$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: YQqO83Jg/7phf4ONtWvy3Nd1PQM0Gsn0jsmOLjgxqV8= Subject key identifier: E7:8F:51:DB:8A:C0:EE:66:08:B0:C0:36:A1:52:50:44:F3:73:50:EB Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019D9AAB9C62100489270A2F0DA8AE046A62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 1879 Signing time: Fri 17 Apr 2026 09:00:30 +0000 Manifest this update: Fri 17 Apr 2026 09:00:30 +0000 Manifest next update: Sat 18 Apr 2026 09:00:30 +0000 Files and hashes: 1: 7crBnHONDEiQfrWIPlw00C8QSKw.roa (hash: Px9bgNmN3CkGROuLFLneuCSVLL0NNlCF94jN/U/6nWk=) 2: 82ufesd9jM_-UcwHl9xDd28w7bc.roa (hash: gm9W00xGdkpnPbgGYol+dd436lsvUg6lbjX2PP6ojh8=) 3: 85Rvc3_9ZASD2vobCL9t5-c1aU4.roa (hash: vTKkBjgSvXm0Sbl7IC7WJ5hSm/4pkOxSRKg6DOoQUAQ=) 4: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: rQNtW1WOGA2T8g4GH8dD27VjAK0ZjLrG52MmNB/YYhA=) 5: 9RcFiPDd3R3zQqDhd_LItb-oDTA.roa (hash: AC0BWwsNFcYLQdYfVVpkxBC/1xIK6znU8uU1YFKJpGM=) 6: ALPiTkZxPDTnbdpPpErdvl97Wc8.roa (hash: Nf4+/SkcOD5qP7AwraGXa6vQHuKG0gARaAPpiziJKcQ=) 7: VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa (hash: ZiS8xAZ8WIWo3rD54IGCFbmBSzYShJeiuytFXk2sEEo=) 8: YtxqG6YVJVzJtkAnwNNnMrka-WU.roa (hash: m+f6M6gTdplPJjEueYl+KBT8SUvLASyT3kyBqwL5mTg=) 9: vRTSmI6KhjkZ7QSqDR8TmUD_H-o.roa (hash: g93xhnAacJq3AAXAMyOtAyF6fP7Xgz52ChSm97QaIXk=) 10: vcGlDl5Ct_NiM8YzttTek7TQKfQ.roa (hash: BnX/CYwHVszSwePzYMqQFPXrCzJ9oUgTdB3TWSa3h4A=) 11: yiMg7ZQH4FHBD9YZKg_pUWu_Ev4.roa (hash: AIchpJMxJjIRdk7/i7zLscbwRaKVTsnK2jEupzwufmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:ab:9c:62:10:04:89:27:0a:2f:0d:a8:ae:04:6a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Apr 17 09:00:30 2026 GMT Not After : Apr 18 09:00:30 2026 GMT Subject: CN=e78f51db8ac0ee6608b0c036a1525044f37350eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:d6:2c:59:24:7e:69:65:69:8a:65:6f:8a: 0a:76:5a:8a:12:5c:ee:3c:7a:5b:83:01:a9:b8:1a: 37:26:e3:33:de:fa:a6:40:96:e3:5a:ef:a8:ef:02: ec:5f:d6:4e:7a:a6:fa:c1:19:eb:10:69:d8:33:d3: 60:94:a3:ba:fd:12:ca:11:00:8d:c4:d3:9f:c7:1a: 53:09:c0:71:a4:ac:21:98:75:9f:d3:31:b8:38:47: 9b:0f:39:08:d3:af:2f:b5:dc:af:13:ec:71:dd:ae: b5:8b:33:6a:48:55:41:7f:6f:97:92:d2:b1:b2:be: 9f:cd:d0:3d:b5:d4:68:d2:b5:e5:b6:7d:eb:01:62: c2:2c:7b:34:21:5a:76:2c:4a:a2:be:d5:c1:20:c3: c6:8c:90:14:85:7b:55:3c:48:4e:51:47:cf:85:aa: ba:b2:19:bb:ac:3e:de:40:80:c0:dd:9d:4f:3b:6d: 