$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: QuxndE+uVZ2pQu0ZT9AJ92K83Ihq0PQtOdELIoNrdms= Subject key identifier: B1:F3:B9:6F:01:30:41:DF:AF:50:65:F9:19:74:C9:15:C9:27:05:DA Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019DAED7FB96EEEF3C3A011855B4C9D8D7C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 0BC1 Signing time: Tue 21 Apr 2026 07:01:23 +0000 Manifest this update: Tue 21 Apr 2026 07:01:23 +0000 Manifest next update: Wed 22 Apr 2026 07:01:23 +0000 Files and hashes: 1: 1lESD01m5gbJyA-braAOgm-nsxs.roa (hash: LKvU7E9DI8H+f3xZF2Ibb4ZAlOKiTpfnzxmAzY3Zmkw=) 2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: qQX4ubblLizr2TGV0jIqN9nCEQkVz7SNLzDJQs9JCwI=) 3: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=) 4: 61nxpqdan0uvkgRYS9p3WXMt0is.roa (hash: +Etzf8iyPB8hG3RY9d2BBNlzK8ZhQf8I9wkNpl+P4s4=) 5: C9CUr-PFwRxBqveQc9JRexz5FUs.roa (hash: lYbCEmweFZ4ggkWxLIShDolBIH8LVCAHfTyc91SJwy0=) 6: FsSNPUWjwDIlPVEHY__f13MutvI.roa (hash: ParcKE8qGlMpeOMYcmP/zF1xOvvVsHqjFGUJ9CbIYcQ=) 7: SUEavrAvbJYi-09a6QVI2M_eSIc.roa (hash: hAAmC8KjoRR+ZLoagJaC8chUvGr6KdS0WhlLhZ1Tw9Y=) 8: TUJfUZ1C6AVUTkApJcMIop5vQLE.roa (hash: 19Ah/XGkNGiCO99Jf7P8HQSUuyigvJ3sN9PnRIrIxdo=) 9: XPvLi0bqmY_k2u06pIu7eV8Scso.roa (hash: cGUciKP6su5n6iylbm0NI97lgXJjhdYVEAczVmErPeY=) 10: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=) 11: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=) 12: d8tYjTMOm2iLi-JD46yX3lK67ec.roa (hash: R7k5LiqgpO3uW9dYKT9Gf8MpGa5+R/ekeb18H+cE9bo=) 13: g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa (hash: nYVi4YC9fVishrPOTjgH2hJlXxcspFsYbheNk/bE1wY=) 14: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=) 15: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=) 16: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=) 17: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=) 18: txTrVQ7DOwvGZVMuUdOo2yJntLw.roa (hash: X0+eCtLiIKeX5v5KTGC8o4Rtbkm6Pp1VNspLxuoN4nw=) 19: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=) 20: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=) 21: xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa (hash: 81EBYCMb1JChmS1xYbhUHSpsd2Mkl7rE43HaypoVrxw=) 22: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 07:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ae:d7:fb:96:ee:ef:3c:3a:01:18:55:b4:c9:d8:d7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Apr 21 07:01:23 2026 GMT Not After : Apr 22 07:01:23 2026 GMT Subject: CN=b1f3b96f013041dfaf5065f91974c915c92705da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b7:79:c7:33:4a:37:ce:16:cb:c5:9a:d9:40: a4:a3:db:31:a1:03:f3:e9:31:96:d8:67:ad:35:cb: 58:ed:30:5e:b8:75:79:1a:1b:a4:2b:32:70:e0:ff: bb:d6:d1:38:5b:84:b8:36:94:80:eb:07:ec:5d:aa: 