$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft File: 8uFg8M5eA1rzyyH039BOq56n7lE.mft (raw, json) Hash identifier: 3ed1zE62HGsvp9qDOxmnEEsGpQcWXvakmYSqe6cVcPo= Subject key identifier: 29:7A:F4:76:2D:FC:E7:E4:4E:86:26:22:41:21:F8:31:27:47:B1:5E Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Certificate serial: 019D9CD1B2B03BD30634C8025411EBE1FBDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft Manifest number: EC Signing time: Fri 17 Apr 2026 19:01:21 +0000 Manifest this update: Fri 17 Apr 2026 19:01:21 +0000 Manifest next update: Sat 18 Apr 2026 19:01:21 +0000 Files and hashes: 1: 8uFg8M5eA1rzyyH039BOq56n7lE.crl (hash: a5Yi4gm6RgtgSLeHQB0LpFKCxRoEIHxK+Hi/1gU0n4Q=) 2: BSsRECuRcbwMW98kdWWK05egVBw.roa (hash: ug6KO2Zk1MrKsNXGJ9omTpAuU0xr+emz7VoOCmkwvpw=) 3: FRRRnwExpXw7a2MuDv5ABSNE0os.roa (hash: 3ZQFCRFjP8UeMQLhH1/qjBrVW66rsV7z4ra4rGbF/Rk=) 4: IYhXGcvuReRwLkKFqkHfMT0xdMQ.roa (hash: P65YHmORj/Qbi7gb1HICB61t5DJTFwQfC/ueE2C3wHQ=) 5: LD4LiJakMnd2fM_muaGzK3OCDm4.roa (hash: 06z+15zWX5rCsS3FhV81kHp2Sa4vXMzL9qdPTiJ9zeM=) 6: W6axFsn-vbQYLWwnDT47_wx3Q3c.roa (hash: Rtry8Utgwi6S+gFf7iEFH1/gJHIzc/FxYDg1Nh4bbns=) 7: WP5VLGI4ulmSbNxBPukglNbdBRA.roa (hash: RpQ3sBuNfVrqecm0+dZDQsCQlQ/PR1NRrFc8o4XUGjw=) 8: Xly4VLCyL4qx8pSp8FuBHSdiGps.roa (hash: jb5/yBQShc5nvMqwZkFvyoehznPlqSgb+AtitziDdAI=) 9: ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa (hash: HIvZs/TkMx+bymwhUhZwvlQVHu6QM24ito4FjiIQX2c=) 10: gDVnbdgyGBxPjaEc46h1SC6bKGc.roa (hash: bRdUEdhFNf/pMvUllLg5PTYpswbssaY0ednf3AqAQx4=) 11: ilqY9c8IbcEKTWk24AXRgSNrWO0.roa (hash: m73bbuMRMSiNr5UeY5P6BQ8Ud8zaXgZ2oA4zOG5Tf2M=) 12: s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa (hash: OKS1HAKlGU2JN5vzskZAI17mKtPa16rejzU50FR3zwM=) 13: sGNYZDKF8s8_UsTeuK9XpTB6Wkw.roa (hash: gaT8D+qDaVi3KbUN95vQ0WglNN0OnaGWaUxlYVphb+c=) 14: xyq2X_f3zC6Xz55IxSXIUgnM5z4.roa (hash: NjWdv7TCmRAiHCp58PtMucOC3ZgidTmZVOahys71z+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:d1:b2:b0:3b:d3:06:34:c8:02:54:11:eb:e1:fb:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Validity Not Before: Apr 17 19:01:21 2026 GMT Not After : Apr 18 19:01:21 2026 GMT Subject: CN=297af4762dfce7e44e8626224121f8312747b15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:d3:e3:e1:e0:95:ed:10:61:62:c2:fc:52: fa:7c:a7:87:36:b7:a6:90:06:b3:38:c1:9a:cf:d6: 24:d0:0c:57:a0:e2:20:db:a1:c5:bb:54:76:07:b8: a2:f3:51:07:47:6d:dd:84:83:98:f8:59:60:71:7c: 72:47:60:88:29:05:bb:34:74:5f:dc:27:90:26:77: e5:cd:0e:86:dd:e1:50:70:30:73:da:83:d4:31:77: 4f:52:c1:c3:cb:e8:00:0e:96:93:23:ce:de:4e:4e: b3:68:5c:5e:dd:b4:fa:18:39:87:55:5e:cf:30:44: d0:01:95:87:31:28:e9:7b:27:d0:18:56:4c:c0:f9: ac:1e:4c:66:3d:44:f8:2a:f6:22:ba:3a:cb:45:64: 