$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: O4JjfrlB+pm5vQMaeMB8sCv8hG/IzwuFHJelLps/XxA= Subject key identifier: C4:68:DC:BD:1C:6F:E1:6D:90:52:AE:87:1E:B1:D3:91:20:76:86:73 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019D992B17BAE49A4513428F69C75F9DE49C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 0BB4 Signing time: Fri 17 Apr 2026 02:00:31 +0000 Manifest this update: Fri 17 Apr 2026 02:00:31 +0000 Manifest next update: Sat 18 Apr 2026 02:00:31 +0000 Files and hashes: 1: 1lESD01m5gbJyA-braAOgm-nsxs.roa (hash: LKvU7E9DI8H+f3xZF2Ibb4ZAlOKiTpfnzxmAzY3Zmkw=) 2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: 2E7HHym/CTE6FlZ46ug4MF2hnBJVhL7YAtTZdYYOjEE=) 3: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=) 4: 61nxpqdan0uvkgRYS9p3WXMt0is.roa (hash: +Etzf8iyPB8hG3RY9d2BBNlzK8ZhQf8I9wkNpl+P4s4=) 5: C9CUr-PFwRxBqveQc9JRexz5FUs.roa (hash: lYbCEmweFZ4ggkWxLIShDolBIH8LVCAHfTyc91SJwy0=) 6: FsSNPUWjwDIlPVEHY__f13MutvI.roa (hash: ParcKE8qGlMpeOMYcmP/zF1xOvvVsHqjFGUJ9CbIYcQ=) 7: SUEavrAvbJYi-09a6QVI2M_eSIc.roa (hash: hAAmC8KjoRR+ZLoagJaC8chUvGr6KdS0WhlLhZ1Tw9Y=) 8: SxEgzv57NjsKIOhIgGMSSPB31dY.roa (hash: Eka7R9DlCQMme8qYnPdf1gGK8Vcy4Z0ZajCHahzY2Gc=) 9: TUJfUZ1C6AVUTkApJcMIop5vQLE.roa (hash: 19Ah/XGkNGiCO99Jf7P8HQSUuyigvJ3sN9PnRIrIxdo=) 10: YWNcwd41RpRA7xgpt7KBYYNpmLo.roa (hash: Z/YiQmms85XQHI3WICsesmpbSRUq/suFEGF/feadUT8=) 11: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=) 12: cD2COEhWqNo5yp4vCeMl7hW-eQM.roa (hash: 4UYXi9S7C8C0UsDyWgF+v61Gg+AakXXjWmGnRepiQPU=) 13: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=) 14: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=) 15: phmgxOcuPF9GcXnZAUVEYc174rU.roa (hash: M5AQHiMtJTqB/xtKjEf7r3Qpaxze1VwMRf81D421OX4=) 16: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=) 17: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=) 18: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=) 19: txTrVQ7DOwvGZVMuUdOo2yJntLw.roa (hash: X0+eCtLiIKeX5v5KTGC8o4Rtbkm6Pp1VNspLxuoN4nw=) 20: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=) 21: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=) 22: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:2b:17:ba:e4:9a:45:13:42:8f:69:c7:5f:9d:e4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Apr 17 02:00:31 2026 GMT Not After : Apr 18 02:00:31 2026 GMT Subject: CN=c468dcbd1c6fe16d9052ae871eb1d39120768673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:05:e8:b3:0e:57:28:88:87:87:44:7a:d9: 54:41:a8:7b:83:57:b5:c9:04:59:45:55:15:26:3e: 89:4d:59:05:b8:9f:30:04:28:27:87:7a:69:bb:6b: 5f:e1:32:d1:d5:24:fe:5e:68:ef:40:50:16:ce:e9: dc:11:81:16:db:fb:82:e9:5a:3b:41:60:d7:37:db: 