$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: +2wHZZrH7zYUpFe3mqXCtiowNbS5iE6zuzcbhBV6pZQ= Subject key identifier: 8A:76:09:C4:62:14:A9:EB:E2:54:8C:C7:8F:40:0C:40:7A:4E:F6:7F Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019CE4EC364C2E1F2D06DDC1DE4DD1737C20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 186D Signing time: Fri 13 Mar 2026 02:00:11 +0000 Manifest this update: Fri 13 Mar 2026 02:00:11 +0000 Manifest next update: Sat 14 Mar 2026 02:00:11 +0000 Files and hashes: 1: 6EiFZKIQWAEn8OFVy62rq2hePVc.roa (hash: QqaEwKcSsaYt3wwf9x5zbgaPoA6qxMBDNuqLJjfSh3E=) 2: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: SNufr/B/XxzKLGWhfd+oBXSXdlhMyukTM69GPu/9BWc=) 3: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (hash: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8=) 4: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (hash: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g=) 5: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (hash: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=) 6: HrEvCC8IhGVeGnzBd0VRZALtork.roa (hash: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U=) 7: Kpq8EZf55_gV3FvEsn5mjf_dpBU.roa (hash: 2nhGvk06IqlLqxKExuqHomEp9VHs4mN4Vn/X8wYfMBo=) 8: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (hash: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag=) 9: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (hash: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo=) 10: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (hash: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8=) 11: dOGEvxWz_zQwe0ywxB_yohVohyM.roa (hash: mrA0JieT5fE1JYF+wUVSCw2S+TnNb/74IV4H+fC+v3w=) 12: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (hash: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 21:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e4:ec:36:4c:2e:1f:2d:06:dd:c1:de:4d:d1:73:7c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Mar 13 02:00:11 2026 GMT Not After : Mar 14 02:00:11 2026 GMT Subject: CN=8a7609c46214a9ebe2548cc78f400c407a4ef67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:6d:83:96:79:7c:cb:5c:0d:dd:32:40:d7: 01:23:ac:97:32:6a:c5:74:49:5e:bb:74:79:05:57: 76:9c:6b:29:ef:22:a9:ed:05:1c:ac:7b:40:f5:81: 77:13:bc:9e:06:b8:1b:2b:95:eb:26:3f:00:75:fa: 2e:25:b9:10:bc:5e:ac:c8:47:49:3e:6b:e6:af:ee: e1:f6:4e:ab:ab:80:63:8b:c7:d5:00:ea:86:4c:e9: 22:18:cf:89:06:cf:43:cc:5a:7b:dd:8b:fd:55:a5: 82:da:eb:b9:be:a8:54:0f:f6:4e:43:5f:2a:2e:f6: 5e:12:4e:5c:e5:72:09:17:53:39:4e:90:85:8b:aa: 16:b8:59:1b:d2:d9:b4:45:3e:7a:e8:eb:0c:2c:17: dc:74:fa:c4:01:3a:84:28:7d:9a:0c:ba:7e:3f:15: e6:4b:59:12:fd:bd:6c:2d:29:b0:ca:d1:8e:79:f2: 99:f8:ea:b7:e5:59:c4:94:2a:d4:fb:f3:7c:20:1c: 0b:62:8f:bb:5f:af:be:99:77:13:cf:c5:19:d4:85: 2b:6a:29:10:6e:2c:32:d2:20:1b:52:e1:79:5d:67: 1f:db:2f:af:4f:ec:db:a5:9b:63:ba:ea:6c:5f:a0: e1:e5:be:f8:0e:34:9e:08:cd:c2:1b:1b:f5:9d:ba: 8d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:76:09:C4:62:14:A9:EB:E2:54:8C:C7:8F:40:0C:40:7A:4E:F6:7F X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a3:e4:02:be:13:c3:27:d8:4a:5d:c6:79:44:f6:d4:d3:f1: c5:cf:6f:b2:85:87:24:39:ec:f4:4b:69:af:01:ec:cf:10:f8: a7:c1:04:38:61:b1:1e:9b:e3:5f:80:95:ec:e1:a6:f7:2f:ed: 92:44:81:57:51:56:ba:19:07:b7:70:8c:72:7f:d3:dc:eb:0a: 5f:41:a2:0f:b1:e8:0f:6d:59:8a:f1:d2:d0:50:3e:67:0e:be: ed:22:45:89:61:82:09:07:cb:59:88:dc:01:ed:03:eb:26:1e: 8c:49:77:bf:18:96:e1:28:d6:24:84:a0:6f:2b:5b:a3:c0:c5: 2f:c5:89:c8:7c:e6:18:aa:fa:08:51:38:1d:8d:4e:ee:98:80: 84:51:23:ee:43:04:0e:7b:9c:2c:b9:10:63:68:66:c7:73:9c: 89:80:ad:23:87:ed:1c:9b:4a:ac:de:70:5f:3e:56:23:4e:e6: ac:e1:8c:86:c6:8d:51:3f:40:14:bb:2b:9b:1c:ae:eb:a7:ec: 33:73:e0:71:6a:c9:de:4a:8f:04:f5:64:42:24:a5:c2:6d:e0: b9:a4:b6:d9:ce:d5:c2:da:49:4c:c8:06:c7:ab:d5:29:58:24: 9b:a9:ab:43:10:cd:16:f1:f0:04:e6:3d:61:42:9f:94:7e:c6: 96:32:bd:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzk7DZMLh8tBt3B3k3Rc3wgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwMzEzMDIwMDExWhcNMjYwMzE0MDIwMDExWjAzMTEwLwYDVQQD Eyg4YTc2MDljNDYyMTRhOWViZTI1NDhjYzc4ZjQwMGM0MDdhNGVmNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Jtg5Z5fMtcDd0yQNcBI6yXMmrF dEleu3R5BVd2nGsp7yKp7QUcrHtA9YF3E7yeBrgbK5XrJj8AdfouJbkQvF6syEdJ Pmvmr+7h9k6rq4Bji8fVAOqGTOkiGM+JBs9DzFp73Yv9VaWC2uu5vqhUD/ZOQ18q LvZeEk5c5XIJF1M5TpCFi6oWuFkb0tm0RT566OsMLBfcdPrEATqEKH2aDLp+PxXm S1kS/b1sLSmwytGOefKZ+Oq35VnElCrU+/N8IBwLYo+7X6++mXcTz8UZ1IUraikQ biwy0iAbUuF5XWcf2y+vT+zbpZtjuupsX6Dh5b74DjSeCM3CGxv1nbqNjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIp2CcRiFKnr4lSMx49ADEB6TvZ/MB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIaPkAr4T wyfYSl3GeUT21NPxxc9vsoWHJDns9EtprwHszxD4p8EEOGGxHpvjX4CV7OGm9y/t kkSBV1FWuhkHt3CMcn/T3OsKX0GiD7HoD21ZivHS0FA+Zw6+7SJFiWGCCQfLWYjc Ae0D6yYejEl3vxiW4SjWJISgbytbo8DFL8WJyHzmGKr6CFE4HY1O7piAhFEj7kME DnucLLkQY2hmx3OciYCtI4ftHJtKrN5wXz5WI07mrOGMhsaNUT9AFLsrmxyu66fs M3PgcWrJ3kqPBPVkQiSlwm3guaS22c7VwtpJTMgGx6vVKVgkm6mrQxDNFvHwBOY9 YUKflH7GljK9qg== -----END CERTIFICATE-----Generated at Fri Mar 13 06:33:30 2026 by rpki-client