$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: JSq+k4p+bM1yoIRVL2YIilj6TQsKqe7vIskGNREofeI= Subject key identifier: 20:71:1A:DD:D3:D4:14:BD:1C:98:03:68:DD:86:87:5B:1E:31:77:1F Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019F829E97CA6F4674282F7FE302812672EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 0CB6 Signing time: Tue 21 Jul 2026 03:00:59 +0000 Manifest this update: Tue 21 Jul 2026 03:00:59 +0000 Manifest next update: Wed 22 Jul 2026 03:00:59 +0000 Files and hashes: 1: 1lESD01m5gbJyA-braAOgm-nsxs.roa (hash: LKvU7E9DI8H+f3xZF2Ibb4ZAlOKiTpfnzxmAzY3Zmkw=) 2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: BPKV62JFcPpI3FimAeGpVyYek3IOfKZjCsyvuauRJb8=) 3: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=) 4: 61nxpqdan0uvkgRYS9p3WXMt0is.roa (hash: +Etzf8iyPB8hG3RY9d2BBNlzK8ZhQf8I9wkNpl+P4s4=) 5: C9CUr-PFwRxBqveQc9JRexz5FUs.roa (hash: lYbCEmweFZ4ggkWxLIShDolBIH8LVCAHfTyc91SJwy0=) 6: FsSNPUWjwDIlPVEHY__f13MutvI.roa (hash: ParcKE8qGlMpeOMYcmP/zF1xOvvVsHqjFGUJ9CbIYcQ=) 7: LmasvFTLE11mrCxdzPNrrKlYdc0.roa (hash: cro6qKPl5KcW1vG37gAcGVH3Wnv66eL0SBKTzxopYzw=) 8: OnExh771ZtOXTYHIXE8BRYIv3I8.roa (hash: iBanqCcjQhcLJzTqVwfRApVqXKWA6vIc0dQd8k0fLnI=) 9: SUEavrAvbJYi-09a6QVI2M_eSIc.roa (hash: hAAmC8KjoRR+ZLoagJaC8chUvGr6KdS0WhlLhZ1Tw9Y=) 10: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=) 11: _TZcDPZzpFhla5KXCrewBSv_afs.roa (hash: F0O1jt3D7eDKUVGno8fQyg0oYO+Zw0jzvuEgWmXzed0=) 12: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=) 13: d8tYjTMOm2iLi-JD46yX3lK67ec.roa (hash: R7k5LiqgpO3uW9dYKT9Gf8MpGa5+R/ekeb18H+cE9bo=) 14: g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa (hash: nYVi4YC9fVishrPOTjgH2hJlXxcspFsYbheNk/bE1wY=) 15: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=) 16: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=) 17: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=) 18: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=) 19: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=) 20: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=) 21: wsknEjm24Tmqnj5AbQzSZKLiyUk.roa (hash: 1F0f934WY0AhELOowB6/aUmK8URa7DHUIj0Gci4bhIA=) 22: xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa (hash: 81EBYCMb1JChmS1xYbhUHSpsd2Mkl7rE43HaypoVrxw=) 23: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:82:9e:97:ca:6f:46:74:28:2f:7f:e3:02:81:26:72:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Jul 21 03:00:59 2026 GMT Not After : Jul 22 03:00:59 2026 GMT Subject: CN=20711addd3d414bd1c980368dd86875b1e31771f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:40:35:a8:60:8c:27:fb:2a:5d:82:b2:ad: 9e:66:5e:6e:13:49:4b:25:d5:9f:2f:da:cf:45:c0: 03:de:94:b4:b0:18:53:c0:74:34:0c:84:65:95:67: 2e:a4:85:7c:d1:a4:9d:67:16:e0:ab:ae:32:9d:57: 