$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft File: 6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json) Hash identifier: pl/kdF01wYidY/5cep6WMUBhwC1/yUO+WpWCwF0j09M= Subject key identifier: 16:9E:E1:AA:19:2B:EA:04:8A:A9:08:FE:3C:5C:20:5E:19:64:6C:DC Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 019E1D59193333065C899D03D58124F2A608 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft Manifest number: 192E Signing time: Tue 12 May 2026 18:00:38 +0000 Manifest this update: Tue 12 May 2026 18:00:38 +0000 Manifest next update: Wed 13 May 2026 18:00:38 +0000 Files and hashes: 1: 1-V2f5BIvAjoxWtMfXiOEdpxut6E.roa (hash: D7oyZz1oHRszroBqObV23g+p70gyyYzI6HwkfnsCOpU=) 2: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: 6VJ4w4G+VXXm18iGM8Bxkvj4I2p7U48VhyY280jZe+0=) 3: 7hi7Ah4iY_QQeOlVJayptAGSNSQ.roa (hash: 91eReMLkF+2CXAAIZp2KhXfLlZYAztOnwmcmPnVUzXo=) 4: 9R90z_RXFkZAiwMA8btLrqNKc5k.roa (hash: qB3OSrsx3CWWt5hbnFdtOpLb0xWqshoihPM7A2OR0ZI=) 5: 9cn7oO0iiJOK2Jrlawx7PDY1feo.roa (hash: j5TG1qDIuGwfkqIJMBOyK7GFpL9NpA8P1Hsl6lon4S8=) 6: JDTZDW6AYWQ-yj7N5Zoenz19vXY.roa (hash: aJ6VAzk0xVWZ+1DH33f1NLSDcnI/7+vJFB3jbl7CnPc=) 7: QaR40Du4QHojtPoMdpOj--q01WU.roa (hash: eIGnLm0U97IrEJBoUThT3XNpPhCvMXo7GasLn6DQpoQ=) 8: _iw4-UbxRcpMoWsfFn6G2aiGN-s.roa (hash: 2naXiACb6/BywUEITZo6HGPyiSxLs5Zs4g1/62TMQcU=) 9: burJ78lKaBi9GwpclBHxJ1tt3J8.roa (hash: 7zKgA0U3yskpNhBj2DmX/6y6Luj79ABkwPUXMuxefqU=) 10: h2gp67O50OZSa1oqQZXjN2SNpx4.roa (hash: Pa+pjoEKIMF2XBf3tbxUYkCZYzHfL5nJuwgyvpsFLdw=) 11: mtubXUlBQXjcnE7fuf616NzQiL8.roa (hash: ZPi+7TMbUx5kPi5sDdlZQektqLQyg5jCkWs9e2Cya6g=) 12: sLcjP0MexoJKRfJdT7_XekWEx5g.roa (hash: 81Gv1gjQe+8o8rD8eLhttbKdZxs2A/IOu9hlnmcGBtM=) 13: tEVXcAqmFhkbtGLmUdbLn_80yig.roa (hash: 9MErMfs8Nn0borG1HaQK08aY1yTDK65zdP9huz/FJ9g=) 14: wFIC1mkSpA0e2UovbVVh_Scnn38.roa (hash: gvnZu9oBw0R11C5ZwnQeTQrVmEIlj6ltv4xIOtBZ5cQ=) 15: wbkCFCpGOAFv3gQa4dX5dSBrtR8.roa (hash: nYzqM3na5q/wwfaIOmk+FxvcOctc4P9IAUI7PFRpl7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:19:33:33:06:5c:89:9d:03:d5:81:24:f2:a6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: May 12 18:00:38 2026 GMT Not After : May 13 18:00:38 2026 GMT Subject: CN=169ee1aa192bea048aa908fe3c5c205e19646cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:36:01:14:b0:95:a7:44:c6:cd:ba:72:35: 3d:f1:58:eb:ae:af:43:41:28:80:22:35:94:c7:0b: 69:54:ae:35:da:d2:ad:5e:04:eb:c2:6c:51:77:3a: 03:00:60:4e:ad:b4:30:bb:7f:5e:87:af:e6:7e:f4: 01:58:7e:9c:61:20:0e:15:52:a5:e5:09:6f:21:75: e4:2a:7f:1d:a2:7a:7d:9d:09:3c:a9:77:5e:fe:d4: ea:77:71:2c:df:21:20:61:0e:e6:77:d5:a5:6a:e8: 