$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: rV+Sucp497c/JGjtZaTETFfb8OLR+nnMw36npG53dRs= Subject key identifier: 63:F9:12:11:22:7D:61:C8:65:DD:53:F2:2D:49:88:5A:BD:4C:B1:EC Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019E1D59CB3525959CAA6A403177B282CE9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 191B Signing time: Tue 12 May 2026 18:01:24 +0000 Manifest this update: Tue 12 May 2026 18:01:24 +0000 Manifest next update: Wed 13 May 2026 18:01:24 +0000 Files and hashes: 1: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=) 2: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=) 3: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=) 4: FQSV18p_T_droUZh08zoIA9Ax8A.roa (hash: znhD3qntwxP0GJzV41Y9fLTZXvTyllhrzmb59F4/qY4=) 5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=) 6: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=) 7: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=) 8: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=) 9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: sJFOMSW1I/Xb4mmfJOqV30xVoOaOwzMJSGyIRZJvQ6s=) 10: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=) 11: xGGCf6Hil4Mo0C8TJDJWoZKOtQY.roa (hash: OSJabINQbvYIP/JxqMQjPh9E61hQf/o/MtFixqbU+Rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:cb:35:25:95:9c:aa:6a:40:31:77:b2:82:ce:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: May 12 18:01:24 2026 GMT Not After : May 13 18:01:24 2026 GMT Subject: CN=63f91211227d61c865dd53f22d49885abd4cb1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4d:a0:33:eb:f8:54:e6:4f:80:4f:33:18:22: 4b:b5:6b:75:27:8b:17:c5:c4:5e:4b:54:5a:13:9b: f5:e7:c6:f1:85:8a:0f:93:f8:13:04:d5:37:b3:41: 52:55:ab:c1:99:c8:9b:42:59:25:dc:80:c0:7f:97: de:50:6b:76:3e:a2:c1:e3:99:20:e8:79:3a:ea:e8: b3:9e:e0:1d:2a:ef:97:e2:86:01:3c:cf:df:f7:6b: 2e:86:05:8f:a7:1f:4e:d0:c1:23:ab:81:16:78:c0: 67:31:4b:9c:42:8f:f8:96:51:d7:87:dd:e8:cf:1e: 9f:f4:fa:ad:d6:e6:97:75:f6:91:4a:c5:d5:07:bc: 91:9c:4c:69:79:9f:72:e4:3d:19:ec:75:01:96:38: 7e:cf:0b:ad:14:6f:9a:40:4a:93:38:ad:91:31:3c: 50:78:cc:e3:83:a3:f1:f3:0e:cd:91:3f:15:d8:12: 93:65:f6:bd:b4:69:e8:c8:21:e9:60:db:5f:48:9f: c6:1f:0c:81:4e:7a:4b:6c:9e:49:66:c9:a8:8c:4c: 84:f2:ae:e2:90:bb:0d:52:f5:b4:bf:bf:72:f7:36: a7:69:64:41:9c:49:9b:39:fe:93:c9:56:66:d9:6f: fe:90:3f:d0:73:fc:91:1b:81:19:1c:7f:a2:2c:c5: 40:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F9:12:11:22:7D:61:C8:65:DD:53:F2:2D:49:88:5A:BD:4C:B1:EC X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:64:1e:cb:72:6c:e3:93:b3:4c:ca:07:43:0e:92:cf:1c:74: 4c:84:15:f6:a4:ad:a5:df:ca:98:31:24:36:45:6c:45:e4:98: 2e:8c:82:3d:03:8b:e4:ae:22:7e:70:b2:5e:b2:28:a8:ef:67: f7:32:9a:e3:c9:6c:61:31:8b:a0:b7:89:4a:0c:83:68:0d:f3: e1:6d:51:c4:2c:13:d0:eb:59:be:93:a9:78:2f:4b:c8:7d:4d: 2f:0f:de:8c:29:05:62:b2:c0:a7:46:59:bb:3f:1d:0f:3f:2c: 7c:88:11:1e:25:74:7b:14:c4:f6:9b:7c:d2:70:cd:98:f0:84: ee:4b:e7:df:5b:e7:c6:15:f4:12:73:f9:51:6f:96:23:83:f0: 98:bc:4e:c3:8c:8c:21:d0:85:a0:31:6d:ab:7a:9c:5c:c3:bf: 89:c2:84:c9:62:8f:ae:27:15:75:e1:53:eb:d5:00:53:fe:83: 33:65:37:60:24:e5:f4:4d:39:68:2b:68:5f:5e:5b:8d:fe:34: 97:78:4e:bd:c0:8c:47:6a:b1:fc:98:90:f2:d3:d9:9b:1d:26: e5:c4:9c:65:a7:90:6d:64:0e:39:d5:05:a5:96:fc:17:66:80: fd:f4:cf:47:f7:38:84:24:73:46:51:d4:a4:ae:dc:21:1b:de: e6:12:1e:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWcs1JZWcqmpAMXeygs6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwNTEyMTgwMTI0WhcNMjYwNTEzMTgwMTI0WjAzMTEwLwYDVQQD Eyg2M2Y5MTIxMTIyN2Q2MWM4NjVkZDUzZjIyZDQ5ODg1YWJkNGNiMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE2gM+v4VOZPgE8zGCJLtWt1J4sX xcReS1RaE5v158bxhYoPk/gTBNU3s0FSVavBmcibQlkl3IDAf5feUGt2PqLB45kg 6Hk66uiznuAdKu+X4oYBPM/f92suhgWPpx9O0MEjq4EWeMBnMUucQo/4llHXh93o zx6f9Pqt1uaXdfaRSsXVB7yRnExpeZ9y5D0Z7HUBljh+zwutFG+aQEqTOK2RMTxQ eMzjg6Px8w7NkT8V2BKTZfa9tGnoyCHpYNtfSJ/GHwyBTnpLbJ5JZsmojEyE8q7i kLsNUvW0v79y9zanaWRBnEmbOf6TyVZm2W/+kD/Qc/yRG4EZHH+iLMVA3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP5EhEifWHIZd1T8i1JiFq9TLHsMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGQey3Js 45OzTMoHQw6Szxx0TIQV9qStpd/KmDEkNkVsReSYLoyCPQOL5K4ifnCyXrIoqO9n 9zKa48lsYTGLoLeJSgyDaA3z4W1RxCwT0OtZvpOpeC9LyH1NLw/ejCkFYrLAp0ZZ uz8dDz8sfIgRHiV0exTE9pt80nDNmPCE7kvn31vnxhX0EnP5UW+WI4PwmLxOw4yM IdCFoDFtq3qcXMO/icKEyWKPricVdeFT69UAU/6DM2U3YCTl9E05aCtoX15bjf40 l3hOvcCMR2qx/JiQ8tPZmx0m5cScZaeQbWQOOdUFpZb8F2aA/fTPR/c4hCRzRlHU pK7cIRve5hIejQ== -----END CERTIFICATE-----Generated at Wed May 13 03:26:08 2026 by rpki-client