$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: DW4n8S/YQzRKS0fU44KVEQ5k+1aBCMg0vEa7jZATXDY= Subject key identifier: F8:FC:21:82:6C:D2:9D:3B:29:E5:13:C7:03:E1:17:8D:39:A3:FA:CA Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019D26CD8EC1BB9F0C9B58A5C3DD120E4692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 183D Signing time: Wed 25 Mar 2026 21:01:38 +0000 Manifest this update: Wed 25 Mar 2026 21:01:38 +0000 Manifest next update: Thu 26 Mar 2026 21:01:38 +0000 Files and hashes: 1: 7crBnHONDEiQfrWIPlw00C8QSKw.roa (hash: Px9bgNmN3CkGROuLFLneuCSVLL0NNlCF94jN/U/6nWk=) 2: 82ufesd9jM_-UcwHl9xDd28w7bc.roa (hash: gm9W00xGdkpnPbgGYol+dd436lsvUg6lbjX2PP6ojh8=) 3: 85Rvc3_9ZASD2vobCL9t5-c1aU4.roa (hash: vTKkBjgSvXm0Sbl7IC7WJ5hSm/4pkOxSRKg6DOoQUAQ=) 4: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: ixEEXdFtcIffW/4Dh2O4UGCxA4ujNAGFIMH18vcOuO0=) 5: 9RcFiPDd3R3zQqDhd_LItb-oDTA.roa (hash: AC0BWwsNFcYLQdYfVVpkxBC/1xIK6znU8uU1YFKJpGM=) 6: ALPiTkZxPDTnbdpPpErdvl97Wc8.roa (hash: Nf4+/SkcOD5qP7AwraGXa6vQHuKG0gARaAPpiziJKcQ=) 7: VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa (hash: ZiS8xAZ8WIWo3rD54IGCFbmBSzYShJeiuytFXk2sEEo=) 8: YtxqG6YVJVzJtkAnwNNnMrka-WU.roa (hash: m+f6M6gTdplPJjEueYl+KBT8SUvLASyT3kyBqwL5mTg=) 9: vRTSmI6KhjkZ7QSqDR8TmUD_H-o.roa (hash: g93xhnAacJq3AAXAMyOtAyF6fP7Xgz52ChSm97QaIXk=) 10: vcGlDl5Ct_NiM8YzttTek7TQKfQ.roa (hash: BnX/CYwHVszSwePzYMqQFPXrCzJ9oUgTdB3TWSa3h4A=) 11: yiMg7ZQH4FHBD9YZKg_pUWu_Ev4.roa (hash: AIchpJMxJjIRdk7/i7zLscbwRaKVTsnK2jEupzwufmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:8e:c1:bb:9f:0c:9b:58:a5:c3:dd:12:0e:46:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Mar 25 21:01:38 2026 GMT Not After : Mar 26 21:01:38 2026 GMT Subject: CN=f8fc21826cd29d3b29e513c703e1178d39a3faca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:6a:a2:8b:61:9e:7d:09:d7:34:a1:e1:c5: ff:b4:04:e3:2d:92:95:96:54:72:f9:d7:d0:61:0b: 53:e4:50:7d:e0:a8:16:92:19:a7:29:f2:24:b7:a4: ab:2d:21:2b:d4:6f:42:e4:a2:12:73:d7:a0:1e:6d: 5f:86:0c:c3:cd:17:90:15:7a:70:e5:e4:32:1a:d8: 38:ee:23:67:3b:ba:5c:df:cc:0f:95:58:f6:d7:ba: 0c:3b:0d:4a:e7:5e:2f:44:d6:44:6a:5d:17:1c:e1: f7:0a:8a:64:04:eb:d5:67:28:53:6a:bd:ef:f5:9d: 73:e2:43:9c:8d:40:f0:e0:9c:88:06:fb:10:22:36: 6b:c9:62:49:87:02:83:2c:cb:cd:4d:d7:73:9e:cd: 21:26:a7:ce:cf:f7:b8:9b:61:f9:83:d6:78:c7:6a: 09:d2:42:f5:96:b3:65:5c:43:3b:96:5f:50:79:a5: