$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json) Hash identifier: 3bxFkPhLZHOuS1uuOpsVUal2Lzmm/utAOTE0jijbsLk= Subject key identifier: BF:E5:08:2A:E7:33:44:CD:0E:66:1B:3F:FF:94:C6:BF:90:71:41:54 Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019D2583A32F7D861A39AA1F7A4EDE3EB5AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft Manifest number: 1897 Signing time: Wed 25 Mar 2026 15:01:17 +0000 Manifest this update: Wed 25 Mar 2026 15:01:17 +0000 Manifest next update: Thu 26 Mar 2026 15:01:17 +0000 Files and hashes: 1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=) 2: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=) 3: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=) 4: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=) 5: FGXifY4YNXSWwZi4QtD01XX8A_4.roa (hash: r3Yn9lbI97BgnohED52RZmDaF/H4yGegwCsX0vScc1U=) 6: XD3CHImTefD8FuenptmC1xt8ItM.asa (hash: zINZ70P1S66UVaG5a/xPv//b9AHB0SJycGjf91yrXwY=) 7: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=) 8: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=) 9: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=) 10: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=) 11: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=) 12: fgRbMqN9XRQOyHROi59mKV56wUg.roa (hash: Py8QfC6Me9kljX65ogBUdQo8JbMweZ02w9NGup3yJr4=) 13: iENkRlJoBL-J_o4ep2L2WQ9wqhQ.roa (hash: qHRlnH6xTrPGrh7Rcfy15Z1OzJA8rkrqC8qbXcCLhY0=) 14: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=) 15: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=) 16: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: nV9+w39asu20Pow338tmra+Ju3KflQpPymHpOHZfkLg=) 17: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:83:a3:2f:7d:86:1a:39:aa:1f:7a:4e:de:3e:b5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Mar 25 15:01:17 2026 GMT Not After : Mar 26 15:01:17 2026 GMT Subject: CN=bfe5082ae73344cd0e661b3fff94c6bf90714154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:42:d7:b0:31:1f:ae:e2:38:18:44:e1:97:81: ce:8a:c0:bc:40:7b:95:7e:a1:fe:6a:55:f3:39:eb: fe:ef:dd:40:09:c1:30:2d:82:b4:6b:7f:5f:d0:77: 3b:34:2c:14:9d:3c:a5:02:7e:a6:79:b1:b0:80:66: 57:0e:4a:19:23:44:8d:0d:6c:c9:67:b7:d2:fb:81: c9:d7:50:f2:fc:93:8c:30:b0:05:13:d9:b7:a6:ef: d0:f0:50:c0:a8:77:c5:0d:43:28:3a:99:86:f0:b7: 16:9c:b3:bd:76:f0:b4:53:ea:27:d7:0b:e3:4e:bf: 38:03:ce:65:65:df:2b:04:a3:b8:27:7f:5e:ce:d2: c2:69:24:68:5f:a4:d8:e6:f6:1a:7c:47:8d:c5:39: df:9a:be:90:44:b6:c1:fb:a8:93:83:26:bc:47:ec: 4a:51:01:0b:21:ae:0e:4d:ef:46:02:57:6d:a0:b6: 39:d8:bf:01:cb:a6:dd:10:13:36:41:c5:4e:1e:fc: e2:48:c1:a1:76:f6:70:e5:77:12:df:e8:f4:73:37: f3:fa:32:92:06:5c:0c:32:1c:d0:e5:0f:32:23:ad: fe:0b:dc:1d:e0:56:4f:64:fd:f0:5c:dc:51:7a:02: 6f:a2:65:22:c9:8b:4f:d3:79:a5:d6:3b:2b:89:52: aa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E5:08:2A:E7:33:44:CD:0E:66:1B:3F:FF:94:C6:BF:90:71:41:54 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:aa:9f:2d:1f:9a:11:19:2c:84:c5:4c:1d:d5:c2:8b:c2:d3: ba:f3:19:55:c6:41:e0:85:e3:17:ea:64:f4:6e:86:8d:a4:af: 46:e3:74:71:c7:37:6a:13:a3:96:04:ff:6d:98:f5:4d:88:ee: 18:ca:07:ad:cb:32:68:2e:61:1b:23:2d:05:bb:d2:fe:80:d1: 09:d7:7d:85:47:bc:fe:31:e5:70:2b:99:58:36:71:e6:d9:64: 7f:38:dd:b9:fe:e9:53:79:ea:c9:7f:f3:f5:78:9b:25:28:d6: 10:ca:b7:95:4a:d7:f7:93:bf:3d:75:d9:fb:b4:9b:a9:ad:97: 3e:00:b9:a7:41:67:de:7a:a0:88:0e:9d:90:08:fa:50:0f:25: 3a:33:2f:c2:73:dc:99:b9:c8:93:07:af:cf:d3:93:86:0d:24: be:94:35:25:c0:e5:f5:fd:d1:ea:dc:69:64:b6:c5:52:1d:76: f1:f4:60:f0:f8:14:a3:f0:82:1f:ca:cf:b8:4e:54:a7:62:c8: a6:12:36:bf:0d:b5:74:d5:81:4e:7d:18:c5:4b:99:ab:e4:94: fe:60:b0:ff:cd:a0:ad:c8:0b:95:0c:1e:b0:b4:f8:15:ba:2e: 2f:6f:5b:ff:e9:4e:8d:22:d6:1a:7d:a9:37:62:f0:1f:5a:bc: 1e:0e:2c:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lg6MvfYYaOaofek7ePrWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwMzI1MTUwMTE3WhcNMjYwMzI2MTUwMTE3WjAzMTEwLwYDVQQD EyhiZmU1MDgyYWU3MzM0NGNkMGU2NjFiM2ZmZjk0YzZiZjkwNzE0MTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ULXsDEfruI4GEThl4HOisC8QHuV fqH+alXzOev+791ACcEwLYK0a39f0Hc7NCwUnTylAn6mebGwgGZXDkoZI0SNDWzJ Z7fS+4HJ11Dy/JOMMLAFE9m3pu/Q8FDAqHfFDUMoOpmG8LcWnLO9dvC0U+on1wvj Tr84A85lZd8rBKO4J39eztLCaSRoX6TY5vYafEeNxTnfmr6QRLbB+6iTgya8R+xK UQELIa4OTe9GAldtoLY52L8By6bdEBM2QcVOHvziSMGhdvZw5XcS3+j0czfz+jKS BlwMMhzQ5Q8yI63+C9wd4FZPZP3wXNxRegJvomUiyYtP03ml1jsriVKqrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/lCCrnM0TNDmYbP/+Uxr+QcUFUMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6qfLR+a ERkshMVMHdXCi8LTuvMZVcZB4IXjF+pk9G6GjaSvRuN0ccc3ahOjlgT/bZj1TYju GMoHrcsyaC5hGyMtBbvS/oDRCdd9hUe8/jHlcCuZWDZx5tlkfzjduf7pU3nqyX/z 9XibJSjWEMq3lUrX95O/PXXZ+7Sbqa2XPgC5p0Fn3nqgiA6dkAj6UA8lOjMvwnPc mbnIkwevz9OThg0kvpQ1JcDl9f3R6txpZLbFUh128fRg8PgUo/CCH8rPuE5Up2LI phI2vw21dNWBTn0YxUuZq+SU/mCw/82grcgLlQwesLT4FbouL29b/+lOjSLWGn2p N2LwH1q8Hg4saA== -----END CERTIFICATE-----Generated at Wed Mar 25 21:25:56 2026 by rpki-client