24:c5:90:8c:a1:d2:fb:c4:2e:18:3a:64:dd:84:74: ef:91:3c:3d:f4:94:5b:20:1b:e2:9c:9d:c1:32:01: 6f:78:19:fe:5b:8c:76:52:50:90:0d:e2:27:ba:02: 76:2c:20:8c:63:0a:0b:72:a8:dc:73:12:dc:f7:4a: 98:6d:33:83:6d:4b:8f:6d:49:27:78:df:8f:d5:c9: f1:04:ec:1d:9b:63:eb:5c:22:53:46:3b:95:a3:9e: 40:ae:58:46:ed:f5:a8:4c:a5:b9:86:1f:66:21:e5: 27:44:ea:fc:77:41:3f:3d:3b:2d:72:81:92:1e:a4: b1:01:ae:0f:ea:06:6f:2b:46:83:f0:ed:ea:90:d0: c2:f1:66:a0:04:91:22:ee:59:b5:00:1e:45:dc:1e: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9E:E1:AA:19:2B:EA:04:8A:A9:08:FE:3C:5C:20:5E:19:64:6C:DC X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6f:ed:16:65:da:b1:97:ec:4d:76:52:fa:71:12:14:11:71: 48:e6:9c:f4:5e:1e:72:23:9e:21:bc:29:36:6e:7c:67:b6:91: b0:12:50:ce:29:58:67:4d:c6:72:85:01:d2:dc:6a:ca:4b:51: 1f:89:c1:ca:c2:52:95:b4:b2:88:d7:e7:fc:ed:50:65:3a:94: c8:f7:8f:67:57:28:7c:54:70:fd:cc:3a:5b:bc:6e:fe:bd:40: c9:bb:3d:c8:f9:de:34:94:f9:59:f2:c7:aa:7b:15:07:1a:da: 3a:a9:cf:7a:80:ba:1d:77:d0:89:8b:7e:2f:ae:10:d8:a6:f3: 71:9d:6e:20:74:05:62:fd:0d:d2:9b:24:da:e2:d2:09:f4:a5: df:7a:9b:96:6e:3a:23:9a:5e:71:56:4f:e8:15:31:0f:78:f6: 4a:2e:f0:eb:3a:05:64:98:20:eb:7a:5e:57:5b:cd:a2:f8:b0: 22:6d:87:9c:0c:ed:27:74:2d:3e:97:af:50:db:1c:a9:1b:10: 4a:fd:18:86:11:bc:8b:92:d6:93:a4:17:8b:2f:6b:06:7b:48: c3:69:40:cf:09:92:af:e5:bd:38:5e:2e:29:82:dd:aa:85:52: c9:72:24:d5:4b:89:61:09:3b:01:61:47:6d:7f:43:7a:d0:7d: 59:85:ca:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWRkzMwZciZ0D1YEk8qYIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjYwNTEyMTgwMDM4WhcNMjYwNTEzMTgwMDM4WjAzMTEwLwYDVQQD EygxNjllZTFhYTE5MmJlYTA0OGFhOTA4ZmUzYzVjMjA1ZTE5NjQ2Y2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYE2ARSwladExs26cjU98Vjrrq9D QSiAIjWUxwtpVK412tKtXgTrwmxRdzoDAGBOrbQwu39eh6/mfvQBWH6cYSAOFVKl 5QlvIXXkKn8donp9nQk8qXde/tTqd3Es3yEgYQ7md9WlaugkxZCModL7xC4YOmTd hHTvkTw99JRbIBvinJ3BMgFveBn+W4x2UlCQDeInugJ2LCCMYwoLcqjccxLc90qY bTODbUuPbUkneN+P1cnxBOwdm2PrXCJTRjuVo55ArlhG7fWoTKW5hh9mIeUnROr8 d0E/PTstcoGSHqSxAa4P6gZvK0aD8O3qkNDC8WagBJEi7lm1AB5F3B4i9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBae4aoZK+oEiqkI/jxcIF4ZZGzcMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYG/tFmXa sZfsTXZS+nESFBFxSOac9F4eciOeIbwpNm58Z7aRsBJQzilYZ03GcoUB0txqyktR H4nBysJSlbSyiNfn/O1QZTqUyPePZ1cofFRw/cw6W7xu/r1Aybs9yPneNJT5WfLH qnsVBxraOqnPeoC6HXfQiYt+L64Q2KbzcZ1uIHQFYv0N0psk2uLSCfSl33qblm46 I5pecVZP6BUxD3j2Si7w6zoFZJgg63peV1vNoviwIm2HnAztJ3QtPpevUNscqRsQ Sv0YhhG8i5LWk6QXiy9rBntIw2lAzwmSr+W9OF4uKYLdqoVSyXIk1UuJYQk7AWFH bX9DetB9WYXK9Q== -----END CERTIFICATE-----Generated at Wed May 13 04:57:02 2026 by rpki-client