$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: LBQB0EJtSwOinOopTf9QvG35WQAqkjkYgY7EMNA5Rg8= Subject key identifier: EC:3C:0A:D6:1C:EE:9E:6C:FD:57:48:06:1E:06:0E:1B:B0:21:50:7B Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019E1BD949934FFE78509FCBAAC80F62BB54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: 02E7 Signing time: Tue 12 May 2026 11:01:25 +0000 Manifest this update: Tue 12 May 2026 11:01:25 +0000 Manifest next update: Wed 13 May 2026 11:01:25 +0000 Files and hashes: 1: 1E8AiSnlYGPXbOfAXqZEBvdti0Q.roa (hash: zg4/KmKPBBnWqoo6XqmqqOeEWKX38ZMsmowwS7V3CsY=) 2: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: jvFUcHGm2VouZs9ItnCj21cUxUGzP629XEb57QjXsOk=) 3: AvhSVHbyFsNJfn-87fA7oHcica0.roa (hash: JjNvwI8D/DTZ5Kz60xSRCIvB7TZ/neKfvnL3MZ2ZTSU=) 4: GG4z91MdDpV2DBV_RNPbWkwIoJw.roa (hash: Eqt3BxDIeVAQpNBJJYqmZDf6uBVXq8wo47BPWDDy060=) 5: IDaB4QRCh7bNLOMPnckPg5zcOzM.roa (hash: xXBnKlpTinvrp0RhxiHrGrTuEu3qhcErapcrqhwSfb0=) 6: KF0QvzJGblVPKQsNf06hZ3SB34U.roa (hash: beoVL4CcUiF/X+RqTuUlwhqclMvthXIihpSTECe+GcU=) 7: L6Ra25CjKp_mEEvb6fnLzB9z48Y.roa (hash: gAYyNL8en1bwIuDNmy096pQ8EjEcbk/vtZcx5FewlIM=) 8: ZmA7YXk1EXie8V8IljOsrQAeVMc.roa (hash: KfN3YtXoCnYtbOhys/L3JbGSTPU3Jpxa1rNO5rVZaaM=) 9: _OsxCQ1e4_ibO69prTBr0y__bJ0.roa (hash: jyzI1ocjI/t6Rr16QFOtQXXWn6pUug9g1eA1+Oe0GVs=) 10: adb_NQqDE2btKs5IvofM8ruzaqs.roa (hash: mZd2SOSViUwqdouzHTAAV8V8TgiRqrWPvi7A8y6abkk=) 11: hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa (hash: AabyFao1094cA8E0S9PcCwFVPGA7d1c7Y+W9MYMaIkQ=) 12: iCAoTJ6_FbKXxlsZVDeLJRceNFg.roa (hash: bMQFyA/DfiURPI0ApEpZ777S9eYeQRmm3uEDLrIS7DM=) 13: iNlyy6fzG-pZXJKLvpBU9XAYkVo.roa (hash: S8q8QiAGEz7MV6+djxO4YwhYaC2j/vE52wvZ9iUEIgY=) 14: rTCIQuB8b5-23Fe16EFzxOkFAo0.roa (hash: 85dTReYxmMkhMzb7ZnE2kpCceaZUsUjOdsiOl8VJLKg=) 15: vTVExLKhWEraxLaHbYbF-5rPbAY.roa (hash: OkUaeri0ORy5KS5pNVCt7QDJ9Jtk+GKFKqYmDLuRx/Q=) 16: wMIGg_895xsUud_tObIdM45E8XQ.roa (hash: LP5aF2JP0E54B5AqB2G8lcqC6PTsBN6TaHhp9g0P2hY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1b:d9:49:93:4f:fe:78:50:9f:cb:aa:c8:0f:62:bb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: May 12 11:01:25 2026 GMT Not After : May 13 11:01:25 2026 GMT Subject: CN=ec3c0ad61cee9e6cfd5748061e060e1bb021507b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:11:7b:dc:e8:f0:a4:d4:bd:ff:96:35:d3: b5:34:cc:4c:d8:90:ff:3a:f9:bb:8a:f0:15:3b:e9: 4a:da:7e:a5:4d:cf:c1:27:57:25:ff:96:37:50:b1: ad:fe:96:9a:26:ed:03:14:bb:f5:8f:94:1e:97:ae: 4b:25:92:9c:b6:84:de:51:c8:a3:41:c7:20:c8:89: c4:a6:42:1a:b2:e8:56:51:ac:78:e3:1c:6f:0e:df: 37:20:28:54:2e:34:50:7c:08:b8:96:72:4c:01:e2: