$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: HLDwi7/6quwg/2T3HozTshVvtRh5HwUUhFBfvsPLHsg= Subject key identifier: 16:D6:BB:AD:60:E1:43:66:89:29:5B:8A:94:8D:EA:C8:47:BE:0D:91 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019E1CB449C955DF1CC4BE4918C686CAB502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 0604 Signing time: Tue 12 May 2026 15:00:37 +0000 Manifest this update: Tue 12 May 2026 15:00:37 +0000 Manifest next update: Wed 13 May 2026 15:00:37 +0000 Files and hashes: 1: 1-hH0OdTs66ZHAoF3LxN6GzGRGLA.roa (hash: lwxtwCNle18YFsAjD50qJJ41jy6oJAGh+Vhp9fwJVGo=) 2: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: JoBPXovftErlaMb0zZwJbtZK5NI2L2h+zmq8Ne0W31I=) 3: 4FvrTlxGhcdz6JszhweukK-HXp4.roa (hash: vyQEyyYQodDDsgXdHyrJ4jLSuzaa1xOpp48GTtDNY8I=) 4: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 5: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 6: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 7: PT8f8KrDCyi-fOHRybRu5os8t7I.roa (hash: aps2zxt1lkijYJV6i+9YBPtT0emoODtU3jQBxhvYqO0=) 8: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 9: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 10: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=) 11: fro6TGls5A_k6d-cTWMJbP0QioE.roa (hash: 9eBljoV7C7Gpp7fNoutyzWwHkUabzavd+/jPQySZ6NQ=) 12: o5v2otthTxI9MaotpF4RXsxny8c.roa (hash: 8Fkmii+rqIIBVQH5OTZvGOuhbJRNm26073tjiOdkjrw=) 13: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 14: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:b4:49:c9:55:df:1c:c4:be:49:18:c6:86:ca:b5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: May 12 15:00:37 2026 GMT Not After : May 13 15:00:37 2026 GMT Subject: CN=16d6bbad60e1436689295b8a948deac847be0d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:c5:2a:50:0d:a8:a4:fc:c0:95:f4:1f:88: 69:d1:8f:c9:b9:13:6a:92:3f:d8:2e:61:b3:fc:52: c9:21:ce:eb:35:37:05:05:1d:23:c2:25:f1:bf:de: e1:bd:bf:5f:db:bb:ac:48:91:0f:b8:f7:af:51:1d: 86:dc:4e:d2:28:2b:f4:6f:d7:9f:f4:b3:6d:eb:16: ed:39:e8:87:d6:9f:ae:8e:a5:6d:49:41:0c:d0:d3: e2:42:c7:71:f9:64:66:e4:5c:93:30:53:23:7f:89: 97:3f:4e:84:f4:fe:0a:f1:0b:00:89:cb:7e:e1:27: 6e:2d:38:c1:ab:48:a1:e3:b2:9a:1e:1b:3f:86:a4: 9d:e3:7d:ee:b3:6a:b1:77:1c:8a:31:f6:bd:cd:2e: af:30:10:b5:2e:4d:a6:e0:85:e8:29:0e:bc:da:0a: f5:ee:38:f2:4f:22:90:68:be:86:2b:44:26:50:e4: 0e:b6:08:eb:b6:75:ba:a2:62:97:41:b3:9d:0a:ad: 21:72:d0:af:2f:0c:e7:f5:e3:a1:67:4a:28:f1:53: e1:25:d7:ce:7f:55:b5:40:75:bd:7f:4e:6f:51:56: b8:bd:6e:f5:4a:3b:84:85:da:31:24:0a:ee:01:a6: 57:f1:ae:5a:91:c0:1e:09:d5:84:ce:02:ac:0f:a1: 3c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D6:BB:AD:60:E1:43:66:89:29:5B:8A:94:8D:EA:C8:47:BE:0D:91 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:32:9d:07:8e:a7:36:28:89:d0:39:ce:48:53:23:d5:d8:98: 88:9f:44:6e:4b:df:af:39:df:a0:bd:3f:8d:c2:8f:d7:0b:91: 24:cc:d9:c0:5b:ef:7f:bd:0e:51:3c:d6:28:c0:da:89:37:9a: d4:97:4e:c3:21:91:72:87:d7:af:93:26:95:46:39:0a:34:e8: 21:fe:12:46:8e:84:2e:66:da:84:a5:ff:39:72:64:b0:da:5e: c2:3b:52:6d:dc:bc:a8:6e:da:92:b1:fd:80:7d:9d:56:3e:43: 86:cb:ea:ad:b5:d4:6e:69:d1:14:d8:ed:56:66:cf:aa:d0:ee: 48:d2:ad:7a:3c:ee:a8:96:63:ab:db:94:7a:ae:eb:71:83:1c: 83:d2:60:83:76:3b:2b:bb:57:60:9d:1c:a0:d3:54:e2:bc:bf: 49:7a:bc:88:68:90:25:9d:71:54:65:16:0f:63:79:24:67:1e: 94:a5:f2:b0:67:44:27:48:1e:b2:32:fb:94:bc:19:06:8e:99: a2:9e:e0:34:03:ff:33:28:f1:eb:5e:44:9e:7d:20:d2:9d:e3: fc:6e:79:59:6f:5c:8a:ae:8a:5d:b7:a8:c7:a3:06:d9:48:f7: be:0b:4f:b9:e5:99:68:84:c8:a7:26:19:15:5f:ca:d7:7b:e0: 72:6f:3e:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ctEnJVd8cxL5JGMaGyrUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwNTEyMTUwMDM3WhcNMjYwNTEzMTUwMDM3WjAzMTEwLwYDVQQD EygxNmQ2YmJhZDYwZTE0MzY2ODkyOTViOGE5NDhkZWFjODQ3YmUwZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7rFKlANqKT8wJX0H4hp0Y/JuRNq kj/YLmGz/FLJIc7rNTcFBR0jwiXxv97hvb9f27usSJEPuPevUR2G3E7SKCv0b9ef 9LNt6xbtOeiH1p+ujqVtSUEM0NPiQsdx+WRm5FyTMFMjf4mXP06E9P4K8QsAict+ 4SduLTjBq0ih47KaHhs/hqSd433us2qxdxyKMfa9zS6vMBC1Lk2m4IXoKQ682gr1 7jjyTyKQaL6GK0QmUOQOtgjrtnW6omKXQbOdCq0hctCvLwzn9eOhZ0oo8VPhJdfO f1W1QHW9f05vUVa4vW71SjuEhdoxJAruAaZX8a5akcAeCdWEzgKsD6E8XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbWu61g4UNmiSlbipSN6shHvg2RMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTKdB46n NiiJ0DnOSFMj1diYiJ9EbkvfrznfoL0/jcKP1wuRJMzZwFvvf70OUTzWKMDaiTea 1JdOwyGRcofXr5MmlUY5CjToIf4SRo6ELmbahKX/OXJksNpewjtSbdy8qG7akrH9 gH2dVj5DhsvqrbXUbmnRFNjtVmbPqtDuSNKtejzuqJZjq9uUeq7rcYMcg9Jgg3Y7 K7tXYJ0coNNU4ry/SXq8iGiQJZ1xVGUWD2N5JGcelKXysGdEJ0gesjL7lLwZBo6Z op7gNAP/Myjx615Enn0g0p3j/G55WW9ciq6KXbeox6MG2Uj3vgtPueWZaITIpyYZ FV/K13vgcm8+4A== -----END CERTIFICATE-----Generated at Tue May 12 21:16:08 2026 by rpki-client