$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json) Hash identifier: ZBzqJi+ZNkEqD/cs4iWKZ2QYBekzza8JC5UHYnY2EuY= Subject key identifier: 22:4C:96:F6:1C:30:81:A5:16:52:F6:35:4E:25:62:5C:41:B3:F9:C6 Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 01A1C4E7D83C1D8FC27FB40AAE710F46472B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft Manifest number: 16DF Signing time: Tue 10 Nov 2026 10:01:30 +0000 Manifest this update: Tue 10 Nov 2026 10:01:30 +0000 Manifest next update: Wed 11 Nov 2026 10:01:30 +0000 Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: sPMrRpDkgO40lfISwdITJop3gPlItUguDNvuEkqVYwg=) 2: 3SoEwaHYmzBhPq3SqrK7-97FxfY.asa (hash: DUPJ+1lMqiRx5QPupK6EYyCTyvEki+rd8cq0JTEqc4k=) 3: 4dRn2JrP2QCTAWF-YiqGTdGG-aY.asa (hash: 5OSvsuPPRn9OvkRvh/NzOUAFS7gn9Nx/H8X3BJxRZYE=) 4: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=) 5: KJiyDl7iQPSHbczb71sauO3rVJk.asa (hash: xzLdynVvAziPI6SDyPFLHYP7bi2ATNLAOqyCRqeT3is=) 6: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=) 7: M8G0hHzNaUEBYlJ18I-LLmZFBKM.asa (hash: 1CwhbIx2C5nHDxmbbu2xhBW2STO+MmyMS7p2LGmo9hk=) 8: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=) 9: T5M14oqasE4RWqdrD07qXbN8eGY.asa (hash: OCqN8M2KvS/h05iREDnHi+l1MPqvKGu7Rk6ZjCf3xcE=) 10: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=) 11: XHeb1AmUfX1kngDYx7cK3_EIu7Q.asa (hash: y1sVzdki0bbI48xSY39Q5D3JsNtDyY7oJ/qahJmputE=) 12: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=) 13: id-lxRpZAXWjSQIYTHcFpR-BOiA.roa (hash: DJLygWwBzeOc6zwCMgS/e3psiWC9iHIdC8QxaCCmABU=) 14: mwjxtKPuHdDhkzcGADt1aiLxCIc.asa (hash: Wy5bjzVJWOG5tUKCM7dwY8G4WJIDxlDcCw2Ld4jrHPw=) 15: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=) 16: vEGsYuYY06TvYutYs-QyPdXXq4Q.roa (hash: UCMk3rT/wVrhtk6MMSMiEAtXXbsHSrVjnWedze014rg=) 17: xVaYIBw7M6bRv3MOmzyAcV4by3I.asa (hash: PgzXvKG2TR216H34m8dFRwASPrUVU9Y5qcUdR1XkLTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:c4:e7:d8:3c:1d:8f:c2:7f:b4:0a:ae:71:0f:46:47:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Nov 10 10:01:30 2026 GMT Not After : Nov 11 10:01:30 2026 GMT Subject: CN=224c96f61c3081a51652f6354e25625c41b3f9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:ad:0d:66:0e:c8:af:89:29:b4:40:22:cc: 87:5f:99:86:88:d2:22:b5:2f:2a:ff:3c:2c:0d:e8: 37:bf:14:e9:43:01:6c:cf:b5:f9:8a:76:72:3c:6c: 66:f9:63:7d:0f:31:90:61:e9:ea:c9:91:7a:69:7e: 5a:9c:e9:03:8a:1a:bd:05:d1:50:26:ee:78:4d:cb: 01:a3:2a:87:4f:12:0c:94:dd:59:d1:a5:f9:fd:a0: 81:5f:a1:92:15:94:f5:6c:74:40:73:da:fe:93:92: 6c:55:24:47:72:5c:de:5f:c8:fa:ee:35:2e:84:77: 