29:9b:6b:45:53:8d:ba:2d:5a:24:18:05:3d:3d:98: f7:e4:16:00:3c:bb:ee:f6:c6:6e:b2:6d:9b:e3:b2: 03:39:0a:d4:e9:99:96:64:59:71:f1:31:d0:5a:0f: 26:c5:0d:20:5e:32:fe:dc:07:4f:2d:20:68:3e:d5: 74:01:c9:53:1e:a0:1c:0e:60:87:0d:52:b8:63:06: 01:a0:a2:bb:b4:77:03:95:eb:37:6a:3c:e1:49:44: af:56:f2:6c:10:4b:a3:62:fe:48:e8:09:d7:50:97: c6:af:91:0a:0d:32:be:fa:1b:a2:f8:7d:71:62:ef: f4:f6:b6:ec:ac:84:57:0b:43:57:11:8d:ff:54:20: a0:58:9d:98:f1:3d:9a:80:3d:ba:b0:e2:4f:a0:8e: 43:34:96:9f:89:c4:80:5c:bd:f1:6a:8d:1c:5e:c7: f1:c2:2a:b4:eb:dc:9f:7f:a1:54:eb:d0:87:c3:b4: 3f:8f:95:a9:f2:85:8b:2f:21:7f:fb:69:d6:da:f7: 6e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F3:B9:6F:01:30:41:DF:AF:50:65:F9:19:74:C9:15:C9:27:05:DA X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:89:d8:86:1e:d3:78:9a:59:3b:e4:7c:c7:b0:44:ca:ac:3b: 19:3d:a7:20:ca:98:83:9c:9b:01:8b:bb:f4:ac:dd:c7:99:fd: 1e:55:60:40:fd:d6:54:eb:65:fa:6f:12:48:46:9f:29:9c:02: 5d:75:85:0d:66:a4:6b:28:28:0b:22:52:24:fb:81:b2:52:f5: 5f:b1:b8:16:72:6a:d2:f5:2c:a9:48:df:0e:95:c9:2d:3b:5f: 46:86:2f:5d:c5:70:e0:4e:4d:a9:b5:0a:24:f3:d9:1e:3e:ad: bf:fa:ad:52:30:28:dc:90:ad:ea:32:7c:5f:39:76:4d:52:20: c7:27:48:e3:e2:bb:39:cd:f4:6d:c8:2f:29:2a:36:c2:4f:48: 32:84:f6:32:0a:39:12:42:f3:4d:de:ad:1d:25:f7:c5:15:9e: ef:88:9a:c8:1d:65:6c:e1:96:5b:33:48:5b:e2:77:62:e2:9d: db:c1:ee:25:29:82:4b:39:aa:4c:3d:44:92:58:26:d3:a9:b3: 9e:4d:8a:f2:df:1a:d0:57:be:9e:93:6d:e8:77:db:1b:5e:c6: e9:06:d1:ca:2f:71:45:81:37:48:8b:7d:ee:86:dc:e7:9c:42: 0b:3f:02:5d:ac:39:1d:6f:8e:5f:a2:6f:11:93:cc:6c:0b:39: a6:81:9b:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2u1/uW7u88OgEYVbTJ2NfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwNDIxMDcwMTIzWhcNMjYwNDIyMDcwMTIzWjAzMTEwLwYDVQQD EyhiMWYzYjk2ZjAxMzA0MWRmYWY1MDY1ZjkxOTc0YzkxNWM5MjcwNWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLd5xzNKN84Wy8Wa2UCko9sxoQPz 6TGW2GetNctY7TBeuHV5GhukKzJw4P+71tE4W4S4NpSA6wfsXaopm2tFU426LVok GAU9PZj35BYAPLvu9sZusm2b47IDOQrU6ZmWZFlx8THQWg8mxQ0gXjL+3AdPLSBo PtV0AclTHqAcDmCHDVK4YwYBoKK7tHcDles3ajzhSUSvVvJsEEujYv5I6AnXUJfG r5EKDTK++hui+H1xYu/09rbsrIRXC0NXEY3/VCCgWJ2Y8T2agD26sOJPoI5DNJaf icSAXL3xao0cXsfxwiq069yff6FU69CHw7Q/j5Wp8oWLLyF/+2nW2vduJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHzuW8BMEHfr1Bl+Rl0yRXJJwXaMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARonYhh7T eJpZO+R8x7BEyqw7GT2nIMqYg5ybAYu79Kzdx5n9HlVgQP3WVOtl+m8SSEafKZwC XXWFDWakaygoCyJSJPuBslL1X7G4FnJq0vUsqUjfDpXJLTtfRoYvXcVw4E5NqbUK JPPZHj6tv/qtUjAo3JCt6jJ8Xzl2TVIgxydI4+K7Oc30bcgvKSo2wk9IMoT2Mgo5 EkLzTd6tHSX3xRWe74iayB1lbOGWWzNIW+J3YuKd28HuJSmCSzmqTD1Eklgm06mz nk2K8t8a0Fe+npNt6HfbG17G6QbRyi9xRYE3SIt97obc55xCCz8CXaw5HW+OX6Jv EZPMbAs5poGbew== -----END CERTIFICATE-----Generated at Tue Apr 21 15:53:21 2026 by rpki-client