$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: V16uAmg9x9u275Frmruo2mkRao3DzC+AeBDBAebpjq8= Subject key identifier: 18:23:1C:07:65:3F:A7:87:0A:6D:80:9B:6B:AB:5B:3C:D6:C2:D3:8B Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019CAA582BCF5D5829C69A5B5F86AE82CDD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 0B2F Signing time: Sun 01 Mar 2026 17:00:30 +0000 Manifest this update: Sun 01 Mar 2026 17:00:30 +0000 Manifest next update: Mon 02 Mar 2026 17:00:30 +0000 Files and hashes: 1: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: Q6BRuz96VOqnOGglh08jsQDnHTzyoMapVRe8wWos5q4=) 2: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=) 3: 8xP7SvrqNDDUIf7ErNtYgRY6F6A.roa (hash: U6lRFQt/WgoeTpDrJcFjH+zyys2ywY9lEhPCU7k4p30=) 4: KV-kXiax0brWWeQZDEBKQIQ7lj0.roa (hash: VaX4IhwjfnzcwylL43ff4dLH5Qhw2TlZSvdp0A2GC5g=) 5: TUJfUZ1C6AVUTkApJcMIop5vQLE.roa (hash: 19Ah/XGkNGiCO99Jf7P8HQSUuyigvJ3sN9PnRIrIxdo=) 6: UkKSFgRU0i3KaGnHwMCMWucAEJg.roa (hash: 5Ch+ryXt3IKffn5gHuwCN/ReoHH/iCHv2Si1y+KwSg0=) 7: YWNcwd41RpRA7xgpt7KBYYNpmLo.roa (hash: Z/YiQmms85XQHI3WICsesmpbSRUq/suFEGF/feadUT8=) 8: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=) 9: cD2COEhWqNo5yp4vCeMl7hW-eQM.roa (hash: 4UYXi9S7C8C0UsDyWgF+v61Gg+AakXXjWmGnRepiQPU=) 10: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=) 11: fw1iguCmj4qOwcfsFkeFpir65VU.roa (hash: iKQXq9XoPCUkxxyylDltQ/lPyGgCP1DuZtbwv2OYAAM=) 12: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=) 13: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=) 14: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=) 15: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=) 16: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=) 17: v4JvY9wMe53smhk2zRvJ5lMTrGE.roa (hash: 3s3UDWjb1KYZ+q2gqU6kquutAKC7VSuocZYMkU1M+wA=) 18: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=) 19: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:58:2b:cf:5d:58:29:c6:9a:5b:5f:86:ae:82:cd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Mar 1 17:00:30 2026 GMT Not After : Mar 2 17:00:30 2026 GMT Subject: CN=18231c07653fa7870a6d809b6bab5b3cd6c2d38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5a:7b:d4:1a:02:b2:d8:9c:03:89:f7:3c:86: f5:a0:b2:98:4b:65:4b:22:34:a8:0b:3a:33:10:67: 58:06:07:f8:9a:c0:4e:a2:da:ab:30:1a:d3:43:66: fe:c8:2b:1b:58:96:d2:5a:df:f3:63:cc:50:20:4e: 49:e8:8f:73:00:3b:dc:a1:09:54:b6:dc:c2:a8:7e: ba:6a:30:ae:37:c2:c9:39:29:06:db:a3:de:73:5c: eb:cf:25:f3:d9:14:ed:2c:f2:70:6a:ec:29:23:0f: d4:85:e0:e5:15:26:0c:ae:06:ef:ce:45:00:d2:c2: e3:38:5f:f8:d6:15:c2:ee:5a:8c:a8:44:b5:41:4f: ca:fb:b2:a1:2c:67:e2:76:b5:ca:f9:76:c2:ea:74: cb:7b:ad:eb:29:ca:2d:cf:2a:08:14:2f:7c:ec:35: 63:01:56:d1:61:b4:e7:06:89:cd:be:d6:f2:ac:a9: df:3d:1b:5c:0d:c5:db:3b:4a:f9:60:9c:1c:bf:ad: 95:3c:e3:5e:23:34:ce:d2:6c:ac:97:32:43:23:52: cb:9f:43:c7:2f:64:2b:86:f1:e0:e8:4f:7f:51:30: cf:bd:71:1b:8d:f2:a9:ce:2c:44:6f:4d:33:3f:bb: 1b:68:a1:af:40:e8:92:3e:45:5e:dd:eb:2e:ba:a9: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:23:1C:07:65:3F:A7:87:0A:6D:80:9B:6B:AB:5B:3C:D6:C2:D3:8B X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3f:ff:8e:05:00:2f:27:0d:99:fb:26:1c:e7:2d:7f:5a:1e: 2f:17:e3:0f:fc:fd:1c:9d:91:41:26:b5:6d:65:91:a7:a3:a1: 95:7e:96:76:fa:0e:22:c3:3b:a6:ce:db:ec:d2:d8:9c:eb:84: 15:53:63:5a:a8:17:f7:24:ae:e2:6c:dc:0b:8e:ca:ca:8f:a2: b1:ad:ab:d0:76:3f:52:64:6c:43:91:eb:12:cd:87:e4:37:d8: a7:b6:ba:7c:76:ec:ae:a4:ce:01:d8:bf:7c:9c:3e:1a:10:11: 54:0e:e9:31:ff:57:44:5d:80:d7:1e:8b:69:b9:fc:a0:96:34: 43:3c:17:91:8f:5e:f4:3b:d8:05:63:d1:0b:8b:30:47:1c:d0: a8:cf:b4:70:9e:0b:f5:3f:d3:9c:92:dd:3b:d1:d0:87:52:89: c9:c2:26:75:fd:88:f1:0d:3f:c7:2e:06:6a:aa:0b:0c:8f:3c: 73:19:6d:0e:fb:07:45:1c:44:eb:db:68:2f:ff:33:ad:c3:0d: fa:ad:6e:4f:7d:0a:a2:73:71:8d:53:99:b8:18:02:61:14:74: ba:71:cc:1e:1b:c8:d1:0a:b0:c2:69:4b:56:4e:f8:f8:e9:f5: fe:c1:7f:03:c2:66:00:ac:9b:e9:5c:10:f3:64:1e:15:7e:28: 74:00:f4:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqWCvPXVgpxppbX4augs3QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMzAxMTcwMDMwWhcNMjYwMzAyMTcwMDMwWjAzMTEwLwYDVQQD EygxODIzMWMwNzY1M2ZhNzg3MGE2ZDgwOWI2YmFiNWIzY2Q2YzJkMzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlp71BoCsticA4n3PIb1oLKYS2VL IjSoCzozEGdYBgf4msBOotqrMBrTQ2b+yCsbWJbSWt/zY8xQIE5J6I9zADvcoQlU ttzCqH66ajCuN8LJOSkG26Pec1zrzyXz2RTtLPJwauwpIw/UheDlFSYMrgbvzkUA 0sLjOF/41hXC7lqMqES1QU/K+7KhLGfidrXK+XbC6nTLe63rKcotzyoIFC987DVj AVbRYbTnBonNvtbyrKnfPRtcDcXbO0r5YJwcv62VPONeIzTO0myslzJDI1LLn0PH L2QrhvHg6E9/UTDPvXEbjfKpzixEb00zP7sbaKGvQOiSPkVe3esuuqlokQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgjHAdlP6eHCm2Am2urWzzWwtOLMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXT//jgUA LycNmfsmHOctf1oeLxfjD/z9HJ2RQSa1bWWRp6OhlX6WdvoOIsM7ps7b7NLYnOuE FVNjWqgX9ySu4mzcC47Kyo+isa2r0HY/UmRsQ5HrEs2H5DfYp7a6fHbsrqTOAdi/ fJw+GhARVA7pMf9XRF2A1x6Labn8oJY0QzwXkY9e9DvYBWPRC4swRxzQqM+0cJ4L 9T/TnJLdO9HQh1KJycImdf2I8Q0/xy4GaqoLDI88cxltDvsHRRxE69toL/8zrcMN +q1uT30KonNxjVOZuBgCYRR0unHMHhvI0QqwwmlLVk74+On1/sF/A8JmAKyb6VwQ 82QeFX4odAD03w== -----END CERTIFICATE-----Generated at Sun Mar 1 22:23:46 2026 by rpki-client