$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: yyGGiUR9GjaNvArpyih2oLiT7CrPTLiAt+UrRmsDJzc= Subject key identifier: DB:FB:FA:2F:50:DD:38:F8:3F:D4:CB:76:11:BC:F9:06:68:28:29:D9 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019E1E6C4B9989A57231343E46FB91CA1EA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 07BF Signing time: Tue 12 May 2026 23:01:13 +0000 Manifest this update: Tue 12 May 2026 23:01:13 +0000 Manifest next update: Wed 13 May 2026 23:01:13 +0000 Files and hashes: 1: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=) 2: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: lceTbArGvamWM6NIB1n5y1eEUAaG1KYNqJPfqahPupY=) 3: 7SwUXzEbynVOAJ41PRN1VV-DthQ.roa (hash: /HRDLDX8YtXPPm0ZzH9OOI6lge2ijM43IUSyaitp3HA=) 4: AuuFpGckEdWDmpSli6J4EvnBEFA.roa (hash: UWwZYirMViLQ4FhWk6naRNb3lf/S07gxbtcPGiaea3M=) 5: B9XWePYQjczzVhsbHCKhs1iPZEw.roa (hash: 7+H31xuyxXE8kpgGxD+OA71WfdqXR7K5DI+2X9LHglM=) 6: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=) 7: JRpzznWelvDGpNctUx-9YeQj91I.roa (hash: UWpK2mc+BRq0WDsXbRZApCIJ/yZuMuk8WsuIDijlk30=) 8: N8T1T4yzeC_svV7N6clN6YYuhS0.roa (hash: Zjsphs8xxbX+E2wFNgFNlo+S/FNhRonrcNCUdPBKUgo=) 9: VJhfwBMpKYGf6ops4QG8W2D9K5Y.roa (hash: BYsR2fxa81FQHh1Dxyok1UJdkjHu0vH5dq3diC+m0iI=) 10: XCau4ffd9wRsX7TYXIogzR2WqO4.roa (hash: ftqkiMajJgdI8EjDHWxMovMT410S0p0no+51o9gTIa8=) 11: YfhOPAWRkHzsFNKQodjoA2IhLKM.roa (hash: 9/L6hUhQcrkiGTuXjLMFbE6LlWLBn2NBCH2Dr2RZSJA=) 12: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=) 13: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=) 14: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=) 15: aHuFfSOUYXmTmBwxHlPwh-EVryM.roa (hash: 4h0lpb8Jw+MnXWrJAhTnOT+WFcvU+QMAmEsFwZdu5/k=) 16: egsOE6bZvfKQiaDurlHql4l7FQo.roa (hash: BP8wlsBgKB6wKVje/kb04PbZKDtzqCLIojy+BbhlXD4=) 17: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (hash: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM=) 18: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (hash: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:6c:4b:99:89:a5:72:31:34:3e:46:fb:91:ca:1e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: May 12 23:01:13 2026 GMT Not After : May 13 23:01:13 2026 GMT Subject: CN=dbfbfa2f50dd38f83fd4cb7611bcf906682829d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:55:59:71:46:83:d2:e5:50:96:58:23:01: 19:25:2c:37:ad:e6:48:fb:46:cf:2e:c2:a2:4f:e7: f8:1e:0d:31:c7:3b:fe:cb:d0:9d:0c:55:c1:21:54: cc:f9:82:fd:12:7f:bf:0e:2c:36:04:4d:25:9d:9d: 1e:e5:43:a0:21:3a:b6:bf:ef:15:77:ed:7e:51:fc: 65:7b:1a:80:96:77:5b:66:b4:05:b5:e0:d4:54:69: f8:68:ad:4e:a3:2d:ed:40:1f:00:d0:f9:95:d1:22: 