$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: FTEF/6uI6vbc7xMCBtzerDZlrTWrn1z9a6FEW2dzB+o= Subject key identifier: 4B:17:1F:19:0D:43:54:9B:BA:D7:48:41:58:75:15:45:AA:76:D2:7C Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 01A0C58E229B7E5F1371A1499502D2C67CEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 0D5E Signing time: Mon 21 Sep 2026 20:00:21 +0000 Manifest this update: Mon 21 Sep 2026 20:00:21 +0000 Manifest next update: Tue 22 Sep 2026 20:00:21 +0000 Files and hashes: 1: 1lESD01m5gbJyA-braAOgm-nsxs.roa (hash: LKvU7E9DI8H+f3xZF2Ibb4ZAlOKiTpfnzxmAzY3Zmkw=) 2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: Q1Lj+bf2PpkNP0t3olvCACiIDGfYx0LTvrCpw2f1KsQ=) 3: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=) 4: 61nxpqdan0uvkgRYS9p3WXMt0is.roa (hash: +Etzf8iyPB8hG3RY9d2BBNlzK8ZhQf8I9wkNpl+P4s4=) 5: C9CUr-PFwRxBqveQc9JRexz5FUs.roa (hash: lYbCEmweFZ4ggkWxLIShDolBIH8LVCAHfTyc91SJwy0=) 6: FsSNPUWjwDIlPVEHY__f13MutvI.roa (hash: ParcKE8qGlMpeOMYcmP/zF1xOvvVsHqjFGUJ9CbIYcQ=) 7: LmasvFTLE11mrCxdzPNrrKlYdc0.roa (hash: cro6qKPl5KcW1vG37gAcGVH3Wnv66eL0SBKTzxopYzw=) 8: OnExh771ZtOXTYHIXE8BRYIv3I8.roa (hash: iBanqCcjQhcLJzTqVwfRApVqXKWA6vIc0dQd8k0fLnI=) 9: SUEavrAvbJYi-09a6QVI2M_eSIc.roa (hash: hAAmC8KjoRR+ZLoagJaC8chUvGr6KdS0WhlLhZ1Tw9Y=) 10: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=) 11: _TZcDPZzpFhla5KXCrewBSv_afs.roa (hash: F0O1jt3D7eDKUVGno8fQyg0oYO+Zw0jzvuEgWmXzed0=) 12: _r7e3jySBWFxAqLAWSDEbmMpjF8.roa (hash: 0s13Gjs3CYsISYzYweJ7h7lIWvgl86R0YjE4dZPqH/A=) 13: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=) 14: d8tYjTMOm2iLi-JD46yX3lK67ec.roa (hash: R7k5LiqgpO3uW9dYKT9Gf8MpGa5+R/ekeb18H+cE9bo=) 15: g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa (hash: nYVi4YC9fVishrPOTjgH2hJlXxcspFsYbheNk/bE1wY=) 16: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=) 17: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=) 18: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=) 19: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=) 20: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=) 21: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=) 22: wsknEjm24Tmqnj5AbQzSZKLiyUk.roa (hash: 1F0f934WY0AhELOowB6/aUmK8URa7DHUIj0Gci4bhIA=) 23: xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa (hash: 81EBYCMb1JChmS1xYbhUHSpsd2Mkl7rE43HaypoVrxw=) 24: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:8e:22:9b:7e:5f:13:71:a1:49:95:02:d2:c6:7c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Sep 21 20:00:21 2026 GMT Not After : Sep 22 20:00:21 2026 GMT Subject: CN=4b171f190d43549bbad7484158751545aa76d27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:8f:cd:a8:54:a7:04:a0:09:86:10:da:6b: 9f:fc:ac:2b:70:46:24:e1:fc:a0:63:9f:f3:86:94: 57:d8:e4:96:6c:c0:c2:00:44:12:b2:96:0d:bb:74: c9:74:9e:bc:f8:11:9c:77:5e:5e:10:2a:e5:a8:7f: d3:f7:08:b4:65:b0:31:57:3e:de:53:44:ce:a0:05: aa:05:ee:c1:03:7c:f9:6c:4e:5c:91:ce:66:cc:9d: 3d:ac:cd:ad:65:bf:4d:cf:f5:90:71:a5:a7:18:85: f0:67:26:f1:21:26:68:c0:02:26:8b:84:7a:75:5b: 05:22:2e:6a:77:65:a8:06:42:b8:29:6c:90:f4:b7: b6:e9:34:ba:62:5b:16:ab:49:67:eb:46:b4:eb:7b: b5:1c:ac:b1:da:0c:5d:58:c1:0d:47:69:31:f4:aa: dd:6a:ef:26:0e:50:3f:9b:93:b2:1a:94:da:f6:9c: 15:3b:1c:27:c3:9a:a4:28:ac:6a:9d:3d:0f:52:08: e0:1d:d3:00:87:1b:0a:28:06:4c:80:9c:a1:15:b6: fc:9b:52:f6:06:f6:b9:b0:7f:87:89:e4:80:4e:c4: cb:0a:d0:a7:cb:9b:68:50:e9:d8:bc:c6:88:4c:de: a7:39:28:a6:0d:f9:a5:6a:df:cc:75:5e:70:8b:8d: 9b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:17:1F:19:0D:43:54:9B:BA:D7:48:41:58:75:15:45:AA:76:D2:7C X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:85:25:a5:dc:8e:76:e9:14:da:5a:04:c1:c5:76:a7:0d:94: 5e:3f:97:e0:51:ce:9d:04:8d:f7:12:a0:78:45:5f:5e:1e:a7: 45:f0:bc:55:b6:fa:f2:5a:f5:70:77:ef:5b:e8:de:3d:50:39: 37:9f:c8:d7:fe:9c:55:26:1d:06:ef:6b:2a:87:8c:49:be:90: 4d:e6:1b:26:d8:8a:ec:f9:de:c9:dd:01:3f:39:9b:39:27:d0: 0c:8b:e4:7c:57:f3:a9:89:87:dd:97:79:ac:d2:56:83:49:2a: 0b:16:ec:d6:20:e8:2f:8b:59:eb:77:d3:54:aa:d0:40:ac:3f: c8:5b:24:d7:03:b9:d0:24:7e:be:f5:af:09:1a:01:cd:90:d8: e6:63:24:6c:84:09:77:64:48:7b:4c:93:63:41:69:3e:da:5d: 8b:d0:69:63:6b:81:aa:c6:3f:0b:23:eb:5c:3d:4a:40:6c:15: b3:dd:53:58:1f:53:7c:c0:f2:4b:dd:e8:43:69:ed:d5:dd:21: c4:ee:1a:08:a9:d3:2a:bf:02:cf:25:9f:66:a8:4a:ae:81:78: 7b:8a:68:ae:71:49:25:3b:94:c4:19:95:71:82:c5:c4:31:ad: 92:35:12:5d:90:23:b8:22:b2:8d:9e:09:52:7a:3e:41:0a:25: 05:15:26:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFjiKbfl8TcaFJlQLSxnzuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwOTIxMjAwMDIxWhcNMjYwOTIyMjAwMDIxWjAzMTEwLwYDVQQD Eyg0YjE3MWYxOTBkNDM1NDliYmFkNzQ4NDE1ODc1MTU0NWFhNzZkMjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2CPzahUpwSgCYYQ2muf/KwrcEYk 4fygY5/zhpRX2OSWbMDCAEQSspYNu3TJdJ68+BGcd15eECrlqH/T9wi0ZbAxVz7e U0TOoAWqBe7BA3z5bE5ckc5mzJ09rM2tZb9Nz/WQcaWnGIXwZybxISZowAImi4R6 dVsFIi5qd2WoBkK4KWyQ9Le26TS6YlsWq0ln60a063u1HKyx2gxdWMENR2kx9Krd au8mDlA/m5OyGpTa9pwVOxwnw5qkKKxqnT0PUgjgHdMAhxsKKAZMgJyhFbb8m1L2 Bva5sH+HieSATsTLCtCny5toUOnYvMaITN6nOSimDfmlat/MdV5wi42b3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsXHxkNQ1SbutdIQVh1FUWqdtJ8MB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYUlpdyO dukU2loEwcV2pw2UXj+X4FHOnQSN9xKgeEVfXh6nRfC8Vbb68lr1cHfvW+jePVA5 N5/I1/6cVSYdBu9rKoeMSb6QTeYbJtiK7Pneyd0BPzmbOSfQDIvkfFfzqYmH3Zd5 rNJWg0kqCxbs1iDoL4tZ63fTVKrQQKw/yFsk1wO50CR+vvWvCRoBzZDY5mMkbIQJ d2RIe0yTY0FpPtpdi9BpY2uBqsY/CyPrXD1KQGwVs91TWB9TfMDyS93oQ2nt1d0h xO4aCKnTKr8CzyWfZqhKroF4e4pornFJJTuUxBmVcYLFxDGtkjUSXZAjuCKyjZ4J Uno+QQolBRUmDg== -----END CERTIFICATE-----Generated at Tue Sep 22 05:36:48 2026 by rpki-client