$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft File: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json) Hash identifier: 6NdU/F0/J100ke3qRC4KNbxlMBZAQwavjBXJ7mJ/bIU= Subject key identifier: 9D:E4:27:C0:F0:21:14:29:A0:DE:75:EF:58:F3:58:00:06:5F:15:4E Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019D25F1730F53C29AC38F153931A780D3F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft Manifest number: 132B Signing time: Wed 25 Mar 2026 17:01:13 +0000 Manifest this update: Wed 25 Mar 2026 17:01:13 +0000 Manifest next update: Thu 26 Mar 2026 17:01:13 +0000 Files and hashes: 1: 8YEPdClPNr_3zDrhmRGiX4nWwZA.asa (hash: 2bvyL1QtbFD5dzAQ0Bl2sb4g9BiR/U4X0BGmGEMfbKU=) 2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: h7iVkWW5jqFm89Qn9TRrk58B3m2HrW9DNCnsCPpLHT0=) 3: B5j3YeJoZkR-M842kAei_UWMVnY.roa (hash: 9dBcdzBINoDXdmkJLkcJhvttYwcsyEIX2FhzFQvtp+s=) 4: axIqDyAlK0bUNbzn8X3np8rLZdg.asa (hash: qyAh01KjzZwobQ5AxwlXgm7EdBIeIjU3cgZPryzz3yA=) 5: g3MXjNcsWoLD0PetYkh3H8FGFEw.asa (hash: na+ynpKUQZPFDrKy+EXa5B4rQ+xPN8v4RPHAqcwEPhI=) 6: hfYAMmC7nzj6eP_4KjmX0ydK61k.roa (hash: ENco3xJLaaDmCT3M7xz4xfUTyINJdjSu/7+AW54JdKY=) 7: lwxiv3kekrPmCweGpFX4WJfrhX0.roa (hash: 2lW/SbMqaftEHsN9ssTuGMfD/ZAuKFXzBYGrp9TrmHI=) 8: nBKubqHJCPmxZed95Pwvup7veOk.roa (hash: SF8k+2B3p2IDWArFu3EKiVWXhjgf4ze2L6pnr/0Lp4o=) 9: qMkdURgl5v8iVuM-fHHXRCMHBok.asa (hash: KT0x4APoSA9EBXsj4uU5Mno2FoqnMrb2Le5rpuVOb0U=) 10: wehxXgpfgzalQRxlqvRAJwCWbMQ.roa (hash: kDdYxSItK7GlFWzV8XEeVDHmfQM6o/WzrJGoU9qv79A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:73:0f:53:c2:9a:c3:8f:15:39:31:a7:80:d3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Mar 25 17:01:13 2026 GMT Not After : Mar 26 17:01:13 2026 GMT Subject: CN=9de427c0f0211429a0de75ef58f35800065f154e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:19:06:e7:98:ad:35:37:9e:4b:67:2f:38: 92:0d:61:63:55:88:ff:55:13:66:aa:11:c3:d7:85: 9b:66:d1:4c:e9:01:24:a7:08:ae:bd:e4:12:a2:44: 36:b7:91:ba:29:c8:16:46:02:57:87:b6:e3:9e:a4: cf:b6:e5:f9:7b:f2:d9:a6:22:47:09:a9:2a:a1:82: df:3e:ec:98:ee:2a:8e:75:e3:5a:0e:e1:93:11:40: d6:07:13:6d:26:82:9b:35:8a:78:b1:16:a9:bc:d7: 95:82:24:f4:02:3b:c4:58:43:3f:bb:4c:be:07:e8: b4:ee:d4:b1:db:8b:d1:2c:0a:ee:fb:03:56:b2:00: be:29:50:b3:18:d5:4c:48:b8:df:39:60:eb:be:f2: 7b:ff:d7:f5:47:a7:4c:db:99:80:9d:bd:13:6a:eb: ef:50:cd:91:fa:d6:14:c1:75:d5:60:c4:8d:c7:16: 