$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: eiQKSyD1vhsVMO8ivV7OYn8Bz3Fe2vytHxWRP8aWLnY= Subject key identifier: 3E:E8:A1:51:5F:20:D6:C6:C0:7B:4A:5C:A4:14:8D:FF:0E:38:06:D8 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019DCC73BA4DBC67FD7F01DCDA96F7ABB163 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 18E2 Signing time: Mon 27 Apr 2026 01:00:29 +0000 Manifest this update: Mon 27 Apr 2026 01:00:29 +0000 Manifest next update: Tue 28 Apr 2026 01:00:29 +0000 Files and hashes: 1: 5CLXXKkA4JcsyDrUBBM3fxn2kdc.roa (hash: gFWbYqwKSpr3zQtON6eHRCE0iX3y63ZJZklzBNANHsM=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: u0ZyLdkFxVLTkZLgAzxFgc+iJxblHXMi2rgJZiwjA4o=) 3: DXIDJwT32OV423k4TIWwn2iDwyg.roa (hash: 1DgbvkANX93phDSb+AyRjq7ZFAZDrX3G2DhrbhrdrCY=) 4: Ex4sydFNNb9e9IlWuLzuPazLU44.roa (hash: tuvV0h/eTCcgOOevaItUPifNfonAkWlBsMN+IAbF80I=) 5: F0q3v2kkeTya7vdhm0lzFl3wBAA.roa (hash: BpkEUnq+/w6BrSZ1bTiqPBmMOt7WaZgSwy12/ipsBqo=) 6: GU71SIKDNqtDYi7P5ZGVJfaZ9Ng.roa (hash: 7ZQhqryE0L0rNOAz1gL32gj8EsSrO0yhlKkyCkXl4cc=) 7: PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa (hash: 5xE+UcziQ9DiquZ2A/57aqh1sjUE876lnNSATCS1lTI=) 8: TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa (hash: gEbc+tVQGYMxTiSiJNGO8DDQrrsZOyqWJhw0Dv/aKqE=) 9: XN9ItxoiVygt3a0qQVsmKKlWk9E.roa (hash: iH4X65Vs6HtOKFxQaLyaQ9nZPsCEbiHQMEBYUWCi4KY=) 10: bba2QTZrp_1uueLnjfHPBxHS3PY.roa (hash: OYrkuz8mezgI3XbKfKRWAwnwwsrmJ+JNJd03sNYC3L8=) 11: djcMZ6pGXyKmA-lIeoWfJvgd_vg.roa (hash: 2V8x5uW66gGIUCrfVlUVt3oOyIC3Jcqdd44dr46xxaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:73:ba:4d:bc:67:fd:7f:01:dc:da:96:f7:ab:b1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Apr 27 01:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=3ee8a1515f20d6c6c07b4a5ca4148dff0e3806d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:bc:f7:42:21:29:30:e5:4e:aa:71:b5:76: 34:fc:2d:ed:2b:9e:b4:ce:cc:33:36:5a:98:e5:31: 63:52:58:20:2a:fb:01:df:f8:de:26:5c:1f:cf:5d: a8:ca:e9:ef:1d:d7:fd:f0:2c:ec:64:cf:ee:fd:75: 2d:a4:6a:0b:5e:7e:da:a7:1e:21:b8:73:08:54:25: 5e:d1:f3:d3:2d:b4:be:67:ce:35:c7:5d:9f:c8:54: c7:0d:cf:09:57:40:fb:6d:2f:ae:5e:81:31:c0:bb: d3:af:8b:a8:34:31:51:11:4a:99:5a:ea:95:25:30: 15:73:a2:c3:97:41:14:3a:30:5c:15:a4:1f:9e:3e: fb:da:56:55:d8:61:6f:e5:cb:87:e4:57:33:16:10: 52:7a:a5:65:5a:f5:93:11:94:2f:0c:d1:19:6f:d8: 29:1a:6c:02:2e:c7:73:00:dd:53:af:e6:0e:43:e1: