$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: /PpVzN2rO2FDPagloDGsNntZKeXFPxZ/blzLgFjjCuc= Subject key identifier: 55:F1:99:ED:8A:96:F0:BD:77:43:E5:F7:AC:A0:3B:5C:61:0D:EC:88 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 01A0D315143AD6857C9A99E629A8EF057A37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 0D65 Signing time: Thu 24 Sep 2026 11:02:49 +0000 Manifest this update: Thu 24 Sep 2026 11:02:49 +0000 Manifest next update: Fri 25 Sep 2026 11:02:49 +0000 Files and hashes: 1: 1lESD01m5gbJyA-braAOgm-nsxs.roa (hash: LKvU7E9DI8H+f3xZF2Ibb4ZAlOKiTpfnzxmAzY3Zmkw=) 2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: Xes/S4MqgPcbYEPjv9EVkB10g7lug0tkrnc1qsmdWk0=) 3: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=) 4: 61nxpqdan0uvkgRYS9p3WXMt0is.roa (hash: +Etzf8iyPB8hG3RY9d2BBNlzK8ZhQf8I9wkNpl+P4s4=) 5: C9CUr-PFwRxBqveQc9JRexz5FUs.roa (hash: lYbCEmweFZ4ggkWxLIShDolBIH8LVCAHfTyc91SJwy0=) 6: FsSNPUWjwDIlPVEHY__f13MutvI.roa (hash: ParcKE8qGlMpeOMYcmP/zF1xOvvVsHqjFGUJ9CbIYcQ=) 7: LmasvFTLE11mrCxdzPNrrKlYdc0.roa (hash: cro6qKPl5KcW1vG37gAcGVH3Wnv66eL0SBKTzxopYzw=) 8: OnExh771ZtOXTYHIXE8BRYIv3I8.roa (hash: iBanqCcjQhcLJzTqVwfRApVqXKWA6vIc0dQd8k0fLnI=) 9: SUEavrAvbJYi-09a6QVI2M_eSIc.roa (hash: hAAmC8KjoRR+ZLoagJaC8chUvGr6KdS0WhlLhZ1Tw9Y=) 10: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=) 11: _TZcDPZzpFhla5KXCrewBSv_afs.roa (hash: F0O1jt3D7eDKUVGno8fQyg0oYO+Zw0jzvuEgWmXzed0=) 12: _r7e3jySBWFxAqLAWSDEbmMpjF8.roa (hash: 0s13Gjs3CYsISYzYweJ7h7lIWvgl86R0YjE4dZPqH/A=) 13: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=) 14: d8tYjTMOm2iLi-JD46yX3lK67ec.roa (hash: R7k5LiqgpO3uW9dYKT9Gf8MpGa5+R/ekeb18H+cE9bo=) 15: g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa (hash: nYVi4YC9fVishrPOTjgH2hJlXxcspFsYbheNk/bE1wY=) 16: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=) 17: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=) 18: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=) 19: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=) 20: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=) 21: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=) 22: wsknEjm24Tmqnj5AbQzSZKLiyUk.roa (hash: 1F0f934WY0AhELOowB6/aUmK8URa7DHUIj0Gci4bhIA=) 23: xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa (hash: 81EBYCMb1JChmS1xYbhUHSpsd2Mkl7rE43HaypoVrxw=) 24: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:15:14:3a:d6:85:7c:9a:99:e6:29:a8:ef:05:7a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Sep 24 11:02:49 2026 GMT Not After : Sep 25 11:02:49 2026 GMT Subject: CN=55f199ed8a96f0bd7743e5f7aca03b5c610dec88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:23:d8:80:8b:1a:dd:4b:29:af:70:eb:90: 80:97:c2:76:47:a9:e7:04:62:f7:2a:08:67:a4:83: a9:86:fa:cd:0b:5a:b8:f1:2f:0a:eb:41:4a:c3:95: