$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: YJvGmIXsZR5jr2V0XZ0g+Qrvkn7xEDLlY5VQQwgVkMA= Subject key identifier: A7:30:F1:F9:85:8F:F1:D6:E1:20:DC:B4:DF:19:F0:9A:22:09:68:9F Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019E1CB4F3EC8DCFEBD0DA800C338F18DA83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 1947 Signing time: Tue 12 May 2026 15:01:21 +0000 Manifest this update: Tue 12 May 2026 15:01:21 +0000 Manifest next update: Wed 13 May 2026 15:01:21 +0000 Files and hashes: 1: Dv8Xj573URhelnbmcJLlhmPDGD4.roa (hash: qlnvjr9BaLF0/kBmFp/g12eWnCcKOHwXVrBxaeJlhqI=) 2: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=) 3: S-2u1gBJMJZerxMcphe152Mw_t4.roa (hash: zY+Kfzo1VDj/zBVAcDyYT3GL5KZN/lStcMsxxkbN2e8=) 4: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=) 5: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=) 6: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=) 7: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: CcJPIH/g5t9YGuEyBhvP6MXESkdX8t5WZ/b0sPN/MfE=) 8: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=) 9: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=) 10: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=) 11: ixO_vYd1ZiOBRHw77LkHkF7Dk7s.roa (hash: DwlRG2eiqBzIFuP5QN5WVQHfUp0z2yDCiGwvtiVae0c=) 12: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=) 13: maoDBiTq7OlnZavgCrqS2PNJzVg.roa (hash: 5lnUQuuOEn9crnGLrQz+sL2Asrk/3K0SqWLzxdWxHuc=) 14: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=) 15: uEioqsfjoD3Xl5Oou54cX2C0S34.roa (hash: go+HYucKqNseQJzP/5n7AMRia6twNmQH+kJ8P+JHx6A=) 16: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=) 17: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (hash: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q=) 18: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:b4:f3:ec:8d:cf:eb:d0:da:80:0c:33:8f:18:da:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: May 12 15:01:21 2026 GMT Not After : May 13 15:01:21 2026 GMT Subject: CN=a730f1f9858ff1d6e120dcb4df19f09a2209689f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:5f:06:d8:87:ae:3e:97:0d:ae:0f:ac:e3: 03:fb:12:83:e0:78:02:02:76:86:62:90:29:6f:64: e5:1e:85:f1:ff:ab:be:46:02:29:16:61:22:d1:1b: 23:25:cc:8e:27:05:0e:4b:d0:f8:2c:54:ac:e5:d6: f4:ef:f3:04:f0:7b:e3:2c:db:02:22:1d:2b:b0:f7: ce:ea:a9:6e:db:67:2b:63:30:b3:07:0b:25:28:29: fc:44:a5:ad:ce:cb:ca:c7:f7:03:aa:d0:31:31:6c: 35:aa:f3:a6:b6:c6:ad:b8:5d:78:39:32:c4:aa:3d: 64:1a:da:7f:cb:96:d8:c3:c1:68:ce:56:06:ee:c2: 