$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json) Hash identifier: 02uju1vYxq/4cO3FvNNeRTN/24l9R7oXyHQb4sVDadw= Subject key identifier: 6E:47:C7:FF:82:DC:A8:24:76:10:DD:A9:83:EC:DC:90:8C:0A:15:64 Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019E1CB4FA5775D0280693D02DB5C145B111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft Manifest number: 14F9 Signing time: Tue 12 May 2026 15:01:23 +0000 Manifest this update: Tue 12 May 2026 15:01:23 +0000 Manifest next update: Wed 13 May 2026 15:01:23 +0000 Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: X87H3HwCAwplEVbEUaNkm5qzRQJanCFj0BWqdwKLyd8=) 2: 3SoEwaHYmzBhPq3SqrK7-97FxfY.asa (hash: DUPJ+1lMqiRx5QPupK6EYyCTyvEki+rd8cq0JTEqc4k=) 3: 4dRn2JrP2QCTAWF-YiqGTdGG-aY.asa (hash: 5OSvsuPPRn9OvkRvh/NzOUAFS7gn9Nx/H8X3BJxRZYE=) 4: 7n21j0arkV0i_T2sVOrocRSEjSQ.roa (hash: 4uQJyIy3PMd9RTNB8+vJy+PcEdAqthYjAtrKR+jgLzI=) 5: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=) 6: JoeiFWNjjvIPOlROi_VGGMgQhvU.roa (hash: zb+eHGR6nD50fILOA3y9cV4VqzOKkbibkd0YSA6RbyM=) 7: KJiyDl7iQPSHbczb71sauO3rVJk.asa (hash: xzLdynVvAziPI6SDyPFLHYP7bi2ATNLAOqyCRqeT3is=) 8: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=) 9: M8G0hHzNaUEBYlJ18I-LLmZFBKM.asa (hash: 1CwhbIx2C5nHDxmbbu2xhBW2STO+MmyMS7p2LGmo9hk=) 10: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=) 11: T5M14oqasE4RWqdrD07qXbN8eGY.asa (hash: OCqN8M2KvS/h05iREDnHi+l1MPqvKGu7Rk6ZjCf3xcE=) 12: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=) 13: XHeb1AmUfX1kngDYx7cK3_EIu7Q.asa (hash: y1sVzdki0bbI48xSY39Q5D3JsNtDyY7oJ/qahJmputE=) 14: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=) 15: mwjxtKPuHdDhkzcGADt1aiLxCIc.asa (hash: Wy5bjzVJWOG5tUKCM7dwY8G4WJIDxlDcCw2Ld4jrHPw=) 16: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=) 17: xVaYIBw7M6bRv3MOmzyAcV4by3I.asa (hash: PgzXvKG2TR216H34m8dFRwASPrUVU9Y5qcUdR1XkLTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:b4:fa:57:75:d0:28:06:93:d0:2d:b5:c1:45:b1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: May 12 15:01:23 2026 GMT Not After : May 13 15:01:23 2026 GMT Subject: CN=6e47c7ff82dca8247610dda983ecdc908c0a1564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2b:88:38:a5:d6:cc:46:3e:2d:8d:cb:f1:db: 86:c5:cc:51:57:93:a8:a2:41:c3:c6:c7:a4:32:41: de:6b:b5:63:0e:f4:96:5a:56:aa:6c:c7:81:6d:15: 8e:58:91:ec:15:c6:96:b9:60:73:a9:c9:90:c0:2d: 2e:b0:f3:31:2b:1d:a6:d5:12:2a:2d:59:d6:9e:ea: 62:38:d5:e1:8d:17:92:03:e7:a7:73:da:d4:97:19: 31:24:19:88:a3:1a:70:a5:e2:44:89:be:32:49:87: 29:77:da:0c:8e:0a:2e:fe:96:bf:b5:9b:6d:0d:d2: 