$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: NkK8AVStrpzqJo1x7Y8P8HfIBD4lc75C4V7f1rRlUOE= Subject key identifier: 77:C6:E2:D3:05:A1:54:B1:AD:34:15:98:F6:AE:A7:BD:11:76:0D:41 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019E1E34CE97BCF3122083FC57D40DE2AE63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 1916 Signing time: Tue 12 May 2026 22:00:37 +0000 Manifest this update: Tue 12 May 2026 22:00:37 +0000 Manifest next update: Wed 13 May 2026 22:00:37 +0000 Files and hashes: 1: 1-bX4q69pD6P9iDL_MBjXApDUUoA.roa (hash: Kde578ne8/gKQezBhfcD4rTCARaf5d1vuhecNygX/Nk=) 2: 7rv6k5uVuhGjktrsjUOGcYvC-9k.roa (hash: s1LhNqbDkaJJk+ypgLty0IbjHOS1lXZfumV3rSK/rSs=) 3: 8k0J8ZawZ0QaVbmwbqXyjkHdbp0.roa (hash: qjo2XQhlUpcTFQYk1pT4XcjJ3LBYMkU4WLGqBPqO4mU=) 4: A1Mk8aLvUIYkXCPbeSuDU3Hli4Y.roa (hash: 6HTRUzOZM9L9Wg/uHA0I0KF3U5ylm2c/kJX/463Szd4=) 5: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: nKKv/IJjfOjxO2/DOOR1YvCcnaKCnzMJf/acIY3m854=) 6: HgbYfqgWEgBTtHpfnCWuHLmWfdc.roa (hash: HMoC4HbqEHwkb4dO3/C2FUOmIHSy3Jpy2ww8Kfj1GLQ=) 7: JTLXgLzRLUbBBSRVTWms-KrY030.roa (hash: Zz6+CVIeJzHTwZbXpV9f3Jk2ToknnGjWiBUQP/bGQYw=) 8: MPfZa80zx8JD19B0YvKo1B-KyMs.roa (hash: hWxzkpQob8nqa1qn5tGNwr5NCD7Lovv8X8P0foxw+GY=) 9: aB0CFj7HhZYpp4ebpVhWCAyE-Zo.roa (hash: FE2nN2ZVDrPMPN1fblBP/Z17brnB7Kwxa7lfUoyA7Ak=) 10: lHfae3UMrtkbZl9pwmHCG7QPKCs.roa (hash: uTooVNNQdT2Xp41rPldHjXa4GM+toHNemDQJjp4UhfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:34:ce:97:bc:f3:12:20:83:fc:57:d4:0d:e2:ae:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: May 12 22:00:37 2026 GMT Not After : May 13 22:00:37 2026 GMT Subject: CN=77c6e2d305a154b1ad341598f6aea7bd11760d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:35:18:45:95:05:de:2d:33:fa:bc:5e:e0: db:e9:03:b4:38:96:ec:3d:74:8c:92:c6:a2:5c:9b: ab:ff:53:62:09:cd:d0:26:58:ea:31:a2:42:ba:7c: 5f:65:29:b0:62:8d:04:a1:ad:76:42:c9:9c:1b:1b: ae:d6:29:2b:24:69:23:73:b3:06:aa:78:34:b7:60: 8f:b3:06:7d:3d:30:62:4c:8c:53:04:27:b3:1b:b6: a3:90:bc:97:ca:2d:90:97:96:f3:0b:db:3f:63:9e: 28:e3:1f:38:b9:fd:a2:d5:a7:f9:fb:06:ef:75:87: e2:59:e1:28:fc:dc:1b:57:0f:bd:28:16:78:26:cf: 0d:6f:f2:03:60:2c:d9:71:a7:c4:b4:6b:79:d0:8a: 45:d8:94:f4:11:41:aa:0e:56:7a:3c:ca:d6:b8:ca: 9c:3f:23:fc:56:79:14:1f:e7:d7:aa:38:b8:c6:c2: 67:2c:07:34:50:81:6a:d6:41:e7:82:06:71:d4:92: 