$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: IjEYnkletAq3PfavUwA7snIY5I9SK/T76zwEW1OeH/E= Subject key identifier: B9:49:DB:64:9C:7A:01:8A:AA:59:E0:93:28:7E:97:F5:7E:17:6B:03 Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019CAB345AE994A4FE1D7DEB86E0764B3621 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 17FD Signing time: Sun 01 Mar 2026 21:01:00 +0000 Manifest this update: Sun 01 Mar 2026 21:01:00 +0000 Manifest next update: Mon 02 Mar 2026 21:01:00 +0000 Files and hashes: 1: 7crBnHONDEiQfrWIPlw00C8QSKw.roa (hash: Px9bgNmN3CkGROuLFLneuCSVLL0NNlCF94jN/U/6nWk=) 2: 82ufesd9jM_-UcwHl9xDd28w7bc.roa (hash: gm9W00xGdkpnPbgGYol+dd436lsvUg6lbjX2PP6ojh8=) 3: 85Rvc3_9ZASD2vobCL9t5-c1aU4.roa (hash: vTKkBjgSvXm0Sbl7IC7WJ5hSm/4pkOxSRKg6DOoQUAQ=) 4: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: YgMOjJCXJ1VpQGhjzy7bukfPXcEQMI5LHc6y8WzRnBY=) 5: 9RcFiPDd3R3zQqDhd_LItb-oDTA.roa (hash: AC0BWwsNFcYLQdYfVVpkxBC/1xIK6znU8uU1YFKJpGM=) 6: ALPiTkZxPDTnbdpPpErdvl97Wc8.roa (hash: Nf4+/SkcOD5qP7AwraGXa6vQHuKG0gARaAPpiziJKcQ=) 7: VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa (hash: ZiS8xAZ8WIWo3rD54IGCFbmBSzYShJeiuytFXk2sEEo=) 8: YtxqG6YVJVzJtkAnwNNnMrka-WU.roa (hash: m+f6M6gTdplPJjEueYl+KBT8SUvLASyT3kyBqwL5mTg=) 9: vRTSmI6KhjkZ7QSqDR8TmUD_H-o.roa (hash: g93xhnAacJq3AAXAMyOtAyF6fP7Xgz52ChSm97QaIXk=) 10: vcGlDl5Ct_NiM8YzttTek7TQKfQ.roa (hash: BnX/CYwHVszSwePzYMqQFPXrCzJ9oUgTdB3TWSa3h4A=) 11: yiMg7ZQH4FHBD9YZKg_pUWu_Ev4.roa (hash: AIchpJMxJjIRdk7/i7zLscbwRaKVTsnK2jEupzwufmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:5a:e9:94:a4:fe:1d:7d:eb:86:e0:76:4b:36:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Mar 1 21:01:00 2026 GMT Not After : Mar 2 21:01:00 2026 GMT Subject: CN=b949db649c7a018aaa59e093287e97f57e176b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4c:a0:ed:6b:49:bd:b5:10:9c:01:93:89:88: 70:92:f5:29:d7:10:40:46:d3:f8:f1:a9:c5:68:8b: e9:ed:dd:41:9b:03:fd:3e:e5:eb:57:d3:00:d8:96: 42:34:57:b0:3f:e1:5a:fd:db:d9:db:b8:fc:82:68: 32:92:4b:7f:0c:38:1e:d4:40:7c:f7:52:2d:90:5e: b4:18:5c:47:f8:6f:1f:55:49:13:8d:23:96:bd:4a: f1:c6:65:f7:20:9d:5e:3e:d3:83:e8:03:49:a6:ab: 16:69:f7:79:3b:18:08:d9:cb:83:4c:c7:f6:4a:18: 5f:91:27:55:e8:e6:99:a9:1f:6b:65:a4:bf:48:81: 4b:ac:ce:9f:e7:cd:25:7b:ac:8c:5b:96:8e:f3:9e: c7:a4:f7:64:4f:69:bb:1d:d9:7c:40:fd:39:28:ea: 39:ce:b1:78:56:32:9e:55:0f:c0:9f:20:41:d9:62: d1:dd:f2:e6:b9:fc:97:9d:1b:2a:8a:5c:cf:3d:79: cf:81:18:4b:6c:0a:59:bc:53:0d:57:fe:f3:07:51: 26:ba:3a:f9:2f:97:f8:15:b7:31:c4:26:83:54:d2: ee:97:3d:17:9e:bf:76:ba:02:2b:3a:78:35:47:ea: ac:47:27:c4:7a:32:ba:16:4c:bf:bb:81:8a:88:07: 40:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:49:DB:64:9C:7A:01:8A:AA:59:E0:93:28:7E:97:F5:7E:17:6B:03 X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4a:f7:3e:ed:46:b2:c1:53:e4:17:d4:c4:1d:f2:8d:6e:98: 3f:91:af:8b:91:9f:c8:5b:2e:cb:aa:37:f2:d2:eb:90:79:4e: 3a:a5:29:f9:c7:bc:17:6d:d2:c3:bc:43:a9:17:3a:cc:ff:9d: 77:a9:51:85:58:c3:98:17:1b:8b:b2:12:a8:b6:45:7b:28:5a: 1d:ac:a5:d1:e1:20:be:dc:c8:03:4e:b9:f7:27:0a:00:b6:ad: d3:c3:c1:07:bd:69:c1:64:11:55:9b:b7:82:8b:64:ed:2b:46: e9:6d:28:f9:af:b9:a3:86:1b:c1:25:cc:cc:f8:c7:45:86:b1: c2:85:af:3c:cb:f9:8b:ca:b4:ea:cb:a4:7c:a8:17:dd:b8:c5: 4b:f4:86:1d:c7:89:50:c5:0b:55:17:66:9e:ee:42:fc:06:c3: e1:dd:5d:ad:e6:a0:eb:7c:0f:8f:4a:ea:b6:c6:e0:b3:7d:28: 79:47:64:b4:fe:d0:a7:d8:52:07:2b:f6:6b:c4:91:98:93:9a: 0c:23:cd:52:9e:90:c6:27:7b:ed:ea:11:c9:b2:d1:12:81:a9: ca:b4:5a:be:d2:ef:1a:b0:6a:1c:8d:af:cf:90:91:db:2f:df: e0:15:e8:d8:e4:32:18:34:31:d5:95:24:a4:5a:ad:ed:4f:ae: 88:7a:c9:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNFrplKT+HX3rhuB2SzYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwMzAxMjEwMTAwWhcNMjYwMzAyMjEwMTAwWjAzMTEwLwYDVQQD EyhiOTQ5ZGI2NDljN2EwMThhYWE1OWUwOTMyODdlOTdmNTdlMTc2YjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkyg7WtJvbUQnAGTiYhwkvUp1xBA RtP48anFaIvp7d1BmwP9PuXrV9MA2JZCNFewP+Fa/dvZ27j8gmgykkt/DDge1EB8 91ItkF60GFxH+G8fVUkTjSOWvUrxxmX3IJ1ePtOD6ANJpqsWafd5OxgI2cuDTMf2 ShhfkSdV6OaZqR9rZaS/SIFLrM6f580le6yMW5aO857HpPdkT2m7Hdl8QP05KOo5 zrF4VjKeVQ/AnyBB2WLR3fLmufyXnRsqilzPPXnPgRhLbApZvFMNV/7zB1Emujr5 L5f4FbcxxCaDVNLulz0Xnr92ugIrOng1R+qsRyfEejK6Fky/u4GKiAdA2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlJ22ScegGKqlngkyh+l/V+F2sDMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUr3Pu1G ssFT5BfUxB3yjW6YP5Gvi5GfyFsuy6o38tLrkHlOOqUp+ce8F23Sw7xDqRc6zP+d d6lRhVjDmBcbi7ISqLZFeyhaHayl0eEgvtzIA0659ycKALat08PBB71pwWQRVZu3 gotk7StG6W0o+a+5o4YbwSXMzPjHRYaxwoWvPMv5i8q06sukfKgX3bjFS/SGHceJ UMULVRdmnu5C/AbD4d1dreag63wPj0rqtsbgs30oeUdktP7Qp9hSByv2a8SRmJOa DCPNUp6Qxid77eoRybLREoGpyrRavtLvGrBqHI2vz5CR2y/f4BXo2OQyGDQx1ZUk pFqt7U+uiHrJsg== -----END CERTIFICATE-----Generated at Mon Mar 2 08:05:05 2026 by rpki-client