$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: ik+9VkQEKFrFYiz6yHpze3HY6vfuGlbrZ95YWxBTcQI= Subject key identifier: 4A:58:BE:C1:C2:06:B5:E8:28:5E:C2:E9:15:6F:D1:92:77:E1:C9:2C Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019E1D2315470997B48CFEBD08430083CDD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 0BFB Signing time: Tue 12 May 2026 17:01:38 +0000 Manifest this update: Tue 12 May 2026 17:01:38 +0000 Manifest next update: Wed 13 May 2026 17:01:38 +0000 Files and hashes: 1: 1lESD01m5gbJyA-braAOgm-nsxs.roa (hash: LKvU7E9DI8H+f3xZF2Ibb4ZAlOKiTpfnzxmAzY3Zmkw=) 2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: 9+hzXFLcPWe2ey9dnmKlq8T5/Dmg0Bf+0lQtOu1jJc8=) 3: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=) 4: 61nxpqdan0uvkgRYS9p3WXMt0is.roa (hash: +Etzf8iyPB8hG3RY9d2BBNlzK8ZhQf8I9wkNpl+P4s4=) 5: C9CUr-PFwRxBqveQc9JRexz5FUs.roa (hash: lYbCEmweFZ4ggkWxLIShDolBIH8LVCAHfTyc91SJwy0=) 6: FsSNPUWjwDIlPVEHY__f13MutvI.roa (hash: ParcKE8qGlMpeOMYcmP/zF1xOvvVsHqjFGUJ9CbIYcQ=) 7: LmasvFTLE11mrCxdzPNrrKlYdc0.roa (hash: cro6qKPl5KcW1vG37gAcGVH3Wnv66eL0SBKTzxopYzw=) 8: SUEavrAvbJYi-09a6QVI2M_eSIc.roa (hash: hAAmC8KjoRR+ZLoagJaC8chUvGr6KdS0WhlLhZ1Tw9Y=) 9: XPvLi0bqmY_k2u06pIu7eV8Scso.roa (hash: cGUciKP6su5n6iylbm0NI97lgXJjhdYVEAczVmErPeY=) 10: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=) 11: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=) 12: d8tYjTMOm2iLi-JD46yX3lK67ec.roa (hash: R7k5LiqgpO3uW9dYKT9Gf8MpGa5+R/ekeb18H+cE9bo=) 13: g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa (hash: nYVi4YC9fVishrPOTjgH2hJlXxcspFsYbheNk/bE1wY=) 14: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=) 15: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=) 16: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=) 17: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=) 18: txTrVQ7DOwvGZVMuUdOo2yJntLw.roa (hash: X0+eCtLiIKeX5v5KTGC8o4Rtbkm6Pp1VNspLxuoN4nw=) 19: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=) 20: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=) 21: xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa (hash: 81EBYCMb1JChmS1xYbhUHSpsd2Mkl7rE43HaypoVrxw=) 22: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:23:15:47:09:97:b4:8c:fe:bd:08:43:00:83:cd:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: May 12 17:01:38 2026 GMT Not After : May 13 17:01:38 2026 GMT Subject: CN=4a58bec1c206b5e8285ec2e9156fd19277e1c92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:20:24:53:81:6e:37:2d:96:88:d9:93:27:91: ea:d5:d0:ad:92:38:37:48:90:1d:ae:46:b1:de:ca: d2:5a:fd:d1:40:15:b8:a4:46:7f:e0:fc:9a:e3:a5: 4c:f2:07:b6:cc:3d:80:eb:51:72:27:06:54:e8:b8: 2e:32:e4:6a:be:c7:b2:84:90:3f:9f:c1:e6:17:61: 