$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: 5Di9eU6D/H00vezRSeGD3UwVneEEKfA2kAVrn2o41us= Subject key identifier: 73:CB:6C:5B:CC:82:90:CA:35:9F:AB:F7:21:3B:C3:F4:91:A7:4F:2A Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019CAD228EC4C1876F50D3F9FDF7112DAFA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 17FE Signing time: Mon 02 Mar 2026 06:00:49 +0000 Manifest this update: Mon 02 Mar 2026 06:00:49 +0000 Manifest next update: Tue 03 Mar 2026 06:00:49 +0000 Files and hashes: 1: 7crBnHONDEiQfrWIPlw00C8QSKw.roa (hash: Px9bgNmN3CkGROuLFLneuCSVLL0NNlCF94jN/U/6nWk=) 2: 82ufesd9jM_-UcwHl9xDd28w7bc.roa (hash: gm9W00xGdkpnPbgGYol+dd436lsvUg6lbjX2PP6ojh8=) 3: 85Rvc3_9ZASD2vobCL9t5-c1aU4.roa (hash: vTKkBjgSvXm0Sbl7IC7WJ5hSm/4pkOxSRKg6DOoQUAQ=) 4: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: exd3QdUfG5fROucbDuLSejAioH+n1XTfLpe3jM6sUhE=) 5: 9RcFiPDd3R3zQqDhd_LItb-oDTA.roa (hash: AC0BWwsNFcYLQdYfVVpkxBC/1xIK6znU8uU1YFKJpGM=) 6: ALPiTkZxPDTnbdpPpErdvl97Wc8.roa (hash: Nf4+/SkcOD5qP7AwraGXa6vQHuKG0gARaAPpiziJKcQ=) 7: VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa (hash: ZiS8xAZ8WIWo3rD54IGCFbmBSzYShJeiuytFXk2sEEo=) 8: YtxqG6YVJVzJtkAnwNNnMrka-WU.roa (hash: m+f6M6gTdplPJjEueYl+KBT8SUvLASyT3kyBqwL5mTg=) 9: vRTSmI6KhjkZ7QSqDR8TmUD_H-o.roa (hash: g93xhnAacJq3AAXAMyOtAyF6fP7Xgz52ChSm97QaIXk=) 10: vcGlDl5Ct_NiM8YzttTek7TQKfQ.roa (hash: BnX/CYwHVszSwePzYMqQFPXrCzJ9oUgTdB3TWSa3h4A=) 11: yiMg7ZQH4FHBD9YZKg_pUWu_Ev4.roa (hash: AIchpJMxJjIRdk7/i7zLscbwRaKVTsnK2jEupzwufmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:22:8e:c4:c1:87:6f:50:d3:f9:fd:f7:11:2d:af:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Mar 2 06:00:49 2026 GMT Not After : Mar 3 06:00:49 2026 GMT Subject: CN=73cb6c5bcc8290ca359fabf7213bc3f491a74f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3e:8f:0c:02:96:ed:51:1d:3e:5e:12:86:25: f6:e2:10:89:52:97:e0:38:1a:0c:60:9f:30:eb:7e: 7d:9f:fc:ef:34:c7:e8:8a:df:02:0c:1f:84:53:bb: 39:01:26:a4:33:82:1f:75:d5:9c:59:fc:97:0e:6c: 5a:35:4d:60:4a:f3:96:ed:ce:90:8f:10:a6:f9:49: 07:b5:47:64:dc:be:9d:15:84:4e:85:90:3e:99:d0: 31:aa:19:21:71:f2:11:bb:b6:cf:a7:e9:98:a1:8a: d8:22:78:b3:10:8e:fe:07:ef:eb:88:99:7a:ef:91: af:21:ee:5f:f7:1a:5a:a3:e0:7c:5e:b0:27:ff:55: c3:9d:72:fb:7d:b5:af:5a:42:4c:48:c1:43:a8:57: 5a:bc:e4:38:c5:96:56:4f:a2:6f:f9:f6:18:f9:a9: be:69:7e:83:1d:09:bf:f1:a5:12:52:d2:3c:c7:05: 