6f:d7:fe:1e:f9:fe:fa:73:9a:83:18:2a:b4:b2:45: 60:b8:95:2f:ec:c6:85:8a:75:0b:80:57:e7:ca:b5: 44:91:1d:f4:43:d2:b2:ad:a2:8f:bc:1b:a7:a0:f2: 86:6a:0e:56:61:ca:e5:f5:c2:76:05:e2:59:d1:b1: 49:fe:e2:43:0a:69:a7:d0:a6:ac:46:93:2a:bc:25: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8F:51:DB:8A:C0:EE:66:08:B0:C0:36:A1:52:50:44:F3:73:50:EB X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e4:c1:3f:f0:dd:90:05:1c:ae:5a:c2:a7:02:5e:7c:de:fe: f4:2b:ca:6e:28:db:1e:42:d1:cf:84:55:b0:68:64:bc:b9:68: 54:40:b7:fc:30:b2:a3:ff:f2:a5:8d:f6:d8:dd:c2:f4:19:40: 8b:05:e0:f6:ba:dc:fc:83:be:d8:48:a7:5b:41:c8:b8:65:23: 10:e3:68:ff:b3:ba:59:cc:4c:aa:9a:8e:5f:52:58:26:a5:a0: 06:d5:1a:dc:52:c2:5d:e1:a7:f0:2d:bc:f7:5d:4d:15:d1:af: 27:7a:5a:c6:46:dc:2f:77:7a:17:99:2b:10:54:d3:e3:e3:72: 4e:17:c3:95:57:9e:d4:ad:11:4c:06:be:4e:1f:9e:3f:b2:db: b0:28:6e:98:f7:55:94:74:33:90:6d:fb:0a:9a:04:43:28:f2: 0e:4c:c1:f4:34:ad:ef:ff:5b:5e:0f:56:d6:80:43:f5:fe:65: 38:d9:78:94:ba:f5:2e:ce:f5:54:e7:0d:f0:f8:41:58:c2:e5: ff:d6:f1:b2:0b:7b:e7:39:79:f1:1c:cc:5d:a5:b8:94:fb:fa: b9:65:ee:04:cf:b5:e5:2c:f6:23:56:1c:9b:54:15:80:89:8c: 4c:2a:e6:ff:fd:ee:ec:bc:d5:68:28:2d:72:bb:09:96:19:62: 52:3a:2d:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aq5xiEASJJwovDaiuBGpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwNDE3MDkwMDMwWhcNMjYwNDE4MDkwMDMwWjAzMTEwLwYDVQQD EyhlNzhmNTFkYjhhYzBlZTY2MDhiMGMwMzZhMTUyNTA0NGYzNzM1MGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq3WLFkkfmllaYplb4oKdlqKElzu PHpbgwGpuBo3JuMz3vqmQJbjWu+o7wLsX9ZOeqb6wRnrEGnYM9NglKO6/RLKEQCN xNOfxxpTCcBxpKwhmHWf0zG4OEebDzkI068vtdyvE+xx3a61izNqSFVBf2+XktKx sr6fzdA9tdRo0rXltn3rAWLCLHs0IVp2LEqivtXBIMPGjJAUhXtVPEhOUUfPhaq6 shm7rD7eQIDA3Z1PO21v1/4e+f76c5qDGCq0skVguJUv7MaFinULgFfnyrVEkR30 Q9KyraKPvBunoPKGag5WYcrl9cJ2BeJZ0bFJ/uJDCmmn0KasRpMqvCWTzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOePUduKwO5mCLDANqFSUETzc1DrMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuTBP/Dd kAUcrlrCpwJefN7+9CvKbijbHkLRz4RVsGhkvLloVEC3/DCyo//ypY322N3C9BlA iwXg9rrc/IO+2EinW0HIuGUjEONo/7O6WcxMqpqOX1JYJqWgBtUa3FLCXeGn8C28 911NFdGvJ3paxkbcL3d6F5krEFTT4+NyThfDlVee1K0RTAa+Th+eP7LbsChumPdV lHQzkG37CpoEQyjyDkzB9DSt7/9bXg9W1oBD9f5lONl4lLr1Ls71VOcN8PhBWMLl /9bxsgt75zl58RzMXaW4lPv6uWXuBM+15Sz2I1Ycm1QVgImMTCrm//3u7LzVaCgt crsJlhliUjot/Q== -----END CERTIFICATE-----Generated at Fri Apr 17 13:24:38 2026 by rpki-client