$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: 74de7dlXqFcxoLdy9ZbRBcmLIToM8SsN72rYoqOCXyY= Subject key identifier: 9E:31:F2:7E:7D:21:B4:24:F7:87:B6:D0:FA:DB:33:16:70:F9:C2:76 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019E2100051E01654F537F05C36918E7ACD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 1945 Signing time: Wed 13 May 2026 11:01:49 +0000 Manifest this update: Wed 13 May 2026 11:01:49 +0000 Manifest next update: Thu 14 May 2026 11:01:49 +0000 Files and hashes: 1: 17xPyZlJEOUx5zEX8ZO8erx4H74.roa (hash: o78ZIjezoB+5hFnpSV2hhbyqsGtrTAReQHzLkPsSMs8=) 2: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (hash: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ=) 3: 2RHKEFUbX-V0Mf6y31Iq5dGlemY.roa (hash: 22aNA0RqHM/lo1ZuXKI24lPSyNZYgt9FvnHMilKuHJY=) 4: 2q-y1nHjenu9twtcEVm8uPj-ddE.roa (hash: kKq4uoPjr9yzILuLqmWkg6QD55vf8pDPM+f+YLfRhpg=) 5: C58HKVenwwmbh1jkwoeqIUWdglo.roa (hash: dbM/VaOE1y6PqBg/KjdbXvgt9ovsuviuBnEC3nra0Jo=) 6: GEKxvGic2KzXVJsj3dcok72CGco.roa (hash: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw=) 7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: kQCXTvycJQ+2k8j4iyCmPlgu4ihgtmvZXza7JN0Tc1Q=) 8: TN_g4sfmmPrHK_oZ30J7gNWtpIY.roa (hash: m5dgi6YlmiEMbhGuQK1tT2ie/bg//bcOLn6xqpAH6Zs=) 9: U_DCEtPw_hUMwrzj8r6wUIXBPig.roa (hash: zOV0/cSp312KHscfdmAUHtLOyMQW+m7fH0EzuAciKbU=) 10: WPjlp9q2_irNOFHbvH1KxHiPhtg.roa (hash: nGNubH07FwuuTBRkZu6sDa2SbPeua6Dt0ORJDlPOSMk=) 11: XVl9Jn76mWQ8ncaJ_wDuumCSFsA.roa (hash: Hs6XsuXHPXeVRFbGDUcPFLc6y5U4gwmlkZ/AR7/NeXE=) 12: XuBKY0oAARsXVXjq7u8JeDvNOcU.roa (hash: vlWZjrm0v836+Ch01+GkfQiIKmv/HzSaOumEGtSwczo=) 13: js8xc1HEU1XUI0sBZfF0bl5Ntsc.roa (hash: AdO5qS0u+S/3mUbxDukdjf7Jfxyoy7D8xgFedRy81VA=) 14: k_MSpCKVnChWzSccoFJBjl40Vo8.roa (hash: VdSgjLWna9h9svrbMMSXJmkEe/+wqNq0RNqZ0DwPUZc=) 15: pWHrs5rw_KgbSRJAL6KONruKqFc.roa (hash: AB3huwEj/N+euzlEzjByisO3oP/M0v+P+iouNnZD7xs=) 16: unZltpWjHIJfFpLIwg4b58uUsuU.roa (hash: hb7AVSL7Cg4MYbwSNaPjN4NWBI4LlWAD7QoGarhaIFE=) 17: xyAifHL4yJafsXbZXrkrgodDKkI.roa (hash: 5dlJ/03oKMrYHI2ijFPlXqVyiklmxqeJzGBSWajGiKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:21:00:05:1e:01:65:4f:53:7f:05:c3:69:18:e7:ac:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: May 13 11:01:49 2026 GMT Not After : May 14 11:01:49 2026 GMT Subject: CN=9e31f27e7d21b424f787b6d0fadb331670f9c276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:b2:6a:8c:02:63:04:9f:3c:a1:d6:f9:1b: fb:b6:a1:5a:5b:be:ef:4a:89:60:34:c2:18:fa:1b: 13:50:f4:81:9c:1a:1b:06:4a:31:e1:eb:7a:18:be: fd:0f:31:4d:23:d8:e1:c4:ab:b3:ff:de:fe:59:88: 4d:72:ce:c9:3d:b5:23:5d:f0:58:0d:63:38:86:f0: ef:16:d0:67:51:81:e2:76:0d:bb:94:24:b2:5b:7a: