
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier: qZsy6UaOKKs7jlF0L/6gEG4tJWawhqWPsDF8H2+JY5Q=
Subject key identifier: 85:D7:E2:FA:04:CE:C2:4B:49:BF:32:B4:AF:A9:1A:F2:F4:BA:30:38
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019E9A3B9751319EF0080046117F23A91977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number: 0C3D
Signing time: Sat 06 Jun 2026 00:00:57 +0000
Manifest this update: Sat 06 Jun 2026 00:00:57 +0000
Manifest next update: Sun 07 Jun 2026 00:00:57 +0000
Files and hashes: 1: 1lESD01m5gbJyA-braAOgm-nsxs.roa (hash: LKvU7E9DI8H+f3xZF2Ibb4ZAlOKiTpfnzxmAzY3Zmkw=)
2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: jF1KkUCjTmuuyafAor0GfLMEr8I41MEDaoV1IpQvSvQ=)
3: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=)
4: 61nxpqdan0uvkgRYS9p3WXMt0is.roa (hash: +Etzf8iyPB8hG3RY9d2BBNlzK8ZhQf8I9wkNpl+P4s4=)
5: C9CUr-PFwRxBqveQc9JRexz5FUs.roa (hash: lYbCEmweFZ4ggkWxLIShDolBIH8LVCAHfTyc91SJwy0=)
6: FsSNPUWjwDIlPVEHY__f13MutvI.roa (hash: ParcKE8qGlMpeOMYcmP/zF1xOvvVsHqjFGUJ9CbIYcQ=)
7: LmasvFTLE11mrCxdzPNrrKlYdc0.roa (hash: cro6qKPl5KcW1vG37gAcGVH3Wnv66eL0SBKTzxopYzw=)
8: OnExh771ZtOXTYHIXE8BRYIv3I8.roa (hash: iBanqCcjQhcLJzTqVwfRApVqXKWA6vIc0dQd8k0fLnI=)
9: SUEavrAvbJYi-09a6QVI2M_eSIc.roa (hash: hAAmC8KjoRR+ZLoagJaC8chUvGr6KdS0WhlLhZ1Tw9Y=)
10: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=)
11: _TZcDPZzpFhla5KXCrewBSv_afs.roa (hash: F0O1jt3D7eDKUVGno8fQyg0oYO+Zw0jzvuEgWmXzed0=)
12: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=)
13: d8tYjTMOm2iLi-JD46yX3lK67ec.roa (hash: R7k5LiqgpO3uW9dYKT9Gf8MpGa5+R/ekeb18H+cE9bo=)
14: g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa (hash: nYVi4YC9fVishrPOTjgH2hJlXxcspFsYbheNk/bE1wY=)
15: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=)
16: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=)
17: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=)
18: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=)
19: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=)
20: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=)
21: xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa (hash: 81EBYCMb1JChmS1xYbhUHSpsd2Mkl7rE43HaypoVrxw=)
22: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:3b:97:51:31:9e:f0:08:00:46:11:7f:23:a9:19:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jun 6 00:00:57 2026 GMT
Not After : Jun 7 00:00:57 2026 GMT
Subject: CN=85d7e2fa04cec24b49bf32b4afa91af2f4ba3038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:e0:f2:dd:f9:0b:0a:b2:83:10:5d:35:54:
8f:b5:ef:a1:c4:33:73:73:a6:50:04:a0:30:42:84:
20:5d:62:be:74:d1:32:83:8f:f7:56:ba:eb:e4:e7:
ae:70:81:a9:90:89:b1:f8:a0:85:5c:05:c2:94:33:
96:ed:11:33:0b:62:7b:8e:e5:8b:2e:5e:d0:e2:0a:
e7:60:a8:2e:71:b0:51:38:a8:a5:69:44:47:27:d0:
