$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: eq0CONaR4rEPgVC3+CFi5FFup9i246sufTrORjWffs8= Subject key identifier: 78:52:9A:0D:73:D7:C8:B7:AB:98:93:0A:A8:86:88:6B:F8:82:6C:EC Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019E1D591D877093CD311FFEB5B344FCA2A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 12D6 Signing time: Tue 12 May 2026 18:00:39 +0000 Manifest this update: Tue 12 May 2026 18:00:39 +0000 Manifest next update: Wed 13 May 2026 18:00:39 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 3: IT-G9anfftKLn-JNHdB3nhqaHRg.roa (hash: 8S5tnd+3z64Mysha0HCn0KENKA3IjsNdvVfiIIaQQlM=) 4: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 5: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 6: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 7: UtuUMQUSfAe-27w8Nb05fTayiGU.roa (hash: AmMNeRGPrTgI2qZuMl1mv9LKIiaqIWQ8VyjSfG7bkaE=) 8: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 9: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 10: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 11: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: 7RE7O673zG2o+wKIg2P+rg3KonfjjdTXawJbEQupwuk=) 12: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) 13: uCc138TA6I8oKDd9GfZ4DDo3vbk.roa (hash: 9QywaX+xNWWX8/eIoZHqrPbZhEsxSCi5Zlf0wOs/po0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:1d:87:70:93:cd:31:1f:fe:b5:b3:44:fc:a2:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: May 12 18:00:39 2026 GMT Not After : May 13 18:00:39 2026 GMT Subject: CN=78529a0d73d7c8b7ab98930aa886886bf8826cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:66:72:dd:d7:3d:96:5f:55:d5:34:ac:06:ce: 01:0d:2f:07:29:81:9b:e8:56:bc:b0:78:a5:16:0f: 44:ab:a8:37:f4:f1:d7:af:b7:6a:bc:04:40:78:46: c9:ff:b9:3b:96:a4:1a:2e:48:c2:a2:ed:ff:56:66: b9:13:53:41:fd:f5:28:62:45:9c:51:e1:bd:79:d8: b9:10:bf:7b:ad:09:3e:ba:fe:dc:7d:1f:9d:92:fe: 7f:f1:a5:4e:3e:43:1e:22:9e:87:f3:cb:f5:82:bd: a5:cd:9c:e4:78:83:85:fa:c8:a2:e8:08:9a:44:36: 50:68:ea:89:90:22:96:88:c1:af:16:2d:bc:9c:cb: 8e:76:2c:ce:46:99:3a:3d:67:76:88:0b:26:8c:17: 29:db:e6:30:07:e7:0d:fe:b4:f7:57:f8:54:a0:48: c4:6e:20:a8:8f:2a:0e:c1:97:33:24:9a:dc:a2:11: ea:f6:d1:2a:a5:7a:c0:5b:36:2e:51:e9:3d:3a:f2: 1b:b7:5e:7c:aa:ec:8e:98:a1:36:1e:80:f8:c5:7a: 57:41:c9:e4:df:62:1c:29:9a:c1:19:2d:bf:9b:36: 63:0d:d0:a8:7f:3f:95:59:88:e3:9d:6d:41:83:e1: 76:be:64:d7:c7:72:ca:0d:ca:5d:44:d9:57:ee:85: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:52:9A:0D:73:D7:C8:B7:AB:98:93:0A:A8:86:88:6B:F8:82:6C:EC X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:8f:91:23:34:3c:f8:2a:1c:e2:d3:97:35:dc:83:c9:c5:ed: 6f:a7:af:8b:a6:f8:6c:17:99:81:49:da:fa:f1:24:6d:36:1a: 08:03:4b:d9:df:9c:80:d3:9e:4d:ab:cb:bd:42:03:9d:bb:7f: 39:59:23:1e:c4:74:c2:27:ff:49:3c:8d:e7:43:c0:cc:8d:f5: 0c:9d:e9:54:ea:97:d6:cb:b4:e1:11:25:be:47:66:b9:0b:a7: 10:dd:44:e2:c0:4f:c7:b0:3a:f8:b2:b0:f4:81:1d:5b:68:0d: 86:85:bb:ab:2b:66:7b:fe:dc:87:18:69:85:28:6a:68:60:60: 3b:1a:7a:b7:da:f4:04:29:f8:78:b2:e4:74:ab:fe:3f:fa:0c: 60:37:23:52:c4:60:b0:2b:39:27:75:02:b8:58:c6:b9:d1:90: 4f:10:8e:0a:c1:11:36:75:fe:4c:fd:3a:e3:99:d4:76:4a:14: 87:ac:35:dc:4a:4f:d1:d6:e6:96:43:b1:dd:f8:40:4a:f7:88: af:70:01:ec:6b:84:33:96:94:52:44:8f:f3:d5:c4:35:8c:fc: 9a:43:ef:e2:16:8f:5b:7a:0c:69:6f:d6:24:d8:39:dc:8a:7c: 42:c3:b1:6a:47:7f:39:92:b0:e2:54:e4:d0:77:98:3e:c6:ae: 67:65:34:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWR2HcJPNMR/+tbNE/KKmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwNTEyMTgwMDM5WhcNMjYwNTEzMTgwMDM5WjAzMTEwLwYDVQQD Eyg3ODUyOWEwZDczZDdjOGI3YWI5ODkzMGFhODg2ODg2YmY4ODI2Y2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GZy3dc9ll9V1TSsBs4BDS8HKYGb 6Fa8sHilFg9Eq6g39PHXr7dqvARAeEbJ/7k7lqQaLkjCou3/Vma5E1NB/fUoYkWc UeG9edi5EL97rQk+uv7cfR+dkv5/8aVOPkMeIp6H88v1gr2lzZzkeIOF+sii6Aia RDZQaOqJkCKWiMGvFi28nMuOdizORpk6PWd2iAsmjBcp2+YwB+cN/rT3V/hUoEjE biCojyoOwZczJJrcohHq9tEqpXrAWzYuUek9OvIbt158quyOmKE2HoD4xXpXQcnk 32IcKZrBGS2/mzZjDdCofz+VWYjjnW1Bg+F2vmTXx3LKDcpdRNlX7oULlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhSmg1z18i3q5iTCqiGiGv4gmzsMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABI+RIzQ8 +Coc4tOXNdyDycXtb6evi6b4bBeZgUna+vEkbTYaCANL2d+cgNOeTavLvUIDnbt/ OVkjHsR0wif/STyN50PAzI31DJ3pVOqX1su04RElvkdmuQunEN1E4sBPx7A6+LKw 9IEdW2gNhoW7qytme/7chxhphShqaGBgOxp6t9r0BCn4eLLkdKv+P/oMYDcjUsRg sCs5J3UCuFjGudGQTxCOCsERNnX+TP0645nUdkoUh6w13EpP0dbmlkOx3fhASveI r3AB7GuEM5aUUkSP89XENYz8mkPv4haPW3oMaW/WJNg53Ip8QsOxakd/OZKw4lTk 0HeYPsauZ2U0DA== -----END CERTIFICATE-----Generated at Wed May 13 01:44:02 2026 by rpki-client