$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: Iii3eA/NuaDrC3hAz9lZ6MurznGzXNbJ9E1rJyljio8= Subject key identifier: 75:46:14:06:AC:46:39:A1:96:D0:B5:44:7B:D3:A9:EF:30:08:49:4F Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019E1C0F94E297107C5C7005D2D7A76867E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1A09 Signing time: Tue 12 May 2026 12:00:43 +0000 Manifest this update: Tue 12 May 2026 12:00:43 +0000 Manifest next update: Wed 13 May 2026 12:00:43 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: 2WOSXS4KvKJhN6pNQzS+4Pav1Ph8SXmQGmdywZV1dQE=) 3: 2WrIc3-SP4DwQkwPJgua1bGNJ8U.roa (hash: 1n+jxmJd5F9eDLk5zWmpaiLv++ZbzD7Fd2FD1jx9EQI=) 4: 2tySjVTQSHiULWpIIHxe3UTXyKc.roa (hash: 11efIhc4jliYz5b7ccbbcBy+lueobimG/f4ImBFKSr4=) 5: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 6: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 7: CW-qcI1ohMNZFrtxwKP6h3IuUsY.roa (hash: Q0m3SYkmGKp057as4cDbrXW6Plo1d3nxk1JPEsbDaPY=) 8: EQGugxJGZZhy7ULlXu2xf-8SXLU.roa (hash: UznnK9y+/YnAzmFCMUsWlBbf7xpLU6GolAvI0bvVwdE=) 9: FKKjc28_cZwUJO1xCAUbMduAXKU.roa (hash: 9j1ZvxIboMGFHG2XPsMZZrpotaMyXcob7hVQ+vW8T/E=) 10: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 11: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 12: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 13: iyfIsG_zCzXslesxdnK347yeiF4.roa (hash: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=) 14: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 15: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) 16: wQvwuyTtVhloyL12ClFe1Tmx_YM.asa (hash: 7C5CFFl7eP926O+5F2qKTmqq4J0LTe8XElvBDea1xIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:0f:94:e2:97:10:7c:5c:70:05:d2:d7:a7:68:67:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: May 12 12:00:43 2026 GMT Not After : May 13 12:00:43 2026 GMT Subject: CN=75461406ac4639a196d0b5447bd3a9ef3008494f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:77:1a:75:35:8f:c8:db:a1:2e:6e:8f:3c: c7:f0:b7:96:43:78:63:46:9e:87:5d:9c:8a:46:f3: 79:66:d4:42:d5:3c:42:60:a8:c8:88:ae:4b:2b:66: 27:55:99:b0:5e:a7:13:77:14:e3:2f:ec:29:84:15: fa:bf:8f:d8:08:f4:d0:ee:39:05:ca:42:38:05:ed: 2c:5e:65:39:b2:2c:f5:b2:fd:63:4e:7e:c4:57:25: 59:a3:a1:fd:73:9c:90:89:2f:57:3a:37:04:04:68: 7f:65:8f:41:b3:22:37:18:40:ba:f6:6c:87:81:d1: d9:25:29:a0:35:ef:61:1e:9b:95:0f:85:db:58:0e: 00:70:7b:a2:d6:1a:65:6b:40:39:4d:9a:2e:1f:bd: 10:e9:a7:c3:08:f4:b9:1b:e7:62:32:d5:33:b2:7e: 