$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft File: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json) Hash identifier: 2GtNf8eqSE6YIb3kq5f1TeXzbMrW40bYWghRSWAUz7E= Subject key identifier: 47:24:8B:84:76:08:74:26:2B:8F:4E:44:27:D3:E1:F0:60:3F:DD:5F Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019CA869CC2FE99AA9E23CF1DBB52FB3FF9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft Manifest number: 12EA Signing time: Sun 01 Mar 2026 08:00:31 +0000 Manifest this update: Sun 01 Mar 2026 08:00:31 +0000 Manifest next update: Mon 02 Mar 2026 08:00:31 +0000 Files and hashes: 1: 8YEPdClPNr_3zDrhmRGiX4nWwZA.asa (hash: 2bvyL1QtbFD5dzAQ0Bl2sb4g9BiR/U4X0BGmGEMfbKU=) 2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: /DxO+qTAN7ncAKz5b0hHMMblidLTvX9A/fOsoOryyVg=) 3: B5j3YeJoZkR-M842kAei_UWMVnY.roa (hash: 9dBcdzBINoDXdmkJLkcJhvttYwcsyEIX2FhzFQvtp+s=) 4: axIqDyAlK0bUNbzn8X3np8rLZdg.asa (hash: qyAh01KjzZwobQ5AxwlXgm7EdBIeIjU3cgZPryzz3yA=) 5: g3MXjNcsWoLD0PetYkh3H8FGFEw.asa (hash: na+ynpKUQZPFDrKy+EXa5B4rQ+xPN8v4RPHAqcwEPhI=) 6: hfYAMmC7nzj6eP_4KjmX0ydK61k.roa (hash: ENco3xJLaaDmCT3M7xz4xfUTyINJdjSu/7+AW54JdKY=) 7: lwxiv3kekrPmCweGpFX4WJfrhX0.roa (hash: 2lW/SbMqaftEHsN9ssTuGMfD/ZAuKFXzBYGrp9TrmHI=) 8: nBKubqHJCPmxZed95Pwvup7veOk.roa (hash: SF8k+2B3p2IDWArFu3EKiVWXhjgf4ze2L6pnr/0Lp4o=) 9: qMkdURgl5v8iVuM-fHHXRCMHBok.asa (hash: KT0x4APoSA9EBXsj4uU5Mno2FoqnMrb2Le5rpuVOb0U=) 10: wehxXgpfgzalQRxlqvRAJwCWbMQ.roa (hash: kDdYxSItK7GlFWzV8XEeVDHmfQM6o/WzrJGoU9qv79A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:69:cc:2f:e9:9a:a9:e2:3c:f1:db:b5:2f:b3:ff:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Mar 1 08:00:31 2026 GMT Not After : Mar 2 08:00:31 2026 GMT Subject: CN=47248b84760874262b8f4e4427d3e1f0603fdd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:49:57:30:d3:cb:96:4c:84:7f:a6:cc:86:6f: ad:c9:d3:ab:db:dc:47:35:f4:29:2a:ef:2e:b1:49: fe:86:b1:5d:66:71:7f:1f:cc:21:e7:0e:7d:53:e8: b0:5e:0c:06:eb:38:70:ba:db:15:9e:4b:57:08:2c: 30:36:18:b3:39:65:b2:5c:b0:bc:f1:07:33:84:8e: 48:fd:c6:5a:51:ed:a7:c3:c4:2b:dd:ff:10:84:09: ac:4d:37:1f:04:d5:15:06:98:0f:e5:02:20:36:65: af:ca:5f:86:47:09:b8:7d:0e:48:ea:68:1c:f9:db: 54:32:f9:e8:91:f6:1a:ad:ee:17:c6:4f:e5:f2:d5: 38:28:23:f5:66:60:33:5b:af:d1:7c:80:fe:ec:4e: b9:7f:1f:17:d6:00:46:cb:51:4c:6d:a5:49:a9:e7: 65:a7:b9:c0:42:ec:26:53:94:1a:5c:cd:76:b4:7d: d4:15:09:d1:14:56:10:48:f5:f3:b5:06:20:fb:b5: 4b:78:c4:0c:2e:58:83:fb:94:ae:96:35:f0:97:04: 21:d4:de:9f:89:84:1d:06:c9:0f:37:13:cb:b6:a6: dd:4c:90:c7:18:dc:68:e9:f5:3d:31:c2:6e:95:dc: 96:79:0b:92:ea:4d:b1:f7:78:1c:d2:61:31:68:b9: 07:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:24:8B:84:76:08:74:26:2B:8F:4E:44:27:D3:E1:F0:60:3F:DD:5F X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:f2:d8:53:8d:10:d6:a8:e4:8a:16:fa:7f:5e:83:ce:24:82: 09:e9:74:2b:f7:4d:ad:92:3d:3f:43:7f:02:a5:a5:ff:73:63: a1:df:52:97:49:f1:64:0b:b3:09:c9:0e:25:59:56:12:18:5a: 42:94:97:c7:50:68:e9:20:05:61:7f:30:d5:ce:06:d4:61:6f: 71:cf:1d:7e:ba:73:91:74:98:47:0c:45:db:04:31:9d:03:47: df:9e:41:00:9b:31:12:65:d8:9e:6d:92:bf:25:05:cb:b3:8a: 3f:56:b8:f5:85:2f:c3:81:90:e8:41:7d:4e:b7:b9:b0:06:ec: 9b:9b:34:bb:53:e2:e9:78:1f:1b:f5:f4:20:13:a8:ae:3e:59: 14:84:af:5b:6f:0f:f7:0c:18:d6:be:68:a9:58:85:94:96:7a: 37:35:3b:be:05:bb:f6:d2:f2:e0:b0:15:84:85:6c:3a:6e:bc: 8d:3d:60:80:94:9b:2f:7f:8f:98:8d:05:bd:48:62:ad:e5:13: 14:0c:29:ab:c7:fc:ce:5a:93:ad:bb:e0:0d:26:9a:18:48:8a: ee:83:88:68:d2:32:5f:4f:8f:13:e3:2a:41:71:ac:d6:c4:9c: dd:05:fd:ff:99:17:13:6a:1d:cc:69:94:30:ab:75:a6:29:3b: dd:fc:3d:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyoacwv6Zqp4jzx27Uvs/+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYwMzAxMDgwMDMxWhcNMjYwMzAyMDgwMDMxWjAzMTEwLwYDVQQD Eyg0NzI0OGI4NDc2MDg3NDI2MmI4ZjRlNDQyN2QzZTFmMDYwM2ZkZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6klXMNPLlkyEf6bMhm+tydOr29xH NfQpKu8usUn+hrFdZnF/H8wh5w59U+iwXgwG6zhwutsVnktXCCwwNhizOWWyXLC8 8QczhI5I/cZaUe2nw8Qr3f8QhAmsTTcfBNUVBpgP5QIgNmWvyl+GRwm4fQ5I6mgc +dtUMvnokfYare4Xxk/l8tU4KCP1ZmAzW6/RfID+7E65fx8X1gBGy1FMbaVJqedl p7nAQuwmU5QaXM12tH3UFQnRFFYQSPXztQYg+7VLeMQMLliD+5SuljXwlwQh1N6f iYQdBskPNxPLtqbdTJDHGNxo6fU9McJuldyWeQuS6k2x93gc0mExaLkHPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcki4R2CHQmK49ORCfT4fBgP91fMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/LYU40Q 1qjkihb6f16DziSCCel0K/dNrZI9P0N/AqWl/3Njod9Sl0nxZAuzCckOJVlWEhha QpSXx1Bo6SAFYX8w1c4G1GFvcc8dfrpzkXSYRwxF2wQxnQNH355BAJsxEmXYnm2S vyUFy7OKP1a49YUvw4GQ6EF9Tre5sAbsm5s0u1Pi6XgfG/X0IBOorj5ZFISvW28P 9wwY1r5oqViFlJZ6NzU7vgW79tLy4LAVhIVsOm68jT1ggJSbL3+PmI0FvUhireUT FAwpq8f8zlqTrbvgDSaaGEiK7oOIaNIyX0+PE+MqQXGs1sSc3QX9/5kXE2odzGmU MKt1pik73fw9JA== -----END CERTIFICATE-----Generated at Sun Mar 1 18:25:56 2026 by rpki-client