$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft File: dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json) Hash identifier: hZnWzZ/AUf7D5jtYXJs+aj40+ALYREC2dfTrXpT5knY= Subject key identifier: 33:CF:7D:2B:AC:CD:A8:01:D9:83:83:EA:97:79:48:E6:6A:3E:B6:A2 Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019E1E35895C8B2CC79C1B44B3A6769D723D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft Manifest number: 1692 Signing time: Tue 12 May 2026 22:01:25 +0000 Manifest this update: Tue 12 May 2026 22:01:25 +0000 Manifest next update: Wed 13 May 2026 22:01:25 +0000 Files and hashes: 1: 1-iUy43erH8fz1e_egvx2h_2NLww.roa (hash: EW0+JJ6H9cZzZSIR2MciTTEv58I5nsy7rZWf8MvxFZA=) 2: 3UvEih8-gDgZZkcxbDbZU_-xI6E.roa (hash: VuzKrkhER2kIA+fzK85yXqMS//LI0xMOk1j2vnId0Ds=) 3: 5lLrPkobYapeH_YEkj_cgVZiTl4.roa (hash: LA0ccb3eiNozv6xRtPbB9Y5+Y/meBI91YyWfOeIXed4=) 4: 5o5yOlT5KWJLrkgldZ97edML4GU.roa (hash: +3UdFZfWiCIe+RhRbxox53Z+4srFMvwoePbRQm25M3w=) 5: 8ReEJPFMNr7qTteX6qv8unFvcBU.roa (hash: cnOyPdf7KV5827HwqHxHTqoHFSaE73rzQ8nd7uy59YE=) 6: BQ0RNeEd2nooqfArADd8yM6I_Io.roa (hash: ZaT427CaBzYZ0RQvh3ehzT3L35vHp5zYW9kBnpxxtjQ=) 7: EGT7w7ccRY_aHsT2waQrmkTQOg0.roa (hash: G3orlxt1QVzhu0rMV7kl3OzYV++O6Mm3e1uJ14Jtm3Q=) 8: H4sGg8vyZcexogvw33D1AD0SfHU.roa (hash: lJg7B5V1oDUmx+qUj6BrcCWVR3gQKZ5JMqx4+VQkmko=) 9: JUsZAIzpUGjx6jJRW74wD5KYdxw.roa (hash: ubfqsLxf7jUqaeE1zzMD7BbyJ0T6FgVrCwi7fEcPsdA=) 10: NSXspG9pQJvmWYLKS70532E0Tr8.roa (hash: MrTONSRvxrXJDrrYRMbIis/UbxqsqX2KcYYn/ZlA2eI=) 11: QovdBxZFYO8Le-cS-a1JwRjgfQk.roa (hash: XGPaVXCFvuqE5pmLKAAz2EcSfvcufVPb2RTZtwJD+x4=) 12: _Okbnr80Rq7ww8R4v3_ggcisub4.roa (hash: /xX2WGNlLNgbJPvCfzjtPTr4JvfPghmXqeSRioLiEAY=) 13: acrLlh2bffixlJwIk38uqcoaM3U.roa (hash: 8VJekl0fJNzL7/mrVZ7IvSwSX3xru+t1pg5R0/MlHXs=) 14: cDJOpXY5IOe_jLTdJ-OS8qr6SvE.roa (hash: 6iAur4FsqXDOBKEZajqm+YOOYdc6UHHVGhnROwWKxXk=) 15: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: cb4+5MLRaWvWvGbUYJujgm/ydDv3s7u2EGv44poOm2I=) 16: qOuuE7ncVWyhAoaRCylJZLvt_Qs.roa (hash: 9Ei/7J8FyQdTzS+N+w6NNcYG9fQPW4NA4XNB1+d11Aw=) 17: staIgaNBCfGwXzlkjUO0p9RMsoA.roa (hash: H/W95iy+jwLHlEPU4DUHGctsr9ImiAncq5rcWCzt2m4=) 18: tK4p7XOY-9eMCfT41rNfDvMz8ZQ.roa (hash: +PzSpSLby2pKNdEalpx88bV8TrjpZ7AoJpGeiQ6ta/I=) 19: yGCnvxgCyXwx49hD9VXIdTQinr4.roa (hash: R0GWLFctuLdH9pM10rtgW4/R6oZFjcxyRhEiFyXt+X0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:35:89:5c:8b:2c:c7:9c:1b:44:b3:a6:76:9d:72:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: May 12 22:01:25 2026 GMT Not After : May 13 22:01:25 2026 GMT Subject: CN=33cf7d2baccda801d98383ea977948e66a3eb6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:fc:7a:e4:84:04:48:3a:ba:a4:0f:22:41: 5d:ea:cf:46:43:91:3f:b0:91:03:51:75:91:61:a1: 4a:3b:f9:b0:9c:9f:15:4d:9a:34:a1:ee:07:de:03: 