df:cc:0d:7e:5d:f3:db:63:bc:45:22:3e:f4:db:f7: 42:1c:cc:60:fb:d2:4b:52:57:bd:7d:6b:e2:6b:db: 72:1f:db:9e:f8:44:c2:41:8b:3c:65:65:65:d2:23: b9:56:1f:b9:5a:48:83:f1:dc:31:55:3b:1e:13:df: ff:01:35:49:aa:9b:10:ae:2f:1d:f6:05:ac:9b:27: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E8:A1:51:5F:20:D6:C6:C0:7B:4A:5C:A4:14:8D:FF:0E:38:06:D8 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c4:a2:dd:93:76:93:83:1a:87:83:d8:9d:3e:4c:d8:09:ea: a7:dc:55:40:95:0e:1d:12:b6:92:0f:2f:e1:a1:75:36:ec:eb: 21:45:f7:79:1f:0a:48:92:21:79:69:06:7c:50:16:53:5d:c6: c4:bb:90:c5:2b:81:cb:a3:e5:5e:66:75:b0:fe:ab:6f:4c:57: 7f:e0:43:0c:ac:a9:36:3d:46:9d:16:60:89:5d:97:3a:a6:74: 61:43:72:88:b1:b7:6e:e9:5e:2e:87:d6:1b:f8:f4:0d:0c:e6: 14:ab:d7:6a:b8:ce:6a:a0:93:b5:1d:54:30:ec:c1:6e:5f:72: c4:9b:11:67:00:ba:42:0f:d4:fd:4c:07:6e:68:ea:c1:db:e1: 57:c8:ff:1f:6c:91:ef:67:9e:94:12:fd:ff:ea:0a:47:e5:15: d8:9b:a1:38:81:ab:92:de:d0:7c:9b:14:8a:1c:3e:62:c7:4e: 23:e7:f0:e0:0e:d7:47:0a:01:27:fd:6b:f6:4c:3a:b0:d6:21: d8:e4:65:03:83:b0:98:e0:e1:f1:d5:2e:46:e4:3e:50:5a:42: 9c:00:54:73:8e:03:85:f8:97:30:49:f6:c9:e4:24:df:e6:f6: c4:79:50:94:b5:1b:7b:ed:7c:b5:af:ce:82:7d:85:2b:c1:bf: 25:94:bc:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3Mc7pNvGf9fwHc2pb3q7FjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwNDI3MDEwMDI5WhcNMjYwNDI4MDEwMDI5WjAzMTEwLwYDVQQD EygzZWU4YTE1MTVmMjBkNmM2YzA3YjRhNWNhNDE0OGRmZjBlMzgwNmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dO890IhKTDlTqpxtXY0/C3tK560 zswzNlqY5TFjUlggKvsB3/jeJlwfz12oyunvHdf98CzsZM/u/XUtpGoLXn7apx4h uHMIVCVe0fPTLbS+Z841x12fyFTHDc8JV0D7bS+uXoExwLvTr4uoNDFREUqZWuqV JTAVc6LDl0EUOjBcFaQfnj772lZV2GFv5cuH5FczFhBSeqVlWvWTEZQvDNEZb9gp GmwCLsdzAN1Tr+YOQ+HfzA1+XfPbY7xFIj702/dCHMxg+9JLUle9fWvia9tyH9ue +ETCQYs8ZWVl0iO5Vh+5WkiD8dwxVTseE9//ATVJqpsQri8d9gWsmyetFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7ooVFfINbGwHtKXKQUjf8OOAbYMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8Si3ZN2 k4Mah4PYnT5M2Anqp9xVQJUOHRK2kg8v4aF1NuzrIUX3eR8KSJIheWkGfFAWU13G xLuQxSuBy6PlXmZ1sP6rb0xXf+BDDKypNj1GnRZgiV2XOqZ0YUNyiLG3buleLofW G/j0DQzmFKvXarjOaqCTtR1UMOzBbl9yxJsRZwC6Qg/U/UwHbmjqwdvhV8j/H2yR 72eelBL9/+oKR+UV2JuhOIGrkt7QfJsUihw+YsdOI+fw4A7XRwoBJ/1r9kw6sNYh 2ORlA4OwmODh8dUuRuQ+UFpCnABUc44DhfiXMEn2yeQk3+b2xHlQlLUbe+18ta/O gn2FK8G/JZS8nQ== -----END CERTIFICATE-----Generated at Mon Apr 27 09:16:12 2026 by rpki-client