$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: PQqLlAUE91eSyDG2G7InZOABtleprk+y7ZJ/GRSkAuk= Subject key identifier: 7F:C7:CF:9C:A2:29:90:0B:56:11:FB:E8:AD:38:4F:86:9E:E0:43:3C Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019D39AF57165F68E6BC7CE3371497DAFF4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 18CD Signing time: Sun 29 Mar 2026 13:01:25 +0000 Manifest this update: Sun 29 Mar 2026 13:01:25 +0000 Manifest next update: Mon 30 Mar 2026 13:01:25 +0000 Files and hashes: 1: 7hIkQn8GxpM4cY34bKGa28GSqos.roa (hash: rOk0uLCh36yXsLFrgkM5Fqtph2S5eaaoBNpLe6z7U+Q=) 2: Bl7qLc9FykJGYpXpYNwQhUyoG74.roa (hash: W8SX4TsUCyntFAGgOTDaNHhl7cr4kTreCBySNi2bbWI=) 3: Dv8Xj573URhelnbmcJLlhmPDGD4.roa (hash: qlnvjr9BaLF0/kBmFp/g12eWnCcKOHwXVrBxaeJlhqI=) 4: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=) 5: LvyPqPyFFN-1pBcoXn_N7wYhYsI.roa (hash: 7RYkLz7rm+gOi67pge0BfE5yBJYItLHKAHOteIJne9M=) 6: S-2u1gBJMJZerxMcphe152Mw_t4.roa (hash: zY+Kfzo1VDj/zBVAcDyYT3GL5KZN/lStcMsxxkbN2e8=) 7: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=) 8: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=) 9: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=) 10: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: BV3lpTfB9/SJp5MiS1STR/WM30kmd13s+nbNyRTdt6A=) 11: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=) 12: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=) 13: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=) 14: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=) 15: maoDBiTq7OlnZavgCrqS2PNJzVg.roa (hash: 5lnUQuuOEn9crnGLrQz+sL2Asrk/3K0SqWLzxdWxHuc=) 16: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=) 17: uEioqsfjoD3Xl5Oou54cX2C0S34.roa (hash: go+HYucKqNseQJzP/5n7AMRia6twNmQH+kJ8P+JHx6A=) 18: w49hc9pt-rI9dE1aJPepq6cVJrc.roa (hash: XRnzI4j7+4a/orI2utUUHksc2DUd94oqWcO8QziYrqE=) 19: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=) 20: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (hash: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q=) 21: yxrkqGQZlFAWzP7p2EFdhz9L4T0.roa (hash: qcYyYWPIWTP6G0c0uC3TsjboUI+iyVfrwNzja6Sgli8=) 22: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:af:57:16:5f:68:e6:bc:7c:e3:37:14:97:da:ff:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Mar 29 13:01:25 2026 GMT Not After : Mar 30 13:01:25 2026 GMT Subject: CN=7fc7cf9ca229900b5611fbe8ad384f869ee0433c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:66:2e:09:1d:3e:84:17:39:28:a0:4f:a7:9e: 3d:85:fe:47:06:45:fd:ab:f1:28:95:3f:9c:4d:0c: 2b:8e:9c:5d:40:8c:71:d8:df:6a:82:74:ca:49:9e: 81:e6:ba:94:be:bb:ba:33:8b:63:ef:44:17:30:22: 3b:4e:77:dd:9d:b0:c3:db:b4:b1:54:cc:50:7b:88: 