95:1d:4e:bd:81:ff:d8:1b:be:d5:da:4d:f6:be:fe:
24:db:e3:8b:11:27:54:29:eb:2b:01:fa:70:5e:34:
5e:53:15:06:20:3a:07:e1:ef:92:d4:6c:e4:1d:a3:
17:44:11:5b:96:0c:2d:d0:44:1a:16:74:25:3a:92:
a8:f7:c9:95:91:2d:be:4c:4b:29:50:56:13:a5:df:
17:f7:59:06:9d:a2:e8:f0:de:45:5f:88:93:f9:91:
18:42:80:23:72:21:77:01:18:3f:26:54:c8:85:d4:
0a:7d:19:d7:3a:08:ce:4e:aa:4b:6d:db:4a:33:1a:
fc:39:a6:da:bb:e0:5b:58:17:2f:23:e6:18:44:4f:
3f:44:42:61:fe:cd:e5:13:9a:54:69:ca:1f:ef:b5:
f2:3a:71:5d:f8:20:db:4a:2c:4c:c4:79:be:17:40:
94:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D7:E2:FA:04:CE:C2:4B:49:BF:32:B4:AF:A9:1A:F2:F4:BA:30:38
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:80:1d:19:96:1a:ac:ff:9c:0e:9f:53:f0:4c:80:cf:07:62:
b6:d8:52:fb:d0:a4:aa:1b:4b:0c:6a:a4:5e:1a:91:bd:c6:ff:
31:83:5f:da:3f:89:b6:1a:4f:d9:16:59:da:0e:d5:7b:a2:95:
f7:af:28:eb:d3:4d:a0:fb:05:a6:92:cb:3f:f3:0c:d3:d0:ec:
0e:85:bc:d8:f2:0c:48:07:5c:b1:9d:86:62:12:86:1c:df:78:
09:0c:49:ba:be:5f:c5:5c:b6:cf:d9:47:d3:55:7c:b6:67:5d:
7e:56:73:12:7f:ab:7a:5c:25:66:c5:ab:7d:3d:24:18:6e:82:
8c:6a:fa:16:ed:14:d0:88:20:f5:ce:60:4b:3c:f5:75:79:40:
45:3b:d4:8c:23:96:af:f0:65:3a:77:6a:ae:c2:8c:a5:e6:97:
0e:13:ba:f4:b5:26:3a:ac:04:d7:dc:bd:ff:28:22:84:b3:95:
df:d7:66:13:16:f1:22:fd:5a:4c:66:84:2b:72:2c:fc:f9:7c:
62:02:83:72:2f:76:86:02:7c:82:41:12:63:90:12:87:87:ce:
9c:af:0a:5f:fb:8d:8e:75:ca:0f:8b:d3:0d:38:1f:23:ea:c1:
b3:d1:79:d4:13:88:11:e6:34:3f:c9:b6:e8:47:d0:20:80:28:
ba:c5:3c:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6aO5dRMZ7wCABGEX8jqRl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx
N2U1MmMwHhcNMjYwNjA2MDAwMDU3WhcNMjYwNjA3MDAwMDU3WjAzMTEwLwYDVQQD
Eyg4NWQ3ZTJmYTA0Y2VjMjRiNDliZjMyYjRhZmE5MWFmMmY0YmEzMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxvg8t35CwqygxBdNVSPte+hxDNz
c6ZQBKAwQoQgXWK+dNEyg4/3Vrrr5OeucIGpkImx+KCFXAXClDOW7REzC2J7juWL
Ll7Q4grnYKgucbBROKilaURHJ9CVHU69gf/YG77V2k32vv4k2+OLESdUKesrAfpw
XjReUxUGIDoH4e+S1GzkHaMXRBFblgwt0EQaFnQlOpKo98mVkS2+TEspUFYTpd8X
91kGnaLo8N5FX4iT+ZEYQoAjciF3ARg/JlTIhdQKfRnXOgjOTqpLbdtKMxr8Oaba
u+BbWBcvI+YYRE8/REJh/s3lE5pUacof77XyOnFd+CDbSixMxHm+F0CUZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXX4voEzsJLSb8ytK+pGvL0ujA4MB8GA1UdIwQY
MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt
ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0
LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4AdGZYa
rP+cDp9T8EyAzwditthS+9CkqhtLDGqkXhqRvcb/MYNf2j+JthpP2RZZ2g7Ve6KV
968o69NNoPsFppLLP/MM09DsDoW82PIMSAdcsZ2GYhKGHN94CQxJur5fxVy2z9lH
01V8tmddflZzEn+relwlZsWrfT0kGG6CjGr6Fu0U0Igg9c5gSzz1dXlARTvUjCOW
r/BlOndqrsKMpeaXDhO69LUmOqwE19y9/ygihLOV39dmExbxIv1aTGaEK3Is/Pl8
YgKDci92hgJ8gkESY5ASh4fOnK8KX/uNjnXKD4vTDTgfI+rBs9F51BOIEeY0P8m2
6EfQIIAousU8gw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 06:51:48 2026 by rpki-client