$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft File: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft (raw, json) Hash identifier: 5NDs7pvZXkbcdJpLG19z1diiAZjKFjStmV2VSOey7UM= Subject key identifier: 50:28:6C:9C:42:B6:35:3A:AE:CA:E2:C4:E5:0D:1C:52:30:22:36:BC Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1 Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1 Certificate serial: 01A09623CB3248A129E59D24F92431AC493E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft Manifest number: 0239 Signing time: Sat 12 Sep 2026 15:02:03 +0000 Manifest this update: Sat 12 Sep 2026 15:02:03 +0000 Manifest next update: Sun 13 Sep 2026 15:02:03 +0000 Files and hashes: 1: 0PwBP1m5V8tHPFCHGGYOau0rRTc.roa (hash: M0W/FLJbKezFVRY+boZRSGO4f4RhltYple/V23X0j4c=) 2: 1vK1T7KdFH0hBpOuHuKe8W_luZE.roa (hash: qhZOYXpVTc+RHC0IfCFs2RzEIVYZAgoD6YvTFLHwFmE=) 3: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl (hash: WPZ0CiBHDOjwi6OauvuZMUJOuMK+ngP5bbJtWcODUlE=) 4: JcePCXWu8_9ZZzjxfVygKM8dWzw.roa (hash: 0S4YgLpuoSBRqOUxV6YpZdqEiuMF4cz82gQj2otpNQw=) 5: Md-o3lGIoXUo9ynVTwQnDQUNyzM.roa (hash: AWCf1DkAv4fQq3K+BQw40VyMuDn4MGmNjixx31UPhmA=) 6: Nd6V0QCloRDIZfwDcQtVL1w6Z0A.roa (hash: TIjs2IbFM1v00nTvmxBW2uHZechx9jNZhQSCyvBAeP8=) 7: O9sJ-_TKMq6bS7__E1UX2XB1imA.roa (hash: +Z6Yn/3PglFToHJ9MMw/pkkVUwEYwsRd5WZO7o88I9I=) 8: QEGryiURhVI85Y_iwFPpO1kjb3E.roa (hash: f7QZn8PJdOvgT/DCDoEpmb1SfJG64+IFdudonB3DpJU=) 9: S64PRp6HfgfeBA5dqF_nm378oSE.roa (hash: KH+IlbpUNkPXeoQclXeI5i/KLaVnfhqbd5izf4u4qTc=) 10: SHnHAD4XActufnWbDbBuCezR5sk.roa (hash: nenlz/3VAG7POjOi6mcs6RNeMaF2/86fDvCTf+cSRc4=) 11: Sq_qOTsf7wVB0vwgreS3nB_jIPk.roa (hash: OK/CHpHTM2yPPc6litBPMbap80Y0eTVdGYncN8WvmXg=) 12: VTvDdxCNdn_BPeZovGaO3zvHn-c.roa (hash: /82kfcvdmxFyaaXRLhtB6elmf3XA4bQBsOc05JD7WPw=) 13: XZAVpeao-MzWMM0T1IBuo6mJOhw.roa (hash: 4OhzlwI1uDhgkruwa46Ix7LBdf/mbvESkAg3CQYlmdQ=) 14: bGTHKMCwmJVzyHYU3KNYDg0jpi4.roa (hash: t9eEDkdFYwdSvb8hr3A4ec+b83VLHsVFWQATSd2+69k=) 15: bTLlcnL0Fm_nCJarfemQWZlQvug.asa (hash: +U6OavydfvrqqdI9vdtdZM6LAnVLXxOVl7v9NGcpnyo=) 16: fYhnGLcy2_Ou27KADH18mycTzz4.roa (hash: sP66OdJ/+I0oQxB3kcnMaYSOI2OOAjekthsNq69mxkE=) 17: g9eBBErf7cGntKTfm3PnpI6Ysa8.roa (hash: L1Y5INt4k++fXqtaolFcZdxOvA8W927R6H65T4L/Fcg=) 18: vSXSp5A3lM38ZHU363V73iY2sOY.roa (hash: OEc0FstKUDyge4yjj89lJISWQxLtMasQvdcX8uQFwbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 13 Sep 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:96:23:cb:32:48:a1:29:e5:9d:24:f9:24:31:ac:49:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1 Validity Not Before: Sep 12 15:02:03 2026 GMT Not After : Sep 13 15:02:03 2026 GMT Subject: CN=50286c9c42b6353aaecae2c4e50d1c52302236bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:40:11:80:1d:31:93:c7:f9:42:fa:35:b8: 8e:c9:a2:58:56:38:f2:50:28:5b:9d:af:21:29:14: a5:2a:a8:7f:6e:2a:bb:5c:49:f0:61:e1:7f:01:47: 36:e4:d0:a1:38:8f:9d:3c:5b:94:4b:3c:53:23:32: 07:40:49:fb:66:fe:7d:b9:d2:27:fb:9f:32:8a:75: e0:fe:61:6d:f3:f8:0f:f6:25:4d:0c:18:d3:ae:0a: 