04:c5:57:46:24:ea:88:00:2c:77:07:23:b6:26:b4: ac:48:d8:f0:4b:c0:db:ca:72:30:ec:e7:25:2b:92: df:10:1c:e8:2a:e4:91:f1:26:7e:36:f6:0d:7f:d4: f0:0d:78:6f:4d:18:c8:67:99:6a:16:0d:0a:b3:cd: 70:0d:99:a1:a8:a0:15:19:ca:2d:5c:d8:45:58:6c: 22:dd:71:da:67:e4:25:03:be:ff:42:bd:8c:b9:53: bb:0e:ae:37:2f:8e:cf:5e:4d:40:9c:9f:bd:49:60: bd:b7:1d:2f:e3:af:72:40:c2:46:97:1d:8d:53:06: b0:ef:98:4a:11:a1:72:c2:50:a0:b4:18:85:56:eb: e7:43:cc:a0:a0:a1:b5:ca:a8:37:2d:c6:22:db:68: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FB:FA:2F:50:DD:38:F8:3F:D4:CB:76:11:BC:F9:06:68:28:29:D9 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ae:24:63:63:83:1a:d8:d0:9b:69:a8:03:67:bb:fe:98:04: 23:86:00:cb:45:02:58:64:f4:d3:62:61:9e:0a:b6:0a:99:80: e8:ab:4a:04:f3:19:c4:c9:e9:52:48:b1:ec:9e:c4:3f:bf:48: 41:bb:87:82:40:d8:4b:af:eb:3b:2d:c2:53:35:64:c8:3c:9e: fe:45:d0:59:7c:b8:80:f9:7b:86:02:4b:6c:63:6e:f6:f3:69: 10:26:c5:91:b2:95:66:d8:d3:fb:47:75:3c:58:56:44:e8:c7: 65:67:53:f9:9b:fa:eb:85:b4:a1:b3:9c:02:37:73:7f:14:8f: c8:df:23:c1:8f:a9:72:17:62:9e:c4:9f:80:66:8c:a2:7a:ec: 76:bb:d8:20:c1:e9:d1:98:ee:f8:5a:12:79:3a:0c:16:8e:68: ca:79:92:a9:9e:e7:d2:31:23:c5:33:76:79:8d:43:37:5e:f0: 36:db:d7:a5:5a:cd:ee:ee:d8:10:3c:67:fa:54:4a:cf:dc:6b: 81:b3:a7:3d:5a:13:c3:87:db:a8:86:55:8d:71:78:97:d2:54: 82:79:c6:55:57:76:1e:e1:a4:ef:af:3d:80:bc:22:a6:6f:98: 22:f2:2a:b8:f4:28:35:fa:95:2b:aa:d3:47:0f:b5:95:44:03: 51:20:2e:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ebEuZiaVyMTQ+RvuRyh6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwNTEyMjMwMTEzWhcNMjYwNTEzMjMwMTEzWjAzMTEwLwYDVQQD EyhkYmZiZmEyZjUwZGQzOGY4M2ZkNGNiNzYxMWJjZjkwNjY4MjgyOWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02NVWXFGg9LlUJZYIwEZJSw3reZI +0bPLsKiT+f4Hg0xxzv+y9CdDFXBIVTM+YL9En+/Diw2BE0lnZ0e5UOgITq2v+8V d+1+UfxlexqAlndbZrQFteDUVGn4aK1Ooy3tQB8A0PmV0SIExVdGJOqIACx3ByO2 JrSsSNjwS8DbynIw7OclK5LfEBzoKuSR8SZ+NvYNf9TwDXhvTRjIZ5lqFg0Ks81w DZmhqKAVGcotXNhFWGwi3XHaZ+QlA77/Qr2MuVO7Dq43L47PXk1AnJ+9SWC9tx0v 469yQMJGlx2NUwaw75hKEaFywlCgtBiFVuvnQ8ygoKG1yqg3LcYi22iq+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNv7+i9Q3Tj4P9TLdhG8+QZoKCnZMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYK4kY2OD GtjQm2moA2e7/pgEI4YAy0UCWGT002Jhngq2CpmA6KtKBPMZxMnpUkix7J7EP79I QbuHgkDYS6/rOy3CUzVkyDye/kXQWXy4gPl7hgJLbGNu9vNpECbFkbKVZtjT+0d1 PFhWROjHZWdT+Zv664W0obOcAjdzfxSPyN8jwY+pchdinsSfgGaMonrsdrvYIMHp 0Zju+FoSeToMFo5oynmSqZ7n0jEjxTN2eY1DN17wNtvXpVrN7u7YEDxn+lRKz9xr gbOnPVoTw4fbqIZVjXF4l9JUgnnGVVd2HuGk7689gLwipm+YIvIquPQoNfqVK6rT Rw+1lUQDUSAuEw== -----END CERTIFICATE-----Generated at Wed May 13 09:18:41 2026 by rpki-client