39:a4:73:59:aa:81:cd:aa:8a:fb:5c:1b:7a:fc:53: 62:92:15:ce:d0:28:55:33:cd:66:9a:6e:78:df:4b: f2:28:5f:96:90:dd:55:c0:cb:5b:ec:91:20:0a:ad: 57:3c:2f:6e:61:08:c9:cc:54:e7:b4:cb:4a:b9:7c: 35:6e:65:4f:3a:cf:94:c3:12:75:6f:93:44:c1:3c: 59:fc:59:ae:ad:48:bd:bf:f8:27:b4:2c:d9:cb:f0: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:46:14:06:AC:46:39:A1:96:D0:B5:44:7B:D3:A9:EF:30:08:49:4F X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:09:22:6d:c8:5b:f0:ec:33:5d:49:f4:30:1e:f7:e5:18:2d: ad:6f:1d:63:f3:8e:9a:0c:ee:32:ca:af:33:47:0b:1f:d5:a4: 3a:ba:7b:e6:d7:6d:1d:10:1e:29:11:f5:4c:43:d6:c2:8b:6e: 13:f2:5d:3a:22:99:79:e2:f5:3b:e9:d4:7c:37:35:1a:f3:dd: 01:7a:40:da:23:21:dd:3d:3f:4d:b1:07:b4:99:4e:44:2a:a6: b5:90:8e:1b:b1:f8:ec:5b:38:a4:bf:cd:af:c2:f7:38:b5:4f: a2:f6:e0:f5:5e:30:dd:1c:bf:cd:e5:1e:09:42:17:06:ef:64: 6c:68:48:02:ee:cc:89:f5:86:a8:3a:a5:cb:6e:e9:6d:4f:43: fc:57:18:36:2a:47:17:94:f3:c0:0d:96:c6:89:0a:ec:38:88: e1:fb:58:8d:42:10:dc:7b:f2:20:3d:c6:e8:c0:be:ac:9e:a9: b4:78:4d:b7:21:d5:62:0a:03:2d:cb:4e:fd:54:c6:1a:eb:80: bd:c8:3f:21:0e:cd:a4:df:d4:dc:26:3b:b7:f7:cd:14:f6:bb: 2e:4b:ea:cb:f1:5e:1d:e7:bc:46:c2:2d:45:b4:c9:19:6f:8a: 23:d3:e7:44:50:20:75:41:fa:55:73:91:6c:dc:ce:5a:2d:42: 86:f0:f5:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cD5TilxB8XHAF0tenaGfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwNTEyMTIwMDQzWhcNMjYwNTEzMTIwMDQzWjAzMTEwLwYDVQQD Eyg3NTQ2MTQwNmFjNDYzOWExOTZkMGI1NDQ3YmQzYTllZjMwMDg0OTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3V3GnU1j8jboS5ujzzH8LeWQ3hj Rp6HXZyKRvN5ZtRC1TxCYKjIiK5LK2YnVZmwXqcTdxTjL+wphBX6v4/YCPTQ7jkF ykI4Be0sXmU5siz1sv1jTn7EVyVZo6H9c5yQiS9XOjcEBGh/ZY9BsyI3GEC69myH gdHZJSmgNe9hHpuVD4XbWA4AcHui1hpla0A5TZouH70Q6afDCPS5G+diMtUzsn45 pHNZqoHNqor7XBt6/FNikhXO0ChVM81mmm5430vyKF+WkN1VwMtb7JEgCq1XPC9u YQjJzFTntMtKuXw1bmVPOs+UwxJ1b5NEwTxZ/FmurUi9v/gntCzZy/DXgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVGFAasRjmhltC1RHvTqe8wCElPMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAkibchb 8OwzXUn0MB735RgtrW8dY/OOmgzuMsqvM0cLH9WkOrp75tdtHRAeKRH1TEPWwotu E/JdOiKZeeL1O+nUfDc1GvPdAXpA2iMh3T0/TbEHtJlORCqmtZCOG7H47Fs4pL/N r8L3OLVPovbg9V4w3Ry/zeUeCUIXBu9kbGhIAu7MifWGqDqly27pbU9D/FcYNipH F5TzwA2WxokK7DiI4ftYjUIQ3HvyID3G6MC+rJ6ptHhNtyHVYgoDLctO/VTGGuuA vcg/IQ7NpN/U3CY7t/fNFPa7Lkvqy/FeHee8RsItRbTJGW+KI9PnRFAgdUH6VXOR bNzOWi1ChvD1WQ== -----END CERTIFICATE-----Generated at Tue May 12 21:49:06 2026 by rpki-client