$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft File: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json) Hash identifier: GHJbiJyYMLrUtFzvjq89THrwfNIR2mCMevq1pZh6oB8= Subject key identifier: 9A:1E:1E:93:E2:FA:24:D1:C3:64:57:2E:8A:1E:2C:8F:25:BE:9E:5D Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019E1C1056F11B1B9C4B94D3E265FBB3660B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft Manifest number: 1A01 Signing time: Tue 12 May 2026 12:01:33 +0000 Manifest this update: Tue 12 May 2026 12:01:33 +0000 Manifest next update: Wed 13 May 2026 12:01:33 +0000 Files and hashes: 1: 3i7eecIYXJFMtWbTomoMld1jbsU.roa (hash: IKHXGLydTQAG9uvsO3wqN1AT0T0tKUnVEdCSkS/dVQk=) 2: 3zPWSVi1xKNHgi-DcSpqaMulPAM.roa (hash: XmSVH6OWOK+57jQiUpzRVApK787x/2+FteNaQECymcY=) 3: 5SMwrN_wq7GbihxhXj3Wp0-r9Iw.roa (hash: rztDOlgxHtA1Pu/RNy1ezx+YrSzDhk4zBlnVU+gOf/g=) 4: 6wxp6D90PbkCxonPP-7ItR_YqfY.roa (hash: /lg76dYtxvJCPKRCwUkyQeGdGXsapuk2HDK2CHSLQQA=) 5: 867DHR_gPpsXfR_6NxjJjeTNrfw.roa (hash: TRrByCoKZXdTUeNEKq7vGJkpkob7vYLVejRCbzVB1kQ=) 6: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: gyWWYOF+acTAtOuVceGIsu+CpgooBF53OJCvEPmd784=) 7: 9xFZf7INYLbCIzyIf9b3P8fIOc0.roa (hash: /1LZV84DzzmiMTI58aVYXXt0WNKI/eQJpLTcNCvbGck=) 8: Awu7K6uBqTyYqPynAIVRK-5kPm4.roa (hash: 7TiIWybHXRnbv5hE65euWBGO02DixC/YO8jfz7Nss8I=) 9: CaWkjFlDf_GHD_D0djsNXKtYuE8.roa (hash: o86xqFgz878m1TntBnMgIpo2h0QiuhFjerPYUxCcs3A=) 10: DUTgV1bA9_o5dKe8lemDWjvMEEE.roa (hash: gYJWfDKrmLidy0VIroB1npsg2xaP97yBGOTB4byJG3o=) 11: FFYvXG3A9UDJhsj0-YrKuleDeM0.roa (hash: v3ZUhVy1LRa8cnJ36ehyxwdGBypz+FvkxBuOalRK5yA=) 12: G0j4IoE-ugCMEr84DNMqH4xjHZw.roa (hash: NdFWvMVet+G455uF6ZrnwIrwjrfOSjTkt3TcUmOzIEY=) 13: IkbW3p7UPv8rk58pgNjSuxqf1sA.roa (hash: 6macv08vdsEcfjTUw6WLKYaZ1q5waPGq5JAJEmg9ESw=) 14: JlzUlUHXjW5zqvwixAy9oMWnTdc.roa (hash: AmbuKHZkWKwTlajCf56DPydst/tN35Tsh9yESRfKx6A=) 15: On2KNHxJggzhj5AgXK5NbPHrL2Q.roa (hash: fsSPQUeJYyWLXiz1hpLry6K4C/Imk5T/lJNXRxqJKA0=) 16: ZveU_Vqfn9-Be4p3ztmtZTlHkhM.roa (hash: /KDFOVm97hN+qDZV4DOVh7izdesZzp1DJOCDSbno4BA=) 17: _EPwTpyXTdklr6rbc2bFD4AKcjY.roa (hash: mv8Zo3ebEee5w8qs7cTujP3otIfg+5OcbkXbPPRyelY=) 18: b4gApv3V9WNuH1tUYB6hLsjX2Mk.roa (hash: Gl55nIcp7Geh+WGb27hWRSt+zD+uJeV75P0qyXtzqOc=) 19: bnpFISkHVWYEcEO5XwuCPj0u3m0.roa (hash: nd+DkS58Y5hISuLgopesw5jR4eTyK7cGl1zOb/iq1rE=) 20: derjq_a2xULSiq0hLt8SXBP15vM.roa (hash: OWg/eoTyibIEUVgKcv4tF2DTQ0GhFdaM6Rv6pIMddZ8=) 21: eHw1Dv0-iPz6cBJwpcSTNw1s2DE.roa (hash: dU4EZvdrDYCqFvrEmWTYqkLKWomor5VqWMAq1E8iu7A=) 22: jukzqBN3MLbeKVI2HbGH1M6Rq9E.roa (hash: 3VyrLTv5msCiOqxXAT5r6HeXGSHnowkLXALYkydr0XI=) 23: k2Ju4abbP5m9FcP_TcONvNialGo.roa (hash: +xKSaZxzFTvFYXFzopdW+GeQg55zpXmLh6yFWO2T458=) 24: kv8EY5Ye7Eutwf1Db0UJNIUPGSA.roa (hash: RWKNuZDHGzomFz/Fugk4epNi/zZaBPNtfDabOwz8lZM=) 25: mu8sewjnHs63ljc5EPin04mGuqc.roa (hash: Nlly8/HRUi2DmuSutAUb+7rXqXjB8gC4wwHwf9Fq78k=) 26: p0F1Di07cfHgVtNuzv6FJ4iFClI.roa (hash: 9lY1NiQxftdsmh+IAe0uysjcwZzDj+ipCzGUQqD681I=) 27: sstchpp41wfR36zmN_VppKaWZCM.roa (hash: BT2ePRQ519c4Xbc7A10/SCSBxkC+28CQt52Y0dXyeNU=) 28: ta7RNijMrlT7XLwISB-DzbnGBEA.roa (hash: htdQ/B3zavFvNHE8jCWCCL+qsSOUQlVeq0UkLWAcUbs=) 29: u7nEbY5NwbL5HXW0l-V-8pl_64s.roa (hash: LrWkvx/a3seM8ivTnZCNGMGBOaWSwFKUegrXwjkMzAQ=) 30: uCRrF5H6MO65ZSaMccf4F3ImvvI.roa (hash: wGlRyFIjCEhLLNtkuVs0yaGsRVeHljW+UCOqu6XTaik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:10:56:f1:1b:1b:9c:4b:94:d3:e2:65:fb:b3:66:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: May 12 12:01:33 2026 GMT Not After : May 13 12:01:33 2026 GMT Subject: CN=9a1e1e93e2fa24d1c364572e8a1e2c8f25be9e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:aa:78:f0:c8:80:fa:1a:04:04:5d:66:a5:73: 6b:53:92:01:b0:56:bb:75:8e:05:db:57:84:c7:de: 9f:27:d4:31:f8:8e:bb:fd:fe:83:aa:c8:78:68:80: f8:1c:1d:4f:22:41:c6:b7:9c:b3:86:80:d0:28:b4: 69:5b:9a:aa:4f:9a:cc:c8:05:c7:29:b0:3e:10:38: c8:e7:2e:fb:34:0a:06:95:43:50:d9:a3:8b:ca:20: e1:47:38:25:69:5b:f2:75:7a:90:e0:88:d2:4c:c2: a0:b6:65:05:1a:8e:27:8e:d3:8d:8c:08:fa:f0:24: 6d:56:9d:2a:49:6f:ba:d7:97:72:22:6e:15:af:33: 8b:51:94:f0:5b:fb:66:73:ba:fa:d3:9f:41:4b:e0: 32:bd:a4:1f:9d:e2:ee:5c:53:f5:b6:98:da:a3:b5: b6:2c:cc:a8:ba:16:df:ce:14:db:04:a0:3b:7e:7a: 51:14:ab:98:6a:13:58:2d:39:82:ea:d5:86:cd:51: 2c:5b:15:16:f9:ae:1b:c2:85:5b:20:1a:aa:2c:ce: 26:84:95:06:d1:e1:39:65:e9:92:e0:67:f9:f3:8b: 41:35:e6:85:43:c2:03:ee:0e:cf:85:ab:56:f2:90: 