62:17:02:b9:bb:99:59:0e:ca:ad:68:03:10:88:1a: 9f:c9:47:c8:e2:51:a8:94:ad:03:bf:b2:23:60:82: 8a:03:34:8f:65:fd:35:4e:ee:ad:59:df:e8:1e:99: 8c:0d:96:8a:b5:f5:15:df:4a:a4:a5:f3:56:a4:92: f9:37:2d:e1:6b:76:f7:b2:92:72:e0:a5:f1:33:a4: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CB:6C:5B:CC:82:90:CA:35:9F:AB:F7:21:3B:C3:F4:91:A7:4F:2A X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:1a:f8:5c:ec:37:9f:c9:51:47:58:bf:df:6a:21:d4:df:b5: 01:a0:ae:b9:09:a6:63:67:fb:0d:dc:2b:ef:4c:85:23:ea:6f: ca:5c:da:b1:5a:1b:4c:3c:9d:f3:68:68:d7:f8:4d:b6:d7:a6: 76:72:d5:43:4b:1f:b7:7b:67:dd:d0:cb:3a:fd:ea:5b:01:42: 5c:72:f8:94:63:e1:9f:b4:a4:55:9e:01:5a:00:83:41:c4:1b: 02:80:8e:d7:a2:98:f9:48:bc:b6:e3:80:4b:56:61:b1:ed:87: 3a:57:c9:68:c9:a2:76:5a:1b:57:5a:65:23:9b:60:c0:2d:68: 78:25:20:3a:f4:52:bb:1e:cf:a1:e7:9a:ee:34:38:4a:73:c8: 25:a5:1b:3b:2c:f4:61:ac:72:8c:e4:f4:a7:06:04:f6:64:5d: 42:c3:6d:67:c7:19:fb:4f:98:c1:98:84:1f:32:bf:41:c1:f0: ad:ee:ca:3c:93:6d:d3:e2:4a:5e:24:14:93:2b:1c:11:38:82: 6a:5b:f7:fe:0d:ce:8b:5f:a5:e9:e4:6c:40:c5:87:1b:3f:d2: 57:bd:c5:fe:bb:53:50:bb:3b:c2:38:8e:91:b3:ea:7f:b5:cc: cb:38:f1:2e:31:65:24:69:ed:73:d5:46:61:16:36:16:9a:a0: 01:a2:5a:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytIo7EwYdvUNP5/fcRLa+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwMzAyMDYwMDQ5WhcNMjYwMzAzMDYwMDQ5WjAzMTEwLwYDVQQD Eyg3M2NiNmM1YmNjODI5MGNhMzU5ZmFiZjcyMTNiYzNmNDkxYTc0ZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT6PDAKW7VEdPl4ShiX24hCJUpfg OBoMYJ8w6359n/zvNMfoit8CDB+EU7s5ASakM4IfddWcWfyXDmxaNU1gSvOW7c6Q jxCm+UkHtUdk3L6dFYROhZA+mdAxqhkhcfIRu7bPp+mYoYrYInizEI7+B+/riJl6 75GvIe5f9xpao+B8XrAn/1XDnXL7fbWvWkJMSMFDqFdavOQ4xZZWT6Jv+fYY+am+ aX6DHQm/8aUSUtI8xwViFwK5u5lZDsqtaAMQiBqfyUfI4lGolK0Dv7IjYIKKAzSP Zf01Tu6tWd/oHpmMDZaKtfUV30qkpfNWpJL5Ny3ha3b3spJy4KXxM6RoYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPLbFvMgpDKNZ+r9yE7w/SRp08qMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxr4XOw3 n8lRR1i/32oh1N+1AaCuuQmmY2f7Ddwr70yFI+pvylzasVobTDyd82ho1/hNttem dnLVQ0sft3tn3dDLOv3qWwFCXHL4lGPhn7SkVZ4BWgCDQcQbAoCO16KY+Ui8tuOA S1Zhse2HOlfJaMmidlobV1plI5tgwC1oeCUgOvRSux7Poeea7jQ4SnPIJaUbOyz0 YaxyjOT0pwYE9mRdQsNtZ8cZ+0+YwZiEHzK/QcHwre7KPJNt0+JKXiQUkyscETiC alv3/g3Oi1+l6eRsQMWHGz/SV73F/rtTULs7wjiOkbPqf7XMyzjxLjFlJGntc9VG YRY2FpqgAaJaIA== -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:56 2026 by rpki-client