$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: mTsbJQMDdGLIXvozB3Y4UwybAREcj4+grgj7RPHK2j8= Subject key identifier: E7:EA:44:86:43:83:EE:50:AB:9A:EC:6F:46:05:1C:8C:48:04:3E:05 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019E1E6CC079986FC803EBF10BACD88EFD0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 18E8 Signing time: Tue 12 May 2026 23:01:44 +0000 Manifest this update: Tue 12 May 2026 23:01:44 +0000 Manifest next update: Wed 13 May 2026 23:01:44 +0000 Files and hashes: 1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=) 2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=) 3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=) 4: B7aE9R9fg8NCdOQeiZzwMIi2ZNw.roa (hash: d1Ep9dN1bkXXcsIWaTx6sw5pJSc2xeGu6SeeEZeK/UM=) 5: H3x0T_83rlo2BTe5d7dbAF2ptxg.roa (hash: PQJVU6JoM83KwjANErOepQ3bz3i1NBfWfLmiBsgEm0c=) 6: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=) 7: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=) 8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: RnIDn7cnhXS7d2SGpw0mML+7jkSkRD2RlxRP6ew1Kh0=) 9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=) 10: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=) 11: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=) 12: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:6c:c0:79:98:6f:c8:03:eb:f1:0b:ac:d8:8e:fd:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: May 12 23:01:44 2026 GMT Not After : May 13 23:01:44 2026 GMT Subject: CN=e7ea44864383ee50ab9aec6f46051c8c48043e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:5c:8b:48:6a:b7:94:32:b3:9a:cc:b0:25: 79:bd:4f:33:c9:23:aa:87:f7:a4:7c:01:23:f7:9b: 93:c2:01:26:61:76:12:f6:cc:86:51:b2:72:5e:0d: c4:25:82:ca:c3:28:e4:8a:cc:af:2c:ec:b5:8e:e0: 3e:08:c9:71:3b:8c:20:a7:54:e2:67:10:cb:3c:e9: fd:52:8d:09:c6:ca:8a:b3:3c:ee:47:77:dc:66:3b: 75:e5:dd:cd:88:c0:94:96:81:3b:3a:8f:5f:80:44: 95:56:41:94:3d:19:c8:cd:41:51:7f:94:74:9b:ee: c9:a4:d4:5a:15:89:17:e1:d8:8f:5c:b7:c2:8f:33: a5:d4:49:5c:b9:96:70:f9:15:46:21:61:bb:8c:63: 7c:a5:42:14:e3:20:a5:da:8f:20:17:3c:95:0f:c8: d3:9a:ed:b3:a3:ce:b4:c7:90:74:14:9b:bb:13:88: f5:86:ca:b4:aa:fa:85:43:d0:36:f9:0d:43:2d:3a: ec:5b:02:31:12:ed:84:4a:cb:00:ff:9a:f4:3d:aa: dc:df:a5:0b:c0:ad:53:e7:e4:20:c9:e9:5c:ae:dd: 54:31:8a:b2:de:37:de:8a:e6:f6:31:1c:73:3c:cc: 68:58:d9:9d:0f:5b:1b:41:f4:80:84:52:e0:f1:7c: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EA:44:86:43:83:EE:50:AB:9A:EC:6F:46:05:1C:8C:48:04:3E:05 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:24:de:27:38:1b:2b:d5:d1:c5:47:da:00:75:65:10:31:0e: 0c:c1:42:b9:91:07:91:c5:34:23:bd:76:85:7d:5f:d9:48:41: fe:54:ce:77:30:6c:3a:d0:ba:91:46:4a:76:5b:4c:fd:08:4c: 97:7f:70:cd:b2:ec:e8:dc:3c:4b:c7:50:b7:18:97:2b:03:6d: 2c:8c:80:6b:bc:4c:c4:30:1c:bc:c4:7f:cc:2b:59:34:45:5b: 94:57:fa:44:fa:99:90:64:26:73:67:60:b4:9a:8d:22:c6:a6: 5d:60:af:59:62:c3:25:7a:aa:06:da:51:ad:55:46:c0:d1:b1: 7d:e8:13:a0:50:ce:5a:1e:46:bc:d2:2c:b9:a8:e0:95:30:e5: 4f:b2:4b:da:7d:f3:b7:59:56:4a:cd:99:13:a2:fc:be:ae:22: fa:68:c6:8b:46:1d:33:37:0b:3a:80:bb:f1:44:a0:a7:1c:9c: 1f:1a:41:a0:86:63:3d:77:ef:95:fd:23:09:b6:ac:07:23:27: 77:2e:0f:4a:1c:46:95:51:a3:9d:f2:44:91:be:f5:fc:0f:ff: 51:f3:7d:07:f2:79:b8:58:85:22:30:3a:f8:4b:34:d4:d8:47: 78:6d:d0:da:5b:9f:3c:01:b1:fd:eb:21:b7:17:ef:df:5b:f5: 7f:d9:bc:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ebMB5mG/IA+vxC6zYjv0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwNTEyMjMwMTQ0WhcNMjYwNTEzMjMwMTQ0WjAzMTEwLwYDVQQD EyhlN2VhNDQ4NjQzODNlZTUwYWI5YWVjNmY0NjA1MWM4YzQ4MDQzZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfVci0hqt5Qys5rMsCV5vU8zySOq h/ekfAEj95uTwgEmYXYS9syGUbJyXg3EJYLKwyjkisyvLOy1juA+CMlxO4wgp1Ti ZxDLPOn9Uo0JxsqKszzuR3fcZjt15d3NiMCUloE7Oo9fgESVVkGUPRnIzUFRf5R0 m+7JpNRaFYkX4diPXLfCjzOl1ElcuZZw+RVGIWG7jGN8pUIU4yCl2o8gFzyVD8jT mu2zo860x5B0FJu7E4j1hsq0qvqFQ9A2+Q1DLTrsWwIxEu2ESssA/5r0Parc36UL wK1T5+Qgyelcrt1UMYqy3jfeiub2MRxzPMxoWNmdD1sbQfSAhFLg8XzK0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfqRIZDg+5Qq5rsb0YFHIxIBD4FMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSTeJzgb K9XRxUfaAHVlEDEODMFCuZEHkcU0I712hX1f2UhB/lTOdzBsOtC6kUZKdltM/QhM l39wzbLs6Nw8S8dQtxiXKwNtLIyAa7xMxDAcvMR/zCtZNEVblFf6RPqZkGQmc2dg tJqNIsamXWCvWWLDJXqqBtpRrVVGwNGxfegToFDOWh5GvNIsuajglTDlT7JL2n3z t1lWSs2ZE6L8vq4i+mjGi0YdMzcLOoC78USgpxycHxpBoIZjPXfvlf0jCbasByMn dy4PShxGlVGjnfJEkb71/A//UfN9B/J5uFiFIjA6+Es01NhHeG3Q2lufPAGx/esh txfv31v1f9m8tQ== -----END CERTIFICATE-----Generated at Wed May 13 09:25:19 2026 by rpki-client