a4:98:26:48:f2:d5:21:42:ef:53:47:81:16:b5:f7: a2:5e:bd:f2:28:aa:e9:73:a1:bf:c2:0d:91:f5:e0: 9d:79:9f:35:16:22:34:83:4d:71:b7:26:cd:34:ee: 76:1c:c6:00:7b:60:8f:a5:53:d4:bd:6a:b5:43:68: 8f:d7:e5:ca:21:bb:d9:3f:7a:72:04:0d:cc:9a:33: 4e:a7:c6:d0:45:89:b1:13:cc:a5:ca:a7:ef:11:88: 24:eb:89:d3:58:21:ca:da:c5:60:30:b9:e3:cf:7a: 53:61:00:60:c1:94:52:56:37:84:a2:8a:d5:a1:f7: e3:8c:0e:6b:43:bb:fa:fc:f5:2a:84:1f:45:93:2e: e8:1f:17:63:13:12:6c:be:d7:93:56:05:12:20:0d: d4:f7:84:7d:14:da:95:c9:51:89:33:b8:a9:3c:72: eb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:31:F2:7E:7D:21:B4:24:F7:87:B6:D0:FA:DB:33:16:70:F9:C2:76 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a6:75:c1:5f:80:27:7f:03:35:81:72:5c:bf:80:9a:73:69: 4f:02:df:be:e9:0e:a6:b7:87:14:bc:71:85:59:ec:39:9f:72: ce:99:3f:15:64:22:fa:42:90:51:6a:2d:ff:0e:92:19:54:50: 51:0d:72:51:a9:e0:9e:e0:69:a8:c0:ee:c3:a0:71:61:3c:2c: 25:33:fa:bf:ed:ed:ad:70:94:1a:10:a8:8d:0e:32:13:1a:c4: 50:08:71:c7:a3:b4:34:e5:c9:37:f0:e2:d3:16:f0:65:e2:ea: 73:3b:5d:05:24:76:c2:ca:b3:7e:ba:ed:31:39:72:2c:73:97: 38:1d:ab:47:07:09:7b:f3:b8:39:00:68:db:48:fb:2b:ce:99: fd:c7:65:09:dd:ec:c8:08:3d:dd:eb:69:e0:8f:65:f1:5a:31: e9:91:5f:43:d6:e7:b9:37:95:96:06:1f:39:8b:cd:14:8a:6b: 89:40:f5:84:07:5c:bc:de:1f:1a:ed:33:b2:7a:3a:99:47:1e: fc:c3:b8:3a:ec:6e:35:a9:08:c9:87:06:da:1b:7a:d8:13:7e: 08:e8:e2:b8:a7:66:10:a3:1e:1a:92:ff:c2:f4:05:97:18:c5: 84:8d:8c:e2:d4:fe:22:6b:aa:0c:4a:82:8e:eb:fa:c0:61:91: 4b:c2:a2:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4hAAUeAWVPU38Fw2kY56zVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwNTEzMTEwMTQ5WhcNMjYwNTE0MTEwMTQ5WjAzMTEwLwYDVQQD Eyg5ZTMxZjI3ZTdkMjFiNDI0Zjc4N2I2ZDBmYWRiMzMxNjcwZjljMjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIKyaowCYwSfPKHW+Rv7tqFaW77v SolgNMIY+hsTUPSBnBobBkox4et6GL79DzFNI9jhxKuz/97+WYhNcs7JPbUjXfBY DWM4hvDvFtBnUYHidg27lCSyW3qkmCZI8tUhQu9TR4EWtfeiXr3yKKrpc6G/wg2R 9eCdeZ81FiI0g01xtybNNO52HMYAe2CPpVPUvWq1Q2iP1+XKIbvZP3pyBA3MmjNO p8bQRYmxE8ylyqfvEYgk64nTWCHK2sVgMLnjz3pTYQBgwZRSVjeEoorVoffjjA5r Q7v6/PUqhB9Fky7oHxdjExJsvteTVgUSIA3U94R9FNqVyVGJM7ipPHLrfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4x8n59IbQk94e20PrbMxZw+cJ2MB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6Z1wV+A J38DNYFyXL+AmnNpTwLfvukOpreHFLxxhVnsOZ9yzpk/FWQi+kKQUWot/w6SGVRQ UQ1yUangnuBpqMDuw6BxYTwsJTP6v+3trXCUGhCojQ4yExrEUAhxx6O0NOXJN/Di 0xbwZeLqcztdBSR2wsqzfrrtMTlyLHOXOB2rRwcJe/O4OQBo20j7K86Z/cdlCd3s yAg93etp4I9l8Vox6ZFfQ9bnuTeVlgYfOYvNFIpriUD1hAdcvN4fGu0zsno6mUce /MO4OuxuNakIyYcG2ht62BN+COjiuKdmEKMeGpL/wvQFlxjFhI2M4tT+ImuqDEqC juv6wGGRS8KilQ== -----END CERTIFICATE-----Generated at Wed May 13 14:33:07 2026 by rpki-client