$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft File: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json) Hash identifier: qSEypDO8R4HfBFnTQV7uSAaov/CzWAkrmQjDUVgW5xI= Subject key identifier: 4C:E0:0B:FA:15:43:06:7C:FE:2C:8F:9E:DC:4F:00:DD:5A:65:35:9E Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019DA378E49E06CCF33E737F10F70C202836 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft Manifest number: 136C Signing time: Sun 19 Apr 2026 02:01:42 +0000 Manifest this update: Sun 19 Apr 2026 02:01:42 +0000 Manifest next update: Mon 20 Apr 2026 02:01:42 +0000 Files and hashes: 1: 8YEPdClPNr_3zDrhmRGiX4nWwZA.asa (hash: 2bvyL1QtbFD5dzAQ0Bl2sb4g9BiR/U4X0BGmGEMfbKU=) 2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: f8BgXkZes8fpAO7BauAi88Q2evPkdjTZZPtI4usZJrA=) 3: B5j3YeJoZkR-M842kAei_UWMVnY.roa (hash: 9dBcdzBINoDXdmkJLkcJhvttYwcsyEIX2FhzFQvtp+s=) 4: axIqDyAlK0bUNbzn8X3np8rLZdg.asa (hash: qyAh01KjzZwobQ5AxwlXgm7EdBIeIjU3cgZPryzz3yA=) 5: g3MXjNcsWoLD0PetYkh3H8FGFEw.asa (hash: na+ynpKUQZPFDrKy+EXa5B4rQ+xPN8v4RPHAqcwEPhI=) 6: hfYAMmC7nzj6eP_4KjmX0ydK61k.roa (hash: ENco3xJLaaDmCT3M7xz4xfUTyINJdjSu/7+AW54JdKY=) 7: lwxiv3kekrPmCweGpFX4WJfrhX0.roa (hash: 2lW/SbMqaftEHsN9ssTuGMfD/ZAuKFXzBYGrp9TrmHI=) 8: nBKubqHJCPmxZed95Pwvup7veOk.roa (hash: SF8k+2B3p2IDWArFu3EKiVWXhjgf4ze2L6pnr/0Lp4o=) 9: qMkdURgl5v8iVuM-fHHXRCMHBok.asa (hash: KT0x4APoSA9EBXsj4uU5Mno2FoqnMrb2Le5rpuVOb0U=) 10: wehxXgpfgzalQRxlqvRAJwCWbMQ.roa (hash: kDdYxSItK7GlFWzV8XEeVDHmfQM6o/WzrJGoU9qv79A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:78:e4:9e:06:cc:f3:3e:73:7f:10:f7:0c:20:28:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Apr 19 02:01:42 2026 GMT Not After : Apr 20 02:01:42 2026 GMT Subject: CN=4ce00bfa1543067cfe2c8f9edc4f00dd5a65359e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dc:09:b0:81:a9:e1:0f:b1:dc:17:d5:8b:26: 51:42:60:c6:80:f5:90:24:ed:37:5b:35:1a:94:55: 20:34:e5:8f:5e:0d:45:78:66:2a:81:99:31:ea:13: 12:0e:3d:2e:01:bc:ba:7c:1f:01:eb:54:55:07:b1: 75:8c:1c:0a:65:08:50:fc:94:f6:2d:fb:35:ac:c5: e6:af:e4:c7:21:1c:50:e2:2f:b1:4e:cd:3d:2c:e5: d5:35:f4:94:38:8b:ba:cf:6d:84:32:b4:57:ec:89: 0c:2b:b7:d6:5b:af:73:8c:fc:ed:1d:84:0c:5f:93: e1:c2:d9:37:c6:56:e2:31:45:36:c5:1c:3f:d3:e6: 7a:40:13:38:c3:ba:2e:4a:99:e9:ce:82:2c:98:ed: 0f:60:d5:af:98:72:1b:71:c0:11:96:8d:ea:ec:45: 73:f7:21:68:0e:52:b1:f2:90:d7:a4:7e:2e:70:80: 