25:ff:fb:b9:83:ba:51:c5:cb:90:82:22:a8:f1:1b: cf:39:98:29:b1:a8:ec:fd:bb:40:c8:1f:18:47:72: 4c:2c:51:db:4d:eb:d8:4f:44:54:b7:a4:4b:b3:ef: b9:73:74:26:83:3a:64:a3:e6:9e:f0:de:93:c2:97: 8c:52:f2:6c:69:0f:96:9f:d8:d4:7d:af:ed:de:bd: 3b:f5:96:ac:e0:e3:fe:c6:48:c8:8f:09:87:75:77: f6:9e:b8:fa:41:42:ac:32:7a:24:72:89:04:05:65: 3e:17:67:63:05:0e:52:4f:a7:4c:aa:b2:42:75:36: c5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:30:F1:F9:85:8F:F1:D6:E1:20:DC:B4:DF:19:F0:9A:22:09:68:9F X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:51:7f:a8:0c:c3:a2:cc:c6:bd:02:d6:0c:d7:24:e4:e9:5a: 3c:e1:a7:db:0e:bd:aa:75:db:79:eb:6b:cf:d5:20:48:2b:69: dc:29:b5:ed:18:3e:74:67:5b:4b:e9:a7:92:6c:2c:85:eb:49: d2:d8:00:69:17:c3:df:25:00:9b:6f:5a:6a:2d:1e:fe:0e:67: 91:2f:c1:7d:3e:47:9c:d1:16:31:b6:74:66:e2:78:29:11:b1: c4:05:60:21:a7:ef:dc:6f:f3:5a:10:90:8d:49:24:49:d4:3e: e1:93:9d:c4:89:7c:3a:24:d2:30:e9:2f:c7:fe:45:96:a9:c0: 62:28:ef:51:0b:ec:9e:fa:1e:4a:f1:52:76:e0:5c:81:ab:08: 94:48:88:75:07:57:51:5f:90:f2:4e:51:13:21:16:9f:e2:45: c6:c3:56:88:fb:fa:fd:af:d1:78:c3:d5:06:38:6a:2b:05:3c: fb:26:13:81:34:84:17:2d:4c:2c:f0:c1:0a:30:03:a7:fb:aa: a5:11:17:63:31:99:77:d9:ff:81:0c:ef:dd:a5:82:43:c3:7e: c3:69:28:83:53:8d:c1:66:be:2f:aa:66:18:ea:61:a3:8d:6d: 31:ec:b6:74:8e:ed:e6:f5:49:c1:b0:39:03:60:61:3c:62:c8: f4:36:2f:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ctPPsjc/r0NqADDOPGNqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwNTEyMTUwMTIxWhcNMjYwNTEzMTUwMTIxWjAzMTEwLwYDVQQD EyhhNzMwZjFmOTg1OGZmMWQ2ZTEyMGRjYjRkZjE5ZjA5YTIyMDk2ODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumVfBtiHrj6XDa4PrOMD+xKD4HgC AnaGYpApb2TlHoXx/6u+RgIpFmEi0RsjJcyOJwUOS9D4LFSs5db07/ME8HvjLNsC Ih0rsPfO6qlu22crYzCzBwslKCn8RKWtzsvKx/cDqtAxMWw1qvOmtsatuF14OTLE qj1kGtp/y5bYw8FozlYG7sIl//u5g7pRxcuQgiKo8RvPOZgpsajs/btAyB8YR3JM LFHbTevYT0RUt6RLs++5c3Qmgzpko+ae8N6TwpeMUvJsaQ+Wn9jUfa/t3r079Zas 4OP+xkjIjwmHdXf2nrj6QUKsMnokcokEBWU+F2djBQ5ST6dMqrJCdTbFVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcw8fmFj/HW4SDctN8Z8JoiCWifMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVF/qAzD oszGvQLWDNck5OlaPOGn2w69qnXbeetrz9UgSCtp3Cm17Rg+dGdbS+mnkmwshetJ 0tgAaRfD3yUAm29aai0e/g5nkS/BfT5HnNEWMbZ0ZuJ4KRGxxAVgIafv3G/zWhCQ jUkkSdQ+4ZOdxIl8OiTSMOkvx/5FlqnAYijvUQvsnvoeSvFSduBcgasIlEiIdQdX UV+Q8k5REyEWn+JFxsNWiPv6/a/ReMPVBjhqKwU8+yYTgTSEFy1MLPDBCjADp/uq pREXYzGZd9n/gQzv3aWCQ8N+w2kog1ONwWa+L6pmGOpho41tMey2dI7t5vVJwbA5 A2BhPGLI9DYv4g== -----END CERTIFICATE-----Generated at Tue May 12 22:28:14 2026 by rpki-client