$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: VKO3qOxWEu6toWwUCmgo7lRjjjXCVjAxM8aiuJjuf/I= Subject key identifier: D8:09:D9:40:73:C3:92:B7:F1:E8:2E:44:4E:8B:5D:95:6C:4B:9B:62 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019E1F7F0B1E219FDD52579F631AD9B60803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 1315 Signing time: Wed 13 May 2026 04:01:20 +0000 Manifest this update: Wed 13 May 2026 04:01:20 +0000 Manifest next update: Thu 14 May 2026 04:01:20 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: Eqbn5UW3mat9r71yKUVZb2CcB6L78IRhhM7aY2aa8uQ=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 9: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 10: iglmx-ya_CBijqxO6oqYah-MgJk.roa (hash: nW9fmQ0ZJGvfNsh2tiuvFsmSbRN+a3nAUodyjJH9UYE=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:7f:0b:1e:21:9f:dd:52:57:9f:63:1a:d9:b6:08:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: May 13 04:01:20 2026 GMT Not After : May 14 04:01:20 2026 GMT Subject: CN=d809d94073c392b7f1e82e444e8b5d956c4b9b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:ce:0b:ee:a8:8c:d3:b6:21:5d:de:74:82: 74:9c:93:c7:0d:7b:d8:80:8a:9f:0d:f6:78:53:52: 1a:1b:83:68:f8:b0:c9:08:fc:c2:ed:3a:4a:f0:06: a8:64:4a:d8:91:7f:f6:fb:3e:6b:5d:ea:1e:19:ee: 5b:c4:82:4f:d4:63:70:a4:64:24:bb:b4:50:14:aa: b5:a5:71:06:44:5a:f1:e0:0e:e9:7e:f3:ab:12:3c: b2:e8:28:05:55:72:59:01:f3:13:14:8b:91:5d:65: 96:8b:7d:aa:13:ea:04:d9:bf:78:72:b2:cc:c7:ef: 76:55:22:eb:b5:7a:42:36:7a:04:dc:60:fe:67:14: 18:93:fa:2b:d1:ca:4a:14:56:f2:84:4d:e4:5f:6f: 39:05:9b:ea:d6:c5:94:1f:a7:d9:00:03:01:04:dd: 86:49:97:46:b8:cd:be:1a:ca:76:bd:05:93:7b:25: df:22:65:c1:cb:41:e6:2b:b3:e8:b8:cb:db:eb:c9: 63:4c:db:ac:1a:1e:e2:03:b8:2c:c5:c3:42:88:1c: 81:68:cc:19:9a:1e:31:2f:ac:18:c4:b3:1e:ff:fd: 17:68:19:0a:a4:2c:58:ea:0d:8c:5f:dd:80:48:2d: dd:f2:28:84:42:e1:f3:b8:1b:79:3b:b1:fa:44:a1: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:09:D9:40:73:C3:92:B7:F1:E8:2E:44:4E:8B:5D:95:6C:4B:9B:62 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:14:98:e1:6d:6f:8c:7b:5e:65:59:f7:5f:6a:91:a6:14:4c: da:6f:6e:23:2f:22:39:1b:ef:82:78:3c:e6:6c:b3:e5:2a:05: ea:ba:69:c8:07:49:0f:35:12:68:21:b8:4a:78:1b:88:f5:05: 93:73:5c:7e:ae:b6:8e:d9:f3:3c:4a:d6:96:b4:9c:d8:32:dd: e3:84:7c:7d:0b:ca:1f:2a:e1:de:3e:e7:60:54:1e:12:fb:46: 22:92:71:bf:78:91:78:ce:05:62:bb:94:62:1d:33:ca:10:5c: da:d2:60:fc:c7:a5:6b:84:8f:cf:df:ef:0a:c8:dc:59:15:35: d1:96:31:36:08:4e:24:4b:d0:4e:ad:1a:60:67:da:7e:89:74: 9a:6c:18:aa:29:a3:cb:83:ae:28:6c:74:ab:2a:27:33:dd:b4: 24:15:72:6b:c3:9f:3c:9a:3c:c0:75:bf:ba:11:1c:34:5a:ac: 7c:a6:27:4a:4a:6b:9c:59:8e:25:6c:74:61:6c:ce:a0:0c:ef: 4f:26:9b:d3:74:ca:38:a0:e5:d3:55:78:4e:04:53:e2:2f:58: 31:cf:b4:c3:65:00:58:72:29:01:05:54:5c:14:e6:57:07:9f: 23:4f:56:3c:d9:85:45:9a:fa:e4:62:6e:25:fb:b8:0d:49:87: 70:f8:a3:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ffwseIZ/dUlefYxrZtggDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwNTEzMDQwMTIwWhcNMjYwNTE0MDQwMTIwWjAzMTEwLwYDVQQD EyhkODA5ZDk0MDczYzM5MmI3ZjFlODJlNDQ0ZThiNWQ5NTZjNGI5YjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhjOC+6ojNO2IV3edIJ0nJPHDXvY gIqfDfZ4U1IaG4No+LDJCPzC7TpK8AaoZErYkX/2+z5rXeoeGe5bxIJP1GNwpGQk u7RQFKq1pXEGRFrx4A7pfvOrEjyy6CgFVXJZAfMTFIuRXWWWi32qE+oE2b94crLM x+92VSLrtXpCNnoE3GD+ZxQYk/or0cpKFFbyhE3kX285BZvq1sWUH6fZAAMBBN2G SZdGuM2+Gsp2vQWTeyXfImXBy0HmK7PouMvb68ljTNusGh7iA7gsxcNCiByBaMwZ mh4xL6wYxLMe//0XaBkKpCxY6g2MX92ASC3d8iiEQuHzuBt5O7H6RKHkpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgJ2UBzw5K38eguRE6LXZVsS5tiMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBSY4W1v jHteZVn3X2qRphRM2m9uIy8iORvvgng85myz5SoF6rppyAdJDzUSaCG4SngbiPUF k3Ncfq62jtnzPErWlrSc2DLd44R8fQvKHyrh3j7nYFQeEvtGIpJxv3iReM4FYruU Yh0zyhBc2tJg/Mela4SPz9/vCsjcWRU10ZYxNghOJEvQTq0aYGfafol0mmwYqimj y4OuKGx0qyonM920JBVya8OfPJo8wHW/uhEcNFqsfKYnSkprnFmOJWx0YWzOoAzv Tyab03TKOKDl01V4TgRT4i9YMc+0w2UAWHIpAQVUXBTmVwefI09WPNmFRZr65GJu Jfu4DUmHcPijbQ== -----END CERTIFICATE-----Generated at Wed May 13 14:50:54 2026 by rpki-client