72:9d:24:bd:da:57:a2:33:48:be:8b:a5:43:44:1e: a8:7f:0b:a5:ce:b5:d2:e7:b3:29:9f:54:b9:02:cd: 28:04:64:7f:87:9f:66:cb:97:1f:bd:eb:8d:64:ed: 05:73:13:81:20:34:6b:9a:25:a4:7b:57:6f:33:8f: 38:f5:3c:82:ca:00:93:ec:26:00:48:67:19:e0:a1: 0a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E4:27:C0:F0:21:14:29:A0:DE:75:EF:58:F3:58:00:06:5F:15:4E X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d4:4f:64:d5:be:f1:db:0f:4d:57:d5:b8:1a:06:44:39:ff: d4:90:67:11:a1:09:83:9b:aa:2a:94:45:98:a7:d4:68:c0:75: 21:40:58:c1:7e:cd:6b:b7:9a:42:3f:9a:f4:06:18:75:0d:29: 9c:a7:fd:98:a9:4f:6b:ce:80:95:49:df:5d:0c:69:1b:b2:6c: e1:ad:d6:17:ca:a3:27:c1:c8:81:59:4a:18:81:a9:81:5c:c8: 3a:c1:39:88:1e:31:8d:32:70:5e:8e:ef:9a:b4:ab:3e:d0:c6: 40:94:94:7e:b8:74:a2:32:d8:d6:ae:ed:90:91:21:6b:04:9d: fc:d2:9b:91:38:ca:99:91:33:36:96:0e:18:91:4d:6b:37:c6: ea:95:85:00:57:66:f8:41:b7:fd:f2:78:b8:bf:24:8d:8d:2e: 75:74:ec:e7:91:f6:19:fd:2e:2d:99:f0:85:93:08:12:3d:5d: 53:8f:73:7d:3f:b5:89:c7:0e:4e:49:65:78:56:e5:b2:a0:e5: a7:ce:6f:4b:d0:74:fb:b6:16:56:42:78:6a:af:84:c1:70:6e: b3:d6:4a:49:3d:6c:19:20:89:c3:e5:0c:84:d1:b5:ef:31:08: 7e:22:9e:d8:80:4d:08:5f:e6:86:df:e3:7e:2e:6e:4d:d8:b0: b7:19:82:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8XMPU8Kaw48VOTGngNP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYwMzI1MTcwMTEzWhcNMjYwMzI2MTcwMTEzWjAzMTEwLwYDVQQD Eyg5ZGU0MjdjMGYwMjExNDI5YTBkZTc1ZWY1OGYzNTgwMDA2NWYxNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq38ZBueYrTU3nktnLziSDWFjVYj/ VRNmqhHD14WbZtFM6QEkpwiuveQSokQ2t5G6KcgWRgJXh7bjnqTPtuX5e/LZpiJH CakqoYLfPuyY7iqOdeNaDuGTEUDWBxNtJoKbNYp4sRapvNeVgiT0AjvEWEM/u0y+ B+i07tSx24vRLAru+wNWsgC+KVCzGNVMSLjfOWDrvvJ7/9f1R6dM25mAnb0Tauvv UM2R+tYUwXXVYMSNxxZynSS92leiM0i+i6VDRB6ofwulzrXS57Mpn1S5As0oBGR/ h59my5cfveuNZO0FcxOBIDRrmiWke1dvM4849TyCygCT7CYASGcZ4KEKWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3kJ8DwIRQpoN5171jzWAAGXxVOMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtRPZNW+ 8dsPTVfVuBoGRDn/1JBnEaEJg5uqKpRFmKfUaMB1IUBYwX7Na7eaQj+a9AYYdQ0p nKf9mKlPa86AlUnfXQxpG7Js4a3WF8qjJ8HIgVlKGIGpgVzIOsE5iB4xjTJwXo7v mrSrPtDGQJSUfrh0ojLY1q7tkJEhawSd/NKbkTjKmZEzNpYOGJFNazfG6pWFAFdm +EG3/fJ4uL8kjY0udXTs55H2Gf0uLZnwhZMIEj1dU49zfT+1iccOTklleFblsqDl p85vS9B0+7YWVkJ4aq+EwXBus9ZKST1sGSCJw+UMhNG17zEIfiKe2IBNCF/mht/j fi5uTdiwtxmC/w== -----END CERTIFICATE-----Generated at Wed Mar 25 23:14:53 2026 by rpki-client