$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: HCrKkdSwDGhbkGTa2RF3kQuD6jaGx59j2ooAEh0p5Vw= Subject key identifier: 94:8B:D0:21:FE:8F:FC:24:64:67:B6:47:C2:6A:5E:72:A6:19:47:46 Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019E1D22AE364EEA1915CAD6D226411B1DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 12D8 Signing time: Tue 12 May 2026 17:01:12 +0000 Manifest this update: Tue 12 May 2026 17:01:12 +0000 Manifest next update: Wed 13 May 2026 17:01:12 +0000 Files and hashes: 1: 2JOxayZ4kxrtihpkJSNfTVv34wU.roa (hash: zOn78CRIowaCVixyqjErS7L368UV3aEuLomuXw4ifTk=) 2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=) 3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=) 4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=) 5: Hp0vnK6LsH978scPrAVFBl2kfG4.roa (hash: MiTGwbJzWQLF/5BUrcBlVLuqzCKJBbep6wp6tPRmCrg=) 6: JGgBlVIY2oUSh_HFDVRqyLKytmE.roa (hash: RKsfB4gNYffazBWvIDvr2El30bylWlzUFL7S8HQbwRU=) 7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=) 8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=) 9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=) 10: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: hUAP8V+P925mEC2Hu6LXI4Yii8TgdCeQZfJ8HozOmSU=) 11: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=) 12: iyrSz_wsF9CBGgcuXGLfggTWLUc.roa (hash: hTAJ5z1uKngFKR3nayC40cEb7tmnFdoOcWdYxUuDRsQ=) 13: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=) 14: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=) 15: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:ae:36:4e:ea:19:15:ca:d6:d2:26:41:1b:1d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: May 12 17:01:12 2026 GMT Not After : May 13 17:01:12 2026 GMT Subject: CN=948bd021fe8ffc246467b647c26a5e72a6194746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f9:2f:6a:18:ec:91:97:91:58:10:17:be:56: 36:de:18:37:3e:58:84:bb:9b:51:17:9c:cc:8b:4b: 82:f9:cf:d4:7e:5e:bc:ae:f0:cb:be:35:21:af:3b: 57:e0:8d:08:91:93:35:68:b8:f5:92:51:4e:e0:b9: eb:c0:fb:b7:db:91:91:a9:d1:d2:54:7c:b9:4d:34: f9:df:9d:eb:2b:bf:e8:a2:29:9e:52:c5:01:d3:79: 9e:82:0b:7f:ee:3c:31:c1:79:ce:ce:ee:ed:c3:da: 6f:e1:0a:f0:df:1c:c5:b7:ee:77:e9:74:14:92:33: 41:f5:6b:11:3a:4b:cb:5c:9a:58:3f:2f:ec:1e:f2: 92:4b:be:63:9a:3c:f2:7f:3f:08:9b:a2:a9:4c:a3: 4d:6b:97:32:1b:4c:fa:3c:76:e3:00:de:06:14:2b: c7:c6:5c:4a:24:40:d2:11:81:1d:91:8b:d9:d8:f2: fe:b4:72:54:d8:33:ae:9c:c9:41:5e:08:40:ec:cb: 68:dc:81:02:c7:8b:0c:07:3a:64:2b:3a:5f:a3:57: f4:2f:be:77:68:84:d1:0c:5a:ff:ea:bb:32:c7:3d: d0:a3:28:52:6c:73:41:c4:46:3d:9d:27:02:ad:07: 93:66:f4:b9:30:b8:6f:c8:33:8a:7e:31:b9:46:72: c4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8B:D0:21:FE:8F:FC:24:64:67:B6:47:C2:6A:5E:72:A6:19:47:46 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:de:5d:00:fe:4a:c9:bf:38:2b:79:48:a2:e7:af:8b:17:ba: 05:b7:3b:39:3c:c9:75:f4:80:88:9f:f9:30:88:9b:ad:f6:97: df:51:5b:93:e9:5c:b3:4b:f0:fc:1c:30:48:43:49:7b:4e:00: d6:fa:d0:96:fb:53:71:4c:c2:01:4f:52:28:fc:66:1c:fc:e2: 77:c5:01:0c:fe:fe:1b:db:49:b7:a3:32:38:ae:4e:89:bc:bb: 0b:59:ef:dc:b7:8c:46:26:5e:65:05:c3:77:1c:75:b5:c3:5a: f9:b0:0f:0e:2e:e3:fd:fc:f9:f4:51:38:d2:79:98:48:cb:95: a6:d1:02:3a:4e:d1:e5:e1:18:81:cb:92:07:55:07:58:c4:7f: 85:a6:3e:9d:30:ee:41:d7:b0:eb:81:e1:b0:43:5f:ba:8f:00: d3:93:1f:20:19:9b:c2:14:0f:53:49:76:62:a1:c8:b5:20:d1: 56:ca:7c:c3:c5:77:96:68:9b:2b:1c:6f:64:b0:86:c1:25:57: f1:74:f8:c3:ab:e6:48:b4:0b:e9:97:a2:ee:51:67:34:18:87: 97:50:06:1c:22:c9:4c:0f:89:4e:0a:f1:9b:7d:70:7f:ca:1e: 85:5a:08:0b:27:2a:01:e9:1d:9d:e1:f2:87:d1:35:e4:0e:b1: ae:a5:a4:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIq42TuoZFcrW0iZBGx29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwNTEyMTcwMTEyWhcNMjYwNTEzMTcwMTEyWjAzMTEwLwYDVQQD Eyg5NDhiZDAyMWZlOGZmYzI0NjQ2N2I2NDdjMjZhNWU3MmE2MTk0NzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvkvahjskZeRWBAXvlY23hg3PliE u5tRF5zMi0uC+c/Ufl68rvDLvjUhrztX4I0IkZM1aLj1klFO4LnrwPu325GRqdHS VHy5TTT5353rK7/ooimeUsUB03meggt/7jwxwXnOzu7tw9pv4Qrw3xzFt+536XQU kjNB9WsROkvLXJpYPy/sHvKSS75jmjzyfz8Im6KpTKNNa5cyG0z6PHbjAN4GFCvH xlxKJEDSEYEdkYvZ2PL+tHJU2DOunMlBXghA7Mto3IECx4sMBzpkKzpfo1f0L753 aITRDFr/6rsyxz3QoyhSbHNBxEY9nScCrQeTZvS5MLhvyDOKfjG5RnLE7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSL0CH+j/wkZGe2R8JqXnKmGUdGMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtN5dAP5K yb84K3lIouevixe6Bbc7OTzJdfSAiJ/5MIibrfaX31Fbk+lcs0vw/BwwSENJe04A 1vrQlvtTcUzCAU9SKPxmHPzid8UBDP7+G9tJt6MyOK5Oiby7C1nv3LeMRiZeZQXD dxx1tcNa+bAPDi7j/fz59FE40nmYSMuVptECOk7R5eEYgcuSB1UHWMR/haY+nTDu Qdew64HhsENfuo8A05MfIBmbwhQPU0l2YqHItSDRVsp8w8V3lmibKxxvZLCGwSVX 8XT4w6vmSLQL6Zei7lFnNBiHl1AGHCLJTA+JTgrxm31wf8oehVoICycqAekdneHy h9E15A6xrqWk1Q== -----END CERTIFICATE-----Generated at Wed May 13 01:12:56 2026 by rpki-client