$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json) Hash identifier: zmZgKm/XSXuEWdG8KlppK/0eD/E7h0AxhsJwleYx7dA= Subject key identifier: 90:8C:61:34:EE:13:12:1D:87:DA:7E:BA:5C:CB:5D:26:29:35:0C:89 Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 019D288473634A4334DE33950C64CD9EA02F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft Manifest number: 18DB Signing time: Thu 26 Mar 2026 05:01:02 +0000 Manifest this update: Thu 26 Mar 2026 05:01:02 +0000 Manifest next update: Fri 27 Mar 2026 05:01:02 +0000 Files and hashes: 1: 0fgHNVCctmMI1V-BS5_kF5EsiOU.roa (hash: eNuhCbiq7TJi88XjDE039hLZRz8ipxup9WRLp8sp1DI=) 2: 7_6SFXfZMrzFSdtu3xDOw0gJ8JY.roa (hash: hG4yO49oHj9b8DfZFiphyKQ8y3qDFd1bbzb1jH4CrQU=) 3: DF7ZMArr7YQkP6JCvTXnJ48GG1g.roa (hash: h0YoBkA2Ma+7OTVVfQXFtJdLdFlpvKYuPy7+Y+Jklhw=) 4: Ep-mQB2FAsp8xVwfqHWWTFWTlYM.roa (hash: CcqzWZ6bMIWysh3kKgYdOQMLPUZ4shI2ek8KjLM+54s=) 5: GujJ-FoV2NxCphoiy9ei8Zxbj94.roa (hash: 5qyX0xcJQK2tt6fcmxtTs5x5YBwoFGMWlBym7IBYHmk=) 6: MuQyieCgxPJT0SRv6Xj_GxkiB-I.roa (hash: 0pzaFGjjnJFM3Mi6/Z0qJhoLAoydrAANnuMwOCc5Kso=) 7: P7wv0TBgiECiEBUf1EgkMnv47Po.roa (hash: rqQESPX4LWrWYgKl1zOfXltaaGJ18DHxc3dAwU1KR9k=) 8: Q1yzAo5L9w5IHv0JqXbg9yCMMcU.roa (hash: qLGf0LLtEidrk4nWv5exOU1LPTUa9MuB+3L8YC0+hbc=) 9: QLx_bFpLJ0q7OGCLe6wvYzJoLrw.roa (hash: XQYgd3zzuTttV8zp0GzxyEY68F4NaIMjIG/jCEfOzec=) 10: RjNeSA3OdSgfuKyXCw4On9Hfwig.roa (hash: TGS0IFEq2/Ak8/1sB2LyNa9KTXiGL21lniik5j5gU80=) 11: T5XQh9j95-eHLk4tIkpyKU927L4.roa (hash: YLS+fL7b3BgU8PYEgqxRvmWh3Kk8TcAGqvr6h5p+gtg=) 12: X_eS7uT76Tv6lToj2nDNeg9sgYo.roa (hash: rlOOw1Hh+1Gv0+quXstdSdljOaXwuIQS08R8cOH2H9E=) 13: YRVJ0Gjf3ToFSXg4tQ2csynme1g.roa (hash: +3oRd6tn6dDyNGcRR/+Wdu79deA/W9QRUODpof/4dqI=) 14: YVly3HyFx4cO-VDnGW8-TlLZp8c.roa (hash: zmddt2tM/OfIW2jjFDZBhz9+RtNwb/OeGPoKv5WQBq0=) 15: f_U1wlpu2o8G1EDSBfG2v3CJsrU.roa (hash: mBEZgenCoBMKSBIbKUgW3oXM9LSYHALYDi8zO9xe4lk=) 16: gkBIXWPDqd5iHgTo6Oq_RIYuttI.roa (hash: TAAZ/5Q3PgiVYAsyiVs0eY43VCN4PWzuxjaw3+oWC3U=) 17: l8R7A1sksjUkbsqqgmFV4yhnwoY.roa (hash: tOD+/L6A4hjUPcMiH0jbILCqY006lQVa6EOA+rm4RSY=) 18: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: NaOFMrTQ5y9HS8JKd7P1s4PCl9JOsQ0Yl2LBOSyTuCY=) 19: qHqVroTNd8mAZUTP-4LLTihEjRA.roa (hash: LFqfsvqUg1kryv3SdZmfz1fPpVN8XkzwNYvHfBdV5dM=) 20: sIdlwG_KvJyr9jN9d5KfNvyl-ws.roa (hash: HSdj5IIYXsemUlbbPFPUMMU0DovDtEclq0qz0Z73zr0=) 21: z2b5HqrBbNton83_qG8fiGl3ipE.roa (hash: /MzZQY5wAz0d5qSw7Z9ljmH3Z0SZhJHz2o3BPZIFhmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:84:73:63:4a:43:34:de:33:95:0c:64:cd:9e:a0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Mar 26 05:01:02 2026 GMT Not After : Mar 27 05:01:02 2026 GMT Subject: CN=908c6134ee13121d87da7eba5ccb5d2629350c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a7:da:c2:5a:d6:38:8c:08:12:1d:aa:79:9d: ec:c7:92:66:aa:1d:ba:65:42:1a:c3:06:94:07:40: fc:b6:4e:a7:05:8f:51:3f:20:7a:db:d6:14:80:59: e2:13:70:87:ba:89:e0:c5:97:91:4c:4b:70:17:f2: 08:f6:b1:56:6f:df:1b:ca:6a:11:b5:1c:0d:a0:e0: 52:ba:f8:20:e6:1b:8e:9f:b3:33:c6:99:0c:ce:80: 52:3e:1a:26:d3:49:96:90:93:fd:b8:26:84:96:ea: 47:a5:ca:f9:40:0d:f0:49:2c:48:27:28:7a:f7:a0: 7f:3f:39:e5:9a:44:5b:b6:cf:0d:e8:80:15:54:20: ac:42:1b:11:1f:36:2b:55:db:aa:db:e8:9b:4c:05: 47:16:9a:99:ab:b3:04:68:8a:50:6f:04:44:94:1a: 98:8e:00:48:27:0f:af:a7:7e:a2:d1:0c:48:f2:17: f7:85:20:86:34:e0:4a:3c:47:f1:72:67:53:d8:e2: 15:68:61:9d:53:02:45:41:5b:8b:b6:a9:3c:45:81: e6:79:6c:49:95:87:55:30:06:a3:81:52:31:79:c6: b4:ad:61:09:22:e4:a9:83:54:8a:69:58:25:56:ac: a8:ff:b6:51:85:53:a7:a7:95:39:55:a7:44:e9:2f: 2f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8C:61:34:EE:13:12:1D:87:DA:7E:BA:5C:CB:5D:26:29:35:0C:89 X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:31:5a:16:89:ab:73:3a:f2:3c:e6:9f:39:6e:7a:01:8d:20: 66:a9:e7:b2:94:97:f2:67:f4:53:5a:97:70:97:1d:ca:84:dd: 9d:78:bf:6c:d4:3e:23:7c:c7:18:a8:e7:33:1c:7f:33:a0:18: cc:cd:84:70:74:0b:65:35:0e:bf:c3:b7:6d:95:6f:d3:3f:0a: ee:f7:19:2d:4a:07:ef:ce:1d:bd:fd:64:d3:2a:a0:2e:87:65: 7a:a3:c2:99:e9:5a:1d:8d:7d:1f:06:3c:b2:fc:07:dc:db:f3: ce:ad:fb:0f:0b:cc:81:0a:a6:69:6b:60:f8:f6:95:cd:f2:1e: 82:65:a2:ef:f4:c9:fc:21:d8:da:6d:ed:6a:62:53:a7:65:f1: 49:8b:a9:6c:0e:29:73:08:c8:f2:f8:dd:72:1f:be:f6:3b:3f: 1c:01:86:4b:a9:da:a5:fa:52:5f:58:24:a3:fe:35:2c:f6:ac: 76:08:14:5a:6c:9c:64:9d:f7:69:07:bb:78:91:33:ec:00:76: 05:21:96:7b:a0:ec:cd:5f:9c:36:8b:fe:85:a3:8f:b5:71:a1: 00:97:dc:7e:43:3b:74:29:fd:48:5b:f1:ac:fe:b6:30:e0:cd: 76:cc:0e:d0:e7:fe:4c:1a:6b:83:35:58:a2:a1:91:42:8b:74: d9:27:80:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ohHNjSkM03jOVDGTNnqAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjYwMzI2MDUwMTAyWhcNMjYwMzI3MDUwMTAyWjAzMTEwLwYDVQQD Eyg5MDhjNjEzNGVlMTMxMjFkODdkYTdlYmE1Y2NiNWQyNjI5MzUwYzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6fawlrWOIwIEh2qeZ3sx5Jmqh26 ZUIawwaUB0D8tk6nBY9RPyB629YUgFniE3CHuongxZeRTEtwF/II9rFWb98bymoR tRwNoOBSuvgg5huOn7MzxpkMzoBSPhom00mWkJP9uCaElupHpcr5QA3wSSxIJyh6 96B/PznlmkRbts8N6IAVVCCsQhsRHzYrVduq2+ibTAVHFpqZq7MEaIpQbwRElBqY jgBIJw+vp36i0QxI8hf3hSCGNOBKPEfxcmdT2OIVaGGdUwJFQVuLtqk8RYHmeWxJ lYdVMAajgVIxeca0rWEJIuSpg1SKaVglVqyo/7ZRhVOnp5U5VadE6S8vHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCMYTTuExIdh9p+ulzLXSYpNQyJMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTFaFomr czryPOafOW56AY0gZqnnspSX8mf0U1qXcJcdyoTdnXi/bNQ+I3zHGKjnMxx/M6AY zM2EcHQLZTUOv8O3bZVv0z8K7vcZLUoH784dvf1k0yqgLodleqPCmelaHY19HwY8 svwH3Nvzzq37DwvMgQqmaWtg+PaVzfIegmWi7/TJ/CHY2m3tamJTp2XxSYupbA4p cwjI8vjdch++9js/HAGGS6napfpSX1gko/41LPasdggUWmycZJ33aQe7eJEz7AB2 BSGWe6DszV+cNov+haOPtXGhAJfcfkM7dCn9SFvxrP62MODNdswO0Of+TBprgzVY oqGRQot02SeAFA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:57:58 2026 by rpki-client