0e:ee:0b:46:0f:1d:5d:c7:64:cc:ee:69:19:54:e7: c4:89:52:ed:d3:07:c7:bd:bb:3a:59:11:4c:c3:2d: 4a:41:18:62:b7:bf:eb:2d:d3:d6:3c:97:32:1e:5f: ab:44:74:bd:df:07:a1:e0:61:f4:ed:a6:95:89:2b: 67:36:21:15:50:f7:59:45:c3:65:4c:74:31:a3:30: 17:4e:0a:b1:e5:3f:a4:10:24:e9:54:7a:27:7c:2a: 8e:d4:71:dc:af:3b:7c:96:79:22:f3:09:9f:ea:a3: 59:9b:28:40:e3:8f:88:41:29:ed:5e:c5:54:46:4d: e4:10:f4:c5:17:bc:6a:c4:5e:c7:bd:b6:a2:5b:d1: d0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:47:C7:FF:82:DC:A8:24:76:10:DD:A9:83:EC:DC:90:8C:0A:15:64 X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f3:83:88:c3:c5:ff:33:9b:d0:2f:d4:5b:99:69:41:7d:8f: 22:ba:6d:d0:f4:96:ac:58:f3:f1:c8:03:08:18:27:5b:84:e2: bb:84:fb:30:74:a3:bb:53:25:eb:d3:54:c1:40:5c:fc:b8:55: 6f:47:a9:2c:af:e4:3a:e4:1d:95:24:77:bc:91:c9:9f:b8:ae: 0e:08:30:2b:ff:de:c7:5c:8a:78:43:58:0b:4b:12:ad:ad:ee: 6f:e7:b4:bb:82:26:90:a1:af:c7:27:0e:32:3a:48:0f:44:3c: ca:af:41:ee:a8:df:64:fb:01:09:17:74:a1:ce:f4:b7:64:fc: 49:db:87:b8:c7:28:14:e5:5b:33:bf:8d:69:2a:3f:02:19:52: 5d:ca:53:f7:16:f9:38:5e:bd:4c:4b:f1:e8:ae:4a:73:99:cb: 38:37:13:d7:f6:15:a1:46:a6:e3:e5:37:c9:71:03:38:d6:3e: 03:f9:89:ff:65:46:6c:87:7b:a8:31:55:ad:2d:67:79:ef:fd: 88:d9:88:31:67:eb:8f:17:ef:a8:70:aa:4f:05:0d:f0:b3:dd: 92:16:c8:9c:da:63:f6:2e:7f:05:31:5b:9e:78:d8:2f:32:68: 72:1f:fb:4a:32:36:63:00:ad:02:f3:39:b7:d2:94:cc:05:54: 7f:b2:c2:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ctPpXddAoBpPQLbXBRbERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjYwNTEyMTUwMTIzWhcNMjYwNTEzMTUwMTIzWjAzMTEwLwYDVQQD Eyg2ZTQ3YzdmZjgyZGNhODI0NzYxMGRkYTk4M2VjZGM5MDhjMGExNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyuIOKXWzEY+LY3L8duGxcxRV5Oo okHDxsekMkHea7VjDvSWWlaqbMeBbRWOWJHsFcaWuWBzqcmQwC0usPMxKx2m1RIq LVnWnupiONXhjReSA+enc9rUlxkxJBmIoxpwpeJEib4ySYcpd9oMjgou/pa/tZtt DdIO7gtGDx1dx2TM7mkZVOfEiVLt0wfHvbs6WRFMwy1KQRhit7/rLdPWPJcyHl+r RHS93weh4GH07aaViStnNiEVUPdZRcNlTHQxozAXTgqx5T+kECTpVHonfCqO1HHc rzt8lnki8wmf6qNZmyhA44+IQSntXsVURk3kEPTFF7xqxF7HvbaiW9HQdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5Hx/+C3KgkdhDdqYPs3JCMChVkMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvODiMPF /zOb0C/UW5lpQX2PIrpt0PSWrFjz8cgDCBgnW4Tiu4T7MHSju1Ml69NUwUBc/LhV b0epLK/kOuQdlSR3vJHJn7iuDggwK//ex1yKeENYC0sSra3ub+e0u4ImkKGvxycO MjpID0Q8yq9B7qjfZPsBCRd0oc70t2T8SduHuMcoFOVbM7+NaSo/AhlSXcpT9xb5 OF69TEvx6K5Kc5nLODcT1/YVoUam4+U3yXEDONY+A/mJ/2VGbId7qDFVrS1nee/9 iNmIMWfrjxfvqHCqTwUN8LPdkhbInNpj9i5/BTFbnnjYLzJoch/7SjI2YwCtAvM5 t9KUzAVUf7LC8w== -----END CERTIFICATE-----Generated at Tue May 12 21:17:05 2026 by rpki-client