$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft File: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json) Hash identifier: cOvGv1+MJlVh1EP8N4+O5NBk6mrvesFz9fy7HCfh3+Y= Subject key identifier: 9C:47:AE:C7:2D:26:97:3D:2E:A9:58:D1:39:70:52:FC:14:39:8A:F0 Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019E28B8F92065D8197EA72F93ADCBEEBB8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft Manifest number: 13B1 Signing time: Thu 14 May 2026 23:01:11 +0000 Manifest this update: Thu 14 May 2026 23:01:11 +0000 Manifest next update: Fri 15 May 2026 23:01:11 +0000 Files and hashes: 1: 8YEPdClPNr_3zDrhmRGiX4nWwZA.asa (hash: 2bvyL1QtbFD5dzAQ0Bl2sb4g9BiR/U4X0BGmGEMfbKU=) 2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: +zTGzQ7Ct96OGgdFLRUgaUJZi7xJmmmrNs7nLKrSrM8=) 3: B5j3YeJoZkR-M842kAei_UWMVnY.roa (hash: 9dBcdzBINoDXdmkJLkcJhvttYwcsyEIX2FhzFQvtp+s=) 4: axIqDyAlK0bUNbzn8X3np8rLZdg.asa (hash: qyAh01KjzZwobQ5AxwlXgm7EdBIeIjU3cgZPryzz3yA=) 5: g3MXjNcsWoLD0PetYkh3H8FGFEw.asa (hash: na+ynpKUQZPFDrKy+EXa5B4rQ+xPN8v4RPHAqcwEPhI=) 6: hfYAMmC7nzj6eP_4KjmX0ydK61k.roa (hash: ENco3xJLaaDmCT3M7xz4xfUTyINJdjSu/7+AW54JdKY=) 7: lwxiv3kekrPmCweGpFX4WJfrhX0.roa (hash: 2lW/SbMqaftEHsN9ssTuGMfD/ZAuKFXzBYGrp9TrmHI=) 8: nBKubqHJCPmxZed95Pwvup7veOk.roa (hash: SF8k+2B3p2IDWArFu3EKiVWXhjgf4ze2L6pnr/0Lp4o=) 9: qMkdURgl5v8iVuM-fHHXRCMHBok.asa (hash: KT0x4APoSA9EBXsj4uU5Mno2FoqnMrb2Le5rpuVOb0U=) 10: wehxXgpfgzalQRxlqvRAJwCWbMQ.roa (hash: kDdYxSItK7GlFWzV8XEeVDHmfQM6o/WzrJGoU9qv79A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 15 May 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:28:b8:f9:20:65:d8:19:7e:a7:2f:93:ad:cb:ee:bb:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: May 14 23:01:11 2026 GMT Not After : May 15 23:01:11 2026 GMT Subject: CN=9c47aec72d26973d2ea958d1397052fc14398af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:d9:11:bd:37:00:1a:8d:b9:d7:77:49:12: 9a:7a:a7:68:0a:29:48:4e:d1:d0:2c:ce:32:88:da: 2f:e8:a7:99:02:9f:0f:9a:ef:e6:24:6b:79:25:04: 8e:5e:11:e3:34:c1:f1:ec:c1:f6:d0:8e:85:1b:94: b1:cf:fb:52:a2:aa:87:1a:71:1b:cc:7d:15:54:e1: 28:a7:20:a2:f9:2f:2f:ca:ca:97:4a:89:3c:8e:a9: 27:01:cd:1d:14:d8:2f:01:4f:50:1c:01:7e:42:a9: 72:b4:6f:66:e3:db:28:c4:f1:53:42:08:af:e1:96: c7:c4:3d:7f:b5:32:d4:51:dd:12:f8:33:72:00:f6: a4:e9:ba:f7:6a:07:79:41:0b:22:01:60:9b:41:94: af:cb:e8:65:43:b9:54:b3:5a:a0:97:52:4b:40:ea: f6:60:98:f3:f2:e2:04:ef:bf:08:b8:a6:3f:6a:0f: 46:e3:ae:e2:f0:82:24:3c:12:6f:96:c3:0b:aa:d5: 17:ca:85:f5:6f:74:63:04:0d:a5:7b:2f:1c:b0:9f: 0f:d3:ef:91:3a:ee:4a:69:e5:a3:a2:ea:9d:3d:19: 19:06:d0:b6:69:f7:cd:e9:e7:90:3a:d3:94:44:d1: 22:0d:96:aa:17:6b:55:fa:64:0e:69:00:db:8f:d1: e7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:47:AE:C7:2D:26:97:3D:2E:A9:58:D1:39:70:52:FC:14:39:8A:F0 X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:27:15:2d:05:f6:21:75:12:56:40:58:10:4c:73:30:b3:04: 5f:91:38:8b:4a:93:27:2f:03:2f:26:8d:03:84:05:67:75:d7: d0:79:ac:d1:65:40:06:e0:e5:56:97:a0:40:12:63:a3:31:6d: b4:02:6b:5b:4a:76:c6:ba:30:22:72:ee:ad:6e:02:10:a6:9a: 80:0c:41:2d:92:62:db:06:58:dc:88:75:d0:92:f0:e4:dd:d2: a2:5d:f4:96:02:bf:fc:40:86:39:eb:1e:3f:a3:ab:43:f5:2f: 3f:4f:19:b1:2d:86:71:33:30:2b:a5:03:85:fc:43:e1:0f:5e: 44:f5:c5:a3:3a:80:96:39:39:42:09:06:92:52:a5:2b:e4:84: ba:9d:83:1b:9e:93:87:c5:d0:86:ea:09:33:c6:c2:2d:16:ad: e3:10:73:15:d7:bd:15:d7:e7:db:e0:85:3a:1a:15:74:dd:7a: db:b2:11:54:02:01:5f:7d:2c:e9:1d:96:d9:b3:af:49:1d:77: 2a:cc:a0:7d:89:5d:a8:8a:e3:0a:c5:e6:d5:04:58:38:8a:f0: 1b:42:8b:de:2d:dd:06:07:8d:1b:e4:0e:0d:3a:ed:91:24:07: 03:e6:de:f6:f4:54:c9:fc:ea:c5:e3:48:a4:6f:09:74:d5:6a: c1:6c:02:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ouPkgZdgZfqcvk63L7ruLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYwNTE0MjMwMTExWhcNMjYwNTE1MjMwMTExWjAzMTEwLwYDVQQD Eyg5YzQ3YWVjNzJkMjY5NzNkMmVhOTU4ZDEzOTcwNTJmYzE0Mzk4YWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybLZEb03ABqNudd3SRKaeqdoCilI TtHQLM4yiNov6KeZAp8Pmu/mJGt5JQSOXhHjNMHx7MH20I6FG5Sxz/tSoqqHGnEb zH0VVOEopyCi+S8vysqXSok8jqknAc0dFNgvAU9QHAF+QqlytG9m49soxPFTQgiv 4ZbHxD1/tTLUUd0S+DNyAPak6br3agd5QQsiAWCbQZSvy+hlQ7lUs1qgl1JLQOr2 YJjz8uIE778IuKY/ag9G467i8IIkPBJvlsMLqtUXyoX1b3RjBA2ley8csJ8P0++R Ou5KaeWjouqdPRkZBtC2affN6eeQOtOURNEiDZaqF2tV+mQOaQDbj9Hn6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxHrsctJpc9LqlY0TlwUvwUOYrwMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6ScVLQX2 IXUSVkBYEExzMLMEX5E4i0qTJy8DLyaNA4QFZ3XX0Hms0WVABuDlVpegQBJjozFt tAJrW0p2xrowInLurW4CEKaagAxBLZJi2wZY3Ih10JLw5N3Sol30lgK//ECGOese P6OrQ/UvP08ZsS2GcTMwK6UDhfxD4Q9eRPXFozqAljk5QgkGklKlK+SEup2DG56T h8XQhuoJM8bCLRat4xBzFde9Fdfn2+CFOhoVdN1627IRVAIBX30s6R2W2bOvSR13 KsygfYldqIrjCsXm1QRYOIrwG0KL3i3dBgeNG+QODTrtkSQHA+be9vRUyfzqxeNI pG8JdNVqwWwCgA== -----END CERTIFICATE-----Generated at Fri May 15 06:20:02 2026 by rpki-client