$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: KXxxMEaduD4+a25UiqQwJDZfE439PpQa76ALM/WL0Pc= Subject key identifier: FA:9C:84:FD:40:1A:12:87:32:F2:AA:B5:56:08:16:6F:5C:33:66:74 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 01A06CB8F2C4817643999D011FCCD4E91999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 0D30 Signing time: Fri 04 Sep 2026 14:00:54 +0000 Manifest this update: Fri 04 Sep 2026 14:00:54 +0000 Manifest next update: Sat 05 Sep 2026 14:00:54 +0000 Files and hashes: 1: 1lESD01m5gbJyA-braAOgm-nsxs.roa (hash: LKvU7E9DI8H+f3xZF2Ibb4ZAlOKiTpfnzxmAzY3Zmkw=) 2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: 8HtYkEe4ShVq+ETlDvH+JJece0B5+yECsQPU6+BStCA=) 3: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=) 4: 61nxpqdan0uvkgRYS9p3WXMt0is.roa (hash: +Etzf8iyPB8hG3RY9d2BBNlzK8ZhQf8I9wkNpl+P4s4=) 5: C9CUr-PFwRxBqveQc9JRexz5FUs.roa (hash: lYbCEmweFZ4ggkWxLIShDolBIH8LVCAHfTyc91SJwy0=) 6: FsSNPUWjwDIlPVEHY__f13MutvI.roa (hash: ParcKE8qGlMpeOMYcmP/zF1xOvvVsHqjFGUJ9CbIYcQ=) 7: LmasvFTLE11mrCxdzPNrrKlYdc0.roa (hash: cro6qKPl5KcW1vG37gAcGVH3Wnv66eL0SBKTzxopYzw=) 8: OnExh771ZtOXTYHIXE8BRYIv3I8.roa (hash: iBanqCcjQhcLJzTqVwfRApVqXKWA6vIc0dQd8k0fLnI=) 9: SUEavrAvbJYi-09a6QVI2M_eSIc.roa (hash: hAAmC8KjoRR+ZLoagJaC8chUvGr6KdS0WhlLhZ1Tw9Y=) 10: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=) 11: _TZcDPZzpFhla5KXCrewBSv_afs.roa (hash: F0O1jt3D7eDKUVGno8fQyg0oYO+Zw0jzvuEgWmXzed0=) 12: _r7e3jySBWFxAqLAWSDEbmMpjF8.roa (hash: 0s13Gjs3CYsISYzYweJ7h7lIWvgl86R0YjE4dZPqH/A=) 13: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=) 14: d8tYjTMOm2iLi-JD46yX3lK67ec.roa (hash: R7k5LiqgpO3uW9dYKT9Gf8MpGa5+R/ekeb18H+cE9bo=) 15: g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa (hash: nYVi4YC9fVishrPOTjgH2hJlXxcspFsYbheNk/bE1wY=) 16: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=) 17: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=) 18: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=) 19: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=) 20: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=) 21: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=) 22: wsknEjm24Tmqnj5AbQzSZKLiyUk.roa (hash: 1F0f934WY0AhELOowB6/aUmK8URa7DHUIj0Gci4bhIA=) 23: xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa (hash: 81EBYCMb1JChmS1xYbhUHSpsd2Mkl7rE43HaypoVrxw=) 24: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6c:b8:f2:c4:81:76:43:99:9d:01:1f:cc:d4:e9:19:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Sep 4 14:00:54 2026 GMT Not After : Sep 5 14:00:54 2026 GMT Subject: CN=fa9c84fd401a128732f2aab55608166f5c336674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:71:54:bc:fe:58:16:fe:66:87:83:a3:28: 68:05:be:47:ca:91:62:bc:44:48:db:0e:8c:7a:a3: 44:55:61:40:b9:d3:50:cc:57:3a:12:61:ed:96:0c: a6:60:54:d4:62:ab:44:e4:d8:5a:ec:ae:ef:52:6e: f0:37:e4:c8:c6:3e:85:e1:c1:6a:dd:a0:ad:64:38: 78:8b:31:70:86:77:06:73:4d:e6:e2:7b:db:0e:1f: e8:c3:d4:4f:5a:76:e6:12:a5:8e:d9:99:e3:ce:97: 3d:d7:c6:6d:32:6f:f6:ab:38:4f:f2:aa:0c:52:4e: 20:6f:8d:f1:b1:07:03:f2:13:c0:ba:3c:aa:33:5c: 41:01:b8:c9:b0:b2:44:8b:12:58:3d:c9:f1:b8:96: 9a:3d:f1:53:04:dc:69:12:47:6f:ef:6d:92:d5:fb: 66:87:3e:69:af:00:86:30:4c:10:08:15:8d:e7:db: af:53:51:39:a1:bc:2f:25:05:ad:5d:19:20:e2:39: 45:6a:a1:73:06:37:fc:ec:c7:fb:15:43:37:c8:a7: ed:9a:e8:a9:26:8d:ee:d7:50:93:6a:7c:5f:4b:2e: e9:dc:4f:3b:7f:cf:b7:d6:8f:b2:b6:56:30:ec:71: 28:f3:c5:81:75:71:00:61:e7:1a:a7:d9:40:b0:93: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9C:84:FD:40:1A:12:87:32:F2:AA:B5:56:08:16:6F:5C:33:66:74 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e2:9d:74:dc:b1:af:85:ad:f6:9e:73:d8:29:91:9d:b2:8a: ab:36:26:fa:14:bd:2e:f5:b5:58:57:7e:cf:5d:8a:da:f6:2a: 4d:12:18:66:c8:b9:fe:f8:93:d0:67:59:c9:4f:09:39:9b:e6: 5e:7b:e6:5b:29:7c:8a:54:6e:2d:fe:05:87:a9:0c:82:2e:eb: 58:c1:86:c1:12:5a:00:59:eb:fd:3b:4d:b2:d7:c6:ac:e4:8f: 85:cc:04:0a:08:80:33:11:d9:3b:fb:c2:63:a3:ff:4b:42:3b: 7d:fa:0a:8e:71:ea:b4:aa:b0:bb:3a:42:c7:ca:c5:8d:26:17: 45:b8:40:6a:f2:dd:68:77:76:d5:00:70:8d:31:af:a8:8c:27: 9d:b9:d0:28:a8:ce:a5:eb:ea:a8:b0:51:0e:d3:5b:86:64:1c: 1f:89:21:a1:f5:89:89:0c:b8:c3:ef:8c:97:e3:30:77:4d:c6: 5b:10:14:7f:f5:46:70:97:56:dc:66:21:15:8a:c0:6e:6a:a1: ed:44:c3:4e:a1:b6:59:d8:58:77:e0:aa:dd:f1:4c:4c:8a:cc: 31:08:f7:54:bb:ea:bb:cc:60:91:90:25:9b:69:03:c3:4c:78: 22:1c:32:24:92:1a:62:5c:41:d7:a8:dd:87:54:11:7d:0c:ce: 31:ab:17:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBsuPLEgXZDmZ0BH8zU6RmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwOTA0MTQwMDU0WhcNMjYwOTA1MTQwMDU0WjAzMTEwLwYDVQQD EyhmYTljODRmZDQwMWExMjg3MzJmMmFhYjU1NjA4MTY2ZjVjMzM2Njc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEdxVLz+WBb+ZoeDoyhoBb5HypFi vERI2w6MeqNEVWFAudNQzFc6EmHtlgymYFTUYqtE5Nha7K7vUm7wN+TIxj6F4cFq 3aCtZDh4izFwhncGc03m4nvbDh/ow9RPWnbmEqWO2Znjzpc918ZtMm/2qzhP8qoM Uk4gb43xsQcD8hPAujyqM1xBAbjJsLJEixJYPcnxuJaaPfFTBNxpEkdv722S1ftm hz5prwCGMEwQCBWN59uvU1E5obwvJQWtXRkg4jlFaqFzBjf87Mf7FUM3yKftmuip Jo3u11CTanxfSy7p3E87f8+31o+ytlYw7HEo88WBdXEAYecap9lAsJPdMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqchP1AGhKHMvKqtVYIFm9cM2Z0MB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+KddNyx r4Wt9p5z2CmRnbKKqzYm+hS9LvW1WFd+z12K2vYqTRIYZsi5/viT0GdZyU8JOZvm XnvmWyl8ilRuLf4Fh6kMgi7rWMGGwRJaAFnr/TtNstfGrOSPhcwECgiAMxHZO/vC Y6P/S0I7ffoKjnHqtKqwuzpCx8rFjSYXRbhAavLdaHd21QBwjTGvqIwnnbnQKKjO pevqqLBRDtNbhmQcH4khofWJiQy4w++Ml+Mwd03GWxAUf/VGcJdW3GYhFYrAbmqh 7UTDTqG2WdhYd+Cq3fFMTIrMMQj3VLvqu8xgkZAlm2kDw0x4IhwyJJIaYlxB16jd h1QRfQzOMasXyw== -----END CERTIFICATE-----Generated at Sat Sep 5 00:29:29 2026 by rpki-client