$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json) Hash identifier: +46Qf3zclAmHDp4ijWwzzTSBdGHMDBUn+VCoAroaf3s= Subject key identifier: 3C:6A:2F:D9:1B:D1:3F:DD:61:21:12:E2:DB:09:8F:80:81:E9:74:50 Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019CE3DA6D8B8CE31315F3ADD640E23CED3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft Manifest number: 1875 Signing time: Thu 12 Mar 2026 21:01:08 +0000 Manifest this update: Thu 12 Mar 2026 21:01:08 +0000 Manifest next update: Fri 13 Mar 2026 21:01:08 +0000 Files and hashes: 1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=) 2: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=) 3: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=) 4: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=) 5: FGXifY4YNXSWwZi4QtD01XX8A_4.roa (hash: r3Yn9lbI97BgnohED52RZmDaF/H4yGegwCsX0vScc1U=) 6: XD3CHImTefD8FuenptmC1xt8ItM.asa (hash: zINZ70P1S66UVaG5a/xPv//b9AHB0SJycGjf91yrXwY=) 7: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=) 8: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=) 9: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=) 10: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=) 11: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=) 12: fgRbMqN9XRQOyHROi59mKV56wUg.roa (hash: Py8QfC6Me9kljX65ogBUdQo8JbMweZ02w9NGup3yJr4=) 13: iENkRlJoBL-J_o4ep2L2WQ9wqhQ.roa (hash: qHRlnH6xTrPGrh7Rcfy15Z1OzJA8rkrqC8qbXcCLhY0=) 14: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=) 15: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=) 16: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: Y0ngFOf97rnBawLVxKP+zN6QbHG2h2GdUugNit+AXyw=) 17: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 15:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e3:da:6d:8b:8c:e3:13:15:f3:ad:d6:40:e2:3c:ed:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Mar 12 21:01:08 2026 GMT Not After : Mar 13 21:01:08 2026 GMT Subject: CN=3c6a2fd91bd13fdd612112e2db098f8081e97450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:6a:e2:b2:39:2a:46:83:23:85:0c:2a:27: 89:66:d9:97:6c:5b:a5:2c:fb:5e:51:83:8c:f8:1c: 3b:5c:5c:62:c5:3b:8a:81:e2:ee:8d:b1:3f:9e:30: 76:5d:dc:59:a4:59:6c:f3:1b:e2:4a:97:6b:1c:53: e1:99:97:f6:a1:db:8c:a0:a3:00:20:4f:0d:60:32: aa:d6:c9:cf:9c:5c:af:36:6b:f2:02:4e:77:8f:a1: d1:84:64:a8:28:83:be:3a:67:9e:f7:38:bc:78:60: 5a:a6:09:66:37:c5:9a:15:be:39:be:bd:f2:54:45: 1e:b1:a8:3f:fc:c1:de:54:27:d6:42:eb:64:f7:d0: aa:7c:19:71:14:6a:7d:56:e1:0d:8c:ac:a5:1a:6f: e5:0e:39:45:55:d3:e4:dd:5f:48:e6:c0:8c:da:dd: e0:c2:ff:54:0e:87:8f:70:a4:a3:0d:3e:22:28:dd: 73:a7:a5:0e:de:46:59:94:7c:62:d5:19:b9:91:6f: bb:21:79:e4:3b:85:58:08:70:e4:86:7c:1f:36:6c: 5a:83:ab:f5:50:5e:e8:57:fa:8f:63:e6:07:f9:16: bd:89:56:98:95:70:5c:be:b7:69:bd:98:b1:4c:cc: 20:ec:ee:50:2a:bb:f5:c3:b0:f6:65:8b:8d:b0:f4: 8f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6A:2F:D9:1B:D1:3F:DD:61:21:12:E2:DB:09:8F:80:81:E9:74:50 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:41:34:0b:68:aa:85:0a:2e:ba:b3:be:78:25:5a:78:ea:37: cb:73:f9:4d:27:1f:47:29:e9:46:81:ee:9d:19:5e:70:a7:e9: e8:bb:38:54:5d:28:42:f0:ef:cd:60:c8:9a:09:80:6f:16:26: 0c:73:07:47:87:aa:13:60:92:57:c3:65:6a:98:82:29:50:13: 74:d4:c9:06:44:eb:69:54:1b:e8:9a:1d:34:f2:ac:4d:88:7e: 59:86:cc:85:b0:44:9f:97:bf:4e:48:67:c8:8b:21:7c:d8:3b: 3f:5f:ed:23:04:bd:4a:e4:d2:34:4a:3f:22:dc:48:ec:c7:70: b7:78:36:2e:ac:52:9a:e3:74:a5:bd:50:4d:06:a2:33:11:39: 53:0f:16:c3:17:b2:c9:ad:fa:f0:6b:dd:98:4d:4d:04:72:81: e5:36:be:55:a9:7e:26:0d:8e:0f:cc:30:62:32:aa:38:f4:63: 1e:7a:32:02:e0:c4:1b:5e:9f:f5:b3:69:b0:a6:10:04:8a:d3: cd:1f:b1:98:27:4a:be:2d:0b:0d:c6:e7:8a:cd:81:ed:2b:8b: 2c:d5:28:c6:2d:3b:ea:e1:d2:64:ab:60:ad:73:25:7a:28:eb: f9:d8:44:de:10:29:bb:c1:0d:bd:58:8f:b8:7b:1a:a6:89:c6: e8:a1:d1:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzj2m2LjOMTFfOt1kDiPO08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwMzEyMjEwMTA4WhcNMjYwMzEzMjEwMTA4WjAzMTEwLwYDVQQD EygzYzZhMmZkOTFiZDEzZmRkNjEyMTEyZTJkYjA5OGY4MDgxZTk3NDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt1q4rI5KkaDI4UMKieJZtmXbFul LPteUYOM+Bw7XFxixTuKgeLujbE/njB2XdxZpFls8xviSpdrHFPhmZf2oduMoKMA IE8NYDKq1snPnFyvNmvyAk53j6HRhGSoKIO+Omee9zi8eGBapglmN8WaFb45vr3y VEUesag//MHeVCfWQutk99CqfBlxFGp9VuENjKylGm/lDjlFVdPk3V9I5sCM2t3g wv9UDoePcKSjDT4iKN1zp6UO3kZZlHxi1Rm5kW+7IXnkO4VYCHDkhnwfNmxag6v1 UF7oV/qPY+YH+Ra9iVaYlXBcvrdpvZixTMwg7O5QKrv1w7D2ZYuNsPSPZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxqL9kb0T/dYSES4tsJj4CB6XRQMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0E0C2iq hQouurO+eCVaeOo3y3P5TScfRynpRoHunRlecKfp6Ls4VF0oQvDvzWDImgmAbxYm DHMHR4eqE2CSV8NlapiCKVATdNTJBkTraVQb6JodNPKsTYh+WYbMhbBEn5e/Tkhn yIshfNg7P1/tIwS9SuTSNEo/ItxI7Mdwt3g2LqxSmuN0pb1QTQaiMxE5Uw8Wwxey ya368GvdmE1NBHKB5Ta+Val+Jg2OD8wwYjKqOPRjHnoyAuDEG16f9bNpsKYQBIrT zR+xmCdKvi0LDcbnis2B7SuLLNUoxi076uHSZKtgrXMleijr+dhE3hApu8ENvViP uHsaponG6KHRYw== -----END CERTIFICATE-----Generated at Thu Mar 12 22:56:16 2026 by rpki-client