$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json) Hash identifier: 4XdUoDQD1halxSsXtABTAuaR4sdb+JT6G058hT5R8xo= Subject key identifier: FC:5C:60:4D:D6:8F:DD:D3:F9:A2:0E:F0:F7:C0:E6:54:7F:FA:33:2E Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019E284B76D9C558F5E691F0C0EB8BCEE953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft Manifest number: 14FF Signing time: Thu 14 May 2026 21:01:34 +0000 Manifest this update: Thu 14 May 2026 21:01:34 +0000 Manifest next update: Fri 15 May 2026 21:01:34 +0000 Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: ThK6DfldGkWMxIK85E0uRz4+AM5uoODnUc8GamihJOo=) 2: 3SoEwaHYmzBhPq3SqrK7-97FxfY.asa (hash: DUPJ+1lMqiRx5QPupK6EYyCTyvEki+rd8cq0JTEqc4k=) 3: 4dRn2JrP2QCTAWF-YiqGTdGG-aY.asa (hash: 5OSvsuPPRn9OvkRvh/NzOUAFS7gn9Nx/H8X3BJxRZYE=) 4: 7n21j0arkV0i_T2sVOrocRSEjSQ.roa (hash: 4uQJyIy3PMd9RTNB8+vJy+PcEdAqthYjAtrKR+jgLzI=) 5: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=) 6: JoeiFWNjjvIPOlROi_VGGMgQhvU.roa (hash: zb+eHGR6nD50fILOA3y9cV4VqzOKkbibkd0YSA6RbyM=) 7: KJiyDl7iQPSHbczb71sauO3rVJk.asa (hash: xzLdynVvAziPI6SDyPFLHYP7bi2ATNLAOqyCRqeT3is=) 8: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=) 9: M8G0hHzNaUEBYlJ18I-LLmZFBKM.asa (hash: 1CwhbIx2C5nHDxmbbu2xhBW2STO+MmyMS7p2LGmo9hk=) 10: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=) 11: T5M14oqasE4RWqdrD07qXbN8eGY.asa (hash: OCqN8M2KvS/h05iREDnHi+l1MPqvKGu7Rk6ZjCf3xcE=) 12: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=) 13: XHeb1AmUfX1kngDYx7cK3_EIu7Q.asa (hash: y1sVzdki0bbI48xSY39Q5D3JsNtDyY7oJ/qahJmputE=) 14: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=) 15: mwjxtKPuHdDhkzcGADt1aiLxCIc.asa (hash: Wy5bjzVJWOG5tUKCM7dwY8G4WJIDxlDcCw2Ld4jrHPw=) 16: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=) 17: xVaYIBw7M6bRv3MOmzyAcV4by3I.asa (hash: PgzXvKG2TR216H34m8dFRwASPrUVU9Y5qcUdR1XkLTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 15 May 2026 21:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:28:4b:76:d9:c5:58:f5:e6:91:f0:c0:eb:8b:ce:e9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: May 14 21:01:34 2026 GMT Not After : May 15 21:01:34 2026 GMT Subject: CN=fc5c604dd68fddd3f9a20ef0f7c0e6547ffa332e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:51:5d:26:22:09:71:d8:5f:37:30:46:db: 71:18:54:38:28:a3:21:d9:83:f2:1e:95:ce:d3:89: cb:d5:11:f5:c2:54:99:1d:66:d2:2f:ba:68:94:b7: 41:34:80:07:76:94:b8:2c:4c:7b:87:5e:0d:34:62: a6:b7:79:aa:70:a8:d4:56:d7:ff:b3:79:79:81:d6: a9:6a:b0:4c:37:c0:75:9f:6b:35:fd:11:48:fd:a4: e9:c3:ff:16:8b:6c:ca:2f:c6:47:eb:ed:4d:90:ce: f1:07:fe:3e:ff:58:19:eb:bc:67:91:09:f7:6a:0f: c7:c6:02:1c:e0:30:a6:13:c0:7d:43:9b:9d:ec:ad: 5b:71:4a:42:22:43:34:f7:38:14:6c:41:16:ac:62: 5e:d9:ee:58:55:4d:59:d7:e7:92:cb:61:3a:1e:63: 9c:15:ea:62:06:f4:7d:5e:3f:0a:4d:36:e2:b1:18: 41:0a:4b:23:03:14:ed:fd:02:f9:d4:3c:f7:a8:39: c1:9f:5e:54:1d:56:d3:b4:c2:45:0a:36:c5:d8:3b: e0:3b:cd:b2:29:75:d5:38:8e:7a:e5:94:48:23:1d: a8:77:84:c1:10:41:94:fd:59:66:0f:f4:fd:69:78: 73:a9:b1:fb:a2:e9:8f:a1:9c:5c:3e:20:f1:b5:1c: 6c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5C:60:4D:D6:8F:DD:D3:F9:A2:0E:F0:F7:C0:E6:54:7F:FA:33:2E X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9e:a8:5a:10:d8:92:ed:78:74:b2:1e:b4:f7:5c:a9:12:47: 5d:74:d2:ab:78:06:4a:51:da:66:e2:c3:c4:4d:29:4f:66:83: 33:11:d0:16:83:6a:3d:af:3d:dc:17:cc:63:b3:1e:04:57:e2: 00:e6:de:8e:ae:2e:ca:34:ff:8c:d3:27:6c:cf:0a:77:17:fa: 5f:23:e6:fe:2b:96:0b:8c:d6:bb:aa:ac:42:b2:20:05:c3:f9: ba:73:36:11:b9:c5:73:eb:0f:a3:00:e5:eb:7a:b1:cd:ae:8f: 1a:1c:91:42:86:5d:2d:9e:50:d5:0c:92:4d:15:bb:a5:e8:c3: 84:ed:93:6e:41:8c:27:1a:e1:3c:db:ba:d3:ef:f1:63:81:20: fe:44:74:2c:58:f8:58:54:d7:bf:25:1a:f0:59:ff:33:09:fd: c4:d9:77:4c:df:82:20:72:0d:f6:d4:7a:9c:f8:93:3e:a1:62: 47:c9:07:70:7b:a7:60:64:ff:6a:72:28:5e:10:a2:d1:a3:1d: a5:4b:36:ba:f5:4e:8a:31:88:7c:80:e7:5c:98:eb:74:a6:c6: ff:a7:3f:59:26:a9:d0:6e:5c:ce:1c:90:a7:dc:ae:9c:71:8d: 17:29:16:a3:00:ba:b0:7d:4b:3c:7d:11:fb:ec:64:34:60:18: 62:c2:00:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4oS3bZxVj15pHwwOuLzulTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjYwNTE0MjEwMTM0WhcNMjYwNTE1MjEwMTM0WjAzMTEwLwYDVQQD EyhmYzVjNjA0ZGQ2OGZkZGQzZjlhMjBlZjBmN2MwZTY1NDdmZmEzMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEdRXSYiCXHYXzcwRttxGFQ4KKMh 2YPyHpXO04nL1RH1wlSZHWbSL7polLdBNIAHdpS4LEx7h14NNGKmt3mqcKjUVtf/ s3l5gdaparBMN8B1n2s1/RFI/aTpw/8Wi2zKL8ZH6+1NkM7xB/4+/1gZ67xnkQn3 ag/HxgIc4DCmE8B9Q5ud7K1bcUpCIkM09zgUbEEWrGJe2e5YVU1Z1+eSy2E6HmOc FepiBvR9Xj8KTTbisRhBCksjAxTt/QL51Dz3qDnBn15UHVbTtMJFCjbF2DvgO82y KXXVOI565ZRIIx2od4TBEEGU/VlmD/T9aXhzqbH7oumPoZxcPiDxtRxs2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxcYE3Wj93T+aIO8PfA5lR/+jMuMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc56oWhDY ku14dLIetPdcqRJHXXTSq3gGSlHaZuLDxE0pT2aDMxHQFoNqPa893BfMY7MeBFfi AObejq4uyjT/jNMnbM8Kdxf6XyPm/iuWC4zWu6qsQrIgBcP5unM2EbnFc+sPowDl 63qxza6PGhyRQoZdLZ5Q1QySTRW7pejDhO2TbkGMJxrhPNu60+/xY4Eg/kR0LFj4 WFTXvyUa8Fn/Mwn9xNl3TN+CIHIN9tR6nPiTPqFiR8kHcHunYGT/anIoXhCi0aMd pUs2uvVOijGIfIDnXJjrdKbG/6c/WSap0G5czhyQp9yunHGNFykWowC6sH1LPH0R ++xkNGAYYsIAog== -----END CERTIFICATE-----Generated at Fri May 15 06:15:34 2026 by rpki-client