9g4uWJU1achiWN4CVoD4wVAVFG 2feTxKzvZWNAaw== -----END CERTIFICATE-----Generated at Wed Sep 23 10:43:00 2026 by rpki-client