$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: LuJaY5UxSbA7cumal6zMgHp8DP8zK29HmSHSsh9GdTs= Subject key identifier: 63:B0:07:E4:96:B4:3B:E4:CC:0A:49:A4:73:E3:E1:53:29:2A:50:A9 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 01A15FD6DCF19273EAC9BA4EA564F6F7FA50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 0DAE Signing time: Wed 21 Oct 2026 19:01:18 +0000 Manifest this update: Wed 21 Oct 2026 19:01:18 +0000 Manifest next update: Thu 22 Oct 2026 19:01:18 +0000 Files and hashes: 1: 1lESD01m5gbJyA-braAOgm-nsxs.roa (hash: LKvU7E9DI8H+f3xZF2Ibb4ZAlOKiTpfnzxmAzY3Zmkw=) 2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: TPQbz8flyg+DYaGnKTn1ACokhRla5m6VIQXWMh2jmE8=) 3: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=) 4: 61nxpqdan0uvkgRYS9p3WXMt0is.roa (hash: +Etzf8iyPB8hG3RY9d2BBNlzK8ZhQf8I9wkNpl+P4s4=) 5: C9CUr-PFwRxBqveQc9JRexz5FUs.roa (hash: lYbCEmweFZ4ggkWxLIShDolBIH8LVCAHfTyc91SJwy0=) 6: FsSNPUWjwDIlPVEHY__f13MutvI.roa (hash: ParcKE8qGlMpeOMYcmP/zF1xOvvVsHqjFGUJ9CbIYcQ=) 7: LmasvFTLE11mrCxdzPNrrKlYdc0.roa (hash: cro6qKPl5KcW1vG37gAcGVH3Wnv66eL0SBKTzxopYzw=) 8: OnExh771ZtOXTYHIXE8BRYIv3I8.roa (hash: iBanqCcjQhcLJzTqVwfRApVqXKWA6vIc0dQd8k0fLnI=) 9: SUEavrAvbJYi-09a6QVI2M_eSIc.roa (hash: hAAmC8KjoRR+ZLoagJaC8chUvGr6KdS0WhlLhZ1Tw9Y=) 10: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=) 11: _TZcDPZzpFhla5KXCrewBSv_afs.roa (hash: F0O1jt3D7eDKUVGno8fQyg0oYO+Zw0jzvuEgWmXzed0=) 12: _r7e3jySBWFxAqLAWSDEbmMpjF8.roa (hash: 0s13Gjs3CYsISYzYweJ7h7lIWvgl86R0YjE4dZPqH/A=) 13: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=) 14: d8tYjTMOm2iLi-JD46yX3lK67ec.roa (hash: R7k5LiqgpO3uW9dYKT9Gf8MpGa5+R/ekeb18H+cE9bo=) 15: g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa (hash: nYVi4YC9fVishrPOTjgH2hJlXxcspFsYbheNk/bE1wY=) 16: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=) 17: lDy7_ZUfUGLwq7t-x0BCN-CMho8.roa (hash: 3JoI0NsQHfNqazRVmj6jo6JlxG8z9vwxdQ2lP2H5Mms=) 18: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=) 19: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=) 20: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=) 21: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=) 22: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=) 23: wsknEjm24Tmqnj5AbQzSZKLiyUk.roa (hash: 1F0f934WY0AhELOowB6/aUmK8URa7DHUIj0Gci4bhIA=) 24: xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa (hash: 81EBYCMb1JChmS1xYbhUHSpsd2Mkl7rE43HaypoVrxw=) 25: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 14:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5f:d6:dc:f1:92:73:ea:c9:ba:4e:a5:64:f6:f7:fa:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Oct 21 19:01:18 2026 GMT Not After : Oct 22 19:01:18 2026 GMT Subject: CN=63b007e496b43be4cc0a49a473e3e153292a50a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:16:ad:f9:52:94:1a:c3:9f:b8:e7:96:8f:bc: 