$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json) Hash identifier: G44p8PFzWDgdSvj84l/kpgd8AcjqSDZkpEHUFC8CfKY= Subject key identifier: 1C:62:5C:A9:86:EC:92:22:4D:13:DC:F4:E5:DE:65:C2:F0:CE:88:6B Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019E1D22CE018C8B1E86DCA0DA1D59645998 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft Manifest number: 17A9 Signing time: Tue 12 May 2026 17:01:20 +0000 Manifest this update: Tue 12 May 2026 17:01:20 +0000 Manifest next update: Wed 13 May 2026 17:01:20 +0000 Files and hashes: 1: 1-3IPJhNn2z6uBNLHxMmCKfvzzKc.roa (hash: NdBkfOzbM5bOy0bYu/5qjiwop0xpNPBqxYjexeBjzV4=) 2: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=) 3: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=) 4: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: y0TDnorv5P8f5OEUYpgi0qJaVCNeNRRxjyj/FSuv4lQ=) 5: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=) 6: LKPNjW0FwzxJuXJJO8QeVx8xVKA.roa (hash: 7aAIkZ00eO3qTrf1/VDBo5PmzNCovWfeD3QFFzPD2+k=) 7: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=) 8: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=) 9: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=) 10: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=) 11: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:ce:01:8c:8b:1e:86:dc:a0:da:1d:59:64:59:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: May 12 17:01:20 2026 GMT Not After : May 13 17:01:20 2026 GMT Subject: CN=1c625ca986ec92224d13dcf4e5de65c2f0ce886b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1f:51:31:70:ee:83:3c:ad:7f:72:1a:81:93: 80:33:25:2d:38:a9:e8:a0:1f:87:80:83:e4:c2:d9: a4:d7:16:f9:82:c6:8e:22:68:ad:4b:5e:b7:06:c8: 43:19:d2:11:b5:70:b1:66:e0:4a:eb:1d:eb:a4:75: dd:a7:17:8f:d3:31:25:93:53:3d:32:23:81:ce:99: 76:40:72:ad:f9:b2:dc:db:db:d6:60:1e:a7:12:d1: 97:65:33:84:a0:0b:6f:c1:ad:de:f9:9f:e9:90:43: 4d:cf:fc:0f:06:fd:bd:cf:e0:11:8b:5c:5e:9c:8b: db:03:c9:25:43:f0:69:ef:7b:39:0b:37:5b:af:06: d7:7d:9f:b8:3f:1d:78:7c:b6:bb:0a:28:01:1a:db: 30:ba:37:40:cf:e3:2d:73:ef:d7:0c:c2:f6:b3:7e: 91:31:4d:7f:a2:6f:fe:81:b8:70:44:09:a9:12:8e: 1b:80:88:82:8f:e7:f1:fe:b8:28:a5:47:fa:7e:cb: 3d:6d:b0:2b:ca:db:cf:ec:ad:ca:0c:16:39:3b:97: bd:02:67:b0:6a:8a:b6:93:77:ea:b0:ac:fb:e9:b1: 11:51:28:ab:04:c1:c6:5a:ea:ef:6b:0e:88:26:92: bb:a6:a4:15:72:a3:90:56:f0:49:5f:f2:f1:c8:60: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:62:5C:A9:86:EC:92:22:4D:13:DC:F4:E5:DE:65:C2:F0:CE:88:6B X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:79:c0:8a:dc:79:dd:27:66:96:9e:b5:6a:d6:f0:94:6b:ac: ba:a3:8e:9c:1b:d0:c7:37:d7:54:92:11:ee:7f:8d:08:51:d2: dc:53:71:50:e4:d5:5e:b0:c6:f2:0e:f5:ab:5f:8d:42:72:be: 1e:94:92:18:cb:e6:c1:24:0c:4f:46:97:07:47:a1:8d:d6:e7: a1:fb:eb:ce:d2:2d:8c:8f:e2:9c:b2:ce:b0:35:e1:30:89:3f: 20:01:9a:c2:5f:14:f3:97:e4:fe:13:8d:03:88:b1:ba:d8:cb: 64:8d:e7:dc:a1:3f:38:8b:08:8c:98:6a:41:63:f6:a9:22:60: a4:b8:36:d7:d3:67:b8:da:06:20:f3:67:9d:14:99:b2:08:80: 98:e1:d4:60:16:12:ba:d3:7a:62:b8:1f:ce:4b:04:fa:bc:e2: 7c:27:25:e4:d7:6a:de:da:75:b6:47:47:21:59:73:73:05:a4: bd:10:23:3a:6d:3f:a9:e2:4d:bb:68:b8:a2:4e:c0:64:c3:c4: 5a:e6:17:b5:5b:db:75:c6:17:5a:f7:dc:e1:c9:a4:56:4d:93: 03:58:b4:6d:c2:49:23:fd:a0:21:c4:5a:9b:eb:9f:00:cc:bc: ed:66:01:00:e1:3f:88:96:08:76:18:c6:55:ac:05:a5:8d:69: 02:c5:92:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIs4BjIsehtyg2h1ZZFmYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjYwNTEyMTcwMTIwWhcNMjYwNTEzMTcwMTIwWjAzMTEwLwYDVQQD EygxYzYyNWNhOTg2ZWM5MjIyNGQxM2RjZjRlNWRlNjVjMmYwY2U4ODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph9RMXDugzytf3IagZOAMyUtOKno oB+HgIPkwtmk1xb5gsaOImitS163BshDGdIRtXCxZuBK6x3rpHXdpxeP0zElk1M9 MiOBzpl2QHKt+bLc29vWYB6nEtGXZTOEoAtvwa3e+Z/pkENNz/wPBv29z+ARi1xe nIvbA8klQ/Bp73s5CzdbrwbXfZ+4Px14fLa7CigBGtswujdAz+Mtc+/XDML2s36R MU1/om/+gbhwRAmpEo4bgIiCj+fx/rgopUf6fss9bbArytvP7K3KDBY5O5e9Amew aoq2k3fqsKz76bERUSirBMHGWurvaw6IJpK7pqQVcqOQVvBJX/LxyGD2hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxiXKmG7JIiTRPc9OXeZcLwzohrMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3nAitx5 3Sdmlp61atbwlGusuqOOnBvQxzfXVJIR7n+NCFHS3FNxUOTVXrDG8g71q1+NQnK+ HpSSGMvmwSQMT0aXB0ehjdbnofvrztItjI/inLLOsDXhMIk/IAGawl8U85fk/hON A4ixutjLZI3n3KE/OIsIjJhqQWP2qSJgpLg219NnuNoGIPNnnRSZsgiAmOHUYBYS utN6YrgfzksE+rzifCcl5Ndq3tp1tkdHIVlzcwWkvRAjOm0/qeJNu2i4ok7AZMPE WuYXtVvbdcYXWvfc4cmkVk2TA1i0bcJJI/2gIcRam+ufAMy87WYBAOE/iJYIdhjG VawFpY1pAsWSvw== -----END CERTIFICATE-----Generated at Tue May 12 21:37:28 2026 by rpki-client