65:64:18:ff:c4:6a:4f:71:7e:e3:94:ee:9f:78:0e: b8:38:61:eb:48:df:97:38:f9:dc:e7:7e:79:99:9a: 08:12:90:63:25:d7:6d:49:30:28:23:bf:21:f2:e0: 05:57:71:71:cc:61:a4:ae:4d:aa:50:4e:b9:43:4b: a5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C6:E2:D3:05:A1:54:B1:AD:34:15:98:F6:AE:A7:BD:11:76:0D:41 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c2:ba:a6:89:93:96:e3:61:23:3d:89:06:a1:af:fc:22:56: a7:8d:99:6e:e3:9b:dd:84:f2:22:bf:5b:3a:a1:d1:4b:f6:59: ed:8b:c5:52:44:35:db:a3:75:fd:fa:f6:ee:b8:6a:b7:c5:40: c7:5f:82:f6:38:a2:b3:e2:e1:1c:0d:a3:ad:bc:7a:44:36:b2: 86:7b:a1:be:3a:98:57:24:54:ca:59:96:ed:15:0f:4d:e1:c0: 46:41:8d:c8:5a:e1:6c:5b:98:e9:de:6b:93:79:70:ae:af:d0: d8:46:3b:aa:a8:cd:7e:ec:dc:62:1f:47:8a:ae:e4:cc:5e:bb: a2:6c:31:61:53:86:5e:41:c0:d1:dc:4a:af:4b:35:d1:04:40: a4:a7:a3:7a:ad:5b:16:3b:f0:a7:cd:4b:d2:05:8d:a5:0d:4e: c9:c3:d9:49:8f:03:bc:d1:05:43:c0:d5:f6:2f:a9:34:54:64: 3a:22:1f:c7:90:5f:15:b0:ae:c9:a8:48:7b:75:3a:04:29:d1: 23:12:bb:3f:a7:a9:ca:66:d5:ba:97:61:0c:00:df:c7:7a:3b: 3a:c8:88:71:ef:b9:f8:34:54:a0:9b:fb:30:c1:ca:07:3f:c4: 1b:ff:81:9b:55:81:f9:9f:0b:1c:12:54:6b:db:bd:a6:71:20: 11:1c:aa:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eNM6XvPMSIIP8V9QN4q5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwNTEyMjIwMDM3WhcNMjYwNTEzMjIwMDM3WjAzMTEwLwYDVQQD Eyg3N2M2ZTJkMzA1YTE1NGIxYWQzNDE1OThmNmFlYTdiZDExNzYwZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlQ1GEWVBd4tM/q8XuDb6QO0OJbs PXSMksaiXJur/1NiCc3QJljqMaJCunxfZSmwYo0Eoa12QsmcGxuu1ikrJGkjc7MG qng0t2CPswZ9PTBiTIxTBCezG7ajkLyXyi2Ql5bzC9s/Y54o4x84uf2i1af5+wbv dYfiWeEo/NwbVw+9KBZ4Js8Nb/IDYCzZcafEtGt50IpF2JT0EUGqDlZ6PMrWuMqc PyP8VnkUH+fXqji4xsJnLAc0UIFq1kHnggZx1JJlZBj/xGpPcX7jlO6feA64OGHr SN+XOPnc5355mZoIEpBjJddtSTAoI78h8uAFV3FxzGGkrk2qUE65Q0ulHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfG4tMFoVSxrTQVmPaup70Rdg1BMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMK6pomT luNhIz2JBqGv/CJWp42ZbuOb3YTyIr9bOqHRS/ZZ7YvFUkQ126N1/fr27rhqt8VA x1+C9jiis+LhHA2jrbx6RDayhnuhvjqYVyRUylmW7RUPTeHARkGNyFrhbFuY6d5r k3lwrq/Q2EY7qqjNfuzcYh9Hiq7kzF67omwxYVOGXkHA0dxKr0s10QRApKejeq1b Fjvwp81L0gWNpQ1OycPZSY8DvNEFQ8DV9i+pNFRkOiIfx5BfFbCuyahIe3U6BCnR IxK7P6epymbVupdhDADfx3o7OsiIce+5+DRUoJv7MMHKBz/EG/+Bm1WB+Z8LHBJU a9u9pnEgERyqlw== -----END CERTIFICATE-----Generated at Wed May 13 02:24:54 2026 by rpki-client