31:82:89:a8:a7:3c:02:69:40:10:7b:ef:94:36:2e: d8:22:37:b6:51:b3:07:d9:af:d6:3d:f1:39:77:ab: 6d:ae:88:6d:97:b0:6a:d1:dc:60:0f:82:a1:bb:ae: 0f:6d:ea:fd:a7:33:ad:a6:40:e8:b6:67:65:ee:30: e0:11:17:95:38:45:2c:a6:59:bb:e5:a3:9e:4b:4f: 8a:ab:0c:02:22:a6:8b:83:24:dc:dd:f0:9c:db:53: e5:c9:5c:97:16:01:fe:b0:8c:77:e5:f3:41:41:11: 7d:fb:38:6c:73:00:29:7e:aa:15:38:9d:4f:28:c5: 6a:96:a0:e8:48:bb:5e:3b:7d:6d:45:62:4c:51:11: 6e:ad:15:93:9f:b8:ca:e0:e7:22:38:46:32:e7:c7: cc:e1:af:c5:1c:ec:89:48:2c:39:5f:a2:00:cc:3c: 39:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:28:6C:9C:42:B6:35:3A:AE:CA:E2:C4:E5:0D:1C:52:30:22:36:BC X509v3 Authority Key Identifier: keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:75:01:38:be:02:37:79:d0:9c:d5:bf:ad:fa:f4:4f:92:a6: ff:e1:0c:23:c6:12:2e:cf:e3:76:13:b5:c7:84:d5:43:ea:df: 89:d3:e8:72:d4:4f:52:88:44:39:12:5e:ff:dd:50:08:3f:00: 70:58:39:60:11:93:a7:7f:ad:e1:07:93:31:98:0b:3c:16:b8: 22:6c:9b:1b:18:dd:e0:e8:08:77:94:0c:2f:6e:2b:fb:4d:e9: 1a:3e:b1:ea:8e:57:c4:3b:fe:48:fd:0f:32:b5:31:0e:ae:c6: 60:3f:4f:a0:81:bc:63:23:9a:36:7a:61:79:34:ea:e6:16:25: 81:3b:21:2d:70:1f:97:be:55:88:d1:ef:66:8a:ba:7c:8d:58: aa:db:ff:f7:a1:59:f6:c8:00:f0:17:31:1a:16:ab:22:89:4b: 80:4a:05:ae:c9:ae:5a:c4:37:2f:72:ff:9a:9b:4c:05:8d:59: 43:b7:6b:ad:47:07:65:7c:6e:18:3d:07:da:2c:eb:0a:4f:bf: df:9c:d0:0d:29:52:8a:fa:d2:dd:e6:ec:25:b5:10:63:fd:6a: d5:94:7b:4c:99:81:b2:c5:33:37:91:f0:20:6c:eb:68:b0:68: f9:df:dc:dd:6c:4c:29:53:3d:d4:f8:e4:e9:47:63:2f:d0:49: da:ac:c4:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCWI8sySKEp5Z0k+SQxrEk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMGJkY2M0NDQxNzNmNTk5NGRlMzRhM2JmNjNmM2FkOTc2 NGM2ZDEwHhcNMjYwOTEyMTUwMjAzWhcNMjYwOTEzMTUwMjAzWjAzMTEwLwYDVQQD Eyg1MDI4NmM5YzQyYjYzNTNhYWVjYWUyYzRlNTBkMWM1MjMwMjIzNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W5AEYAdMZPH+UL6NbiOyaJYVjjy UChbna8hKRSlKqh/biq7XEnwYeF/AUc25NChOI+dPFuUSzxTIzIHQEn7Zv59udIn +58yinXg/mFt8/gP9iVNDBjTrgoxgomopzwCaUAQe++UNi7YIje2UbMH2a/WPfE5 d6ttrohtl7Bq0dxgD4Khu64Pber9pzOtpkDotmdl7jDgEReVOEUsplm75aOeS0+K qwwCIqaLgyTc3fCc21PlyVyXFgH+sIx35fNBQRF9+zhscwApfqoVOJ1PKMVqlqDo SLteO31tRWJMURFurRWTn7jK4OciOEYy58fM4a/FHOyJSCw5X6IAzDw5GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAobJxCtjU6rsrixOUNHFIwIja8MB8GA1UdIwQY MBaAFPAL3MREFz9ZlN40o79j862XZMbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYt Y2ZhNWE0Yjg5ODZiLzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYtY2ZhNWE0Yjg5ODZi LzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXUBOL4C N3nQnNW/rfr0T5Km/+EMI8YSLs/jdhO1x4TVQ+rfidPoctRPUohEORJe/91QCD8A cFg5YBGTp3+t4QeTMZgLPBa4ImybGxjd4OgId5QML24r+03pGj6x6o5XxDv+SP0P MrUxDq7GYD9PoIG8YyOaNnpheTTq5hYlgTshLXAfl75ViNHvZoq6fI1Yqtv/96FZ 9sgA8BcxGharIolLgEoFrsmuWsQ3L3L/mptMBY1ZQ7drrUcHZXxuGD0H2izrCk+/ 35zQDSlSivrS3ebsJbUQY/1q1ZR7TJmBssUzN5HwIGzraLBo+d/c3WxMKVM91Pjk 6UdjL9BJ2qzEgw== -----END CERTIFICATE-----Generated at Sat Sep 12 20:55:13 2026 by rpki-client