04:d0:d5:e7:c3:32:aa:3c:b6:e2:af:7b:71:98:58: e3:99:de:32:43:bb:a5:40:bf:82:0a:62:5e:63:b7: 46:b4:a4:59:b0:31:6a:ff:57:ce:85:c1:36:e5:c5: fa:91:5c:71:df:3f:a4:7e:de:2f:50:a0:82:bb:34: da:ab:95:05:ca:e2:9f:cf:c5:ba:04:00:95:d8:df: c4:ae:42:6c:62:47:c3:76:68:e5:7b:8d:9b:6f:c4: b6:58:ed:a8:7a:03:15:ce:b7:93:6e:36:2b:44:b2: 71:27:91:7f:ec:16:6a:67:14:20:f4:05:a6:20:29: e5:4b:c0:8a:4d:8c:82:e4:f6:91:e9:c9:f3:c7:91: c5:d5:98:48:0c:8c:1f:71:44:7a:d5:72:ef:81:1b: c9:e7:08:e2:29:7a:9e:d5:a0:ce:db:a9:4e:67:69: 21:39:79:d4:e8:5f:3b:7d:83:c2:ac:51:a9:c2:54: 6f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C7:CF:9C:A2:29:90:0B:56:11:FB:E8:AD:38:4F:86:9E:E0:43:3C X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e3:44:6a:b0:73:86:af:95:bc:33:7c:fe:c1:ca:a3:69:0b: ca:56:04:37:80:0f:1d:f2:bf:5c:49:93:58:f6:a9:40:a7:d5: fd:03:6d:be:8c:8f:f7:56:bf:55:4b:c2:7d:89:0b:f4:42:59: 22:7a:d2:4f:6f:00:d1:c2:14:bf:0f:9e:ef:6a:c0:89:2e:6c: 4b:ad:03:26:08:75:b6:bd:8b:86:59:d9:73:cd:6a:e1:e6:49: c9:0e:c9:7f:6b:19:38:46:d8:9c:c9:ac:b2:fd:61:e2:54:ac: 97:22:70:7e:48:f0:80:c2:03:36:67:a9:b6:a2:6c:9b:f7:2c: c5:41:ed:f2:38:6b:28:a7:74:3c:dc:12:c9:9a:1f:c3:27:a6: 90:e0:15:82:8c:a0:a1:c5:50:25:ff:fc:55:ef:5b:bc:30:dd: c6:ec:cb:bc:58:bb:bd:17:d0:f6:fd:94:3b:b2:57:75:a3:25: 59:63:28:e5:5a:3b:59:7b:06:0a:9e:3d:84:ba:a7:e5:5d:20: 5e:48:9b:1d:d8:39:02:e0:a4:02:ee:4f:70:2d:da:7e:af:32: a5:a0:31:53:5c:a8:81:18:8f:ed:8c:03:e0:07:cf:10:85:94: 1a:f6:80:4a:7c:cb:05:1d:85:b2:27:85:d7:5c:de:6f:ea:e2: 3b:54:93:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05r1cWX2jmvHzjNxSX2v9OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwMzI5MTMwMTI1WhcNMjYwMzMwMTMwMTI1WjAzMTEwLwYDVQQD Eyg3ZmM3Y2Y5Y2EyMjk5MDBiNTYxMWZiZThhZDM4NGY4NjllZTA0MzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GYuCR0+hBc5KKBPp549hf5HBkX9 q/EolT+cTQwrjpxdQIxx2N9qgnTKSZ6B5rqUvru6M4tj70QXMCI7TnfdnbDD27Sx VMxQe4gE0NXnwzKqPLbir3txmFjjmd4yQ7ulQL+CCmJeY7dGtKRZsDFq/1fOhcE2 5cX6kVxx3z+kft4vUKCCuzTaq5UFyuKfz8W6BACV2N/ErkJsYkfDdmjle42bb8S2 WO2oegMVzreTbjYrRLJxJ5F/7BZqZxQg9AWmICnlS8CKTYyC5PaR6cnzx5HF1ZhI DIwfcUR61XLvgRvJ5wjiKXqe1aDO26lOZ2khOXnU6F87fYPCrFGpwlRvpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/Hz5yiKZALVhH76K04T4ae4EM8MB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheNEarBz hq+VvDN8/sHKo2kLylYEN4APHfK/XEmTWPapQKfV/QNtvoyP91a/VUvCfYkL9EJZ InrST28A0cIUvw+e72rAiS5sS60DJgh1tr2LhlnZc81q4eZJyQ7Jf2sZOEbYnMms sv1h4lSslyJwfkjwgMIDNmeptqJsm/csxUHt8jhrKKd0PNwSyZofwyemkOAVgoyg ocVQJf/8Ve9bvDDdxuzLvFi7vRfQ9v2UO7JXdaMlWWMo5Vo7WXsGCp49hLqn5V0g XkibHdg5AuCkAu5PcC3afq8ypaAxU1yogRiP7YwD4AfPEIWUGvaASnzLBR2FsieF 11zeb+riO1ST9Q== -----END CERTIFICATE-----Generated at Sun Mar 29 21:08:59 2026 by rpki-client