$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: kVRgC2wdlWA1IYjEnHF8cT+tEeEbD4Nk+WmpJkaGiys= Subject key identifier: E4:A7:67:A3:5C:B8:A4:C4:86:07:F0:EB:B7:61:6D:F8:31:DA:9E:67 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019E1F7E69A99B900B6A47941C2067F38011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 1B1B Signing time: Wed 13 May 2026 04:00:38 +0000 Manifest this update: Wed 13 May 2026 04:00:38 +0000 Manifest next update: Thu 14 May 2026 04:00:38 +0000 Files and hashes: 1: 75dR-cehxGPRjcfL78Gkb98ifxM.roa (hash: bnepiSdPwXX7m3LncvOOLQdp+VDPBt7lfnKaKeAzVyQ=) 2: 95yHmKNzNlaPkfhztjEjNjbClRE.roa (hash: BQKtvkdp6u39o4nJJYhl6XsDP1w1yD+LKlufqt8njhI=) 3: BAW400X5Cp3GNyjjsyWRzyNaFgg.roa (hash: GB/H4O93w5LLUQkpbn36ChcZqhyQGrlT9Iz0jJ/HcgQ=) 4: Qcy7H8pptHALc_HRlSPBrAjHQFk.roa (hash: c34mSfwg8wGcF0HxnO7HpnD3dUE7IsUJP/VVpFraSK8=) 5: UsyvIMzbpwCQaqi98UeXxjdxQJg.roa (hash: sJkdbS6hTBzgBfeTzou6A0lF/eVe4aXSvavthlsCze4=) 6: a6Erf_tnT8pMndq3WnrW7H4B990.roa (hash: 9x4c63CxJ5UoigQePJxkpntm40rkErQOAY2jQ4vUfMc=) 7: bsp6BDSIWkrxR6u3xicw9RBKbtM.roa (hash: KBNbBNVVMKDz24iMEiDHeH6Ud37u/sKie2hM0HuZtdo=) 8: gCJ11xRpXYuuTIBFGGCZMoDz4zU.roa (hash: 2ejthbbSiGWzvnDRD4RyBPTLsVVX1AibHnvI5hPXIK0=) 9: knLrELnamRbYKI_hmZ4VPtqQHec.roa (hash: KpZhnOp+uvDR1vqjA12HnP6hCAQUJOuMRCA2L33u3s8=) 10: qFHjepGd1W1NeOB2M_HnT_9NnkI.roa (hash: qeCuA+kLoBoYh5DPSa7sfbtMwdjrN2PNoIXoYyFRFww=) 11: r9aoUXhjBzFMOyzhXNAODBHv4GY.roa (hash: XNYE77w1isVB6qZpj8AqJdb/mmafFc7TaEnDP9vItDM=) 12: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: lt5Ngoj1gb1IlM/hSSGHopVw8wGxqMkfCpnwtvbWy14=) 13: u7w1cEYTaI2DzzWQmZyLzaqM5sY.roa (hash: wFc0fj1o5uFkbtmZ4aVopMpmQGltmvAuiMNJULyr7/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:7e:69:a9:9b:90:0b:6a:47:94:1c:20:67:f3:80:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: May 13 04:00:38 2026 GMT Not After : May 14 04:00:38 2026 GMT Subject: CN=e4a767a35cb8a4c48607f0ebb7616df831da9e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:3f:75:35:c3:c1:ab:f2:84:2e:60:f7:e5: eb:8f:b1:e4:33:72:5d:56:30:47:ef:44:37:cc:f3: 26:86:58:c6:85:1b:90:af:94:97:92:55:11:87:4a: 13:1e:d3:a4:57:d2:5b:79:b6:42:40:53:6e:d4:b5: c0:a2:c6:7e:f1:87:84:ac:eb:8d:07:9e:b2:8e:61: 53:53:dc:fe:2b:f1:53:e0:90:5e:57:90:5a:3c:b7: 19:ac:c3:46:c7:ab:c2:b3:82:ae:18:8a:ee:17:34: 78:5b:62:0f:8d:67:ce:b6:a6:25:8c:31:d3:fc:5c: 21:38:78:6c:b5:ec:0c:83:c1:7d:f4:67:a0:ce:8c: 5b:c6:66:0d:0b:d0:10:91:17:f8:28:cd:db:40:06: 