$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json) Hash identifier: 3DvaEYwb29Ig8ThYiW2L5gN+lpjDGVbLukMgKfdEOGY= Subject key identifier: 28:49:6B:FD:F7:C4:45:91:9A:D2:56:AB:47:99:40:A1:31:0D:B4:88 Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019CABD90222E3240A6DC394F1B846F95B68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft Manifest number: 1857 Signing time: Mon 02 Mar 2026 00:00:51 +0000 Manifest this update: Mon 02 Mar 2026 00:00:51 +0000 Manifest next update: Tue 03 Mar 2026 00:00:51 +0000 Files and hashes: 1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=) 2: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=) 3: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=) 4: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=) 5: FGXifY4YNXSWwZi4QtD01XX8A_4.roa (hash: r3Yn9lbI97BgnohED52RZmDaF/H4yGegwCsX0vScc1U=) 6: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=) 7: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=) 8: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=) 9: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=) 10: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=) 11: fgRbMqN9XRQOyHROi59mKV56wUg.roa (hash: Py8QfC6Me9kljX65ogBUdQo8JbMweZ02w9NGup3yJr4=) 12: iENkRlJoBL-J_o4ep2L2WQ9wqhQ.roa (hash: qHRlnH6xTrPGrh7Rcfy15Z1OzJA8rkrqC8qbXcCLhY0=) 13: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=) 14: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=) 15: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: VbloUl98EdwXj5F8kDQokNM4C0+KYdYvgDlDJNYLVo8=) 16: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:d9:02:22:e3:24:0a:6d:c3:94:f1:b8:46:f9:5b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Mar 2 00:00:51 2026 GMT Not After : Mar 3 00:00:51 2026 GMT Subject: CN=28496bfdf7c445919ad256ab479940a1310db488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:b6:44:c5:39:0f:45:b5:5d:6f:69:7a:22: 99:f8:94:05:15:05:25:69:7d:0b:22:0f:94:09:5e: 5a:4f:08:d4:89:e8:65:bf:84:5d:f8:07:c4:c9:9d: d8:07:6c:f1:dd:8f:91:9f:71:f7:90:40:2c:b8:55: 8e:b1:10:31:fd:e9:37:9e:d0:5d:a7:ed:21:8c:79: 50:8b:14:c3:07:c9:1f:9b:20:03:5b:d1:35:46:40: 66:63:a6:a0:c0:67:66:65:4f:5b:26:b6:c3:33:f7: 10:2b:b7:aa:46:be:0d:00:a0:28:d0:9d:91:c3:bd: c0:33:fa:7a:d0:d4:1b:cc:b2:4d:0c:a3:86:2a:7b: 0d:55:9b:be:ab:fe:75:25:66:63:11:40:02:fb:77: c8:60:cf:02:04:a8:f9:47:bd:98:b6:82:73:e4:e0: 1b:ad:ee:8c:fa:01:ce:3f:07:a4:54:72:7a:b5:74: 26:e6:2f:a4:d2:ef:0b:29:f7:21:69:69:41:d2:04: ae:b2:4e:67:c9:a7:5d:f0:af:67:de:17:41:19:6a: 91:55:c6:ca:f7:8f:56:a8:1d:af:06:91:7f:17:57: bb:3d:02:18:f4:94:dc:72:93:5a:a1:d7:a7:6c:ac: 21:30:59:71:f4:17:11:18:07:63:df:66:fe:15:aa: f9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:49:6B:FD:F7:C4:45:91:9A:D2:56:AB:47:99:40:A1:31:0D:B4:88 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:51:a8:77:ff:f2:70:92:fa:00:3d:76:7b:0e:58:eb:dc:79: 1a:4c:b0:24:1d:32:ab:49:af:7b:c1:49:53:a6:1b:88:e1:10: 0c:b4:59:ac:d0:76:b9:61:88:5f:61:6f:af:47:cc:e4:eb:86: 61:8c:11:88:4b:b4:b2:e2:f1:a2:3f:51:a1:14:b2:3e:cc:8d: 65:83:ef:e7:de:20:fb:20:66:e4:34:10:b8:15:bb:66:40:e8: e4:bb:a9:c9:76:a7:74:09:28:76:78:51:9f:9d:6a:fc:00:87: 58:8c:b9:83:22:e6:9f:4f:38:97:cb:6a:05:a3:81:ec:72:ab: 07:88:65:7f:60:31:8a:fd:c4:d7:03:26:03:cc:44:84:b5:66: 65:65:b3:c1:3f:65:b5:85:e8:7a:cf:9f:89:e6:d6:ed:f4:00: 9c:01:d6:55:d5:20:16:ac:5b:d4:e9:b8:bd:7b:a0:39:26:fb: 1e:2b:ae:db:25:dc:1d:0d:74:ec:b1:a6:43:79:fb:73:3f:0f: 57:87:65:4b:99:69:d0:87:20:ee:40:c3:32:25:70:19:e9:49: 91:84:22:17:58:2a:54:a7:13:41:3a:ac:3d:6a:de:a2:4a:31: 5e:e3:ff:4f:e0:1c:46:b2:17:d0:dc:25:0d:df:fa:4f:f9:dd: e5:4f:57:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyr2QIi4yQKbcOU8bhG+VtoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwMzAyMDAwMDUxWhcNMjYwMzAzMDAwMDUxWjAzMTEwLwYDVQQD EygyODQ5NmJmZGY3YzQ0NTkxOWFkMjU2YWI0Nzk5NDBhMTMxMGRiNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ru2RMU5D0W1XW9peiKZ+JQFFQUl aX0LIg+UCV5aTwjUiehlv4Rd+AfEyZ3YB2zx3Y+Rn3H3kEAsuFWOsRAx/ek3ntBd p+0hjHlQixTDB8kfmyADW9E1RkBmY6agwGdmZU9bJrbDM/cQK7eqRr4NAKAo0J2R w73AM/p60NQbzLJNDKOGKnsNVZu+q/51JWZjEUAC+3fIYM8CBKj5R72YtoJz5OAb re6M+gHOPwekVHJ6tXQm5i+k0u8LKfchaWlB0gSusk5nyadd8K9n3hdBGWqRVcbK 949WqB2vBpF/F1e7PQIY9JTccpNaodenbKwhMFlx9BcRGAdj32b+Far5MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChJa/33xEWRmtJWq0eZQKExDbSIMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVGod//y cJL6AD12ew5Y69x5GkywJB0yq0mve8FJU6YbiOEQDLRZrNB2uWGIX2Fvr0fM5OuG YYwRiEu0suLxoj9RoRSyPsyNZYPv594g+yBm5DQQuBW7ZkDo5LupyXandAkodnhR n51q/ACHWIy5gyLmn084l8tqBaOB7HKrB4hlf2Axiv3E1wMmA8xEhLVmZWWzwT9l tYXoes+fiebW7fQAnAHWVdUgFqxb1Om4vXugOSb7Hiuu2yXcHQ107LGmQ3n7cz8P V4dlS5lp0Icg7kDDMiVwGelJkYQiF1gqVKcTQTqsPWreokoxXuP/T+AcRrIX0Nwl Dd/6T/nd5U9Xyg== -----END CERTIFICATE-----Generated at Mon Mar 2 03:50:44 2026 by rpki-client