$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: +O5iTUz832CfAUbogqDmt+tWOH5EL5wddoaNI/rYXWM= Subject key identifier: F3:BD:DB:5F:90:3B:43:D1:0F:DB:BC:85:C3:FE:32:12:FA:1F:89:C0 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019D32D0A7216FFFD98A71D5B971CAF9E4A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 0B7C Signing time: Sat 28 Mar 2026 05:00:27 +0000 Manifest this update: Sat 28 Mar 2026 05:00:27 +0000 Manifest next update: Sun 29 Mar 2026 05:00:27 +0000 Files and hashes: 1: 1lESD01m5gbJyA-braAOgm-nsxs.roa (hash: LKvU7E9DI8H+f3xZF2Ibb4ZAlOKiTpfnzxmAzY3Zmkw=) 2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: cDrcZXD/xTHBw9NkDF6tnvnUoRh3RZkuCYibhfCorkI=) 3: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=) 4: 61nxpqdan0uvkgRYS9p3WXMt0is.roa (hash: +Etzf8iyPB8hG3RY9d2BBNlzK8ZhQf8I9wkNpl+P4s4=) 5: 7xhS1OnMG702WdVIIAGV_Co-IFA.roa (hash: jeoQe1jYZWJyOn0p/snBi3a8NQmDw0H92mZh9etliUg=) 6: 8xP7SvrqNDDUIf7ErNtYgRY6F6A.roa (hash: U6lRFQt/WgoeTpDrJcFjH+zyys2ywY9lEhPCU7k4p30=) 7: C9CUr-PFwRxBqveQc9JRexz5FUs.roa (hash: lYbCEmweFZ4ggkWxLIShDolBIH8LVCAHfTyc91SJwy0=) 8: FsSNPUWjwDIlPVEHY__f13MutvI.roa (hash: ParcKE8qGlMpeOMYcmP/zF1xOvvVsHqjFGUJ9CbIYcQ=) 9: RZ35NKWeyB9F_s2cVBS9jmpmNNE.roa (hash: ivNAOqkiBXytYjHUBlc4KByuRxTr29C0gyp+cv1UV+A=) 10: TUJfUZ1C6AVUTkApJcMIop5vQLE.roa (hash: 19Ah/XGkNGiCO99Jf7P8HQSUuyigvJ3sN9PnRIrIxdo=) 11: YWNcwd41RpRA7xgpt7KBYYNpmLo.roa (hash: Z/YiQmms85XQHI3WICsesmpbSRUq/suFEGF/feadUT8=) 12: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=) 13: cD2COEhWqNo5yp4vCeMl7hW-eQM.roa (hash: 4UYXi9S7C8C0UsDyWgF+v61Gg+AakXXjWmGnRepiQPU=) 14: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=) 15: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=) 16: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=) 17: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=) 18: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=) 19: txTrVQ7DOwvGZVMuUdOo2yJntLw.roa (hash: X0+eCtLiIKeX5v5KTGC8o4Rtbkm6Pp1VNspLxuoN4nw=) 20: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=) 21: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=) 22: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:32:d0:a7:21:6f:ff:d9:8a:71:d5:b9:71:ca:f9:e4:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Mar 28 05:00:27 2026 GMT Not After : Mar 29 05:00:27 2026 GMT Subject: CN=f3bddb5f903b43d10fdbbc85c3fe3212fa1f89c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c4:ee:c3:ce:2d:46:81:b0:8a:85:3f:e4:54: 09:3e:dd:5f:78:e2:6e:dc:0d:a8:a7:0e:3e:5b:c0: 0e:03:51:07:2d:bc:cf:23:c6:57:d3:9b:1b:56:5a: 4b:34:96:7a:2e:1d:b7:88:85:43:3b:ea:8e:a6:01: de:e6:3c:0d:c6:59:c0:4e:0f:31:72:c2:30:92:c4: bb:ed:8a:0c:e1:42:db:45:f4:d3:5d:89:b3:f2:e0: 7d:24:c4:88:f0:a7:de:2d:4e:0a:90:3e:e0:7b:aa: 88:f7:b1:ce:54:1f:81:16:e6:72:6e:fa:50:77:3d: 3b:4f:c7:e6:de:ca:92:9d:ff:fb:92:53:fb:c8:5b: 8d:d8:89:64:07:f4:8a:56:8b:99:ac:a8:3b:2d:15: 72:f5:db:9f:dd:4f:d9:29:a5:2f:6a:43:bc:12:ec: 45:d7:06:24:47:a9:2d:a8:b4:37:bd:b2:9d:b0:58: c9:76:b1:b2:b8:79:62:f5:77:5a:d1:f3:97:12:1c: 44:9c:c5:09:33:5d:d7:96:26:d2:0f:c0:82:c4:c4: 31:25:1b:bf:6b:39:d0:80:ee:e1:2c:c8:7c:37:83: bd:31:b5:92:5e:4c:34:a9:c9:a1:fc:c1:b4:8f:8d: ea:3d:f4:ea:18:96:a0:96:73:96:cf:73:97:45:75: 7c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BD:DB:5F:90:3B:43:D1:0F:DB:BC:85:C3:FE:32:12:FA:1F:89:C0 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:aa:d6:f1:45:12:49:6f:f8:bb:12:d7:ae:64:e6:81:fe:df: ad:b9:03:79:91:aa:87:aa:92:df:ea:1b:d5:81:fd:23:82:ef: d6:0b:44:d7:40:6c:aa:24:56:fc:8e:eb:f2:5e:7b:d1:18:29: de:9a:66:cf:61:67:c7:01:f9:89:6f:3c:7d:de:91:71:cd:59: e7:e5:fc:c8:7f:4c:c0:2a:7c:18:a1:a4:1c:c7:ae:a5:e9:be: c7:dc:1c:5c:6d:84:b4:f6:b0:29:2e:a0:53:d4:02:7b:c6:1e: 48:2b:a5:5d:6d:2a:6e:5b:eb:a9:be:22:9d:0b:f5:1d:b5:e3: bb:64:08:27:02:ad:0e:7a:63:ce:5f:fe:58:78:02:66:04:a7: 91:2c:40:56:3f:06:b5:89:52:4e:34:c1:53:f1:29:e3:87:d2: af:25:36:ab:0b:28:32:cf:c1:31:5f:d9:29:b9:ab:c9:9f:6b: ee:e4:a5:7d:3f:a7:dc:04:08:08:b4:ca:b0:e2:ed:b4:77:b3: 25:15:87:2b:f9:b2:54:6f:09:5e:b8:18:73:7a:8f:00:f2:0e: a5:e7:bb:dc:18:ad:c0:8f:9a:ad:e9:06:0a:dc:41:cb:dd:d5: 12:fc:e7:0d:fa:69:17:44:6c:68:6a:c3:f2:a2:3f:70:58:cd: 10:5c:ee:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0y0Kchb//ZinHVuXHK+eSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMzI4MDUwMDI3WhcNMjYwMzI5MDUwMDI3WjAzMTEwLwYDVQQD EyhmM2JkZGI1ZjkwM2I0M2QxMGZkYmJjODVjM2ZlMzIxMmZhMWY4OWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMTuw84tRoGwioU/5FQJPt1feOJu 3A2opw4+W8AOA1EHLbzPI8ZX05sbVlpLNJZ6Lh23iIVDO+qOpgHe5jwNxlnATg8x csIwksS77YoM4ULbRfTTXYmz8uB9JMSI8KfeLU4KkD7ge6qI97HOVB+BFuZybvpQ dz07T8fm3sqSnf/7klP7yFuN2IlkB/SKVouZrKg7LRVy9duf3U/ZKaUvakO8EuxF 1wYkR6ktqLQ3vbKdsFjJdrGyuHli9Xda0fOXEhxEnMUJM13XlibSD8CCxMQxJRu/ aznQgO7hLMh8N4O9MbWSXkw0qcmh/MG0j43qPfTqGJaglnOWz3OXRXV8EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPO921+QO0PRD9u8hcP+MhL6H4nAMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArarW8UUS SW/4uxLXrmTmgf7frbkDeZGqh6qS3+ob1YH9I4Lv1gtE10BsqiRW/I7r8l570Rgp 3ppmz2FnxwH5iW88fd6Rcc1Z5+X8yH9MwCp8GKGkHMeupem+x9wcXG2EtPawKS6g U9QCe8YeSCulXW0qblvrqb4inQv1HbXju2QIJwKtDnpjzl/+WHgCZgSnkSxAVj8G tYlSTjTBU/Ep44fSryU2qwsoMs/BMV/ZKbmryZ9r7uSlfT+n3AQICLTKsOLttHez JRWHK/myVG8JXrgYc3qPAPIOpee73BitwI+arekGCtxBy93VEvznDfppF0RsaGrD 8qI/cFjNEFzuqg== -----END CERTIFICATE-----Generated at Sat Mar 28 08:43:23 2026 by rpki-client