$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft File: 8uFg8M5eA1rzyyH039BOq56n7lE.mft (raw, json) Hash identifier: GV07U+LLiJT2B1KLs7mQ/RHDQcz/STFv/UpMhle5v3M= Subject key identifier: 74:A9:0F:97:3C:D5:AF:29:93:D2:DF:41:2A:B9:E3:4D:40:B2:9E:49 Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Certificate serial: 01A17EF3BB5E7092701B0357CD6A4531032B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft Manifest number: 0305 Signing time: Tue 27 Oct 2026 20:01:04 +0000 Manifest this update: Tue 27 Oct 2026 20:01:04 +0000 Manifest next update: Wed 28 Oct 2026 20:01:04 +0000 Files and hashes: 1: 04GWQbwmgobD06Lv3pwY3XfurdQ.roa (hash: RWe8M5t08UcrE+4pD8aGK2oxIHVHI8ir5iUDM91fMiQ=) 2: 1-BXJvjRZK9EAgxmoIL9zEqtie4U.roa (hash: eIjaA6tFXeGOC8TZxrzK/xbOybNP9upJeQZsoLhhvCc=) 3: 8uFg8M5eA1rzyyH039BOq56n7lE.crl (hash: 3l1lrWFQ2zNUKTBfj/6u8ojShupY8UCciqPAPoCMP00=) 4: FRRRnwExpXw7a2MuDv5ABSNE0os.roa (hash: 3ZQFCRFjP8UeMQLhH1/qjBrVW66rsV7z4ra4rGbF/Rk=) 5: G_UPWjhIcvhRhbrsCzFiU4-Xung.roa (hash: 047QljbRvFtkey6qy1tumtUXHbVbw0WiHtNwMdYTktY=) 6: IYhXGcvuReRwLkKFqkHfMT0xdMQ.roa (hash: P65YHmORj/Qbi7gb1HICB61t5DJTFwQfC/ueE2C3wHQ=) 7: LD4LiJakMnd2fM_muaGzK3OCDm4.roa (hash: 06z+15zWX5rCsS3FhV81kHp2Sa4vXMzL9qdPTiJ9zeM=) 8: ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa (hash: HIvZs/TkMx+bymwhUhZwvlQVHu6QM24ito4FjiIQX2c=) 9: ZjMYC0UoF-rr4Yr68ciz53_Avuk.roa (hash: XSFfC2tpTl7pGI7s34smkuOaa4jrXUiaCPuucJLlqxI=) 10: gDVnbdgyGBxPjaEc46h1SC6bKGc.roa (hash: bRdUEdhFNf/pMvUllLg5PTYpswbssaY0ednf3AqAQx4=) 11: hZDY_be1kSFwRaJu_bmjRKYZiBY.roa (hash: JlJ0ot3QRiIyV/kyXdKpPq9UPa6seZ6FnRLu6fR1FZw=) 12: hxVjN4ViTYov07b0DOLl2w6qTEI.roa (hash: 5T+oFS29RJ0l8yQWiVqg0MoWL/i6NlSEWAxcmSYEMqE=) 13: ilqY9c8IbcEKTWk24AXRgSNrWO0.roa (hash: m73bbuMRMSiNr5UeY5P6BQ8Ud8zaXgZ2oA4zOG5Tf2M=) 14: s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa (hash: OKS1HAKlGU2JN5vzskZAI17mKtPa16rejzU50FR3zwM=) 15: sGNYZDKF8s8_UsTeuK9XpTB6Wkw.roa (hash: gaT8D+qDaVi3KbUN95vQ0WglNN0OnaGWaUxlYVphb+c=) 16: v_MCckuvkmHRzh3YWE8nt-ZoR54.roa (hash: FGgmeFbXcFcehxYNJD3aNuzFTZwBgyIrsfMAVTMWYLw=) 17: zykPnjolFt2OKhMEu2SeOAG0N3k.roa (hash: vMmczSDv2P7kmvRApRVGBrOXghKNhAgyXktPnIT3lVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7e:f3:bb:5e:70:92:70:1b:03:57:cd:6a:45:31:03:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Validity Not Before: Oct 27 20:01:04 2026 GMT Not After : Oct 28 20:01:04 2026 GMT Subject: CN=74a90f973cd5af2993d2df412ab9e34d40b29e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:a5:bf:be:8e:aa:92:70:f8:e5:ff:91:0e: 60:3a:fa:25:86:78:a4:2e:69:8c:1a:e4:db:1b:f6: 74:c2:43:df:05:f8:b2:8a:fb:ef:f1:a8:a1:ea:b0: 16:98:3d:57:c9:cb:b7:98:31:c0:13:40:e8:aa:42: 3c:62:ce:d1:78:83:5f:e9:9c:62:5d:b2:cb:fa:ea: b3:bb:47:0b:1d:c1:f1:21:d3:27:7d:47:ea:2c:d3: 1c:98:9d:db:0f:79:e2:9e:3a:39:b5:7a:87:9c:2b: d1:ae:7b:17:bc:43:af:94:ca:32:8c:92:dc:39:b1: bd:29:78:1e:c0:c1:fd:86:43:86:ac:e7:37:54:65: 60:8f:7f:78:a5:d7:cb:c7:b7:14:67:f5:10:e9:45: 26:fd:37:80:d5:87:bc:b8:2d:5e:5d:0e:38:bc:97: b3:21:3e:60:51:76:07:43:fd:ee:6d:a8:76:57:96: 28:93:76:84:51:fd:80:9e:51:00:52:b1:54:33:6e: d1:fa:3a:1c:eb:71:b2:7b:51:9e:01:a3:3d:de:59: 5a:da:3d:7d:6e:a2:c8:95:9f:ce:d5:fd:dd:c0:ed: 42:56:4c:93:6f:47:29:19:8b:bd:a0:8e:83:d4:37: 6e:65:c6:3a:1a:52:4c:9e:87:66:b0:df:fc:48:f9: 6d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A9:0F:97:3C:D5:AF:29:93:D2:DF:41:2A:B9:E3:4D:40:B2:9E:49 X509v3 Authority Key Identifier: keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5c:db:15:98:03:69:ed:e7:90:c1:e5:05:73:5c:78:04:b2: 11:87:09:53:e2:02:cb:ae:70:4a:76:32:b5:fd:e9:ec:88:42: 2a:b4:89:74:b0:1e:37:6b:40:27:73:6c:c6:a3:d0:ff:85:fb: bc:42:88:32:07:98:4d:97:7c:5b:44:ab:4e:45:74:48:99:82: a5:87:49:23:c8:f6:08:9d:75:5c:5d:d2:27:e0:08:4c:7f:4a: c0:ff:07:ea:59:19:11:4c:5f:95:da:f3:f7:82:37:10:3e:04: 97:e0:cb:45:50:bd:29:b9:39:6d:a9:09:93:22:09:15:89:01: 58:7a:a7:8d:3c:2b:98:60:2c:39:62:09:26:65:e3:f1:e5:51: 0e:dc:cb:0b:0f:32:6c:aa:44:04:9c:72:bc:a5:3f:fc:44:f7: f1:b8:cc:f3:5f:43:bd:cb:f6:67:29:06:c6:48:05:51:5c:d5: 6c:98:36:45:00:b1:75:92:80:2c:25:a8:7d:a4:47:bd:41:21: 14:ce:9e:22:8e:37:97:f7:81:2e:a9:0b:d7:f8:14:f0:fb:1d: 02:c0:1c:af:da:71:05:b2:d4:d1:3d:eb:b0:87:0e:d5:f1:4b: f8:32:20:95:18:34:57:45:1d:06:97:78:20:16:4a:54:9d:49: e9:b3:4d:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF+87tecJJwGwNXzWpFMQMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh N2VlNTEwHhcNMjYxMDI3MjAwMTA0WhcNMjYxMDI4MjAwMTA0WjAzMTEwLwYDVQQD Eyg3NGE5MGY5NzNjZDVhZjI5OTNkMmRmNDEyYWI5ZTM0ZDQwYjI5ZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFalv76OqpJw+OX/kQ5gOvolhnik LmmMGuTbG/Z0wkPfBfiyivvv8aih6rAWmD1Xycu3mDHAE0DoqkI8Ys7ReINf6Zxi XbLL+uqzu0cLHcHxIdMnfUfqLNMcmJ3bD3ninjo5tXqHnCvRrnsXvEOvlMoyjJLc ObG9KXgewMH9hkOGrOc3VGVgj394pdfLx7cUZ/UQ6UUm/TeA1Ye8uC1eXQ44vJez IT5gUXYHQ/3ubah2V5Yok3aEUf2AnlEAUrFUM27R+joc63Gye1GeAaM93lla2j19 bqLIlZ/O1f3dwO1CVkyTb0cpGYu9oI6D1DduZcY6GlJMnodmsN/8SPltJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSpD5c81a8pk9LfQSq5401Asp5JMB8GA1UdIwQY MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt ZmNlMjE0YzZmZmRhLzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUtZmNlMjE0YzZmZmRh LzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1zbFZgD ae3nkMHlBXNceASyEYcJU+ICy65wSnYytf3p7IhCKrSJdLAeN2tAJ3NsxqPQ/4X7 vEKIMgeYTZd8W0SrTkV0SJmCpYdJI8j2CJ11XF3SJ+AITH9KwP8H6lkZEUxfldrz 94I3ED4El+DLRVC9Kbk5bakJkyIJFYkBWHqnjTwrmGAsOWIJJmXj8eVRDtzLCw8y bKpEBJxyvKU//ET38bjM819Dvcv2ZykGxkgFUVzVbJg2RQCxdZKALCWofaRHvUEh FM6eIo43l/eBLqkL1/gU8PsdAsAcr9pxBbLU0T3rsIcO1fFL+DIglRg0V0UdBpd4 IBZKVJ1J6bNNOQ== -----END CERTIFICATE-----Generated at Tue Oct 27 22:53:00 2026 by rpki-client