84:a1:60:67:5b:64:e0:9a:cf:b1:55:8c:ea:96:cc: 84:66:66:58:b9:1f:0e:fc:ab:c8:68:ad:c6:fc:8b: 0c:24:30:3c:d2:8a:1e:71:8a:7d:ad:60:cf:bb:44: 4d:26:4d:d5:3f:d7:d2:47:5c:4d:9a:6f:38:ee:cf: 69:27:a4:9d:00:87:49:51:64:31:9a:f2:37:94:82: c7:b7:3e:0a:db:65:2c:07:94:ef:1b:c0:d6:0a:7a: c2:08:19:6d:c3:90:24:b8:e9:a4:06:35:de:cc:bc: 19:ed:9c:31:31:6d:19:a4:92:e0:85:6c:9d:f8:8c: cb:00:6b:09:cf:72:b0:17:ef:74:f6:69:c9:74:23: e0:64:76:58:7d:18:31:5d:55:d7:8f:aa:e6:93:5e: 0f:79:ed:a1:e6:db:73:c9:a5:3a:e8:0f:11:70:f2: 7b:84:54:d7:ac:3c:e1:88:6b:b4:60:7b:b1:89:a0: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:58:BE:C1:C2:06:B5:E8:28:5E:C2:E9:15:6F:D1:92:77:E1:C9:2C X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:5e:dc:a1:38:00:d5:ea:16:f9:ea:22:55:40:05:76:d1:e9: 16:ac:12:ab:cf:0e:66:b3:24:8e:73:c7:84:b3:0b:9b:d3:f5: c2:c2:a5:29:bb:57:54:4e:6c:ed:b2:6a:d6:f7:7c:a9:94:c3: 11:19:1d:13:45:97:07:f4:93:45:53:00:60:2b:c4:18:45:6b: 2f:03:75:54:78:f0:09:49:ad:83:39:96:38:66:3f:1e:a6:17: 06:48:e0:ff:8e:09:98:60:f4:e7:3e:0a:b1:ae:26:13:70:62: 52:38:67:4d:6b:4f:1a:6c:65:69:73:0e:ca:b2:c9:79:85:6a: df:dc:19:76:b0:e2:fa:b7:0f:c9:28:7c:13:e5:91:da:b1:ab: ae:80:d3:8d:63:e5:ed:70:36:b1:21:3e:3f:22:03:e8:6f:3b: 15:ba:c5:4b:23:d4:c7:7a:2b:5f:23:39:7d:7e:2c:73:be:20: 98:b4:6b:89:b5:f3:68:29:45:92:40:f4:ee:29:02:6d:b7:e0: 14:65:34:45:cd:3b:b2:77:e6:de:63:fa:49:67:a4:9a:e1:0d: 3b:48:9a:f4:7c:d5:b2:df:df:81:17:fa:03:0b:01:a2:9f:17: 0c:eb:1e:11:f6:de:e7:a6:f0:33:62:76:75:91:69:ab:40:25: 71:9c:2b:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIxVHCZe0jP69CEMAg83TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwNTEyMTcwMTM4WhcNMjYwNTEzMTcwMTM4WjAzMTEwLwYDVQQD Eyg0YTU4YmVjMWMyMDZiNWU4Mjg1ZWMyZTkxNTZmZDE5Mjc3ZTFjOTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliAkU4FuNy2WiNmTJ5Hq1dCtkjg3 SJAdrkax3srSWv3RQBW4pEZ/4Pya46VM8ge2zD2A61FyJwZU6LguMuRqvseyhJA/ n8HmF2GEoWBnW2Tgms+xVYzqlsyEZmZYuR8O/KvIaK3G/IsMJDA80ooecYp9rWDP u0RNJk3VP9fSR1xNmm847s9pJ6SdAIdJUWQxmvI3lILHtz4K22UsB5TvG8DWCnrC CBltw5AkuOmkBjXezLwZ7ZwxMW0ZpJLghWyd+IzLAGsJz3KwF+909mnJdCPgZHZY fRgxXVXXj6rmk14Pee2h5ttzyaU66A8RcPJ7hFTXrDzhiGu0YHuxiaB86wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpYvsHCBrXoKF7C6RVv0ZJ34cksMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV7coTgA 1eoW+eoiVUAFdtHpFqwSq88OZrMkjnPHhLMLm9P1wsKlKbtXVE5s7bJq1vd8qZTD ERkdE0WXB/STRVMAYCvEGEVrLwN1VHjwCUmtgzmWOGY/HqYXBkjg/44JmGD05z4K sa4mE3BiUjhnTWtPGmxlaXMOyrLJeYVq39wZdrDi+rcPySh8E+WR2rGrroDTjWPl 7XA2sSE+PyID6G87FbrFSyPUx3orXyM5fX4sc74gmLRribXzaClFkkD07ikCbbfg FGU0Rc07snfm3mP6SWekmuENO0ia9HzVst/fgRf6AwsBop8XDOseEfbe56bwM2J2 dZFpq0AlcZwrMA== -----END CERTIFICATE-----Generated at Wed May 13 01:02:56 2026 by rpki-client