$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json) Hash identifier: BCIR8l+493SKH9eAQlTPvDHUg40ErS4gpncsM+6gbeo= Subject key identifier: 2E:1F:BA:AE:E2:34:A4:6B:48:F8:74:7D:88:AC:57:82:29:15:1F:3E Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 019DCCAAA12E283ECC09E2CD2C10F9EB373D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft Manifest number: 1930 Signing time: Mon 27 Apr 2026 02:00:27 +0000 Manifest this update: Mon 27 Apr 2026 02:00:27 +0000 Manifest next update: Tue 28 Apr 2026 02:00:27 +0000 Files and hashes: 1: 0fgHNVCctmMI1V-BS5_kF5EsiOU.roa (hash: eNuhCbiq7TJi88XjDE039hLZRz8ipxup9WRLp8sp1DI=) 2: 7_6SFXfZMrzFSdtu3xDOw0gJ8JY.roa (hash: hG4yO49oHj9b8DfZFiphyKQ8y3qDFd1bbzb1jH4CrQU=) 3: DF7ZMArr7YQkP6JCvTXnJ48GG1g.roa (hash: h0YoBkA2Ma+7OTVVfQXFtJdLdFlpvKYuPy7+Y+Jklhw=) 4: Ep-mQB2FAsp8xVwfqHWWTFWTlYM.roa (hash: CcqzWZ6bMIWysh3kKgYdOQMLPUZ4shI2ek8KjLM+54s=) 5: GujJ-FoV2NxCphoiy9ei8Zxbj94.roa (hash: 5qyX0xcJQK2tt6fcmxtTs5x5YBwoFGMWlBym7IBYHmk=) 6: MuQyieCgxPJT0SRv6Xj_GxkiB-I.roa (hash: 0pzaFGjjnJFM3Mi6/Z0qJhoLAoydrAANnuMwOCc5Kso=) 7: P7wv0TBgiECiEBUf1EgkMnv47Po.roa (hash: rqQESPX4LWrWYgKl1zOfXltaaGJ18DHxc3dAwU1KR9k=) 8: Q1yzAo5L9w5IHv0JqXbg9yCMMcU.roa (hash: qLGf0LLtEidrk4nWv5exOU1LPTUa9MuB+3L8YC0+hbc=) 9: QLx_bFpLJ0q7OGCLe6wvYzJoLrw.roa (hash: XQYgd3zzuTttV8zp0GzxyEY68F4NaIMjIG/jCEfOzec=) 10: RjNeSA3OdSgfuKyXCw4On9Hfwig.roa (hash: TGS0IFEq2/Ak8/1sB2LyNa9KTXiGL21lniik5j5gU80=) 11: T5XQh9j95-eHLk4tIkpyKU927L4.roa (hash: YLS+fL7b3BgU8PYEgqxRvmWh3Kk8TcAGqvr6h5p+gtg=) 12: X_eS7uT76Tv6lToj2nDNeg9sgYo.roa (hash: rlOOw1Hh+1Gv0+quXstdSdljOaXwuIQS08R8cOH2H9E=) 13: YRVJ0Gjf3ToFSXg4tQ2csynme1g.roa (hash: +3oRd6tn6dDyNGcRR/+Wdu79deA/W9QRUODpof/4dqI=) 14: YVly3HyFx4cO-VDnGW8-TlLZp8c.roa (hash: zmddt2tM/OfIW2jjFDZBhz9+RtNwb/OeGPoKv5WQBq0=) 15: f_U1wlpu2o8G1EDSBfG2v3CJsrU.roa (hash: mBEZgenCoBMKSBIbKUgW3oXM9LSYHALYDi8zO9xe4lk=) 16: gkBIXWPDqd5iHgTo6Oq_RIYuttI.roa (hash: TAAZ/5Q3PgiVYAsyiVs0eY43VCN4PWzuxjaw3+oWC3U=) 17: l8R7A1sksjUkbsqqgmFV4yhnwoY.roa (hash: tOD+/L6A4hjUPcMiH0jbILCqY006lQVa6EOA+rm4RSY=) 18: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: Jx13L13RxXNytFe7dU5glaiZfYEgMvZB3BUmCn1RSxU=) 19: qHqVroTNd8mAZUTP-4LLTihEjRA.roa (hash: LFqfsvqUg1kryv3SdZmfz1fPpVN8XkzwNYvHfBdV5dM=) 20: sIdlwG_KvJyr9jN9d5KfNvyl-ws.roa (hash: HSdj5IIYXsemUlbbPFPUMMU0DovDtEclq0qz0Z73zr0=) 21: z2b5HqrBbNton83_qG8fiGl3ipE.roa (hash: /MzZQY5wAz0d5qSw7Z9ljmH3Z0SZhJHz2o3BPZIFhmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 02:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:aa:a1:2e:28:3e:cc:09:e2:cd:2c:10:f9:eb:37:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Apr 27 02:00:27 2026 GMT Not After : Apr 28 02:00:27 2026 GMT Subject: CN=2e1fbaaee234a46b48f8747d88ac578229151f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3e:5d:61:8f:29:03:df:2c:f6:bb:2a:40:d3: 