de:e0:9e:6c:a4:79:6c:9d:ee:fd:8e:c6:90:83:f0: 29:90:4d:65:a0:b9:5b:ef:02:65:c0:2a:80:0e:2f: 07:9c:bb:bf:d8:cf:47:ec:94:75:21:c6:45:32:e1: a9:38:c6:e6:20:04:55:15:0b:59:fe:19:a1:5c:3d: 6c:f5:32:4c:74:7b:84:4d:09:c2:83:49:7a:51:98: ae:e8:1a:47:fd:ba:05:53:04:78:6b:97:d5:c8:58: a0:87:de:10:1d:45:99:e2:3f:8b:12:e6:9a:d4:81: cc:38:5b:14:91:f0:b8:49:0d:48:d2:a2:c3:54:dc: 57:d1:14:96:b4:e9:df:19:b9:5a:f1:48:38:f3:11: f5:c2:dc:15:d2:7c:39:e7:f1:7c:d9:9d:a8:fc:8d: c9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3C:0A:D6:1C:EE:9E:6C:FD:57:48:06:1E:06:0E:1B:B0:21:50:7B X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c3:8d:59:6b:d1:84:ca:97:89:06:5f:6e:95:8f:4e:a7:c0: ca:de:1a:91:84:55:e7:f7:7e:d0:86:9a:44:89:4a:30:3f:01: 57:4e:e0:10:87:b1:c7:ab:7f:98:36:5e:66:dc:02:68:3b:74: da:08:68:30:1d:d7:1e:94:31:8e:90:6a:d4:2a:7f:72:43:ae: 03:76:61:d7:58:d7:8e:02:e5:4f:2a:90:11:f0:1d:9e:6c:b5: 31:7c:71:73:01:b8:5b:e6:92:12:cd:69:cc:08:75:46:0d:da: 77:ed:81:75:33:cb:5f:9f:20:79:20:ef:22:1a:4e:8e:c6:b8: 0f:59:3d:30:62:fb:66:a2:d6:93:5d:16:eb:f4:a0:0e:7a:ae: 8d:04:c2:04:b9:19:ba:de:41:38:23:21:64:8f:23:21:eb:0f: b4:a1:39:a1:eb:b7:4a:43:18:e3:0d:6b:d7:86:06:a1:25:84: 5a:11:1b:e1:2d:f5:53:c1:51:9b:22:4f:8e:49:b2:20:8c:53: c4:22:51:48:c9:11:16:cd:12:3e:5d:13:64:6a:2a:9e:0b:50: 5a:93:cc:e7:14:4d:ab:ba:b8:04:fa:5f:0b:b9:4c:35:f2:27: ab:94:38:f4:68:5c:ad:6f:67:1b:75:e3:0d:1f:a4:4c:19:b3: 2e:23:d3:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4b2UmTT/54UJ/LqsgPYrtUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwNTEyMTEwMTI1WhcNMjYwNTEzMTEwMTI1WjAzMTEwLwYDVQQD EyhlYzNjMGFkNjFjZWU5ZTZjZmQ1NzQ4MDYxZTA2MGUxYmIwMjE1MDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5URe9zo8KTUvf+WNdO1NMxM2JD/ Ovm7ivAVO+lK2n6lTc/BJ1cl/5Y3ULGt/paaJu0DFLv1j5Qel65LJZKctoTeUcij QccgyInEpkIasuhWUax44xxvDt83IChULjRQfAi4lnJMAeLe4J5spHlsne79jsaQ g/ApkE1loLlb7wJlwCqADi8HnLu/2M9H7JR1IcZFMuGpOMbmIARVFQtZ/hmhXD1s 9TJMdHuETQnCg0l6UZiu6BpH/boFUwR4a5fVyFigh94QHUWZ4j+LEuaa1IHMOFsU kfC4SQ1I0qLDVNxX0RSWtOnfGbla8Ug48xH1wtwV0nw55/F82Z2o/I3J+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw8CtYc7p5s/VdIBh4GDhuwIVB7MB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8ONWWvR hMqXiQZfbpWPTqfAyt4akYRV5/d+0IaaRIlKMD8BV07gEIexx6t/mDZeZtwCaDt0 2ghoMB3XHpQxjpBq1Cp/ckOuA3Zh11jXjgLlTyqQEfAdnmy1MXxxcwG4W+aSEs1p zAh1Rg3ad+2BdTPLX58geSDvIhpOjsa4D1k9MGL7ZqLWk10W6/SgDnqujQTCBLkZ ut5BOCMhZI8jIesPtKE5oeu3SkMY4w1r14YGoSWEWhEb4S31U8FRmyJPjkmyIIxT xCJRSMkRFs0SPl0TZGoqngtQWpPM5xRNq7q4BPpfC7lMNfInq5Q49GhcrW9nG3Xj DR+kTBmzLiPT4A== -----END CERTIFICATE-----Generated at Tue May 12 21:14:20 2026 by rpki-client