$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json) Hash identifier: 8rzFEnJjG8D11Yqok54jdlVlAk5dwy5BC54BG17Iawc= Subject key identifier: 95:E0:11:97:FC:BC:A0:ED:7A:0E:4B:63:AE:F3:DE:7F:7D:FD:F8:76 Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019E1C468FC3D6CF5BD564D7C13D21AAA3CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft Manifest number: 1913 Signing time: Tue 12 May 2026 13:00:46 +0000 Manifest this update: Tue 12 May 2026 13:00:46 +0000 Manifest next update: Wed 13 May 2026 13:00:46 +0000 Files and hashes: 1: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: KfovwtVL4zOTyu2ZsWtkmBT5YD71JUROohDzDF9C3Xg=) 2: B2_FH3MtZlTaOE61buYvXBJKW2E.roa (hash: 55aVAj571Q8/h0HvcQ8YQch6oVhSxMht9hvb0pWG9xs=) 3: EEeXG249QHXtZie6S6hEWpfPs0c.roa (hash: j08Df977nprNp/2GNZ8F6Ri2LTHGQNefm3+Va3aCg1U=) 4: MGuxpogPtwMAFTldHDnEUIBskKY.roa (hash: aRVSa83OdI8eRXcO3WQLPs6YeURGIYliffVNH5moLlY=) 5: OKgmTupzmnhPk0hOIeK3giJ9QaM.roa (hash: vJ5CbfHEFcPbyEC4jXFH5FpTTJogOrELHCnjQEMwhv0=) 6: UuScKKPZU-rxDshW6inBZKRJIH0.roa (hash: oIb88lrmIIDaodPcRGV8PcCWp69cVR7+uTDhUXF8D0A=) 7: ZW_uWUofk0PVk5ZvUH4CXwMQf9k.roa (hash: nMPGS72S0ymOk8yKU1XMgfQYFC4FprUwCeSnvYRogMM=) 8: g_sMt-IMPWFoRArZv0JnssQdxVE.roa (hash: i/F8rrQv+RNHw3Z6W9+3AF4oOHslAP0uqvWz8gg4Un0=) 9: tNc2jSWdykqlG-PkB4v9MVhio4k.roa (hash: k9a+KYr8wPbQKXd8Zqw2THkgTe3lauXtnm8eqnhZ3Nk=) 10: yn0AIXSmQUy2ZdVLfREbNPEMx98.roa (hash: 0/gDR8MJ30pXw1A6bmuJms9g1333tYlKxF2lIJS3jtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:46:8f:c3:d6:cf:5b:d5:64:d7:c1:3d:21:aa:a3:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: May 12 13:00:46 2026 GMT Not After : May 13 13:00:46 2026 GMT Subject: CN=95e01197fcbca0ed7a0e4b63aef3de7f7dfdf876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:43:df:8e:82:96:e2:a6:32:88:2f:08:9d: 6f:e4:22:33:f9:c0:ff:17:a2:6e:26:b4:49:6c:95: d9:39:9f:4f:c5:0a:e8:ac:95:55:7a:7e:2e:83:c9: e4:34:c5:bd:b3:88:6c:0b:ac:ce:be:9e:fc:81:e0: f7:64:87:e2:38:53:b5:ac:5c:b0:6e:12:0b:f1:70: 2e:d1:68:b9:ad:49:f2:8a:9c:7f:32:85:c8:23:23: c0:78:84:a5:ec:4a:e8:22:1f:7b:aa:e9:50:fe:1d: fe:28:8d:e7:f3:23:29:59:c7:6a:2c:d4:84:73:e8: 87:e3:16:d8:97:9a:78:f2:bd:05:a2:76:d0:e1:06: 8f:d6:49:30:79:eb:65:ee:64:f7:55:42:1d:bc:27: 97:c6:9a:6f:5d:66:29:14:3a:5c:81:dc:00:6c:df: 1b:d7:0d:38:bf:b9:f9:67:d7:01:11:53:63:7f:2b: 36:c4:e7:ea:ed:f0:34:74:96:73:71:1e:9d:a3:69: f7:a8:df:67:30:b4:7b:d5:cb:c6:ad:58:9c:ba:19: b1:e2:b1:3b:de:67:63:a1:a7:f3:8f:d6:49:73:b9: 3a:36:0b:51:2a:f5:94:62:f2:ca:05:3a:a0:12:6f: 9a:76:bc:84:c1:06:60:80:83:a2:54:8b:94:8c:a2: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E0:11:97:FC:BC:A0:ED:7A:0E:4B:63:AE:F3:DE:7F:7D:FD:F8:76 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:e4:5a:cd:be:6a:66:c7:d6:09:b9:c0:6b:47:ec:42:25:64: a1:38:50:73:d6:e0:d5:5d:87:ca:7d:9a:76:19:3a:38:5a:f2: a3:c9:83:5d:f3:46:8d:6d:03:ee:6c:c7:c5:f6:49:aa:de:bd: 3d:8f:86:eb:1b:d6:60:ef:06:db:ed:24:a4:1f:c4:8b:52:c2: 3b:83:f3:eb:81:fe:60:70:25:f2:33:11:48:d3:7f:47:83:fd: 2b:ed:9a:c9:ec:04:b4:70:12:7a:8b:04:cb:68:de:a0:a1:dd: 75:48:68:c2:00:0d:3b:04:76:69:4b:de:be:bb:73:c6:5e:d6: 8f:b8:79:37:e3:2f:35:f3:ff:31:f4:fa:96:d0:96:12:9c:76: 85:d9:e1:3c:e5:21:18:3f:ad:fe:b1:c5:42:4d:60:40:26:5b: 11:37:fc:74:9d:3d:2d:c7:74:8b:bf:d8:35:dd:0a:d8:70:28: 16:5f:e6:65:79:6f:bf:38:aa:a1:c6:8b:c7:15:94:64:ff:d4: d4:b9:33:b8:60:1f:8e:71:88:f1:73:ea:60:63:54:da:d8:4c: ac:4e:7a:57:19:4e:cc:b9:c4:a7:f8:df:e4:96:86:98:39:6d: 92:46:a3:ba:b2:0d:b3:de:01:87:75:80:46:3d:dd:86:a3:bd: b3:d4:e4:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cRo/D1s9b1WTXwT0hqqPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjYwNTEyMTMwMDQ2WhcNMjYwNTEzMTMwMDQ2WjAzMTEwLwYDVQQD Eyg5NWUwMTE5N2ZjYmNhMGVkN2EwZTRiNjNhZWYzZGU3ZjdkZmRmODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHFD346CluKmMogvCJ1v5CIz+cD/ F6JuJrRJbJXZOZ9PxQrorJVVen4ug8nkNMW9s4hsC6zOvp78geD3ZIfiOFO1rFyw bhIL8XAu0Wi5rUnyipx/MoXIIyPAeISl7EroIh97qulQ/h3+KI3n8yMpWcdqLNSE c+iH4xbYl5p48r0FonbQ4QaP1kkweetl7mT3VUIdvCeXxppvXWYpFDpcgdwAbN8b 1w04v7n5Z9cBEVNjfys2xOfq7fA0dJZzcR6do2n3qN9nMLR71cvGrVicuhmx4rE7 3mdjoafzj9ZJc7k6NgtRKvWUYvLKBTqgEm+adryEwQZggIOiVIuUjKKgtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXgEZf8vKDteg5LY67z3n99/fh2MB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyeRazb5q ZsfWCbnAa0fsQiVkoThQc9bg1V2Hyn2adhk6OFryo8mDXfNGjW0D7mzHxfZJqt69 PY+G6xvWYO8G2+0kpB/Ei1LCO4Pz64H+YHAl8jMRSNN/R4P9K+2ayewEtHASeosE y2jeoKHddUhowgANOwR2aUvevrtzxl7Wj7h5N+MvNfP/MfT6ltCWEpx2hdnhPOUh GD+t/rHFQk1gQCZbETf8dJ09Lcd0i7/YNd0K2HAoFl/mZXlvvziqocaLxxWUZP/U 1LkzuGAfjnGI8XPqYGNU2thMrE56VxlOzLnEp/jf5JaGmDltkkajurINs94Bh3WA Rj3dhqO9s9Tkiw== -----END CERTIFICATE-----Generated at Tue May 12 21:42:51 2026 by rpki-client