7a:aa:2a:77:fd:35:9d:fd:09:a0:6f:63:9f:4c:a7: 7a:78:bc:86:56:d1:38:23:1b:1d:50:6b:9e:96:15: 56:35:e6:2a:fa:cc:fc:d3:1c:c5:5c:52:1c:b4:c7: b8:c7:fe:a9:84:f5:03:e7:1e:40:8e:a3:3e:2f:cd: 34:62:12:5f:5d:73:1d:ac:dd:58:26:0c:a5:f3:51: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E0:0B:FA:15:43:06:7C:FE:2C:8F:9E:DC:4F:00:DD:5A:65:35:9E X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:72:d4:52:bc:c0:91:78:72:f3:b4:54:d6:73:02:11:eb:6f: bf:5f:d0:af:5f:80:f8:6a:d8:c4:8a:b7:2f:df:7b:37:be:0a: 42:84:0f:c6:49:59:65:46:a4:2a:e6:05:b9:c5:e7:63:db:ee: bb:a1:7d:55:31:ce:3c:43:eb:e5:d1:96:ad:f3:b3:38:61:f0: 6d:f5:d2:07:a2:ae:c3:42:d7:dc:43:9a:14:6b:67:8c:8b:78: f0:1f:11:10:2d:07:c1:82:77:f3:b8:54:e2:37:c0:f4:05:e6: 63:ed:49:62:2b:82:0d:47:af:9d:04:e9:ae:78:9b:ce:71:7b: ba:39:ef:31:34:82:7d:c0:a8:41:2a:f6:68:dd:88:f0:39:c2: 80:7a:ba:e9:cb:07:c6:9b:fe:14:be:2f:61:fe:ea:91:e4:f8: a5:6b:1f:cb:8b:45:8f:6f:82:df:bc:7f:3f:2d:22:08:9c:c5: e6:3b:46:c1:9f:f2:3d:4b:8d:de:45:fd:6a:b2:f8:97:c5:9d: b8:46:cb:df:70:b0:2e:52:ad:5c:62:52:4e:b4:bf:1b:a1:47: 5f:66:18:be:32:d6:4a:f1:49:c0:62:f4:fc:96:e7:9a:97:9c: 09:3c:e9:9c:ad:e1:c0:37:58:cd:69:a1:cd:ef:e0:ee:4d:4b: cf:eb:f8:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jeOSeBszzPnN/EPcMICg2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYwNDE5MDIwMTQyWhcNMjYwNDIwMDIwMTQyWjAzMTEwLwYDVQQD Eyg0Y2UwMGJmYTE1NDMwNjdjZmUyYzhmOWVkYzRmMDBkZDVhNjUzNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9wJsIGp4Q+x3BfViyZRQmDGgPWQ JO03WzUalFUgNOWPXg1FeGYqgZkx6hMSDj0uAby6fB8B61RVB7F1jBwKZQhQ/JT2 Lfs1rMXmr+THIRxQ4i+xTs09LOXVNfSUOIu6z22EMrRX7IkMK7fWW69zjPztHYQM X5Phwtk3xlbiMUU2xRw/0+Z6QBM4w7ouSpnpzoIsmO0PYNWvmHIbccARlo3q7EVz 9yFoDlKx8pDXpH4ucIB6qip3/TWd/Qmgb2OfTKd6eLyGVtE4IxsdUGuelhVWNeYq +sz80xzFXFIctMe4x/6phPUD5x5AjqM+L800YhJfXXMdrN1YJgyl81FxnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzgC/oVQwZ8/iyPntxPAN1aZTWeMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnLUUrzA kXhy87RU1nMCEetvv1/Qr1+A+GrYxIq3L997N74KQoQPxklZZUakKuYFucXnY9vu u6F9VTHOPEPr5dGWrfOzOGHwbfXSB6Kuw0LX3EOaFGtnjIt48B8REC0HwYJ387hU 4jfA9AXmY+1JYiuCDUevnQTprnibznF7ujnvMTSCfcCoQSr2aN2I8DnCgHq66csH xpv+FL4vYf7qkeT4pWsfy4tFj2+C37x/Py0iCJzF5jtGwZ/yPUuN3kX9arL4l8Wd uEbL33CwLlKtXGJSTrS/G6FHX2YYvjLWSvFJwGL0/JbnmpecCTzpnK3hwDdYzWmh ze/g7k1Lz+v4hw== -----END CERTIFICATE-----Generated at Sun Apr 19 08:54:51 2026 by rpki-client