$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json) Hash identifier: i3o5P/CNcdx/nq09xseswx2wFE2wh6H2Mb8gQTxY9lw= Subject key identifier: F0:80:74:81:B1:C9:E9:A9:FF:EC:6B:A3:BE:2B:1A:2C:C1:C0:A8:91 Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Certificate serial: 019E1EA3CB5A4B0CB91D9A5E3FFB7BAB1B06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft Manifest number: 191F Signing time: Wed 13 May 2026 00:01:51 +0000 Manifest this update: Wed 13 May 2026 00:01:51 +0000 Manifest next update: Thu 14 May 2026 00:01:51 +0000 Files and hashes: 1: 2VV3UfnItu_52uvF-k4DMpk1zjA.roa (hash: yurroUcvCQ0iRkkkr4yuxcK5LcAIk00+8chFnaavckE=) 2: 4dBukO6Jsd7Q8LDbQKKxrNLbBOs.roa (hash: DIsq79oPea9CqxeEl9008HlAQwpZoj+coW1o4xCU2LU=) 3: 9hQpwIm1DZAst51hiEl_2tmCsXI.roa (hash: +NIpZnYNyfdjDsWB36dEl0YRtLioEvnM5GHzLPvZkhI=) 4: CEkYTmNqh4ud0nioNMk1K4djUfo.roa (hash: bhH9nZDHYzzeKrmVjURmPT3vNUIoH+wcuXxEhHTEVU8=) 5: HhO3fYlasNlXuWCWma8olPA14I8.roa (hash: an4Zb60vA9s3r5vXjNARMkYhW6HY9Hr3vQtUZ9SJwt4=) 6: KJmZuOF3Vv9jk_kFVP7YDH4cHgI.roa (hash: AtauxquVGMfNWT+OwoqixJIcGDXl6Ybqcwqx4c3ybJQ=) 7: Lm1nnFYkUsiu098gCvYjKS5-l4g.roa (hash: 1RaZfLGyq0c5ZD0BFswNZ5s2IFMTrcMOt76tyg+sqUg=) 8: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: ls691Yie6BPduDocv2S3q+zNL6VTg9eCqPSCquOAXQM=) 9: SELAkj7y_jr_HiZRyQnazDtoXIs.roa (hash: YIble+z1sK0lKNMgOA3cU9xF8L12qHo0kNEA6b7HNQc=) 10: SlyARKA9ZyNBxij8A9fhIY_EY3k.roa (hash: aPBp2qbjiTmEjK4mIyd8CC+c6TKeCvSqS3J9M7NE2/k=) 11: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=) 12: lGPXWQo_7ubaGtUyGMqkGbwI4_M.roa (hash: YRpw+FIVlTh7o6DIYneOFKU0uNqBsWrzdPPNLu7NTFI=) 13: ybue34jIShLMbUvaTVS8qnSvGO4.roa (hash: q32KcrvoqYDpaysBppsyjkoZqGVSy4+zYkwrKSlr12k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a3:cb:5a:4b:0c:b9:1d:9a:5e:3f:fb:7b:ab:1b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Validity Not Before: May 13 00:01:51 2026 GMT Not After : May 14 00:01:51 2026 GMT Subject: CN=f0807481b1c9e9a9ffec6ba3be2b1a2cc1c0a891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ec:43:eb:fc:46:3d:f6:ca:97:5f:5a:14:43: bc:56:9b:cd:d2:9f:86:e7:0e:2b:a6:a6:04:e6:8b: 47:f1:50:e7:44:20:ed:11:09:35:1c:df:b2:61:45: e0:19:42:04:d3:2d:91:7f:9f:3b:6c:54:62:8c:d7: ab:d8:d6:65:87:80:b4:a0:69:48:45:6c:c9:74:74: c6:a2:73:26:58:d3:f3:40:37:cb:13:9d:b7:84:c4: 48:db:dd:94:d4:63:97:76:4a:13:c6:5e:44:27:96: 78:5f:11:98:8a:39:2e:e1:ce:60:0b:bf:cc:78:ce: 12:71:f8:8d:10:bf:91:0f:66:cd:d5:8b:96:ea:3b: d4:dd:63:d9:18:ca:d0:94:10:76:6b:f2:b4:21:67: e4:04:cb:00:bc:bc:40:ab:3c:38:bf:cb:0a:fd:2b: b2:c5:19:15:21:d0:ac:2c:32:1c:a2:76:1c:d4:7a: b1:01:55:e8:97:da:be:84:00:4f:64:e6:2f:60:11: 72:b8:59:3d:da:06:7e:fd:66:7a:a5:88:e3:8d:49: dc:21:10:ec:c9:83:8c:08:2d:2a:7c:a8:8b:96:9a: 8b:bc:52:13:bc:21:3d:7e:3b:df:59:3d:06:a8:81: 10:57:9f:df:5f:a4:2f:57:17:49:0c:d1:23:73:31: fd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:80:74:81:B1:C9:E9:A9:FF:EC:6B:A3:BE:2B:1A:2C:C1:C0:A8:91 X509v3 Authority Key Identifier: keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:5a:77:27:d2:76:92:45:21:82:2a:3d:78:85:98:cb:c2:1e: 10:18:6f:b8:17:36:b2:06:39:14:d1:77:83:30:1d:3d:29:14: ed:0c:9c:f1:08:4d:05:78:cb:44:aa:1c:79:b0:bd:b4:4d:2f: e8:d6:1a:7c:52:90:75:85:ae:bf:7a:6c:20:a2:a9:f5:dd:47: c4:0a:09:dd:bb:1b:f7:cc:ed:32:f9:1f:8f:46:cc:ab:d9:06: 04:83:63:a1:fa:e4:bf:74:f0:8e:fb:ae:85:5f:3e:9c:c0:d6: 72:fb:ad:7b:25:5a:9f:f4:5f:2f:d8:e7:74:a5:07:ca:66:66: f6:11:29:ef:06:63:4a:a2:b2:12:57:6f:1b:4b:92:d9:4c:cf: 6d:58:86:b8:34:63:b5:6a:99:17:a3:8a:cb:1e:3c:c8:28:19: 17:41:ba:8a:21:62:aa:da:b8:98:ee:d4:f1:12:37:b3:d1:91: 57:0c:20:2d:83:76:82:58:23:87:59:94:db:71:0c:8a:3b:9d: 05:b5:76:da:b5:64:bd:6f:87:74:86:20:41:cb:95:c9:3f:50: 21:80:99:b5:12:86:05:64:81:35:ba:66:d9:6a:e7:b4:d5:3d: 70:ff:75:43:e9:62:25:2a:d8:80:bb:a4:23:fa:46:a6:a9:58: be:28:8f:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eo8taSwy5HZpeP/t7qxsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx NGMzY2IwHhcNMjYwNTEzMDAwMTUxWhcNMjYwNTE0MDAwMTUxWjAzMTEwLwYDVQQD EyhmMDgwNzQ4MWIxYzllOWE5ZmZlYzZiYTNiZTJiMWEyY2MxYzBhODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjexD6/xGPfbKl19aFEO8VpvN0p+G 5w4rpqYE5otH8VDnRCDtEQk1HN+yYUXgGUIE0y2Rf587bFRijNer2NZlh4C0oGlI RWzJdHTGonMmWNPzQDfLE523hMRI292U1GOXdkoTxl5EJ5Z4XxGYijku4c5gC7/M eM4ScfiNEL+RD2bN1YuW6jvU3WPZGMrQlBB2a/K0IWfkBMsAvLxAqzw4v8sK/Suy xRkVIdCsLDIconYc1HqxAVXol9q+hABPZOYvYBFyuFk92gZ+/WZ6pYjjjUncIRDs yYOMCC0qfKiLlpqLvFITvCE9fjvfWT0GqIEQV5/fX6QvVxdJDNEjczH95QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCAdIGxyemp/+xro74rGizBwKiRMB8GA1UdIwQY MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt MWRkNmQyODFjODhhLzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFp3J9J2 kkUhgio9eIWYy8IeEBhvuBc2sgY5FNF3gzAdPSkU7Qyc8QhNBXjLRKocebC9tE0v 6NYafFKQdYWuv3psIKKp9d1HxAoJ3bsb98ztMvkfj0bMq9kGBINjofrkv3Twjvuu hV8+nMDWcvuteyVan/RfL9jndKUHymZm9hEp7wZjSqKyEldvG0uS2UzPbViGuDRj tWqZF6OKyx48yCgZF0G6iiFiqtq4mO7U8RI3s9GRVwwgLYN2glgjh1mU23EMijud BbV22rVkvW+HdIYgQcuVyT9QIYCZtRKGBWSBNbpm2WrntNU9cP91Q+liJSrYgLuk I/pGpqlYviiPBQ== -----END CERTIFICATE-----Generated at Wed May 13 05:30:36 2026 by rpki-client