$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft File: 8uFg8M5eA1rzyyH039BOq56n7lE.mft (raw, json) Hash identifier: r38sJwZQj9F7DyzhGP8sHnIsXgq4i1EM+ZYB7y6jZwo= Subject key identifier: 60:DA:98:F1:6A:99:88:10:43:F8:E7:19:D6:87:38:79:4C:AF:9E:E3 Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Certificate serial: 019DCD1884300F3F63509CFC75F3D55FEE32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft Manifest number: 0105 Signing time: Mon 27 Apr 2026 04:00:29 +0000 Manifest this update: Mon 27 Apr 2026 04:00:29 +0000 Manifest next update: Tue 28 Apr 2026 04:00:29 +0000 Files and hashes: 1: 8uFg8M5eA1rzyyH039BOq56n7lE.crl (hash: PpWKNo+DAu4adSFMLnwmRc6iZOw1L/ujZsyHLvwoMQU=) 2: BSsRECuRcbwMW98kdWWK05egVBw.roa (hash: ug6KO2Zk1MrKsNXGJ9omTpAuU0xr+emz7VoOCmkwvpw=) 3: FRRRnwExpXw7a2MuDv5ABSNE0os.roa (hash: 3ZQFCRFjP8UeMQLhH1/qjBrVW66rsV7z4ra4rGbF/Rk=) 4: IYhXGcvuReRwLkKFqkHfMT0xdMQ.roa (hash: P65YHmORj/Qbi7gb1HICB61t5DJTFwQfC/ueE2C3wHQ=) 5: LD4LiJakMnd2fM_muaGzK3OCDm4.roa (hash: 06z+15zWX5rCsS3FhV81kHp2Sa4vXMzL9qdPTiJ9zeM=) 6: W6axFsn-vbQYLWwnDT47_wx3Q3c.roa (hash: Rtry8Utgwi6S+gFf7iEFH1/gJHIzc/FxYDg1Nh4bbns=) 7: WP5VLGI4ulmSbNxBPukglNbdBRA.roa (hash: RpQ3sBuNfVrqecm0+dZDQsCQlQ/PR1NRrFc8o4XUGjw=) 8: Xly4VLCyL4qx8pSp8FuBHSdiGps.roa (hash: jb5/yBQShc5nvMqwZkFvyoehznPlqSgb+AtitziDdAI=) 9: ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa (hash: HIvZs/TkMx+bymwhUhZwvlQVHu6QM24ito4FjiIQX2c=) 10: gDVnbdgyGBxPjaEc46h1SC6bKGc.roa (hash: bRdUEdhFNf/pMvUllLg5PTYpswbssaY0ednf3AqAQx4=) 11: ilqY9c8IbcEKTWk24AXRgSNrWO0.roa (hash: m73bbuMRMSiNr5UeY5P6BQ8Ud8zaXgZ2oA4zOG5Tf2M=) 12: s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa (hash: OKS1HAKlGU2JN5vzskZAI17mKtPa16rejzU50FR3zwM=) 13: sGNYZDKF8s8_UsTeuK9XpTB6Wkw.roa (hash: gaT8D+qDaVi3KbUN95vQ0WglNN0OnaGWaUxlYVphb+c=) 14: xyq2X_f3zC6Xz55IxSXIUgnM5z4.roa (hash: NjWdv7TCmRAiHCp58PtMucOC3ZgidTmZVOahys71z+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:18:84:30:0f:3f:63:50:9c:fc:75:f3:d5:5f:ee:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Validity Not Before: Apr 27 04:00:29 2026 GMT Not After : Apr 28 04:00:29 2026 GMT Subject: CN=60da98f16a99881043f8e719d68738794caf9ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:8f:c4:36:9e:40:93:1c:71:30:23:d1:95: f0:ae:88:1c:60:7e:c3:15:4e:a3:54:1b:b7:44:9b: 98:dc:99:76:61:52:94:a4:a7:dc:6a:89:37:fe:f5: b0:f0:09:7d:ab:62:3e:4f:95:cf:4e:d0:fc:35:77: d4:74:19:6a:b3:d2:e9:d9:f3:aa:be:a8:aa:55:0f: 37:1e:0b:c6:80:bc:2d:b5:a1:89:26:7c:37:e9:08: 43:45:bd:c5:5d:d6:f9:81:e3:47:c0:3c:92:c7:fc: 65:69:cb:79:06:53:9b:8c:84:cd:9e:86:20:3a:7d: a9:ea:e1:0a:9b:94:ce:4e:d2:13:2b:cf:92:e8:5c: 44:a4:15:d4:b4:70:52:0f:14:8e:b1:96:0b:d6:a0: b9:75:eb:47:51:e4:d0:fc:e0:6a:b5:88:34:12:49: 90:3e:e8:0d:5c:c3:63:8a:01:7a:b1:49:20:a4:7a: 41:2f:70:dc:ef:42:7b:bd:d8:2f:3c:bf:74:9e:9a: 83:5f:f7:a8:99:54:f0:32:4a:f1:2b:5f:a4:10:c9: b9:95:96:3b:91:a3:93:18:52:02:32:a4:4f:dc:89: b9:65:1c:f9:61:70:d6:00:fd:2f:e6:31:2d:33:c6: 49:b8:61:0f:a4:33:be:b0:8b:20:9a:4a:18:d9:9d: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DA:98:F1:6A:99:88:10:43:F8:E7:19:D6:87:38:79:4C:AF:9E:E3 X509v3 Authority Key Identifier: keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:71:a1:b5:66:b2:85:fa:57:3e:01:74:4e:e7:87:1d:8c:fe: ce:4d:31:39:35:15:98:6b:98:89:bd:a3:95:92:f3:b8:d0:41: 60:98:f7:79:a2:a6:96:8c:39:ae:c4:b9:99:5c:f8:fa:98:74: 21:7c:56:19:a8:a7:29:19:8c:38:21:a4:64:45:1f:30:79:5c: 0e:c3:ea:2a:fa:55:8a:73:d8:b2:85:1f:07:07:c5:81:73:6c: b2:89:aa:27:41:91:4e:0b:a2:c7:af:38:80:f6:ce:7a:47:7b: 25:a0:cd:95:64:2a:5c:e0:f4:27:65:31:b7:c4:7d:d6:58:d1: 3a:02:26:39:1e:7f:17:cc:ca:45:e6:0e:e9:b9:3c:0c:7b:55: 5f:34:1c:8f:67:f3:f5:75:79:66:70:b8:2f:b5:63:89:87:38: dd:9f:85:7f:1e:d5:68:95:aa:1a:25:09:82:f8:29:b6:c9:1d: 96:d6:b0:4c:b5:1d:a6:38:e9:91:ea:9c:7b:7f:66:8e:1b:a0: 53:e6:17:c2:ed:a1:fe:64:cd:b4:ff:f6:77:68:55:15:1d:b4: c0:ee:93:67:d5:0e:64:ba:63:61:33:6c:14:86:18:e8:8a:46: c0:74:8e:cf:5b:34:04:d7:e5:31:d4:bc:9c:58:6e:fa:90:f6: 17:25:de:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3NGIQwDz9jUJz8dfPVX+4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh N2VlNTEwHhcNMjYwNDI3MDQwMDI5WhcNMjYwNDI4MDQwMDI5WjAzMTEwLwYDVQQD Eyg2MGRhOThmMTZhOTk4ODEwNDNmOGU3MTlkNjg3Mzg3OTRjYWY5ZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwaPxDaeQJMccTAj0ZXwrogcYH7D FU6jVBu3RJuY3Jl2YVKUpKfcaok3/vWw8Al9q2I+T5XPTtD8NXfUdBlqs9Lp2fOq vqiqVQ83HgvGgLwttaGJJnw36QhDRb3FXdb5geNHwDySx/xlact5BlObjITNnoYg On2p6uEKm5TOTtITK8+S6FxEpBXUtHBSDxSOsZYL1qC5detHUeTQ/OBqtYg0EkmQ PugNXMNjigF6sUkgpHpBL3Dc70J7vdgvPL90npqDX/eomVTwMkrxK1+kEMm5lZY7 kaOTGFICMqRP3Im5ZRz5YXDWAP0v5jEtM8ZJuGEPpDO+sIsgmkoY2Z0xMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDamPFqmYgQQ/jnGdaHOHlMr57jMB8GA1UdIwQY MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt ZmNlMjE0YzZmZmRhLzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUtZmNlMjE0YzZmZmRh LzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3GhtWay hfpXPgF0TueHHYz+zk0xOTUVmGuYib2jlZLzuNBBYJj3eaKmlow5rsS5mVz4+ph0 IXxWGainKRmMOCGkZEUfMHlcDsPqKvpVinPYsoUfBwfFgXNssomqJ0GRTguix684 gPbOekd7JaDNlWQqXOD0J2Uxt8R91ljROgImOR5/F8zKReYO6bk8DHtVXzQcj2fz 9XV5ZnC4L7VjiYc43Z+Ffx7VaJWqGiUJgvgptskdltawTLUdpjjpkeqce39mjhug U+YXwu2h/mTNtP/2d2hVFR20wO6TZ9UOZLpjYTNsFIYY6IpGwHSOz1s0BNflMdS8 nFhu+pD2FyXeTA== -----END CERTIFICATE-----Generated at Mon Apr 27 12:41:48 2026 by rpki-client