cf:12:26:78:61:59:4c:86:83:9a:83:8c:47:bb:54: a7:fc:d0:72:5f:12:31:0d:ed:e1:8b:41:ec:22:5a: 92:2f:95:19:7d:a1:37:22:16:c2:db:58:90:6e:33: 46:51:02:bc:44:2f:61:53:a4:86:0b:39:64:3a:07: 64:5e:5a:b5:7a:43:4a:77:89:35:7c:d8:27:04:48: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FC:21:82:6C:D2:9D:3B:29:E5:13:C7:03:E1:17:8D:39:A3:FA:CA X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:df:05:59:27:6f:9a:04:2c:8c:30:08:c6:f1:1b:8f:07:a9: cd:a3:1a:38:25:e7:79:01:ae:f4:09:67:e3:2b:01:f8:df:80: b0:b2:90:9b:f6:50:fd:02:5f:dc:7a:f2:47:2c:68:0c:fa:4b: 80:52:8e:3b:06:13:52:75:88:9a:69:42:85:00:78:49:d3:f9: 67:03:d7:d6:4f:16:11:b9:36:a7:e1:f4:e6:56:ae:23:d5:db: 4c:78:1c:2e:48:a4:0a:7c:17:0f:bc:2f:e2:85:52:58:60:7f: 4f:64:40:c7:b5:02:c3:7b:ed:76:6c:2b:40:db:3e:b8:de:1d: 0d:f2:45:91:c7:93:84:3f:9e:ab:31:ab:51:a9:75:87:29:85: f4:d3:49:57:dd:25:1b:f3:df:20:02:da:4a:93:15:5f:b4:2e: a0:ea:57:a7:2d:bf:db:52:cc:4e:6a:9f:a1:9f:fd:af:ae:3c: 9e:c3:e3:79:20:80:03:39:b3:0f:f7:0e:3d:83:a7:4e:28:16: a5:f0:c5:34:1d:37:7a:ed:da:49:92:d4:28:0b:7c:3e:da:2b: 6c:72:1d:53:ab:3c:b7:69:a4:80:0e:d3:cb:05:fc:0c:22:86: 88:95:51:8f:cd:25:14:84:3a:9a:4c:e6:18:5d:c0:61:f0:6d: 2d:17:66:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzY7Bu58Mm1ilw90SDkaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwMzI1MjEwMTM4WhcNMjYwMzI2MjEwMTM4WjAzMTEwLwYDVQQD EyhmOGZjMjE4MjZjZDI5ZDNiMjllNTEzYzcwM2UxMTc4ZDM5YTNmYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsodqoothnn0J1zSh4cX/tATjLZKV llRy+dfQYQtT5FB94KgWkhmnKfIkt6SrLSEr1G9C5KISc9egHm1fhgzDzReQFXpw 5eQyGtg47iNnO7pc38wPlVj217oMOw1K514vRNZEal0XHOH3CopkBOvVZyhTar3v 9Z1z4kOcjUDw4JyIBvsQIjZryWJJhwKDLMvNTddzns0hJqfOz/e4m2H5g9Z4x2oJ 0kL1lrNlXEM7ll9QeaXPEiZ4YVlMhoOag4xHu1Sn/NByXxIxDe3hi0HsIlqSL5UZ faE3IhbC21iQbjNGUQK8RC9hU6SGCzlkOgdkXlq1ekNKd4k1fNgnBEhnNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPj8IYJs0p07KeUTxwPhF405o/rKMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI98FWSdv mgQsjDAIxvEbjwepzaMaOCXneQGu9Aln4ysB+N+AsLKQm/ZQ/QJf3HryRyxoDPpL gFKOOwYTUnWImmlChQB4SdP5ZwPX1k8WEbk2p+H05lauI9XbTHgcLkikCnwXD7wv 4oVSWGB/T2RAx7UCw3vtdmwrQNs+uN4dDfJFkceThD+eqzGrUal1hymF9NNJV90l G/PfIALaSpMVX7QuoOpXpy2/21LMTmqfoZ/9r648nsPjeSCAAzmzD/cOPYOnTigW pfDFNB03eu3aSZLUKAt8PtorbHIdU6s8t2mkgA7TywX8DCKGiJVRj80lFIQ6mkzm GF3AYfBtLRdmbw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:42:48 2026 by rpki-client