61:56:f4:6a:1d:bb:8a:c3:77:51:3d:a5:6a:ba:7c: 59:e8:74:a1:9f:a9:79:7a:ff:97:92:99:b1:1d:97: 49:8b:a4:f5:ad:a6:11:8e:9e:b5:e0:6d:46:40:d5: 00:7a:cb:49:b5:b4:fa:5b:f8:f6:74:43:87:e2:83: 1d:25:06:b5:9f:86:43:2b:5f:6e:f9:26:82:50:fc: da:29:01:58:b2:c2:af:a9:3b:04:86:f7:bc:a4:8c: e2:8d:90:36:6f:57:0e:d8:16:81:73:ac:70:63:db: c8:dc:c0:e2:57:cb:28:de:f8:1f:bd:8e:a4:81:1e: 11:24:2e:c8:eb:22:1a:12:60:54:fa:f6:97:da:2c: a6:55:2a:3d:57:fe:d8:53:09:0d:54:be:f6:79:51: f8:f2:da:48:18:5e:40:03:01:11:e0:a8:7b:e6:0d: 14:de:f9:7f:8d:65:74:ab:94:9e:4e:d6:c6:9a:8e: 37:f4:4d:fe:66:71:a5:10:15:2e:9a:e1:00:cf:29: 0f:41:c1:7a:4a:05:45:3b:f2:1f:5b:c2:13:1e:62: fb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CF:7D:2B:AC:CD:A8:01:D9:83:83:EA:97:79:48:E6:6A:3E:B6:A2 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:20:47:b7:c7:45:aa:44:f5:ac:67:cf:a0:02:4e:9a:b2:35: a6:e9:15:3c:ac:ec:21:8d:b0:7f:a5:8c:cc:45:23:29:e3:02: 4a:ab:44:31:e6:f2:1a:e0:4a:dc:f5:2b:97:f6:46:69:a4:d5: 82:93:f3:79:31:0a:7e:0e:e0:cf:dd:15:8a:a9:cf:c0:5c:14: c5:06:88:8e:29:c9:6e:a2:8b:53:33:32:4c:0d:40:8d:65:52: 04:70:a2:cb:4b:4a:a7:97:7b:fe:79:89:c9:86:6f:b0:fd:23: 64:e1:31:cf:55:74:d1:b5:5a:cc:a1:15:1d:d7:34:81:1b:f0: bc:12:7e:0f:6e:f9:18:2c:70:25:ed:87:d3:99:bd:3a:b2:7f: 7e:7d:c4:01:13:7e:cd:23:a0:89:12:25:7c:0e:fa:a3:43:25: 15:4c:b1:38:f5:d6:71:bb:57:60:30:04:eb:b1:50:d0:b4:ab: ad:13:1a:e5:d4:46:79:60:2f:63:e8:d2:65:7f:5c:23:35:e7: 20:37:ec:87:82:a0:b4:b9:98:c6:13:f4:9a:3e:06:d3:fc:7c: 21:12:61:e9:03:ef:1b:21:67:eb:9c:a7:86:3b:98:77:77:1b: a1:35:7c:da:35:ab:fc:c0:2c:04:cc:21:52:03:ec:dd:10:69: f1:18:09:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eNYlciyzHnBtEs6Z2nXI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjYwNTEyMjIwMTI1WhcNMjYwNTEzMjIwMTI1WjAzMTEwLwYDVQQD EygzM2NmN2QyYmFjY2RhODAxZDk4MzgzZWE5Nzc5NDhlNjZhM2ViNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlP8euSEBEg6uqQPIkFd6s9GQ5E/ sJEDUXWRYaFKO/mwnJ8VTZo0oe4H3gNhVvRqHbuKw3dRPaVqunxZ6HShn6l5ev+X kpmxHZdJi6T1raYRjp614G1GQNUAestJtbT6W/j2dEOH4oMdJQa1n4ZDK19u+SaC UPzaKQFYssKvqTsEhve8pIzijZA2b1cO2BaBc6xwY9vI3MDiV8so3vgfvY6kgR4R JC7I6yIaEmBU+vaX2iymVSo9V/7YUwkNVL72eVH48tpIGF5AAwER4Kh75g0U3vl/ jWV0q5SeTtbGmo439E3+ZnGlEBUumuEAzykPQcF6SgVFO/IfW8ITHmL7LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPPfSuszagB2YOD6pd5SOZqPraiMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiBHt8dF qkT1rGfPoAJOmrI1pukVPKzsIY2wf6WMzEUjKeMCSqtEMebyGuBK3PUrl/ZGaaTV gpPzeTEKfg7gz90ViqnPwFwUxQaIjinJbqKLUzMyTA1AjWVSBHCiy0tKp5d7/nmJ yYZvsP0jZOExz1V00bVazKEVHdc0gRvwvBJ+D275GCxwJe2H05m9OrJ/fn3EARN+ zSOgiRIlfA76o0MlFUyxOPXWcbtXYDAE67FQ0LSrrRMa5dRGeWAvY+jSZX9cIzXn IDfsh4KgtLmYxhP0mj4G0/x8IRJh6QPvGyFn65ynhjuYd3cboTV82jWr/MAsBMwh UgPs3RBp8RgJRA== -----END CERTIFICATE-----Generated at Wed May 13 03:03:28 2026 by rpki-client