0a:b5:c4:47:5a:ad:49:9b:e5:56:3b:cf:04:07:ce: cd:e9:ef:5a:b6:24:fb:89:c8:6f:f9:e6:51:8f:a6: c7:24:f1:e0:37:25:f6:19:9a:94:d2:bc:ef:9e:a5: a3:ef:5c:a2:b3:a5:ea:7e:f6:2d:f0:ed:81:e5:08: 1c:2c:cc:31:e5:04:5c:84:0c:d1:54:0b:10:c5:ed: 49:6d:19:b8:3e:b2:20:44:aa:37:4d:90:e7:22:0c: 54:32:a2:b3:b4:cf:82:81:05:6a:8a:bb:c8:de:51: d0:43:c1:a3:cf:6e:23:8f:40:dd:54:28:d2:cc:81: 87:30:24:7a:41:60:4a:dc:2a:bc:f8:da:f5:1e:c9: 07:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4C:96:F6:1C:30:81:A5:16:52:F6:35:4E:25:62:5C:41:B3:F9:C6 X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7f:f4:b2:a3:52:60:2c:99:c2:ed:6a:b9:b5:5c:a8:82:ab: 45:b3:d7:b8:b8:60:45:32:ed:49:da:c0:ee:af:38:2e:c4:af: 03:7b:97:f1:aa:92:8a:c6:17:58:06:54:84:a2:14:e2:28:f8: 23:22:6b:a8:96:3f:a4:37:93:8f:9a:2d:e2:33:64:d0:ba:ac: 0d:28:1a:64:68:8b:8d:be:78:58:20:18:33:6c:f5:7d:4d:c5: 90:05:fe:e9:18:61:b9:22:33:37:07:c1:3b:4f:4f:1e:23:b1: 51:c4:96:6b:bc:db:e3:49:61:4f:d6:4b:26:17:a8:d2:ba:c6: 7b:c3:f2:84:9b:99:61:81:41:86:b9:16:e7:b1:03:b2:b4:32: 1d:ac:1a:fb:b6:17:30:fb:49:6b:f5:3b:02:f5:16:15:b7:ea: c4:88:46:56:0c:ca:39:92:43:5d:65:f0:91:a5:c6:35:cd:dc: 0a:a4:86:9e:31:c2:4a:34:a4:82:a8:2b:4d:e0:da:37:f4:54: 20:26:19:53:2c:b0:c1:e6:7e:d0:db:41:65:87:58:62:d0:3d: 60:ab:b1:78:1f:3f:68:cd:f9:67:07:ef:53:5f:29:c7:73:90: 0c:69:a5:01:91:ad:43:28:d9:ac:e8:d8:d1:69:24:46:34:a2: 27:12:db:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHE59g8HY/Cf7QKrnEPRkcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjYxMTEwMTAwMTMwWhcNMjYxMTExMTAwMTMwWjAzMTEwLwYDVQQD EygyMjRjOTZmNjFjMzA4MWE1MTY1MmY2MzU0ZTI1NjI1YzQxYjNmOWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviatDWYOyK+JKbRAIsyHX5mGiNIi tS8q/zwsDeg3vxTpQwFsz7X5inZyPGxm+WN9DzGQYenqyZF6aX5anOkDihq9BdFQ Ju54TcsBoyqHTxIMlN1Z0aX5/aCBX6GSFZT1bHRAc9r+k5JsVSRHclzeX8j67jUu hHcKtcRHWq1Jm+VWO88EB87N6e9atiT7ichv+eZRj6bHJPHgNyX2GZqU0rzvnqWj 71yis6XqfvYt8O2B5QgcLMwx5QRchAzRVAsQxe1JbRm4PrIgRKo3TZDnIgxUMqKz tM+CgQVqirvI3lHQQ8Gjz24jj0DdVCjSzIGHMCR6QWBK3Cq8+Nr1HskHrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJMlvYcMIGlFlL2NU4lYlxBs/nGMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3/0sqNS YCyZwu1qubVcqIKrRbPXuLhgRTLtSdrA7q84LsSvA3uX8aqSisYXWAZUhKIU4ij4 IyJrqJY/pDeTj5ot4jNk0LqsDSgaZGiLjb54WCAYM2z1fU3FkAX+6RhhuSIzNwfB O09PHiOxUcSWa7zb40lhT9ZLJheo0rrGe8PyhJuZYYFBhrkW57EDsrQyHawa+7YX MPtJa/U7AvUWFbfqxIhGVgzKOZJDXWXwkaXGNc3cCqSGnjHCSjSkgqgrTeDaN/RU ICYZUyywweZ+0NtBZYdYYtA9YKuxeB8/aM35ZwfvU18px3OQDGmlAZGtQyjZrOjY 0WkkRjSiJxLbKg== -----END CERTIFICATE-----Generated at Tue Nov 10 14:53:28 2026 by rpki-client