$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: KiFuXEv4Yr5pNCg3LsxmBn3MXExmyMFsVvNoYhp82RM= Subject key identifier: 0D:58:64:E4:09:E9:0E:1D:AF:5F:45:6F:55:8E:9B:6D:02:77:B8:95 Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019E1F7EE2EC97CE299B32DF6DCD08D025FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 17CB Signing time: Wed 13 May 2026 04:01:09 +0000 Manifest this update: Wed 13 May 2026 04:01:09 +0000 Manifest next update: Thu 14 May 2026 04:01:09 +0000 Files and hashes: 1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=) 2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=) 3: hAy8VtAwci_v3cGOO19dEdefvMA.roa (hash: g1nY4ONoPi4/cXPph4hFcjnMaUzSfWsZYHkL3fHcL7Y=) 4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=) 5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=) 6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=) 7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: n0wEB0Rcpa1emW571BnXO5UJKD5UbzOQ+2aatsWUKAM=) 8: suUbWGeNBw5ePtioMY9U94S7lSw.roa (hash: M06oDkMYsepjO/1pxSEeQ8cUvDUMgzU9aQtQ7cy78x8=) 9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=) 10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:7e:e2:ec:97:ce:29:9b:32:df:6d:cd:08:d0:25:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: May 13 04:01:09 2026 GMT Not After : May 14 04:01:09 2026 GMT Subject: CN=0d5864e409e90e1daf5f456f558e9b6d0277b895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:fc:ce:01:81:8c:a6:5a:8f:75:ad:b3:4f: bf:79:65:3e:60:ea:70:91:48:46:a5:6d:3d:24:ef: 2c:e3:22:b8:ae:d9:6c:87:25:3e:c7:63:18:80:f5: 74:95:25:6d:f3:2e:60:26:8e:75:59:62:55:6b:c9: c5:44:85:36:48:a2:f8:40:67:0c:7a:43:42:48:ba: 6d:f6:af:c2:4b:a7:1e:79:21:18:ec:89:46:c3:a4: a0:fb:d5:63:d2:c2:d4:ca:38:31:a7:75:52:0d:12: 27:67:c1:ca:01:85:5a:d1:b2:62:d5:0e:7e:69:36: 81:f3:69:d2:29:fc:17:5d:cc:48:ae:92:e1:b9:07: 47:f3:37:86:3f:d8:3b:2d:15:35:90:89:05:3e:f6: b4:9c:3e:a3:b0:10:5d:2d:7c:8f:4d:d1:f6:60:19: 7e:7f:ab:c2:9d:30:7b:78:bb:6a:51:06:3d:f5:6b: 41:89:49:52:11:c6:f6:e1:db:cf:81:8c:15:41:70: fe:e5:75:57:7a:ed:21:1c:b4:61:0c:6f:2f:2a:d9: 75:90:d7:cf:67:23:50:eb:00:22:a2:f2:61:43:da: 7f:60:e4:0b:3d:06:42:a7:64:c7:08:7c:00:e5:e1: f2:e6:54:f0:d5:ad:50:fe:bd:8a:23:9c:30:65:bd: f3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:58:64:E4:09:E9:0E:1D:AF:5F:45:6F:55:8E:9B:6D:02:77:B8:95 X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:4b:27:05:0c:33:e3:c1:43:0a:b5:3c:7e:c3:ac:e4:10:86: 67:00:39:7c:d5:db:8e:78:c6:5f:68:a2:70:69:c5:3d:a2:88: c9:45:5d:bb:09:91:36:17:08:36:ad:1c:90:5c:9f:ba:2a:b5: 22:fc:99:2e:79:d7:af:67:e5:67:4b:6f:4e:19:5b:13:26:82: 82:e2:ae:0b:f8:e6:e9:e0:3a:73:8f:a2:ac:02:4b:3f:cf:33: c0:6e:01:71:8d:9c:d3:de:be:52:20:12:38:1a:1f:7d:a1:3b: fa:2b:0e:eb:47:8c:41:88:73:b6:79:41:8e:a1:1d:70:af:df: cd:5f:e2:1f:21:71:61:0b:54:90:8f:ad:91:aa:d6:6d:8c:11: a4:17:fb:f4:95:1d:ed:f5:f3:07:f9:6e:f8:c5:7f:3b:ea:c1: 5a:0b:72:b2:b1:d7:ff:cd:29:1d:a8:23:bb:71:a7:ee:b7:e1: 55:b7:a6:44:7c:2e:da:9d:28:a0:df:78:58:3c:69:03:68:a3: 59:84:67:21:3a:4c:9f:06:61:17:ff:08:1f:65:4d:9c:af:ee: c6:6c:2a:d0:49:c7:d2:62:25:03:65:53:f7:6c:cd:d7:c0:48: 97:51:9d:85:59:fa:30:89:0a:71:39:57:23:83:90:19:00:e0: fb:4d:d6:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ffuLsl84pmzLfbc0I0CX9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYwNTEzMDQwMTA5WhcNMjYwNTE0MDQwMTA5WjAzMTEwLwYDVQQD EygwZDU4NjRlNDA5ZTkwZTFkYWY1ZjQ1NmY1NThlOWI2ZDAyNzdiODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOD8zgGBjKZaj3Wts0+/eWU+YOpw kUhGpW09JO8s4yK4rtlshyU+x2MYgPV0lSVt8y5gJo51WWJVa8nFRIU2SKL4QGcM ekNCSLpt9q/CS6ceeSEY7IlGw6Sg+9Vj0sLUyjgxp3VSDRInZ8HKAYVa0bJi1Q5+ aTaB82nSKfwXXcxIrpLhuQdH8zeGP9g7LRU1kIkFPva0nD6jsBBdLXyPTdH2YBl+ f6vCnTB7eLtqUQY99WtBiUlSEcb24dvPgYwVQXD+5XVXeu0hHLRhDG8vKtl1kNfP ZyNQ6wAiovJhQ9p/YOQLPQZCp2THCHwA5eHy5lTw1a1Q/r2KI5wwZb3z8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1YZOQJ6Q4dr19Fb1WOm20Cd7iVMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuksnBQwz 48FDCrU8fsOs5BCGZwA5fNXbjnjGX2iicGnFPaKIyUVduwmRNhcINq0ckFyfuiq1 IvyZLnnXr2flZ0tvThlbEyaCguKuC/jm6eA6c4+irAJLP88zwG4BcY2c096+UiAS OBoffaE7+isO60eMQYhztnlBjqEdcK/fzV/iHyFxYQtUkI+tkarWbYwRpBf79JUd 7fXzB/lu+MV/O+rBWgtysrHX/80pHagju3Gn7rfhVbemRHwu2p0ooN94WDxpA2ij WYRnITpMnwZhF/8IH2VNnK/uxmwq0EnH0mIlA2VT92zN18BIl1GdhVn6MIkKcTlX I4OQGQDg+03WlA== -----END CERTIFICATE-----Generated at Wed May 13 10:03:31 2026 by rpki-client