$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft File: J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json) Hash identifier: Ijtt/Kcny0cnQVKRN0vEEYLFzhlKwqHAsQqT1GKzUYs= Subject key identifier: F8:00:77:CA:7E:DF:34:43:A7:96:DC:54:20:D9:81:92:87:44:F8:FE Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Certificate serial: 019CE5239592B7E8088C607438423BFF1050 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft Manifest number: 0DC5 Signing time: Fri 13 Mar 2026 03:00:40 +0000 Manifest this update: Fri 13 Mar 2026 03:00:40 +0000 Manifest next update: Sat 14 Mar 2026 03:00:40 +0000 Files and hashes: 1: GVQM2fhWiAA1vaxgASrTGcM3NXg.roa (hash: qmify2cyOKHa4dPo1mFD43WN2hWzTZnDzaDfO9d6xj0=) 2: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: G1c99W6z3Y0YxJRlsD2YzROqcal2N01aJbhgJqU2zVs=) 3: MPe538bYpU8guVH5-86a4aQXXWo.roa (hash: r21A8jzF/GtpSrRHEgbvnBNm4NeKTp/0Wc3vPf+aR0s=) 4: MuaQsZpK85YLuwzSbgYhrnef72s.roa (hash: bdvuUkwflnueXXPnGyW7DncDokUJqOrDxizqAK6rLFQ=) 5: OIf5o3TuUaTGCWR1GyZJ8zyr1DU.roa (hash: Id91w3MsfuN+1fBJYgr9h61G7NpSD3kW83pc4b6qwCg=) 6: _jP7HoE6xSVGQtiue_1k6La3slE.roa (hash: lNbPgbdDGD01z1JbLvmrn22+TQAyCpvm6Vuj52vD43Q=) 7: c_so8ZAo99s903KgX6q1bd_ayQY.roa (hash: qk06hv+tknoEnl/WncFnILZI0t8DHr6k+PuJJrOlT6s=) 8: l-al53GTn2U3_oux5KceKXfKkVM.roa (hash: VwmHIGN92Mm8C6FgCJrZ5LFSIkTya2qnm7OsmBE8eyE=) 9: nI8D-AwVuUhZS_gQCeDbQORZ77k.roa (hash: zi3GVIgGpTx+NCwINdJlKP5OnWevf0ir3DqN9LIx3e8=) 10: oClPZJT6D0f4dR_qB20ROSGy3Uc.roa (hash: qQHC5wbtqPFNv5PYiRxDG6ZXTaD7NV+WGp7lKe4wsgs=) 11: zsjg_uNpmMmffhFlupWb75dFOf8.roa (hash: HE/uSl70PUzAoBt7ot8n4K8Er2xcIutkfXUuzgDxPFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 21:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e5:23:95:92:b7:e8:08:8c:60:74:38:42:3b:ff:10:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Validity Not Before: Mar 13 03:00:40 2026 GMT Not After : Mar 14 03:00:40 2026 GMT Subject: CN=f80077ca7edf3443a796dc5420d981928744f8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a7:63:66:56:f7:d1:a9:ef:a0:6b:a6:39:8f: 50:28:38:0c:d8:d4:41:5b:37:4c:93:37:fe:99:14: 67:da:5a:51:54:3b:02:2f:88:75:61:8c:27:04:5e: f5:65:bb:12:2e:f8:f8:8f:64:b3:e8:43:8d:d0:d1: 4c:3a:c0:7a:49:bd:13:03:09:3d:86:0a:c4:9c:d5: ba:c2:f6:bd:14:3b:03:a3:70:90:bb:7a:c9:49:cd: 85:38:08:47:2d:d1:be:e4:3f:01:e1:3a:33:26:bd: 82:21:b2:51:db:9b:05:3c:cd:e0:63:f9:91:1d:89: 4f:ab:28:39:ca:40:1f:73:91:fa:35:1f:15:21:7f: 33:48:be:29:aa:3d:9a:0a:bb:06:93:23:2a:cb:21: 8d:a6:9c:3c:6c:9b:e7:8d:b7:9a:4b:8b:30:30:2e: 