8b:5b:f5:06:21:15:a7:e8:8d:77:f2:71:f3:37:50: c1:5f:3c:85:51:39:6b:2d:e9:52:5b:89:fc:dc:96: f8:fd:7f:27:b5:87:34:fb:48:8b:a9:14:e3:e3:a0: f1:4e:f9:ae:4e:1a:69:40:75:53:5b:bf:bc:01:12: 8c:0c:d1:e9:27:6b:29:29:55:e4:ca:76:2f:60:e5: 39:fe:dd:e4:c1:10:37:03:84:c3:95:1a:ce:ca:ef: 88:ae:db:d0:34:a1:41:be:e5:ad:7d:de:ae:bb:d4: df:87:b6:52:59:93:98:9e:60:1c:02:e0:db:93:04: 3f:cc:08:bc:ba:8a:a5:1b:e4:54:8d:9a:ab:f8:98: 8a:44:3a:a6:fc:03:8c:d6:74:ed:d5:e2:5a:d5:13: 64:6d:42:5e:00:9a:64:62:19:a5:48:7b:1c:ee:81: 58:3d:3f:df:ae:e7:a9:b2:42:5b:33:db:e5:66:38: ed:4e:bc:b4:85:53:49:8f:e6:0d:12:21:30:33:1f: db:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:71:1A:DD:D3:D4:14:BD:1C:98:03:68:DD:86:87:5B:1E:31:77:1F X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:19:0d:45:33:46:db:c5:7d:62:44:38:b5:e5:fe:60:aa:7e: 1d:08:f9:73:82:75:6f:1b:1f:82:f2:11:f1:e3:e2:19:78:85: 18:d7:4e:73:79:1d:f9:dc:11:e7:12:5d:f0:18:e0:b8:ce:19: 1d:7e:da:64:84:61:71:03:06:3d:bd:17:04:a6:27:45:fb:98: 3f:4d:88:53:ad:ea:91:6d:17:a0:36:45:6e:0a:c7:d5:e3:85: 24:10:2e:01:e6:22:2e:a0:aa:6f:ba:f7:14:21:1a:0e:8f:ec: d0:36:96:94:d4:85:b5:ba:92:f2:d1:c8:e5:b2:94:bd:14:da: 37:6e:95:16:ce:06:54:6e:50:37:f0:f5:9b:d5:78:ca:f4:69: 69:57:54:86:a5:6f:e3:35:c5:76:88:b7:b9:7f:96:33:a9:90: 96:b5:1e:f2:78:35:81:7d:24:58:37:50:92:a3:57:dd:ae:51: 75:24:38:21:32:ca:06:30:e0:fe:23:68:ef:3e:9f:f4:c5:47: 23:19:53:4d:58:3e:a9:96:84:3f:3e:4c:16:58:fd:15:04:f3: ee:a8:1d:0c:aa:3f:63:8c:5c:d9:16:af:1e:f3:16:06:34:aa: 3d:0f:2c:80:bf:55:26:a8:f2:d9:30:95:23:2d:93:da:b2:e4: df:3a:8a:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+CnpfKb0Z0KC9/4wKBJnLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwNzIxMDMwMDU5WhcNMjYwNzIyMDMwMDU5WjAzMTEwLwYDVQQD EygyMDcxMWFkZGQzZDQxNGJkMWM5ODAzNjhkZDg2ODc1YjFlMzE3NzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaJANahgjCf7Kl2Csq2eZl5uE0lL JdWfL9rPRcAD3pS0sBhTwHQ0DIRllWcupIV80aSdZxbgq64ynVeLW/UGIRWn6I13 8nHzN1DBXzyFUTlrLelSW4n83Jb4/X8ntYc0+0iLqRTj46DxTvmuThppQHVTW7+8 ARKMDNHpJ2spKVXkynYvYOU5/t3kwRA3A4TDlRrOyu+IrtvQNKFBvuWtfd6uu9Tf h7ZSWZOYnmAcAuDbkwQ/zAi8uoqlG+RUjZqr+JiKRDqm/AOM1nTt1eJa1RNkbUJe AJpkYhmlSHsc7oFYPT/fruepskJbM9vlZjjtTry0hVNJj+YNEiEwMx/bVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBxGt3T1BS9HJgDaN2Gh1seMXcfMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBkNRTNG 28V9YkQ4teX+YKp+HQj5c4J1bxsfgvIR8ePiGXiFGNdOc3kd+dwR5xJd8BjguM4Z HX7aZIRhcQMGPb0XBKYnRfuYP02IU63qkW0XoDZFbgrH1eOFJBAuAeYiLqCqb7r3 FCEaDo/s0DaWlNSFtbqS8tHI5bKUvRTaN26VFs4GVG5QN/D1m9V4yvRpaVdUhqVv 4zXFdoi3uX+WM6mQlrUe8ng1gX0kWDdQkqNX3a5RdSQ4ITLKBjDg/iNo7z6f9MVH IxlTTVg+qZaEPz5MFlj9FQTz7qgdDKo/Y4xc2RavHvMWBjSqPQ8sgL9VJqjy2TCV Iy2T2rLk3zqKwA== -----END CERTIFICATE-----Generated at Tue Jul 21 10:15:39 2026 by rpki-client