ff:c7:54:da:56:7d:b3:9d:98:4e:f0:23:8b:c3:90: a4:09:9f:b4:3b:c9:5e:2f:86:9d:0e:cb:b8:6d:fd: 20:f5:15:7b:1d:c3:2d:02:7a:a4:10:3e:4b:85:f9: aa:38:ad:2e:32:61:b5:e2:db:fe:81:09:2b:38:bf: 47:96:f1:64:f6:2a:18:5f:84:7d:90:40:14:29:28: e3:d5:f6:b8:a4:9b:b5:a4:4b:ad:0a:38:02:55:07: a5:5b:a4:aa:d1:1a:0a:36:85:80:ba:fc:36:86:d5: 71:c8:1b:e8:e1:a7:6c:1b:26:be:24:ac:f6:7a:0b: 15:81:d3:b1:fa:08:d5:c7:45:04:de:88:6c:f6:35: 2e:22:d1:0f:3d:b6:41:c6:54:94:b7:d4:3a:28:11: 07:1a:f3:81:97:04:4d:74:57:71:b7:ad:6d:70:9f: ed:b8:8a:24:d4:70:f2:38:98:9d:52:96:b1:69:45: 13:00:c2:96:2c:b0:1e:ee:e3:68:41:b5:01:90:09: 9a:71:f5:53:4f:3f:c4:ee:c4:80:2d:5e:0c:ce:25: 71:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F1:99:ED:8A:96:F0:BD:77:43:E5:F7:AC:A0:3B:5C:61:0D:EC:88 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f9:eb:9f:b0:9e:e2:fe:0c:6c:45:42:7b:85:6c:00:a2:e9: f5:d5:a9:c8:bb:83:c5:41:5f:d4:4d:95:3e:ad:c6:8c:26:c7: fa:6e:14:4b:a2:f8:12:d9:68:e1:a2:67:0c:07:ba:ab:24:6d: 3a:63:dd:61:b5:88:cf:88:ea:a2:06:c5:12:c6:55:87:62:a0: c9:be:73:6b:22:c3:3c:36:69:77:33:ab:66:74:8f:1e:7a:e1: 5d:a4:71:8a:68:60:e7:b3:f8:e7:15:11:d8:79:7b:a1:36:42: 85:16:ab:93:dd:55:6e:b0:e6:7b:25:a4:b9:93:0c:6a:8c:2f: 82:8b:b6:a4:71:2a:4b:47:58:6d:c4:48:bc:47:e8:fd:61:5d: 37:5e:ea:1a:29:33:b0:fc:13:e8:c1:67:ce:f0:f5:63:a7:e6: a5:7f:17:8d:4f:87:9b:53:77:02:8f:74:f5:e3:f4:bc:80:ff: ae:4c:b8:94:40:4a:d2:34:70:b1:08:18:24:74:62:aa:c5:5a: 4e:d2:54:e7:75:4a:97:9a:6b:f2:9a:62:41:56:ab:db:99:60: b0:f4:f4:58:cc:4b:17:92:9a:e4:e9:b5:82:02:60:07:47:e5: 12:41:51:3b:a8:c3:fc:bd:1f:60:80:c8:05:f4:5b:e4:3a:60: e3:57:5c:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDTFRQ61oV8mpnmKajvBXo3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwOTI0MTEwMjQ5WhcNMjYwOTI1MTEwMjQ5WjAzMTEwLwYDVQQD Eyg1NWYxOTllZDhhOTZmMGJkNzc0M2U1ZjdhY2EwM2I1YzYxMGRlYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzcj2ICLGt1LKa9w65CAl8J2R6nn BGL3KghnpIOphvrNC1q48S8K60FKw5X/x1TaVn2znZhO8COLw5CkCZ+0O8leL4ad Dsu4bf0g9RV7HcMtAnqkED5LhfmqOK0uMmG14tv+gQkrOL9HlvFk9ioYX4R9kEAU KSjj1fa4pJu1pEutCjgCVQelW6Sq0RoKNoWAuvw2htVxyBvo4adsGya+JKz2egsV gdOx+gjVx0UE3ohs9jUuItEPPbZBxlSUt9Q6KBEHGvOBlwRNdFdxt61tcJ/tuIok 1HDyOJidUpaxaUUTAMKWLLAe7uNoQbUBkAmacfVTTz/E7sSALV4MziVxzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXxme2KlvC9d0Pl96ygO1xhDeyIMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPnrn7Ce 4v4MbEVCe4VsAKLp9dWpyLuDxUFf1E2VPq3GjCbH+m4US6L4Etlo4aJnDAe6qyRt OmPdYbWIz4jqogbFEsZVh2Kgyb5zayLDPDZpdzOrZnSPHnrhXaRximhg57P45xUR 2Hl7oTZChRark91VbrDmeyWkuZMMaowvgou2pHEqS0dYbcRIvEfo/WFdN17qGikz sPwT6MFnzvD1Y6fmpX8XjU+Hm1N3Ao909eP0vID/rky4lEBK0jRwsQgYJHRiqsVa TtJU53VKl5pr8ppiQVar25lgsPT0WMxLF5Ka5Om1ggJgB0flEkFRO6jD/L0fYIDI BfRb5Dpg41dcmg== -----END CERTIFICATE-----Generated at Thu Sep 24 14:41:38 2026 by rpki-client