2c:37:d3:23:d4:65:d8:f4:1b:58:c2:e3:81:fb:cf: 6b:87:82:e0:a9:03:8b:88:f3:f9:55:6c:82:d0:c8: f4:c5:91:ec:fb:27:da:fd:f5:20:9d:63:9d:a7:5b: 50:91:bb:75:f1:da:50:cd:01:0d:7b:bf:86:82:74: 0a:a3:77:c4:fc:56:21:93:20:d2:32:5a:1f:34:dd: aa:cc:b4:8f:81:a7:89:fd:cc:56:0c:fd:6e:4f:2e: c1:d0:ba:b4:59:35:42:cb:b4:ab:90:df:10:01:2e: a1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7A:F4:76:2D:FC:E7:E4:4E:86:26:22:41:21:F8:31:27:47:B1:5E X509v3 Authority Key Identifier: keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:cf:57:73:1d:ca:46:4b:70:46:e6:0a:06:ea:5d:cd:12:44: f2:3c:6d:22:c1:bb:36:be:f8:1a:67:cf:2a:52:ef:57:31:6c: 7f:23:44:6d:70:34:bd:1c:ed:99:64:94:39:e7:7b:cd:00:d4: b7:a5:42:42:a2:79:a4:9e:21:94:e7:18:cf:fd:2a:c7:19:6f: af:71:2e:05:22:ca:7f:d4:5f:0f:28:79:73:88:23:51:c2:76: 9b:db:f1:28:fd:95:43:5c:2b:a3:f1:2d:26:9e:c0:c0:4d:34: 11:56:c3:fb:76:11:45:31:a7:d8:09:ba:55:e8:b6:be:4d:f6: f3:e3:22:51:17:a3:ea:97:cd:df:c5:ee:98:7a:c1:8a:46:b0: 4b:07:36:09:df:f0:69:d1:fe:f9:4d:ca:5e:9d:f0:8b:86:60: 19:3c:63:f3:0c:48:9d:05:f1:99:87:74:94:63:cd:07:4c:2c: 95:87:da:cc:89:03:b0:48:57:41:e1:bc:00:b1:55:60:c5:a9: 47:c9:b3:88:9e:e0:60:41:d5:ba:52:5a:e7:43:e6:13:02:5d: a0:0b:67:d0:e4:a0:f2:8d:5e:cf:34:67:70:b8:c2:15:83:4d: 44:96:41:af:f2:77:14:c4:8a:70:57:bb:bc:a2:24:f0:61:e5: 91:33:21:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2c0bKwO9MGNMgCVBHr4fvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh N2VlNTEwHhcNMjYwNDE3MTkwMTIxWhcNMjYwNDE4MTkwMTIxWjAzMTEwLwYDVQQD EygyOTdhZjQ3NjJkZmNlN2U0NGU4NjI2MjI0MTIxZjgzMTI3NDdiMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dvT4+Hgle0QYWLC/FL6fKeHNrem kAazOMGaz9Yk0AxXoOIg26HFu1R2B7ii81EHR23dhIOY+FlgcXxyR2CIKQW7NHRf 3CeQJnflzQ6G3eFQcDBz2oPUMXdPUsHDy+gADpaTI87eTk6zaFxe3bT6GDmHVV7P METQAZWHMSjpeyfQGFZMwPmsHkxmPUT4KvYiujrLRWQsN9Mj1GXY9BtYwuOB+89r h4LgqQOLiPP5VWyC0Mj0xZHs+yfa/fUgnWOdp1tQkbt18dpQzQENe7+GgnQKo3fE /FYhkyDSMlofNN2qzLSPgaeJ/cxWDP1uTy7B0Lq0WTVCy7SrkN8QAS6hjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCl69HYt/OfkToYmIkEh+DEnR7FeMB8GA1UdIwQY MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt ZmNlMjE0YzZmZmRhLzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUtZmNlMjE0YzZmZmRh LzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVs9Xcx3K RktwRuYKBupdzRJE8jxtIsG7Nr74GmfPKlLvVzFsfyNEbXA0vRztmWSUOed7zQDU t6VCQqJ5pJ4hlOcYz/0qxxlvr3EuBSLKf9RfDyh5c4gjUcJ2m9vxKP2VQ1wro/Et Jp7AwE00EVbD+3YRRTGn2Am6Vei2vk328+MiURej6pfN38XumHrBikawSwc2Cd/w adH++U3KXp3wi4ZgGTxj8wxInQXxmYd0lGPNB0wslYfazIkDsEhXQeG8ALFVYMWp R8mziJ7gYEHVulJa50PmEwJdoAtn0OSg8o1ezzRncLjCFYNNRJZBr/J3FMSKcFe7 vKIk8GHlkTMh4w== -----END CERTIFICATE-----Generated at Fri Apr 17 23:01:48 2026 by rpki-client