3f:80:65:bf:1d:82:fb:85:35:4f:b5:32:0b:f6:b0: b5:90:47:cb:5b:ce:ef:d9:6f:37:bb:c8:11:e0:6e: 14:3a:0e:1f:a3:0e:98:e0:8d:9c:20:94:42:01:a9: b0:7b:4e:b9:13:28:ad:34:51:6c:88:e5:f1:5c:fe: f1:57:96:dc:e6:65:40:71:3f:34:14:49:31:2c:95: e0:20:6d:35:75:85:11:7b:92:f8:e1:ec:71:f2:cb: ad:bb:bd:28:98:dc:52:99:4d:0a:b4:a3:6c:32:0b: 55:e1:06:be:dc:00:fa:7f:5a:e2:e9:0d:5b:ed:80: 22:ae:38:d3:54:7e:e5:b4:09:2e:cf:84:45:e5:44: 3b:c1:89:7d:0f:36:bc:42:c2:14:3c:6c:91:79:5f: d8:72:a5:36:62:0e:34:7c:13:94:df:2e:cd:b0:1d: e3:e6:ad:c4:97:01:1d:23:30:85:4d:01:46:3d:aa: eb:bd:f7:68:d5:d6:57:3f:70:8a:fc:c2:89:a2:64: 7f:25:67:57:c3:aa:97:8c:6b:65:da:e6:e0:d5:1b: 84:3b:b8:d1:fe:35:9e:c1:5c:b3:b3:57:1f:3f:9a: c1:94:40:6d:3c:8f:57:86:9d:db:5a:6b:9c:4b:9f: 94:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1F:BA:AE:E2:34:A4:6B:48:F8:74:7D:88:AC:57:82:29:15:1F:3E X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:68:1e:07:4c:bb:2c:e4:21:ef:95:38:b0:1d:67:d7:85:09: 12:3b:02:d2:54:ff:8f:48:75:6e:e8:9e:48:69:b8:a2:c9:df: 46:30:4d:24:c0:30:ed:75:ce:a4:99:04:1b:b9:c2:10:5d:c6: 27:a1:91:b3:b6:fc:dd:f2:13:0f:bc:6b:00:a6:46:b1:a0:65: bb:53:7c:22:a5:da:6e:9a:f7:6c:b7:f7:4e:0d:36:be:46:c5: d1:75:31:03:84:e3:61:39:d2:41:9f:21:48:b1:26:44:b1:00: 4b:de:e2:00:ad:dd:b1:a3:1a:1e:07:bf:aa:96:9f:37:c3:e9: 08:7c:dc:5e:11:e0:a7:82:d2:ca:28:e2:69:16:03:0d:cb:70: 11:a0:1e:65:08:97:6b:39:48:80:eb:bd:ae:4f:15:2b:b3:2c: fd:fb:5b:16:62:47:cb:70:f3:dc:9e:0b:af:7d:73:f4:55:6e: be:1e:0e:48:c6:ad:06:4b:5a:42:66:62:d8:4b:40:3e:14:2c: e7:f7:bc:28:38:9c:9c:f8:0a:53:8f:91:68:64:02:23:50:d4: 66:64:09:12:86:70:57:06:9d:a0:ed:ee:48:2e:ca:d2:2e:04: b1:d2:18:79:ff:fc:9e:82:c2:05:f8:c5:4c:f9:e2:00:14:c4: 28:e7:a7:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MqqEuKD7MCeLNLBD56zc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjYwNDI3MDIwMDI3WhcNMjYwNDI4MDIwMDI3WjAzMTEwLwYDVQQD EygyZTFmYmFhZWUyMzRhNDZiNDhmODc0N2Q4OGFjNTc4MjI5MTUxZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D5dYY8pA98s9rsqQNM/gGW/HYL7 hTVPtTIL9rC1kEfLW87v2W83u8gR4G4UOg4fow6Y4I2cIJRCAamwe065EyitNFFs iOXxXP7xV5bc5mVAcT80FEkxLJXgIG01dYURe5L44exx8sutu70omNxSmU0KtKNs MgtV4Qa+3AD6f1ri6Q1b7YAirjjTVH7ltAkuz4RF5UQ7wYl9Dza8QsIUPGyReV/Y cqU2Yg40fBOU3y7NsB3j5q3ElwEdIzCFTQFGParrvfdo1dZXP3CK/MKJomR/JWdX w6qXjGtl2ubg1RuEO7jR/jWewVyzs1cfP5rBlEBtPI9Xhp3bWmucS5+U9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4fuq7iNKRrSPh0fYisV4IpFR8+MB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGgeB0y7 LOQh75U4sB1n14UJEjsC0lT/j0h1buieSGm4osnfRjBNJMAw7XXOpJkEG7nCEF3G J6GRs7b83fITD7xrAKZGsaBlu1N8IqXabpr3bLf3Tg02vkbF0XUxA4TjYTnSQZ8h SLEmRLEAS97iAK3dsaMaHge/qpafN8PpCHzcXhHgp4LSyijiaRYDDctwEaAeZQiX azlIgOu9rk8VK7Ms/ftbFmJHy3Dz3J4Lr31z9FVuvh4OSMatBktaQmZi2EtAPhQs 5/e8KDicnPgKU4+RaGQCI1DUZmQJEoZwVwadoO3uSC7K0i4EsdIYef/8noLCBfjF TPniABTEKOenSg== -----END CERTIFICATE-----Generated at Mon Apr 27 11:58:06 2026 by rpki-client