$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: M6SJPK0b4P3mCvta6Ctedad8opN0gc3ZbhV4rG6xu/U= Subject key identifier: 04:2D:F3:59:3E:F4:77:01:9E:0C:8D:E1:11:C4:8C:25:1D:42:92:68 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019D284D8DE7FE07A3731FA6FDFCD8791B26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 188D Signing time: Thu 26 Mar 2026 04:01:04 +0000 Manifest this update: Thu 26 Mar 2026 04:01:04 +0000 Manifest next update: Fri 27 Mar 2026 04:01:04 +0000 Files and hashes: 1: 5CLXXKkA4JcsyDrUBBM3fxn2kdc.roa (hash: gFWbYqwKSpr3zQtON6eHRCE0iX3y63ZJZklzBNANHsM=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: /Muz2pY2FpOEjGrNbG6UKiCuJ7gOWGwIEZfsVji/lM4=) 3: DXIDJwT32OV423k4TIWwn2iDwyg.roa (hash: 1DgbvkANX93phDSb+AyRjq7ZFAZDrX3G2DhrbhrdrCY=) 4: Ex4sydFNNb9e9IlWuLzuPazLU44.roa (hash: tuvV0h/eTCcgOOevaItUPifNfonAkWlBsMN+IAbF80I=) 5: F0q3v2kkeTya7vdhm0lzFl3wBAA.roa (hash: BpkEUnq+/w6BrSZ1bTiqPBmMOt7WaZgSwy12/ipsBqo=) 6: GU71SIKDNqtDYi7P5ZGVJfaZ9Ng.roa (hash: 7ZQhqryE0L0rNOAz1gL32gj8EsSrO0yhlKkyCkXl4cc=) 7: PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa (hash: 5xE+UcziQ9DiquZ2A/57aqh1sjUE876lnNSATCS1lTI=) 8: TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa (hash: gEbc+tVQGYMxTiSiJNGO8DDQrrsZOyqWJhw0Dv/aKqE=) 9: XN9ItxoiVygt3a0qQVsmKKlWk9E.roa (hash: iH4X65Vs6HtOKFxQaLyaQ9nZPsCEbiHQMEBYUWCi4KY=) 10: bba2QTZrp_1uueLnjfHPBxHS3PY.roa (hash: OYrkuz8mezgI3XbKfKRWAwnwwsrmJ+JNJd03sNYC3L8=) 11: djcMZ6pGXyKmA-lIeoWfJvgd_vg.roa (hash: 2V8x5uW66gGIUCrfVlUVt3oOyIC3Jcqdd44dr46xxaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4d:8d:e7:fe:07:a3:73:1f:a6:fd:fc:d8:79:1b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Mar 26 04:01:04 2026 GMT Not After : Mar 27 04:01:04 2026 GMT Subject: CN=042df3593ef477019e0c8de111c48c251d429268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:59:ab:9b:f9:f8:cd:ef:28:ca:b7:ad:af: 9f:9a:70:c2:77:b1:38:c0:a3:a5:d9:12:5c:f8:bf: 3d:a3:0c:6e:8b:4a:d1:59:e4:65:52:a6:07:38:27: 2f:80:3e:63:ae:31:aa:d2:82:e9:c9:e4:2a:00:ae: 21:ab:fa:42:b6:50:a4:ac:07:12:56:04:2c:0e:84: a2:be:c2:7f:50:56:1a:1e:7a:13:7f:bf:dc:f6:6b: c4:c5:29:af:9e:aa:4f:55:41:af:79:80:07:af:db: cc:c5:21:00:0d:5b:fd:c0:39:c2:58:1a:91:e0:9b: 79:79:c8:10:b2:c7:43:17:5c:c0:17:8e:7f:b4:d7: 8d:a1:d8:26:8a:97:f8:cb:3a:35:ef:46:26:66:5c: 7d:a6:2b:a3:2b:43:ba:90:70:89:3f:c6:7f:de:de: 14:1e:ac:25:e0:50:94:24:b0:69:20:6e:9d:46:7f: e9:75:43:90:90:7b:9b:ef:71:b5:c6:ec:8f:82:5f: 6f:84:14:5a:c3:cd:a4:1d:98:76:eb:c4:8b:6d:60: 1c:87:e3:b3:e4:fb:bc:a5:ba:e1:ba:c2:a8:68:0d: 09:cd:bd:ff:80:64:28:a3:d3:73:e2:1d:8f:88:78: 23:2d:fc:62:e0:9c:d6:f2:0b:92:9e:2e:32:d8:0c: f7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2D:F3:59:3E:F4:77:01:9E:0C:8D:E1:11:C4:8C:25:1D:42:92:68 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f0:0b:b5:66:79:f1:e4:da:ee:8f:9a:c7:63:81:e0:4d:d7: e4:73:4e:b0:b1:80:77:ae:7e:96:36:9f:74:1e:5b:88:bc:4d: 97:4c:3a:ef:f6:15:7e:53:8b:30:90:cb:8c:48:33:f0:74:84: ba:27:73:a7:22:68:52:6f:db:6e:45:f9:9f:80:c5:95:56:e0: ee:5c:0d:8b:47:97:87:70:5f:49:e7:56:16:0f:e8:c0:31:66: d5:21:86:61:a2:dd:98:dd:2b:be:d4:81:e4:f3:35:fd:e9:e7: 46:fc:ba:47:5d:d6:ab:29:0f:f4:63:f8:58:85:db:ba:7c:10: 0e:b9:31:11:77:09:48:19:dc:83:fb:e9:4f:33:b8:e7:8e:da: 8b:5b:73:20:4f:1a:98:25:ec:af:d4:ba:2e:aa:2d:6f:9e:3e: ce:7c:af:31:17:b6:6a:b3:3c:95:62:4f:a1:e7:3f:dc:75:11: bb:df:eb:7c:9c:5e:2e:db:a9:b4:db:fe:ab:c0:fd:3b:b8:ee: 91:92:45:9b:ab:22:42:4c:00:a8:7d:4e:ea:78:2b:82:d2:48: a7:3e:f4:d6:9c:c0:a3:25:94:72:4e:3e:63:71:c0:f6:66:43: c4:2f:e5:ce:53:6e:b4:ff:26:13:60:91:aa:43:5f:dc:1c:10: 8c:69:4a:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTY3n/gejcx+m/fzYeRsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwMzI2MDQwMTA0WhcNMjYwMzI3MDQwMTA0WjAzMTEwLwYDVQQD EygwNDJkZjM1OTNlZjQ3NzAxOWUwYzhkZTExMWM0OGMyNTFkNDI5MjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuNZq5v5+M3vKMq3ra+fmnDCd7E4 wKOl2RJc+L89owxui0rRWeRlUqYHOCcvgD5jrjGq0oLpyeQqAK4hq/pCtlCkrAcS VgQsDoSivsJ/UFYaHnoTf7/c9mvExSmvnqpPVUGveYAHr9vMxSEADVv9wDnCWBqR 4Jt5ecgQssdDF1zAF45/tNeNodgmipf4yzo170YmZlx9piujK0O6kHCJP8Z/3t4U Hqwl4FCUJLBpIG6dRn/pdUOQkHub73G1xuyPgl9vhBRaw82kHZh268SLbWAch+Oz 5Pu8pbrhusKoaA0Jzb3/gGQoo9Nz4h2PiHgjLfxi4JzW8guSni4y2Az3iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQt81k+9HcBngyN4RHEjCUdQpJoMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPALtWZ5 8eTa7o+ax2OB4E3X5HNOsLGAd65+ljafdB5biLxNl0w67/YVflOLMJDLjEgz8HSE uidzpyJoUm/bbkX5n4DFlVbg7lwNi0eXh3BfSedWFg/owDFm1SGGYaLdmN0rvtSB 5PM1/ennRvy6R13WqykP9GP4WIXbunwQDrkxEXcJSBncg/vpTzO4547ai1tzIE8a mCXsr9S6Lqotb54+znyvMRe2arM8lWJPoec/3HURu9/rfJxeLtuptNv+q8D9O7ju kZJFm6siQkwAqH1O6ngrgtJIpz701pzAoyWUck4+Y3HA9mZDxC/lzlNutP8mE2CR qkNf3BwQjGlKmA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:35:10 2026 by rpki-client