60:7e:e8:ed:15:ca:47:28:2c:63:40:9f:51:2d:ca: 23:5b:f2:f6:bd:93:0a:02:c9:a9:11:f3:cb:94:97: c5:1b:3d:a7:14:a9:5a:0d:e2:9d:45:25:70:6f:c4: 6b:ed:bb:b3:09:26:d9:a9:68:54:72:9e:45:cf:18: 68:5f:81:4d:40:77:29:d2:5b:5d:d6:d8:00:c9:71: 19:65:b5:6c:08:9a:41:d9:82:1e:4b:2a:1b:19:e9: 2f:ed:ef:18:8b:97:98:e5:0d:4e:8f:a7:74:dd:fe: 8d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A7:67:A3:5C:B8:A4:C4:86:07:F0:EB:B7:61:6D:F8:31:DA:9E:67 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a9:e0:a5:21:46:ee:a6:07:d1:ad:09:e1:3b:39:50:69:25: ad:b1:01:f0:5c:75:b1:c9:d0:cb:22:e8:6c:ce:40:c5:29:1e: 8e:cc:f4:d3:4a:07:01:e5:dc:ba:ec:9d:3d:40:b4:bc:74:df: ab:8b:77:93:ff:7b:4b:74:70:ef:30:70:88:b6:81:7f:b9:6b: 0c:45:06:f5:81:a8:8a:a7:2a:a2:6a:d4:3c:d9:03:90:b8:63: 42:d4:45:a0:44:b5:d1:28:71:fd:98:d2:c0:d1:83:2f:d3:d7: f0:20:e7:71:6d:7c:2c:63:90:f4:02:12:6d:6e:c1:23:4c:0c: 98:3a:6d:f9:34:a1:9e:83:0a:21:45:ca:ce:01:86:84:9a:59: 70:ba:d5:38:53:69:3a:25:87:4e:59:a0:8b:bc:5f:b4:2a:6a: 8d:d5:0a:64:17:ce:f6:76:b0:f4:81:a5:cd:ed:d0:a7:a4:29: 8e:4b:1b:6e:8f:f7:70:69:99:59:b4:c4:08:35:18:02:3a:a0: 5c:0e:f7:f1:eb:0c:13:e9:9b:f4:99:5c:5e:32:df:77:41:fe: 9a:25:ea:b9:47:46:1b:3d:db:8e:f9:b7:4d:76:44:8d:60:8f: af:62:eb:1f:ca:4a:0f:03:d4:8d:52:4e:b4:3f:a9:4e:f4:d7: e6:b1:da:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ffmmpm5ALakeUHCBn84ARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwNTEzMDQwMDM4WhcNMjYwNTE0MDQwMDM4WjAzMTEwLwYDVQQD EyhlNGE3NjdhMzVjYjhhNGM0ODYwN2YwZWJiNzYxNmRmODMxZGE5ZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGc/dTXDwavyhC5g9+Xrj7HkM3Jd VjBH70Q3zPMmhljGhRuQr5SXklURh0oTHtOkV9JbebZCQFNu1LXAosZ+8YeErOuN B56yjmFTU9z+K/FT4JBeV5BaPLcZrMNGx6vCs4KuGIruFzR4W2IPjWfOtqYljDHT /FwhOHhstewMg8F99GegzoxbxmYNC9AQkRf4KM3bQAZgfujtFcpHKCxjQJ9RLcoj W/L2vZMKAsmpEfPLlJfFGz2nFKlaDeKdRSVwb8Rr7buzCSbZqWhUcp5FzxhoX4FN QHcp0ltd1tgAyXEZZbVsCJpB2YIeSyobGekv7e8Yi5eY5Q1Oj6d03f6NHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSnZ6NcuKTEhgfw67dhbfgx2p5nMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKngpSFG 7qYH0a0J4Ts5UGklrbEB8Fx1scnQyyLobM5AxSkejsz000oHAeXcuuydPUC0vHTf q4t3k/97S3Rw7zBwiLaBf7lrDEUG9YGoiqcqomrUPNkDkLhjQtRFoES10Shx/ZjS wNGDL9PX8CDncW18LGOQ9AISbW7BI0wMmDpt+TShnoMKIUXKzgGGhJpZcLrVOFNp OiWHTlmgi7xftCpqjdUKZBfO9naw9IGlze3Qp6Qpjksbbo/3cGmZWbTECDUYAjqg XA738esME+mb9JlcXjLfd0H+miXquUdGGz3bjvm3TXZEjWCPr2LrH8pKDwPUjVJO tD+pTvTX5rHaYQ== -----END CERTIFICATE-----Generated at Wed May 13 07:53:21 2026 by rpki-client