$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: rgn3/PoKJQ93kIqymEYUbfLJEVXzJ3QuP3irD/PUnxU= Subject key identifier: C7:6F:66:FE:ED:08:35:FC:A7:F5:02:37:AD:36:DF:8A:7F:BD:EC:B4 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019E1DFE7D4A64557FB49F28A4C93B0F3A5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 190A Signing time: Tue 12 May 2026 21:01:17 +0000 Manifest this update: Tue 12 May 2026 21:01:17 +0000 Manifest next update: Wed 13 May 2026 21:01:17 +0000 Files and hashes: 1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=) 2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=) 3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=) 4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: SIY7lnf1mCQFEpnOkv35j6gyOosBTnYLLic6OIyn0Hw=) 5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=) 6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=) 7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=) 8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=) 9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=) 10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:7d:4a:64:55:7f:b4:9f:28:a4:c9:3b:0f:3a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: May 12 21:01:17 2026 GMT Not After : May 13 21:01:17 2026 GMT Subject: CN=c76f66feed0835fca7f50237ad36df8a7fbdecb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:69:63:84:e2:e8:90:54:78:2e:eb:67:73:4e: d6:37:41:2c:44:f3:03:6a:4d:c4:4e:a9:c4:82:f9: f1:f1:c6:32:9d:40:86:a3:3c:c4:6e:da:04:ad:a7: 22:4d:92:c2:22:5c:be:f7:1e:27:4a:94:1e:05:ce: 48:3b:21:19:99:ff:0e:be:e8:12:3c:b4:38:d2:ab: 61:04:d2:fd:92:81:45:33:85:ac:ef:61:60:9e:12: 76:0f:2c:90:c2:f4:09:cf:9f:8c:46:31:52:76:be: 97:11:d0:f1:fa:60:19:10:21:0a:94:d7:21:95:a4: 6e:ff:82:75:bd:40:17:e1:24:c2:cf:55:a0:0c:83: 27:53:e4:7b:23:7e:fb:e4:5f:85:93:70:84:eb:be: 7d:e5:19:e6:b1:76:ec:dd:b1:ee:cd:27:26:1c:47: a4:f3:e2:b6:32:db:1b:67:9f:c3:90:24:d9:50:b1: 1b:d6:1d:cc:e6:b7:a4:4e:15:a4:7e:da:a0:05:fd: cd:e7:e2:29:0b:52:d0:4a:df:1c:31:67:60:59:0b: b2:11:ea:64:9e:a9:7a:1b:25:76:db:66:00:b2:f2: c7:11:2c:33:47:b5:94:88:b6:73:59:db:a5:da:04: 46:94:2c:2b:e8:c3:bf:2a:1e:ed:0b:25:5d:1b:69: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6F:66:FE:ED:08:35:FC:A7:F5:02:37:AD:36:DF:8A:7F:BD:EC:B4 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:72:a6:77:8a:93:4c:53:97:42:57:60:a6:61:06:3e:47:07: 99:6d:f5:5b:05:53:14:a3:a8:ab:3c:11:6a:16:58:82:f0:d4: 2e:8c:b5:a4:9a:bb:5f:85:d5:eb:5a:dd:64:92:4c:18:2f:02: 46:92:7a:85:bd:df:58:7e:da:cd:2b:44:b9:1b:20:58:e5:a5: 7d:ae:27:e7:ff:22:fa:7f:5c:4e:18:43:56:8f:7b:d7:35:63: c9:76:a2:49:aa:b9:7a:a7:7e:c9:e4:d5:dc:cf:75:31:e1:b8: 4f:a5:9e:65:f6:73:4a:bb:0a:1a:0c:fd:5d:cf:42:a1:07:70: 02:dc:66:b5:74:a7:4c:b8:8e:2b:0d:21:64:8b:77:88:8a:e8: ff:5e:62:4c:47:51:e8:6b:5d:ac:12:ab:8d:bf:a8:9a:46:f7: b0:95:e6:6f:e0:23:dd:52:66:b9:f4:8c:c1:05:49:d8:cd:87: f1:4d:33:36:3b:8c:65:ca:e6:49:ef:4e:95:25:23:90:88:30: d4:03:05:90:35:87:7c:9b:87:59:0e:7d:ba:9d:f0:45:f2:e5: 26:3d:87:c9:27:b2:2d:f0:06:9c:eb:d3:0f:5f:d3:0a:16:94: 6a:f6:e1:3b:c2:59:2c:d2:85:40:d3:6a:24:67:25:00:3c:cb: cc:ff:28:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/n1KZFV/tJ8opMk7DzpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwNTEyMjEwMTE3WhcNMjYwNTEzMjEwMTE3WjAzMTEwLwYDVQQD EyhjNzZmNjZmZWVkMDgzNWZjYTdmNTAyMzdhZDM2ZGY4YTdmYmRlY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mljhOLokFR4Lutnc07WN0EsRPMD ak3ETqnEgvnx8cYynUCGozzEbtoEraciTZLCIly+9x4nSpQeBc5IOyEZmf8OvugS PLQ40qthBNL9koFFM4Ws72FgnhJ2DyyQwvQJz5+MRjFSdr6XEdDx+mAZECEKlNch laRu/4J1vUAX4STCz1WgDIMnU+R7I3775F+Fk3CE67595RnmsXbs3bHuzScmHEek 8+K2MtsbZ5/DkCTZULEb1h3M5rekThWkftqgBf3N5+IpC1LQSt8cMWdgWQuyEepk nql6GyV222YAsvLHESwzR7WUiLZzWdul2gRGlCwr6MO/Kh7tCyVdG2kXewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdvZv7tCDX8p/UCN60234p/vey0MB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyHKmd4qT TFOXQldgpmEGPkcHmW31WwVTFKOoqzwRahZYgvDULoy1pJq7X4XV61rdZJJMGC8C RpJ6hb3fWH7azStEuRsgWOWlfa4n5/8i+n9cThhDVo971zVjyXaiSaq5eqd+yeTV 3M91MeG4T6WeZfZzSrsKGgz9Xc9CoQdwAtxmtXSnTLiOKw0hZIt3iIro/15iTEdR 6GtdrBKrjb+omkb3sJXmb+Aj3VJmufSMwQVJ2M2H8U0zNjuMZcrmSe9OlSUjkIgw 1AMFkDWHfJuHWQ59up3wRfLlJj2HySeyLfAGnOvTD1/TChaUavbhO8JZLNKFQNNq JGclADzLzP8oUA== -----END CERTIFICATE-----Generated at Wed May 13 07:19:52 2026 by rpki-client