71:8e:78:9a:1d:d0:3b:36:9d:d0:2d:3d:8c:5a:f3: 27:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1E:1E:93:E2:FA:24:D1:C3:64:57:2E:8A:1E:2C:8F:25:BE:9E:5D X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d8:3d:e5:7b:d2:2e:49:e7:65:67:e7:f5:94:d0:6a:62:4f: bc:47:ae:8d:82:ac:b3:ef:44:ae:89:40:11:c8:31:9c:37:a4: 3e:ef:59:10:46:ee:fc:b6:79:7e:16:c1:2d:08:98:78:a5:f6: 70:5a:b4:bd:07:81:7d:87:9e:c5:02:e5:88:db:e8:33:34:d4: 97:3a:32:25:d7:0a:68:f9:76:59:ee:93:6d:44:96:33:fc:39: 1d:cb:9e:e9:1a:11:00:32:67:9c:cb:26:86:b0:1e:2a:69:11: e9:fd:50:b7:7e:7b:a7:4e:ea:2b:1f:cf:ad:b5:13:89:a8:27: 5b:fe:0d:65:0e:ad:ee:18:31:93:b1:ff:22:ae:83:59:7b:fe: 9f:f0:62:31:75:4b:80:b0:ed:40:17:e4:34:05:d1:fa:48:a4: 7c:54:1d:1a:60:28:16:38:98:c0:3a:34:a0:8b:fc:66:d1:0d: 96:39:4c:ce:bf:01:77:93:8e:4d:70:38:73:7f:62:2d:6c:70: 6d:02:0d:aa:f5:9a:e9:b9:bb:5c:a9:bc:2c:c0:f0:a1:46:56: 02:60:1b:3e:64:d9:5a:f6:97:3c:2f:28:36:c5:f6:4e:73:fe: aa:bc:6d:2a:01:c7:5a:43:bd:72:85:78:7f:f3:8f:4a:bd:f7: 47:ef:52:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cEFbxGxucS5TT4mX7s2YLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwNTEyMTIwMTMzWhcNMjYwNTEzMTIwMTMzWjAzMTEwLwYDVQQD Eyg5YTFlMWU5M2UyZmEyNGQxYzM2NDU3MmU4YTFlMmM4ZjI1YmU5ZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqp48MiA+hoEBF1mpXNrU5IBsFa7 dY4F21eEx96fJ9Qx+I67/f6Dqsh4aID4HB1PIkHGt5yzhoDQKLRpW5qqT5rMyAXH KbA+EDjI5y77NAoGlUNQ2aOLyiDhRzglaVvydXqQ4IjSTMKgtmUFGo4njtONjAj6 8CRtVp0qSW+615dyIm4VrzOLUZTwW/tmc7r6059BS+AyvaQfneLuXFP1tpjao7W2 LMyouhbfzhTbBKA7fnpRFKuYahNYLTmC6tWGzVEsWxUW+a4bwoVbIBqqLM4mhJUG 0eE5ZemS4Gf584tBNeaFQ8ID7g7PhatW8pBxjniaHdA7Np3QLT2MWvMnrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoeHpPi+iTRw2RXLooeLI8lvp5dMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtg95XvS LknnZWfn9ZTQamJPvEeujYKss+9ErolAEcgxnDekPu9ZEEbu/LZ5fhbBLQiYeKX2 cFq0vQeBfYeexQLliNvoMzTUlzoyJdcKaPl2We6TbUSWM/w5Hcue6RoRADJnnMsm hrAeKmkR6f1Qt357p07qKx/PrbUTiagnW/4NZQ6t7hgxk7H/Iq6DWXv+n/BiMXVL gLDtQBfkNAXR+kikfFQdGmAoFjiYwDo0oIv8ZtENljlMzr8Bd5OOTXA4c39iLWxw bQINqvWa6bm7XKm8LMDwoUZWAmAbPmTZWvaXPC8oNsX2TnP+qrxtKgHHWkO9coV4 f/OPSr33R+9SaQ== -----END CERTIFICATE-----Generated at Tue May 12 21:43:13 2026 by rpki-client