$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: 0lApTUqwAKafPwooEF4lRHw88fceV9u/DyjN7uYBrUk= Subject key identifier: 83:FD:65:A6:1D:04:6F:D1:07:11:34:72:F1:61:CC:4C:90:5C:8C:D9 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019E1EA31EAE5E6C65427B187A03C86A62F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0CB8 Signing time: Wed 13 May 2026 00:01:07 +0000 Manifest this update: Wed 13 May 2026 00:01:07 +0000 Manifest next update: Thu 14 May 2026 00:01:07 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: QP9CNlQFuVB9wS0BW21smKX3lBU.roa (hash: dwNtwT/3EY1R/q2zrzRe6Xma12Bkc4BEFlUrU3pbm+Q=) 9: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: KqJgoJ0F9RzhGys6SSbZodoUQhJ5gDMookug67gXYqY=) 10: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: fzxoNfiPUD7xeSSlqYVskKUZ9gQ.roa (hash: XjcQQ4lJaJtOIDs0K1l+gH5MfloiUUpBeoZaPEDBX6c=) 14: imTf8No1ZINbCYJNVjvMbyKdYDc.roa (hash: v7b/CtSyIh4Qh/63ZcyMa4HLHKrxYzw4yW2zbhrt2aQ=) 15: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 16: jdhRRSqw1KV-OBkZuUAJ-tCWDik.roa (hash: PZnlHT69L4VcU/X0HEwE+Wn3yCWoZ+g03Z4fHifOKPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a3:1e:ae:5e:6c:65:42:7b:18:7a:03:c8:6a:62:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: May 13 00:01:07 2026 GMT Not After : May 14 00:01:07 2026 GMT Subject: CN=83fd65a61d046fd107113472f161cc4c905c8cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:aa:18:43:0c:ad:1d:09:52:9e:88:3b:8f:17: a3:9e:6b:94:f8:6c:33:34:c2:14:04:e2:dd:35:60: da:9b:12:d2:d2:e6:51:34:74:4c:31:c6:af:8b:d3: 80:14:ca:99:ff:70:36:f7:59:0f:e9:ba:4b:3d:2e: cd:ea:ec:04:ad:0b:b1:0b:5e:33:f8:9c:e6:78:cc: f0:d5:75:62:10:87:c8:d8:df:30:df:21:ee:0e:79: ea:52:bd:38:5e:95:d0:4b:3d:35:81:01:0d:5e:48: 37:b7:49:d0:d9:f8:fc:40:84:2b:50:1e:9e:7c:74: bf:89:ea:5c:ff:a4:9c:df:0d:ac:81:89:42:83:d6: 49:47:19:72:72:eb:43:1a:79:77:40:12:32:a1:a1: ff:c0:d0:7c:e9:1e:ac:29:dc:22:a6:47:c7:b2:99: fc:8b:c3:5e:23:01:93:59:28:0d:a8:37:29:3e:45: ea:36:02:32:28:d6:aa:8a:61:31:61:c1:58:00:85: 35:b8:01:0e:2f:4c:ae:48:9e:78:75:d3:ba:5e:a9: d4:6d:f8:ec:e8:9a:ea:99:fd:f7:1c:23:7b:56:12: 31:39:46:7a:58:ac:db:21:cc:0a:d0:a3:eb:42:54: 43:0b:94:bc:a9:38:f8:35:c1:09:84:68:f3:77:62: 57:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FD:65:A6:1D:04:6F:D1:07:11:34:72:F1:61:CC:4C:90:5C:8C:D9 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:85:91:7f:f8:ee:2e:52:4e:c5:9d:e2:59:00:9f:6e:09:58: ec:bf:7c:c8:b5:63:3d:a5:1a:dd:25:0c:2c:cf:ee:ab:5f:a5: 93:43:5d:9c:03:d9:e4:69:93:16:61:f5:75:c4:33:60:8a:06: 94:db:e2:bd:9b:af:a8:26:27:1c:28:2e:a2:ee:39:48:77:55: a9:98:58:34:98:bc:ed:2b:0f:5c:21:c4:3f:6e:9e:78:5b:8f: ca:df:80:32:c6:f8:e8:39:dc:7a:b1:00:f1:9e:d2:91:0e:eb: bf:5f:dd:b6:26:4e:c0:80:79:b5:b6:a5:be:9c:25:f0:0a:7a: 46:01:e0:83:bf:d8:77:d8:88:04:c2:cb:78:7e:ee:32:b2:9b: 5d:0a:f2:d5:0a:fb:8b:bb:67:29:f5:ab:32:66:be:8f:4b:88: 38:b4:44:97:92:be:20:69:c9:f6:7a:e3:31:89:75:69:b7:57: 87:a4:b4:1e:65:73:c5:37:04:7c:5a:ba:62:7f:e4:7c:ad:43: 6f:ff:fd:e3:47:b3:f0:de:88:0c:2b:d5:7c:bc:e5:a2:60:9d: 23:9c:25:20:32:72:e2:eb:2a:cb:e4:ef:7b:fc:f3:7c:81:bb: 34:fd:d8:d3:fa:02:0a:59:76:03:50:e5:36:ab:2a:1a:d0:4b: 7a:25:3f:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eox6uXmxlQnsYegPIamL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwNTEzMDAwMTA3WhcNMjYwNTE0MDAwMTA3WjAzMTEwLwYDVQQD Eyg4M2ZkNjVhNjFkMDQ2ZmQxMDcxMTM0NzJmMTYxY2M0YzkwNWM4Y2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+6oYQwytHQlSnog7jxejnmuU+Gwz NMIUBOLdNWDamxLS0uZRNHRMMcavi9OAFMqZ/3A291kP6bpLPS7N6uwErQuxC14z +JzmeMzw1XViEIfI2N8w3yHuDnnqUr04XpXQSz01gQENXkg3t0nQ2fj8QIQrUB6e fHS/iepc/6Sc3w2sgYlCg9ZJRxlycutDGnl3QBIyoaH/wNB86R6sKdwipkfHspn8 i8NeIwGTWSgNqDcpPkXqNgIyKNaqimExYcFYAIU1uAEOL0yuSJ54ddO6XqnUbfjs 6Jrqmf33HCN7VhIxOUZ6WKzbIcwK0KPrQlRDC5S8qTj4NcEJhGjzd2JXswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIP9ZaYdBG/RBxE0cvFhzEyQXIzZMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4WRf/ju LlJOxZ3iWQCfbglY7L98yLVjPaUa3SUMLM/uq1+lk0NdnAPZ5GmTFmH1dcQzYIoG lNvivZuvqCYnHCguou45SHdVqZhYNJi87SsPXCHEP26eeFuPyt+AMsb46DncerEA 8Z7SkQ7rv1/dtiZOwIB5tbalvpwl8Ap6RgHgg7/Yd9iIBMLLeH7uMrKbXQry1Qr7 i7tnKfWrMma+j0uIOLREl5K+IGnJ9nrjMYl1abdXh6S0HmVzxTcEfFq6Yn/kfK1D b//940ez8N6IDCvVfLzlomCdI5wlIDJy4usqy+Tve/zzfIG7NP3Y0/oCCll2A1Dl NqsqGtBLeiU/dA== -----END CERTIFICATE-----Generated at Wed May 13 03:54:23 2026 by rpki-client