$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: hwxxFzdsFW1WRwfR/hc7PCjBztX/zozM0p6MDgyMxd0= Subject key identifier: 3F:FD:EA:18:6E:07:C6:4D:2E:9A:F7:36:42:81:14:EE:D5:CE:72:C1 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019E1D596F867EA424CE62698C8C7B828010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0E48 Signing time: Tue 12 May 2026 18:01:00 +0000 Manifest this update: Tue 12 May 2026 18:01:00 +0000 Manifest next update: Wed 13 May 2026 18:01:00 +0000 Files and hashes: 1: 1raBdrG8cJ9Bp5UTf1-3ySXpvNU.roa (hash: nidyHf42+8qviczWax8TG8WbQgA/HNtQCPEG+F+WBIY=) 2: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=) 3: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=) 4: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=) 5: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=) 6: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=) 7: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 8: bqKa0YRsYxH7tFUT4rHgcN42asw.roa (hash: 8oWhUO/dKOps3lszSUNTka8Z4cLC6TKDR/CwR798z8A=) 9: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 10: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=) 11: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: a9t9hmbLmaXoKNDSwRRGMnx+GNdxKxH2jQR+19WNwnw=) 12: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=) 13: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:6f:86:7e:a4:24:ce:62:69:8c:8c:7b:82:80:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: May 12 18:01:00 2026 GMT Not After : May 13 18:01:00 2026 GMT Subject: CN=3ffdea186e07c64d2e9af736428114eed5ce72c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:c3:59:55:6c:59:4b:67:d8:5f:20:f0:76: c8:3a:7c:93:09:80:42:c2:20:ed:9c:11:39:87:e1: b3:02:eb:ab:e7:8b:45:48:c8:31:e4:9b:1b:26:d6: 04:4d:be:42:7f:0f:07:2b:32:97:52:5f:31:f3:49: b8:be:a4:7e:0a:9a:87:ab:df:bb:e2:a9:74:f4:b0: 71:89:ce:9c:81:37:a6:12:d1:1b:14:94:5a:56:e1: 70:fe:dd:8f:50:04:9d:8d:9c:6a:ad:ac:e3:92:da: 62:11:f1:b9:30:3a:cf:b3:84:ed:60:db:ca:f9:cb: 93:fc:26:a3:f9:cb:c5:50:3f:9c:53:f9:7a:7b:6b: 28:14:24:be:14:2f:dc:6d:a2:5e:82:00:91:ea:90: 0b:b2:28:c2:0d:93:ab:3d:9e:a6:2f:d4:04:fa:b6: 42:92:0b:7f:7d:4b:cc:ec:2d:93:e4:70:f8:cd:8d: b9:40:21:ca:7b:58:00:1d:03:6a:0b:88:90:cc:f1: 3b:2a:cf:26:4a:3a:9e:b4:f8:f9:13:c5:b7:15:51: c7:d9:a4:ed:7c:a9:e2:9e:92:6f:4a:b8:3f:9f:f5: 9a:bf:e6:39:55:f4:5d:9c:16:96:b6:60:5d:20:0d: 19:51:8d:21:1b:ce:16:64:a5:24:1e:d1:8f:ab:61: 8a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FD:EA:18:6E:07:C6:4D:2E:9A:F7:36:42:81:14:EE:D5:CE:72:C1 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:36:3d:02:c8:80:ff:15:28:71:e6:07:ba:39:f6:fa:c8:41: fe:09:5d:13:db:22:da:1d:72:9b:8e:2a:72:e8:85:de:13:63: a9:03:e7:86:50:01:3d:56:9a:05:af:19:69:56:b6:90:11:a4: 65:44:fd:b0:39:22:0a:f4:6d:90:98:48:9f:dd:1d:33:c5:a7: d1:a0:1e:f5:8a:d5:51:32:03:b8:6b:6d:a2:94:40:99:02:8b: 08:1f:1b:16:33:5a:4f:2c:1c:25:2d:cf:f3:da:8a:93:17:2d: e8:59:42:93:8c:0f:7d:43:ef:c1:54:d7:23:55:c3:08:8e:7c: eb:16:37:96:da:3a:86:92:b2:c9:61:eb:52:96:e8:22:11:3e: e1:d3:4d:3a:ff:1c:b8:f8:52:c0:34:0c:8f:4a:1a:fd:06:7a: b5:18:c7:d9:9e:bc:ce:1a:7d:87:f7:b8:28:3f:dc:be:53:ee: bc:04:3e:92:92:3a:c2:f9:25:4e:4a:63:f8:3b:9e:62:8b:59: 9b:e2:e1:a9:23:47:03:51:49:1c:75:3a:0e:fa:9a:0a:16:b9: b0:a8:09:bf:68:b0:b8:0c:87:38:f1:ee:0d:f1:dc:22:3a:30: 20:19:62:fd:08:6b:1e:ba:9a:de:ae:83:98:76:21:0e:7f:6e: ce:64:03:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWW+GfqQkzmJpjIx7goAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwNTEyMTgwMTAwWhcNMjYwNTEzMTgwMTAwWjAzMTEwLwYDVQQD EygzZmZkZWExODZlMDdjNjRkMmU5YWY3MzY0MjgxMTRlZWQ1Y2U3MmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kXDWVVsWUtn2F8g8HbIOnyTCYBC wiDtnBE5h+GzAuur54tFSMgx5JsbJtYETb5Cfw8HKzKXUl8x80m4vqR+CpqHq9+7 4ql09LBxic6cgTemEtEbFJRaVuFw/t2PUASdjZxqrazjktpiEfG5MDrPs4TtYNvK +cuT/Caj+cvFUD+cU/l6e2soFCS+FC/cbaJeggCR6pALsijCDZOrPZ6mL9QE+rZC kgt/fUvM7C2T5HD4zY25QCHKe1gAHQNqC4iQzPE7Ks8mSjqetPj5E8W3FVHH2aTt fKninpJvSrg/n/Wav+Y5VfRdnBaWtmBdIA0ZUY0hG84WZKUkHtGPq2GK5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/96hhuB8ZNLpr3NkKBFO7VznLBMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjY9AsiA /xUoceYHujn2+shB/gldE9si2h1ym44qcuiF3hNjqQPnhlABPVaaBa8ZaVa2kBGk ZUT9sDkiCvRtkJhIn90dM8Wn0aAe9YrVUTIDuGttopRAmQKLCB8bFjNaTywcJS3P 89qKkxct6FlCk4wPfUPvwVTXI1XDCI586xY3lto6hpKyyWHrUpboIhE+4dNNOv8c uPhSwDQMj0oa/QZ6tRjH2Z68zhp9h/e4KD/cvlPuvAQ+kpI6wvklTkpj+DueYotZ m+LhqSNHA1FJHHU6DvqaCha5sKgJv2iwuAyHOPHuDfHcIjowIBli/QhrHrqa3q6D mHYhDn9uzmQDUg== -----END CERTIFICATE-----Generated at Tue May 12 21:43:13 2026 by rpki-client