44:fb:df:9e:a7:86:df:7c:f1:6a:6e:58:8b:29:f7: 60:94:df:81:f3:d3:e7:1c:f1:29:09:b7:5d:e6:53: 15:36:e9:3f:29:cb:06:6f:ad:81:21:ae:0e:87:b7: ac:13:c2:19:e0:46:a1:46:0d:32:89:79:d2:49:a3: f2:29:c8:31:df:a3:3d:d9:16:fe:c8:d7:0b:bf:18: ce:2d:cc:24:cd:fe:e4:4c:7e:35:52:91:47:17:ec: c8:59:bd:7f:48:a1:fe:05:57:6f:bf:10:62:1d:c9: c3:6e:e9:3a:b6:a7:a3:0f:63:36:66:0b:5d:0d:06: 34:91:8d:e4:96:9a:df:04:27:3f:01:5f:2c:26:cd: a4:0a:51:00:96:cc:7d:74:c4:5c:31:a3:41:0f:9b: e4:ca:92:da:ac:e7:e5:68:53:88:52:2e:1b:17:71: 3f:b3:8e:83:12:98:b5:71:e3:39:11:5a:04:35:e5: d8:77:2e:50:cc:70:1c:21:ba:2f:f2:81:59:a4:77: 70:fc:0d:ad:e2:63:cf:68:c5:89:eb:47:5a:9f:d1: f4:01:94:b4:20:9d:c8:54:cb:e0:74:42:c1:ae:12: cb:8d:d9:d6:f3:4b:88:b9:c8:2e:03:95:41:2d:b5: 04:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B0:07:E4:96:B4:3B:E4:CC:0A:49:A4:73:E3:E1:53:29:2A:50:A9 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:4e:88:49:af:5d:7d:4e:e5:64:ea:2f:1d:3c:53:34:91:a8: 58:99:dc:36:2a:b6:ae:3a:59:03:fa:6f:db:3c:e6:96:6d:0a: 61:c5:3e:a4:3e:2d:32:de:ab:b5:7a:82:6e:40:c9:8d:ad:c7: 18:46:73:31:20:85:74:e1:26:85:c1:c5:b5:9f:ac:7d:55:a7: da:9c:54:d2:34:72:20:1f:28:df:4d:48:2f:f7:1f:02:fb:a5: 8d:f2:67:39:8d:51:aa:71:ce:59:3b:66:ad:18:02:f9:f1:29: d5:4c:8d:f9:09:41:41:28:74:1d:8b:3b:6f:4f:09:8e:08:9e: 05:3a:1c:f8:0a:37:b8:2c:90:a7:af:b1:5a:67:51:38:44:b9: d2:8f:97:d4:27:59:ca:c6:4e:c0:6c:45:22:f7:1d:2a:1b:aa: c2:6d:b8:42:fc:69:f0:b9:4c:74:09:4a:a6:b7:df:d2:b0:5d: 80:65:49:49:da:b8:f1:28:9d:a0:e6:d8:5e:30:39:23:7e:5b: 4c:ff:28:34:71:75:a0:55:c0:6c:b2:79:d1:7e:c2:02:b1:ae: 17:c1:be:ed:87:39:72:c3:59:04:2e:26:60:8c:c1:14:68:2e: 7d:30:00:8d:f5:8f:08:21:fd:33:4d:57:a3:f9:f2:15:ea:90: eb:60:16:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFf1tzxknPqybpOpWT29/pQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYxMDIxMTkwMTE4WhcNMjYxMDIyMTkwMTE4WjAzMTEwLwYDVQQD Eyg2M2IwMDdlNDk2YjQzYmU0Y2MwYTQ5YTQ3M2UzZTE1MzI5MmE1MGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xat+VKUGsOfuOeWj7xE+9+ep4bf fPFqbliLKfdglN+B89PnHPEpCbdd5lMVNuk/KcsGb62BIa4Oh7esE8IZ4EahRg0y iXnSSaPyKcgx36M92Rb+yNcLvxjOLcwkzf7kTH41UpFHF+zIWb1/SKH+BVdvvxBi HcnDbuk6tqejD2M2ZgtdDQY0kY3klprfBCc/AV8sJs2kClEAlsx9dMRcMaNBD5vk ypLarOflaFOIUi4bF3E/s46DEpi1ceM5EVoENeXYdy5QzHAcIbov8oFZpHdw/A2t 4mPPaMWJ60dan9H0AZS0IJ3IVMvgdELBrhLLjdnW80uIucguA5VBLbUENwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOwB+SWtDvkzApJpHPj4VMpKlCpMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApU6ISa9d fU7lZOovHTxTNJGoWJncNiq2rjpZA/pv2zzmlm0KYcU+pD4tMt6rtXqCbkDJja3H GEZzMSCFdOEmhcHFtZ+sfVWn2pxU0jRyIB8o301IL/cfAvuljfJnOY1RqnHOWTtm rRgC+fEp1UyN+QlBQSh0HYs7b08JjgieBToc+Ao3uCyQp6+xWmdROES50o+X1CdZ ysZOwGxFIvcdKhuqwm24Qvxp8LlMdAlKprff0rBdgGVJSdq48SidoObYXjA5I35b TP8oNHF1oFXAbLJ50X7CArGuF8G+7Yc5csNZBC4mYIzBFGgufTAAjfWPCCH9M01X o/nyFeqQ62AWVA== -----END CERTIFICATE-----Generated at Wed Oct 21 22:48:08 2026 by rpki-client