$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: M3SirSAuqJ193kMvLHG5NgKkvtifOY/TDxVuUT5bX34= Subject key identifier: 69:CE:70:C0:C9:67:14:5B:2A:5A:AA:FB:9F:91:92:E8:4D:DA:22:90 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019E1DFE138C112B3BC654702FDDB594DD87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0C5F Signing time: Tue 12 May 2026 21:00:50 +0000 Manifest this update: Tue 12 May 2026 21:00:50 +0000 Manifest next update: Wed 13 May 2026 21:00:50 +0000 Files and hashes: 1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=) 2: 6WWr83TSCDVC54Q6T3lJdNTzhec.roa (hash: bqOXRmyjRmssTC0gEpcTMmCXeTubysghN9/RhsWfZ2I=) 3: 8d1TSvhqd070e1gxYQ3MnczO_xc.roa (hash: /b+G6xqm7avkCzyKrxmL+NHi0UtXKICGZqK/1lGYRPA=) 4: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: Epjc64d4AOifiQg0B8jnH5cFJkCxv5JQO8CL629nzXE=) 5: FtMZg51tUzPpWWTljAx452AUEnY.roa (hash: Azl4uTerLwkA4yzzvMhJnM0N39SV857Tn7tfTMmNZBM=) 6: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=) 7: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=) 8: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=) 9: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=) 10: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=) 11: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=) 12: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=) 13: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=) 14: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=) 15: kGneqi-DhIJThQbxo8k8aRtzhC0.roa (hash: LH1+UqmotTldhBb3/js9nM0r1q8ixXwicRK2tem2Z4A=) 16: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=) 17: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:13:8c:11:2b:3b:c6:54:70:2f:dd:b5:94:dd:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: May 12 21:00:50 2026 GMT Not After : May 13 21:00:50 2026 GMT Subject: CN=69ce70c0c967145b2a5aaafb9f9192e84dda2290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:99:0f:b0:73:6d:e3:7e:97:a1:4d:83:0e:fb: 54:3f:f7:6e:2b:8b:80:9e:94:28:11:53:4e:ba:e5: da:a2:a0:ae:77:cc:f7:0c:73:f3:12:6f:f7:b4:a4: 1b:41:be:8b:66:f4:fd:4f:da:f9:75:dd:35:8d:47: 1d:76:a2:a9:57:53:3b:80:70:a2:e5:15:53:3c:94: 53:3b:38:b9:ab:5c:ff:eb:6d:3e:1c:05:9c:ed:6d: a8:d5:0a:ae:77:13:81:f7:12:28:6a:5f:0f:61:ea: 2e:42:22:ba:49:ec:00:6e:58:00:47:9f:6c:3d:87: 06:dd:91:0d:b9:21:84:2c:a9:8e:95:26:d2:aa:54: 04:49:60:d6:ab:fe:53:d5:ff:5f:28:38:36:53:4f: 4c:4a:64:2f:e6:d3:19:cb:e9:d3:d4:95:91:de:70: c3:6a:bc:39:e9:da:90:a8:1f:57:08:8b:5f:2b:7b: 94:75:cc:c8:8a:1d:e9:e0:28:56:2f:20:3e:86:ea: 37:06:30:5d:79:d6:41:6d:db:e6:60:38:7d:87:5b: 84:da:50:17:94:96:bd:09:71:d2:95:97:b2:54:66: 27:b7:1a:09:53:9a:33:9f:64:44:83:47:8f:8b:6e: de:0a:3b:a0:3f:8a:55:bd:45:b4:a2:a3:3b:31:61: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CE:70:C0:C9:67:14:5B:2A:5A:AA:FB:9F:91:92:E8:4D:DA:22:90 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:70:90:63:04:23:cc:62:29:be:87:ae:b4:9c:16:24:cb:b5: 57:cf:e3:cd:b9:c0:56:fe:1e:86:bd:53:87:9d:a1:68:76:c6: 2a:ca:34:19:fc:f6:04:44:53:a4:e7:be:ff:f8:7b:01:35:d6: b1:20:b5:7f:f2:13:ec:fa:29:4f:de:de:f5:6a:93:0b:fb:b3: 2c:34:82:7b:26:fb:87:b8:65:44:4e:4e:d3:d0:2e:fb:ca:74: d5:22:61:42:1b:f6:82:17:b2:0b:f6:e4:29:e0:02:2a:ae:d0: aa:64:14:81:79:fe:39:15:46:45:2b:b8:0e:2b:72:ea:ab:9f: 90:00:07:fd:c4:10:78:1a:fb:42:47:7f:4f:06:b1:6b:f9:96: b7:d9:e6:25:4a:13:3f:e4:a4:86:df:c1:94:94:8a:c2:88:98: 96:a5:d4:33:a7:58:8f:56:cc:65:55:ce:f0:95:c8:46:32:77: 9c:7c:1f:8a:63:55:7d:35:f2:76:86:ea:ac:c7:43:53:63:c1: df:ea:87:ca:d9:21:e0:9e:56:a4:a2:0e:c1:e9:05:e3:e8:5e: 76:8a:97:67:65:48:bb:12:c3:97:02:d7:6e:05:e5:19:72:c4: 4d:08:14:90:17:c0:e9:67:e4:6e:a2:c1:29:f8:74:5b:2b:71: e4:76:15:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/hOMESs7xlRwL921lN2HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwNTEyMjEwMDUwWhcNMjYwNTEzMjEwMDUwWjAzMTEwLwYDVQQD Eyg2OWNlNzBjMGM5NjcxNDViMmE1YWFhZmI5ZjkxOTJlODRkZGEyMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pkPsHNt436XoU2DDvtUP/duK4uA npQoEVNOuuXaoqCud8z3DHPzEm/3tKQbQb6LZvT9T9r5dd01jUcddqKpV1M7gHCi 5RVTPJRTOzi5q1z/620+HAWc7W2o1QqudxOB9xIoal8PYeouQiK6SewAblgAR59s PYcG3ZENuSGELKmOlSbSqlQESWDWq/5T1f9fKDg2U09MSmQv5tMZy+nT1JWR3nDD arw56dqQqB9XCItfK3uUdczIih3p4ChWLyA+huo3BjBdedZBbdvmYDh9h1uE2lAX lJa9CXHSlZeyVGYntxoJU5ozn2REg0ePi27eCjugP4pVvUW0oqM7MWHRTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnOcMDJZxRbKlqq+5+RkuhN2iKQMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXCQYwQj zGIpvoeutJwWJMu1V8/jzbnAVv4ehr1Th52haHbGKso0Gfz2BERTpOe+//h7ATXW sSC1f/IT7PopT97e9WqTC/uzLDSCeyb7h7hlRE5O09Au+8p01SJhQhv2gheyC/bk KeACKq7QqmQUgXn+ORVGRSu4Dity6qufkAAH/cQQeBr7Qkd/Twaxa/mWt9nmJUoT P+Skht/BlJSKwoiYlqXUM6dYj1bMZVXO8JXIRjJ3nHwfimNVfTXydobqrMdDU2PB 3+qHytkh4J5WpKIOwekF4+hedoqXZ2VIuxLDlwLXbgXlGXLETQgUkBfA6WfkbqLB Kfh0Wytx5HYVsg== -----END CERTIFICATE-----Generated at Wed May 13 07:19:39 2026 by rpki-client