$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: GZX7T9DEHMmdz3vah0ijP83A7Y7YZEKYDy2txDV13yc= Subject key identifier: 2D:1C:18:DA:F4:C8:DC:2C:4A:10:A4:A5:60:7B:E5:1F:32:CC:D4:1F Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019E1F1198733F717143915E7E5178DEBDCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 190F Signing time: Wed 13 May 2026 02:01:47 +0000 Manifest this update: Wed 13 May 2026 02:01:47 +0000 Manifest next update: Thu 14 May 2026 02:01:47 +0000 Files and hashes: 1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=) 2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: eS3B60GPddPcTDaYZm7uu2nSuQSn4ItfuWTaCWKcOIY=) 3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=) 4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=) 5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=) 6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=) 7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=) 8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=) 9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=) 10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=) 11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=) 12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=) 13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:11:98:73:3f:71:71:43:91:5e:7e:51:78:de:bd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: May 13 02:01:47 2026 GMT Not After : May 14 02:01:47 2026 GMT Subject: CN=2d1c18daf4c8dc2c4a10a4a5607be51f32ccd41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:da:97:29:9b:cc:5a:18:77:84:2f:7f:09:0d: b7:09:38:f6:3a:4f:49:37:22:0f:b4:df:cf:e4:9f: dc:d7:ac:20:44:63:3c:67:b2:38:b1:10:0d:65:7a: 3a:96:05:5b:e8:e9:19:f1:32:11:14:c0:9a:f8:0f: 09:85:f2:85:2f:86:65:5f:49:d7:c2:4c:26:42:e0: 5f:0d:6f:45:6f:18:c5:b5:3e:d7:37:0e:68:10:98: 15:61:67:20:6f:de:07:4b:e5:a3:c2:d7:e2:4e:f7: f4:a4:c8:53:a8:f8:ff:a9:4d:a8:05:22:1f:02:6c: a4:f4:ec:2e:fa:d7:87:ce:ba:c9:60:b2:6a:dd:61: 41:9d:c8:3b:28:26:a0:2a:38:b8:4a:7a:45:e7:ae: 58:30:9d:5e:6f:f1:39:37:c4:15:18:dd:c0:c9:71: 1a:97:20:54:51:98:a7:fc:12:75:19:7f:e3:ff:02: 78:15:ef:c5:02:a8:63:0d:e5:1d:67:79:83:ca:9b: e6:38:06:5b:6b:9e:96:98:66:73:ee:a3:21:4b:2c: a2:68:e9:40:fa:f8:15:2c:99:78:db:d0:5b:eb:d3: cc:f7:13:11:46:65:91:9d:93:7d:7e:3b:8b:04:d3: f9:29:7d:89:4e:79:0b:d8:ce:29:0e:3a:5d:0f:fc: d9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1C:18:DA:F4:C8:DC:2C:4A:10:A4:A5:60:7B:E5:1F:32:CC:D4:1F X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:8b:94:d8:e5:6b:20:a5:ee:de:f4:59:80:ac:aa:7e:9f:31: bf:26:09:e9:74:8b:73:30:9c:2e:23:ab:b7:78:a5:32:84:20: e6:0a:82:08:07:ce:5d:d3:a6:94:e4:28:c3:e0:fd:2f:a8:63: 0a:b1:ca:81:79:36:61:36:75:23:42:b3:28:42:ea:ab:6f:11: 60:90:85:56:5a:34:ef:2f:c8:a8:85:38:1b:38:6c:26:ac:86: e8:df:36:6c:25:ad:85:47:3b:7a:8c:5a:ff:2f:2f:b2:01:79: 37:20:57:a4:93:b9:02:e0:c0:70:dc:1f:c7:d2:59:8b:17:ea: df:9d:ac:f3:a5:a0:b5:90:0a:70:41:0c:1f:20:62:0d:21:38: e3:61:ad:f8:04:54:ce:af:f4:15:ce:24:c3:c3:e4:0a:e8:57: bf:22:e9:1a:35:7a:96:4b:73:d5:8a:da:ec:8f:d5:49:db:1d: 74:42:37:cf:bc:11:c2:9a:cf:a3:66:7e:66:01:04:aa:15:55: b0:c7:45:79:88:01:86:8a:fd:03:35:e6:8c:e7:d6:4d:de:4c: 76:c6:22:ff:fd:c7:e9:1d:c9:67:f9:5b:bd:4f:dc:6b:b4:89: a8:06:4d:f9:32:03:1f:dd:f9:b8:7b:91:dd:46:c3:e6:c5:36: aa:9c:0f:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4fEZhzP3FxQ5FeflF43r3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwNTEzMDIwMTQ3WhcNMjYwNTE0MDIwMTQ3WjAzMTEwLwYDVQQD EygyZDFjMThkYWY0YzhkYzJjNGExMGE0YTU2MDdiZTUxZjMyY2NkNDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNqXKZvMWhh3hC9/CQ23CTj2Ok9J NyIPtN/P5J/c16wgRGM8Z7I4sRANZXo6lgVb6OkZ8TIRFMCa+A8JhfKFL4ZlX0nX wkwmQuBfDW9FbxjFtT7XNw5oEJgVYWcgb94HS+WjwtfiTvf0pMhTqPj/qU2oBSIf Amyk9Owu+teHzrrJYLJq3WFBncg7KCagKji4SnpF565YMJ1eb/E5N8QVGN3AyXEa lyBUUZin/BJ1GX/j/wJ4Fe/FAqhjDeUdZ3mDypvmOAZba56WmGZz7qMhSyyiaOlA +vgVLJl429Bb69PM9xMRRmWRnZN9fjuLBNP5KX2JTnkL2M4pDjpdD/zZfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0cGNr0yNwsShCkpWB75R8yzNQfMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkouU2OVr IKXu3vRZgKyqfp8xvyYJ6XSLczCcLiOrt3ilMoQg5gqCCAfOXdOmlOQow+D9L6hj CrHKgXk2YTZ1I0KzKELqq28RYJCFVlo07y/IqIU4GzhsJqyG6N82bCWthUc7eoxa /y8vsgF5NyBXpJO5AuDAcNwfx9JZixfq352s86WgtZAKcEEMHyBiDSE442Gt+ARU zq/0Fc4kw8PkCuhXvyLpGjV6lktz1Yra7I/VSdsddEI3z7wRwprPo2Z+ZgEEqhVV sMdFeYgBhor9AzXmjOfWTd5MdsYi//3H6R3JZ/lbvU/ca7SJqAZN+TIDH935uHuR 3UbD5sU2qpwPfQ== -----END CERTIFICATE-----Generated at Wed May 13 04:46:06 2026 by rpki-client