78:9e:bd:14:d3:fd:1f:c6:81:df:12:65:a4:c2:31: a7:c2:74:20:be:c7:e2:92:37:48:5c:2f:0c:06:13: 9a:c6:34:32:21:bb:32:f9:89:f1:6b:3f:8c:4c:1a: 1c:1e:41:7e:ff:64:c1:b7:94:3f:a5:d1:3a:e9:d8: 35:09:e2:fc:5d:1d:5a:57:d3:de:2c:46:6e:65:d8: 28:4c:57:1f:0e:7e:e0:87:32:5f:f8:ca:94:81:2e: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:00:77:CA:7E:DF:34:43:A7:96:DC:54:20:D9:81:92:87:44:F8:FE X509v3 Authority Key Identifier: keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0f:78:7b:c7:46:79:fc:1b:e4:64:cb:f8:32:ca:2f:af:8a: 7d:20:f0:0c:ba:54:0d:58:00:42:35:33:4a:ea:2c:88:e2:cb: 47:ee:d8:8a:52:13:d9:04:c2:5e:46:a7:9e:d0:91:7f:2c:95: e2:c2:d3:76:1f:57:8a:22:b2:5e:3c:6f:63:7a:ed:71:a1:45: 5e:c6:39:b0:54:1f:72:a8:6c:7d:ea:4d:30:99:9e:3d:ab:88: e7:57:22:9b:e6:1f:ff:9c:9f:04:77:8b:35:31:89:a7:81:c8: 98:53:d2:2e:48:09:1d:f6:1f:eb:64:00:1c:b0:bd:e1:84:ef: 28:b4:90:27:84:79:21:e5:9e:6d:31:1e:ce:b3:a5:09:77:cf: 93:80:83:e3:2f:61:92:4c:13:98:97:83:89:b4:26:73:fb:4e: c4:63:b3:46:37:0e:2c:0c:c9:d9:3a:e6:c3:6a:bf:f0:1d:26: ce:4a:2e:b9:8b:d7:f1:46:19:d9:fc:26:21:60:bb:04:d9:5d: a8:c4:2e:4b:91:80:81:d1:1f:29:8d:76:8d:09:9f:f7:fd:3f: 51:2c:9c:ec:d5:c6:59:3f:44:94:98:f5:51:48:47:c7:09:3e: 12:70:28:90:0a:94:26:d7:36:ef:47:26:67:cf:b3:3c:91:23: ab:fb:e1:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzlI5WSt+gIjGB0OEI7/xBQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5 ZmMyYzkwHhcNMjYwMzEzMDMwMDQwWhcNMjYwMzE0MDMwMDQwWjAzMTEwLwYDVQQD EyhmODAwNzdjYTdlZGYzNDQzYTc5NmRjNTQyMGQ5ODE5Mjg3NDRmOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86djZlb30anvoGumOY9QKDgM2NRB WzdMkzf+mRRn2lpRVDsCL4h1YYwnBF71ZbsSLvj4j2Sz6EON0NFMOsB6Sb0TAwk9 hgrEnNW6wva9FDsDo3CQu3rJSc2FOAhHLdG+5D8B4TozJr2CIbJR25sFPM3gY/mR HYlPqyg5ykAfc5H6NR8VIX8zSL4pqj2aCrsGkyMqyyGNppw8bJvnjbeaS4swMC54 nr0U0/0fxoHfEmWkwjGnwnQgvsfikjdIXC8MBhOaxjQyIbsy+Ynxaz+MTBocHkF+ /2TBt5Q/pdE66dg1CeL8XR1aV9PeLEZuZdgoTFcfDn7ghzJf+MqUgS5uMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgAd8p+3zRDp5bcVCDZgZKHRPj+MB8GA1UdIwQY MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct MWM2ZWU0NGUxMWFkLzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQ94e8dG efwb5GTL+DLKL6+KfSDwDLpUDVgAQjUzSuosiOLLR+7YilIT2QTCXkanntCRfyyV 4sLTdh9XiiKyXjxvY3rtcaFFXsY5sFQfcqhsfepNMJmePauI51cim+Yf/5yfBHeL NTGJp4HImFPSLkgJHfYf62QAHLC94YTvKLSQJ4R5IeWebTEezrOlCXfPk4CD4y9h kkwTmJeDibQmc/tOxGOzRjcOLAzJ2Trmw2q/8B0mzkouuYvX8UYZ2fwmIWC7BNld qMQuS5GAgdEfKY12jQmf9/0/USyc7NXGWT9ElJj1UUhHxwk+EnAokAqUJtc270cm Z8+zPJEjq/vh8w== -----END CERTIFICATE-----Generated at Fri Mar 13 06:06:13 2026 by rpki-client