$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: pW+5qciIJlIrb8vwugxzECnxh3wXF+UwiaGmv4Wm7tA= Subject key identifier: CB:F5:05:FC:CD:04:29:8B:97:84:94:64:4E:84:60:62:4A:6E:B6:82 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019CC18547290C06608CFBB099B3C34A112C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 0B3B Signing time: Fri 06 Mar 2026 05:01:03 +0000 Manifest this update: Fri 06 Mar 2026 05:01:03 +0000 Manifest next update: Sat 07 Mar 2026 05:01:03 +0000 Files and hashes: 1: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: NJS0b+9/bvCTiQ/NSttx8spwNzPuIMTPDOiPPz4YLT8=) 2: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=) 3: 8xP7SvrqNDDUIf7ErNtYgRY6F6A.roa (hash: U6lRFQt/WgoeTpDrJcFjH+zyys2ywY9lEhPCU7k4p30=) 4: KV-kXiax0brWWeQZDEBKQIQ7lj0.roa (hash: VaX4IhwjfnzcwylL43ff4dLH5Qhw2TlZSvdp0A2GC5g=) 5: TUJfUZ1C6AVUTkApJcMIop5vQLE.roa (hash: 19Ah/XGkNGiCO99Jf7P8HQSUuyigvJ3sN9PnRIrIxdo=) 6: UkKSFgRU0i3KaGnHwMCMWucAEJg.roa (hash: 5Ch+ryXt3IKffn5gHuwCN/ReoHH/iCHv2Si1y+KwSg0=) 7: YWNcwd41RpRA7xgpt7KBYYNpmLo.roa (hash: Z/YiQmms85XQHI3WICsesmpbSRUq/suFEGF/feadUT8=) 8: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=) 9: cD2COEhWqNo5yp4vCeMl7hW-eQM.roa (hash: 4UYXi9S7C8C0UsDyWgF+v61Gg+AakXXjWmGnRepiQPU=) 10: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=) 11: fw1iguCmj4qOwcfsFkeFpir65VU.roa (hash: iKQXq9XoPCUkxxyylDltQ/lPyGgCP1DuZtbwv2OYAAM=) 12: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=) 13: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=) 14: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=) 15: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=) 16: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=) 17: v4JvY9wMe53smhk2zRvJ5lMTrGE.roa (hash: 3s3UDWjb1KYZ+q2gqU6kquutAKC7VSuocZYMkU1M+wA=) 18: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=) 19: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 05:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c1:85:47:29:0c:06:60:8c:fb:b0:99:b3:c3:4a:11:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Mar 6 05:01:03 2026 GMT Not After : Mar 7 05:01:03 2026 GMT Subject: CN=cbf505fccd04298b978494644e8460624a6eb682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:6d:f6:67:66:ca:d8:6c:39:ad:a2:21:30: 52:3e:9e:2d:dd:e1:1a:5b:70:13:da:f6:fd:e2:13: f0:cc:05:09:ef:95:8f:f5:cb:38:8a:eb:5e:d6:08: 54:5d:e2:94:c7:c5:eb:05:94:40:4e:a9:9a:59:41: e9:00:8b:a0:d6:1d:7b:e8:b5:2d:92:6d:da:5d:61: 71:79:8d:05:05:c6:d5:ac:55:70:f3:53:4f:0f:8c: 66:7f:84:08:61:85:6d:d1:33:9b:71:b4:ff:28:c1: e8:f3:8f:18:41:6c:3a:ab:66:3a:ab:80:70:49:94: a0:d9:ea:e7:de:99:76:45:11:78:a4:cd:22:bc:63: 29:9d:29:b2:07:73:ec:10:ec:25:02:1b:42:bc:98: e7:f3:a2:06:96:5c:f0:a2:10:a8:6a:83:94:c3:5a: eb:5a:76:5c:a9:ed:a8:71:9e:a6:68:d4:39:77:bd: 74:b9:4a:37:ef:7c:ee:68:86:d2:21:b0:7b:6e:fe: 1f:42:6b:7f:fa:56:0a:eb:99:58:61:f8:e6:8a:49: 5e:d4:2d:aa:a5:e3:b9:8d:9b:ff:80:36:32:3c:cd: 7b:09:68:04:3a:d1:0b:f9:45:45:81:78:62:5a:a5: 00:4e:3f:6a:86:d8:f2:50:cb:9c:31:8e:d4:4d:44: da:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F5:05:FC:CD:04:29:8B:97:84:94:64:4E:84:60:62:4A:6E:B6:82 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:89:72:e0:b3:ef:c3:29:a8:3a:94:e0:ab:61:c9:e9:45:17: 5d:79:04:2c:d4:dc:10:0f:db:0f:b6:24:d5:c1:91:23:f3:cc: ab:eb:f5:5f:e5:64:da:3d:83:44:f7:1a:c1:d6:7d:f1:4e:a2: 55:f7:23:38:a0:94:39:e1:33:28:86:c0:fa:f4:72:37:61:0d: 1b:0d:be:7a:93:02:31:b0:bb:d3:ed:61:98:d8:22:bc:02:27: 18:80:67:4b:ab:36:e4:41:2d:49:7c:fb:e4:f4:9a:87:3b:7f: 77:7e:1f:fd:43:3b:2f:53:c7:51:56:a1:43:6c:ad:fb:87:a7: f7:54:2e:94:e5:f4:0b:5c:1f:1f:aa:42:b3:56:92:a7:e1:bb: 1e:26:6a:23:77:90:eb:07:28:75:a3:13:aa:c1:f5:de:bb:17: 1b:cd:b5:88:96:71:37:ca:2e:74:ef:ce:b7:51:e6:57:94:cf: 96:c6:15:c2:cb:bf:fd:16:c4:4c:aa:67:4f:fa:d2:8a:7b:15: da:b0:ff:a0:47:29:72:fd:3e:2f:3a:98:75:33:4d:c3:5f:e1: 01:ce:07:a8:34:f1:89:7a:a8:09:3c:66:9d:c2:8b:8f:4a:ee: ff:cb:48:f8:7c:29:c5:e7:e8:11:d6:bf:ae:57:d7:bf:27:90: 2e:d8:3e:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzBhUcpDAZgjPuwmbPDShEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMzA2MDUwMTAzWhcNMjYwMzA3MDUwMTAzWjAzMTEwLwYDVQQD EyhjYmY1MDVmY2NkMDQyOThiOTc4NDk0NjQ0ZTg0NjA2MjRhNmViNjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwht9mdmythsOa2iITBSPp4t3eEa W3AT2vb94hPwzAUJ75WP9cs4iute1ghUXeKUx8XrBZRATqmaWUHpAIug1h176LUt km3aXWFxeY0FBcbVrFVw81NPD4xmf4QIYYVt0TObcbT/KMHo848YQWw6q2Y6q4Bw SZSg2ern3pl2RRF4pM0ivGMpnSmyB3PsEOwlAhtCvJjn86IGllzwohCoaoOUw1rr WnZcqe2ocZ6maNQ5d710uUo373zuaIbSIbB7bv4fQmt/+lYK65lYYfjmikle1C2q peO5jZv/gDYyPM17CWgEOtEL+UVFgXhiWqUATj9qhtjyUMucMY7UTUTaDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMv1BfzNBCmLl4SUZE6EYGJKbraCMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4ly4LPv wymoOpTgq2HJ6UUXXXkELNTcEA/bD7Yk1cGRI/PMq+v1X+Vk2j2DRPcawdZ98U6i VfcjOKCUOeEzKIbA+vRyN2ENGw2+epMCMbC70+1hmNgivAInGIBnS6s25EEtSXz7 5PSahzt/d34f/UM7L1PHUVahQ2yt+4en91QulOX0C1wfH6pCs1aSp+G7HiZqI3eQ 6wcodaMTqsH13rsXG821iJZxN8oudO/Ot1HmV5TPlsYVwsu//RbETKpnT/rSinsV 2rD/oEcpcv0+LzqYdTNNw1/hAc4HqDTxiXqoCTxmncKLj0ru/8tI+HwpxefoEda/ rlfXvyeQLtg+EQ== -----END CERTIFICATE-----Generated at Fri Mar 6 13:38:14 2026 by rpki-client