$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: Wvw8LZXMdhC/QwDZwQeDxLN5nObWF2v2m1wzsr+VAWI= Subject key identifier: 09:AF:D9:AE:E9:2A:A6:14:70:16:29:F9:ED:65:AF:3D:21:85:67:9A Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019E1D90E4406D49B53E138CB333354F4904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0C6A Signing time: Tue 12 May 2026 19:01:35 +0000 Manifest this update: Tue 12 May 2026 19:01:35 +0000 Manifest next update: Wed 13 May 2026 19:01:35 +0000 Files and hashes: 1: 0-DUuatym4EjrLpEXcW6I4MvGuM.roa (hash: uxv6/KY05jYuEsZLZV3EP7utj37no6k0dC74Q/DN0po=) 2: 0G0rRTu6YWCR1V_Lc199bCBf3eY.roa (hash: ONejcgv+C+EtCtZmR2C80Az2frNnLr2aDGvIHLHpMsw=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: jmmq7SNWPmg5HLTX2rh8lMbGYeVrPMrLVBIYaeegOqI=) 4: DRWGbkvEcD_bNQTgjUEfobLZ-PA.roa (hash: eZVLmuCp5+bXUFcL2aI3C/aZXJNWqBIZX9DvM7Y7ZFY=) 5: RxPOdCnW7tymnjueSRcA6hs4elk.roa (hash: FCPYguPsplTXs5/9P4PJ+u4lYOZKePLa/u9GPsujen4=) 6: Y-ntuvRTafT1eOZlmfGsaPPEtjE.roa (hash: v4qO0jj2DVZ9xq0w+y70kJel8FoTbySNEx7XDJ9VH/Q=) 7: dJpXPlF_vRyOgX7jQKghLw8pQUQ.roa (hash: E1+cy9PTWiny/1y88hiJPYv+llkKbECfLmkj5G9alPY=) 8: g4wrIHIGlRmBjCBIOZWynLiU_RQ.roa (hash: crp+OmNL+gqdA9fGFNYDxasudDTsK6CYTas0oygF0Vs=) 9: kN69teI4lOPRDRSTeJKcvbg3DVI.roa (hash: 0zY8u4pSs4JdcMd1LnlNAD4f7WGos0AD35DsttS72fg=) 10: mgliWT245mKPpOJ9J-koUWKPC38.roa (hash: 2leVbMv5cZcWloTjT8tRG7S73gX0MLHEKiLR37iqlKc=) 11: nyqLqit5oB_bMTURFw941vObpAs.roa (hash: YyM6j1YO1pKfOQnOF8zW9g/xPYJJDmuheUmA+y3jAx0=) 12: qHpfpL-iX9xY8GdRHaONTT8pr8Y.roa (hash: +ysYA2z1c9FzjaGNYUk90Ddk4xsZHBpqAK7t8gXQInM=) 13: uf3e_BE2zQVDAEvwnBCYDlW_CRA.roa (hash: pdun+BKUOQ7DoLG0PPskjv1gebPPRcfr5c7Kait8/nk=) 14: xbafFgHngcJFMb2cngm3oN0_3sA.roa (hash: 3QhvTvFkxgvJXVXMTx914Du8ko0OHV0OfDyouPKHYiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:90:e4:40:6d:49:b5:3e:13:8c:b3:33:35:4f:49:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: May 12 19:01:35 2026 GMT Not After : May 13 19:01:35 2026 GMT Subject: CN=09afd9aee92aa614701629f9ed65af3d2185679a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1a:9b:49:48:34:4e:b8:f5:74:cf:fe:fc:e2: ef:7f:8b:c3:bc:9f:a1:ce:99:98:2c:f9:b0:dc:a0: 79:5e:e2:ed:6f:b8:43:ae:a2:81:da:96:b7:d9:cd: 0b:0f:9b:75:b5:aa:23:f9:62:cd:9e:77:d3:06:1e: f9:15:6c:68:1f:6d:2f:f1:31:91:12:e8:5f:e0:e9: ea:c8:c9:92:e1:94:97:76:6d:55:a3:8d:3a:9a:35: f0:04:51:10:36:84:ca:2b:73:21:57:64:e4:14:90: e3:d0:d6:9b:4d:0b:d1:8a:4c:e1:e2:1a:17:37:ee: 0a:c1:01:47:2f:ae:4f:61:2b:48:08:14:49:06:c1: c7:f9:37:8e:67:31:13:23:3f:2b:1c:4b:9f:dc:19: 58:69:a3:8a:e7:a6:2a:b6:ed:81:a8:fb:01:8c:ef: ae:16:03:94:61:69:53:4b:84:29:c9:fb:eb:76:e5: 5d:00:14:5e:34:d0:3c:41:27:db:f0:c5:f4:67:dc: a9:e0:7a:f6:49:31:9e:fa:7a:4e:a2:ac:06:f7:6c: 6d:01:5d:39:4b:2c:cf:e8:d7:fe:7f:66:7b:18:e5: 89:13:f8:dc:26:e3:27:48:36:2c:03:f1:51:9c:6d: f3:e0:e3:56:a5:8a:d4:3b:43:be:45:cb:1f:9f:f7: f2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AF:D9:AE:E9:2A:A6:14:70:16:29:F9:ED:65:AF:3D:21:85:67:9A X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c8:b1:8d:79:53:40:fb:62:16:ab:30:3c:df:6f:d1:cb:8e: 71:2c:2d:7e:54:b8:20:9b:ee:29:0d:a6:3c:4f:78:36:d2:cb: 86:91:14:4b:c3:ce:99:e3:d0:be:42:a2:5f:a2:cd:0b:0f:66: b8:39:c4:a5:04:6d:42:1c:57:73:5d:0c:b3:3c:81:05:e8:c7: 33:ca:f5:9c:ad:4e:6c:9f:0a:ed:0f:2c:ef:39:f8:6b:50:e2: fc:c0:fb:0f:ff:c4:13:bc:bb:b8:f0:e6:94:af:28:27:d5:d3: 11:2b:52:46:a4:e8:63:05:34:d7:d4:a7:5f:e5:fd:e2:e8:8b: 2f:4c:cc:cb:fa:c0:d3:e3:a4:5d:30:c9:7e:b5:68:a5:69:fb: 91:43:1a:c5:da:4f:cb:23:ce:e6:fc:d9:dc:33:bc:ff:90:9e: 8e:16:23:13:c4:f7:4f:9b:46:a4:39:fb:33:31:ba:c2:57:8c: a8:38:0f:60:9f:35:ff:c3:1c:99:ad:28:5d:bc:c4:a4:f1:12: 4f:13:96:34:b4:ec:de:57:25:71:71:86:b5:ed:2f:0d:e1:85: 30:25:88:b4:3b:1e:74:2b:a5:3d:f1:f5:29:fa:5a:58:16:3b: c4:39:fc:62:0c:87:ae:0b:0b:6d:fe:5e:0e:23:32:ff:fc:bf: 00:02:97:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dkORAbUm1PhOMszM1T0kEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYwNTEyMTkwMTM1WhcNMjYwNTEzMTkwMTM1WjAzMTEwLwYDVQQD EygwOWFmZDlhZWU5MmFhNjE0NzAxNjI5ZjllZDY1YWYzZDIxODU2NzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hqbSUg0Trj1dM/+/OLvf4vDvJ+h zpmYLPmw3KB5XuLtb7hDrqKB2pa32c0LD5t1taoj+WLNnnfTBh75FWxoH20v8TGR Euhf4OnqyMmS4ZSXdm1Vo406mjXwBFEQNoTKK3MhV2TkFJDj0NabTQvRikzh4hoX N+4KwQFHL65PYStICBRJBsHH+TeOZzETIz8rHEuf3BlYaaOK56Yqtu2BqPsBjO+u FgOUYWlTS4QpyfvrduVdABReNNA8QSfb8MX0Z9yp4Hr2STGe+npOoqwG92xtAV05 SyzP6Nf+f2Z7GOWJE/jcJuMnSDYsA/FRnG3z4ONWpYrUO0O+Rcsfn/fyRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmv2a7pKqYUcBYp+e1lrz0hhWeaMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8ixjXlT QPtiFqswPN9v0cuOcSwtflS4IJvuKQ2mPE94NtLLhpEUS8POmePQvkKiX6LNCw9m uDnEpQRtQhxXc10MszyBBejHM8r1nK1ObJ8K7Q8s7zn4a1Di/MD7D//EE7y7uPDm lK8oJ9XTEStSRqToYwU019SnX+X94uiLL0zMy/rA0+OkXTDJfrVopWn7kUMaxdpP yyPO5vzZ3DO8/5CejhYjE8T3T5tGpDn7MzG6wleMqDgPYJ81/8Mcma0oXbzEpPES TxOWNLTs3lclcXGGte0vDeGFMCWItDsedCulPfH1KfpaWBY7xDn8YgyHrgsLbf5e DiMy//y/AAKXQw== -----END CERTIFICATE-----Generated at Tue May 12 21:57:12 2026 by rpki-client