73:fb:d9:dd:69:1c:ae:a4:2a:7a:a7:79:de:3c:22: af:5f:32:1d:20:62:99:47:fe:30:0e:08:fd:ec:88: c3:60:ff:5c:16:cf:81:87:a7:55:fb:7b:88:93:68: 4d:f5:de:de:bd:b9:7b:2f:ec:0e:60:e1:8f:c7:a4: 40:4e:6f:81:94:05:a3:3a:65:99:b6:4e:21:32:e7: 67:08:4e:89:7c:23:4c:22:8a:1a:05:e3:3e:33:0f: 79:c5:6a:62:70:6a:39:62:53:c8:59:f9:ac:db:ed: b5:c1:ec:3c:4b:f3:3a:26:84:73:29:e9:80:0d:91: 4f:8e:3d:5f:c3:f8:e3:89:37:c7:ea:47:85:c4:8c: 91:d9:ee:0f:52:18:ea:74:6f:06:12:36:e8:8d:6d: 68:10:56:05:e1:5a:14:cb:ef:5d:fb:a2:83:fe:ac: 2b:ba:83:d1:b2:a0:00:a2:54:cb:39:ad:0e:7e:e3: 25:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:68:DC:BD:1C:6F:E1:6D:90:52:AE:87:1E:B1:D3:91:20:76:86:73 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:0a:7f:34:2b:eb:fb:92:18:71:02:8d:df:78:a9:2c:1a:97: 23:a7:4c:35:e7:d0:e0:e3:4b:47:af:3d:fa:9e:5f:f1:18:90: 97:dc:69:99:71:61:fc:c9:c0:4e:ca:c0:15:46:6e:57:7b:f8: 0f:26:ea:57:02:91:39:f1:4e:1c:72:b5:58:e0:81:c2:57:fb: c3:b8:69:32:3a:70:05:dc:a5:ab:4e:03:76:57:59:6d:f0:1e: 5a:4e:e4:87:58:57:99:91:7c:c2:ad:68:8d:92:ba:9e:b5:7d: af:f8:29:7d:c6:71:2c:33:6d:1f:65:06:14:9f:7a:14:46:22: 01:11:6a:1d:66:44:7b:9b:f5:c6:ca:cf:c6:49:02:3b:83:1a: d8:7f:0e:e0:36:ae:32:87:8f:89:3b:66:b3:c2:c8:92:d7:2b: a0:70:de:9a:98:10:d6:b3:4c:2e:05:25:7d:2d:96:94:69:d3: dd:38:61:d7:7b:79:26:6b:7c:b5:5a:d7:64:f5:0a:d7:6d:4e: 96:8d:5a:b3:83:75:aa:bd:43:6a:ca:a3:c8:95:c3:03:24:99: 24:0e:08:c6:ae:49:20:a4:e8:a2:7c:7b:28:45:5c:8e:d9:c8: 49:9f:78:f2:90:a6:b9:2e:0a:ab:6d:93:25:5f:4a:86:56:2d: 14:69:1b:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZKxe65JpFE0KPacdfneScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwNDE3MDIwMDMxWhcNMjYwNDE4MDIwMDMxWjAzMTEwLwYDVQQD EyhjNDY4ZGNiZDFjNmZlMTZkOTA1MmFlODcxZWIxZDM5MTIwNzY4NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcUF6LMOVyiIh4dEetlUQah7g1e1 yQRZRVUVJj6JTVkFuJ8wBCgnh3ppu2tf4TLR1ST+XmjvQFAWzuncEYEW2/uC6Vo7 QWDXN9tz+9ndaRyupCp6p3nePCKvXzIdIGKZR/4wDgj97IjDYP9cFs+Bh6dV+3uI k2hN9d7evbl7L+wOYOGPx6RATm+BlAWjOmWZtk4hMudnCE6JfCNMIooaBeM+Mw95 xWpicGo5YlPIWfms2+21wew8S/M6JoRzKemADZFPjj1fw/jjiTfH6keFxIyR2e4P UhjqdG8GEjbojW1oEFYF4VoUy+9d+6KD/qwruoPRsqAAolTLOa0OfuMl+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRo3L0cb+FtkFKuhx6x05EgdoZzMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuQp/NCvr +5IYcQKN33ipLBqXI6dMNefQ4ONLR689+p5f8RiQl9xpmXFh/MnATsrAFUZuV3v4 DybqVwKROfFOHHK1WOCBwlf7w7hpMjpwBdylq04DdldZbfAeWk7kh1hXmZF8wq1o jZK6nrV9r/gpfcZxLDNtH2UGFJ96FEYiARFqHWZEe5v1xsrPxkkCO4Ma2H8O4Dau MoePiTtms8LIktcroHDempgQ1rNMLgUlfS2WlGnT3Thh13t5Jmt8tVrXZPUK121O lo1as4N1qr1DasqjyJXDAySZJA4Ixq5JIKToonx7KEVcjtnISZ948pCmuS4Kq22T JV9KhlYtFGkbYQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:45:30 2026 by rpki-client