$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: 88y8f9b91Kxl8hg9N0sQ2g4LpaLxmEZVZBb18mdUQ/Q= Subject key identifier: 14:44:CD:89:97:9B:7D:3C:24:0E:1D:66:08:F6:98:6D:AE:22:42:D5 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019E1D5970B57CBB90639E86BCD550BF19AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 17CB Signing time: Tue 12 May 2026 18:01:01 +0000 Manifest this update: Tue 12 May 2026 18:01:01 +0000 Manifest next update: Wed 13 May 2026 18:01:01 +0000 Files and hashes: 1: 8ZTbVFN88ElJOvnxpynWkBywvcU.roa (hash: Zi7aMmYsFeMT6y4m/OMRvzAw9FlwVPNAsEeEWMyssQs=) 2: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (hash: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4=) 3: D4HmthbydYoqExoa56VFIbe7J5A.roa (hash: 1gmVpoixHN/Zn+8HJ6YdrukA3JeRxcEeBWZ/2aGh+ps=) 4: DKZJyriLpkX0P03xQILHD2FwZEo.roa (hash: x6vx2AQsWgf7sMGXLXxiRwrb7PArAVgKRPBlJd4ah10=) 5: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: idHHTcr8MhIem+LaVkfYVSCg3P1ZQCIhIznWi+TYNkE=) 6: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (hash: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ=) 7: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (hash: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4=) 8: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (hash: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A=) 9: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (hash: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI=) 10: S3K9bo4j9NjF6L9mhwIsz-LYyHg.roa (hash: FX7C0FNczXeRPZms4zyJ1OukTZNK4zd0GhG7vBTsBvg=) 11: UWgtqXah3liJx-awsYUK3XIS54c.roa (hash: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs=) 12: _d7ohj2Ako_tiSFSE9-jnGs0uoI.roa (hash: mf32LDbJ2Su5F5H62P0/F/PId5oq7GFGgkD8WKRwmPw=) 13: f5svUnEK1n30wRVLtixbJDS7pZM.roa (hash: sILbepz7GhK0jGMQ48sIN5LBYx9eYZB9voFGWkXvx60=) 14: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (hash: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY=) 15: mcS4SdpuWVbabfdpCB_tOwct_TA.roa (hash: hcfOoUJHvls1DL90VCIcUIUdeQTL2YjVgbYPY6TdJAA=) 16: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (hash: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg=) 17: tDoaGy6SLh3swARR-izxiYVQMmU.roa (hash: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:70:b5:7c:bb:90:63:9e:86:bc:d5:50:bf:19:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: May 12 18:01:01 2026 GMT Not After : May 13 18:01:01 2026 GMT Subject: CN=1444cd89979b7d3c240e1d6608f6986dae2242d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:14:5a:77:3b:00:20:dc:9b:da:81:7e:e1:86: ef:a9:18:c0:41:c1:8f:cd:95:f7:e2:a6:b4:98:b0: ba:ad:60:e4:23:0c:b2:67:61:86:df:95:60:f4:e7: 78:1a:f7:38:25:d6:e7:57:71:d6:12:51:cc:80:64: f2:2f:1e:13:a5:b4:c5:9f:64:4d:48:95:f1:1f:82: 2a:5e:51:67:a4:e2:7f:a9:eb:e9:fc:7d:f4:50:b0: 79:64:db:45:11:f8:9f:a1:d5:47:d5:1b:73:d4:9e: 26:4e:a9:87:05:1c:50:7d:e1:92:1f:a7:54:33:12: 21:37:8d:69:08:4c:51:71:1f:4a:de:a8:8b:5e:0e: ff:80:31:ee:d0:4c:ff:b3:6b:a5:f1:91:d6:d3:8f: 82:8b:34:5e:ef:61:a7:52:06:9c:49:de:ff:20:86: c8:82:a2:92:9b:df:8d:59:cb:f2:13:8d:62:59:10: 97:a2:de:d4:1c:d5:10:63:55:13:de:97:5c:19:6f: 7b:b9:fc:8b:0c:58:d1:84:1c:b0:c3:68:7d:9e:4e: 74:29:be:0a:66:ba:61:70:a8:3d:a4:85:6f:ff:b1: b4:12:d7:28:90:f4:b8:fc:f4:0c:01:46:c2:6a:a0: 06:ba:c5:07:fa:48:e2:39:4b:b0:42:0b:e8:f8:30: 28:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:44:CD:89:97:9B:7D:3C:24:0E:1D:66:08:F6:98:6D:AE:22:42:D5 X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:08:1b:98:3e:1c:0d:6f:77:27:f4:6d:9f:c0:f0:a9:44:fc: 92:ed:7a:2e:e1:2a:76:84:7b:64:3d:2d:9c:4b:b6:88:89:4a: 90:27:21:d0:8b:9c:64:9d:02:94:b4:f5:59:56:97:74:89:ce: d1:ad:3b:73:80:0e:52:47:ea:30:23:1f:6b:1e:24:1b:23:30: 37:d4:09:d8:e8:b9:53:97:a4:73:af:38:41:38:af:cd:0d:45: 35:07:3b:33:54:5a:06:f4:93:94:1c:db:97:37:fd:51:70:01: 91:b5:51:77:d6:bb:7c:e9:1b:58:04:66:b4:fb:1a:36:c9:36: 8e:fb:25:7f:75:aa:fd:3d:71:1a:4f:ec:99:92:d7:0c:73:c1: c9:3c:b1:43:ff:ec:55:ab:25:79:c3:78:fd:e0:d7:8f:3c:f1: a5:e9:6a:39:61:4d:7f:44:8b:9e:f0:cc:62:42:52:3b:5c:90: 56:d9:94:bb:82:79:e7:17:32:e3:75:33:b0:82:dc:25:06:f8: 55:2a:66:c5:6b:dc:14:e3:04:82:7b:f2:c8:d5:29:ee:16:5b: 3d:09:0a:ec:8d:db:42:89:0f:03:c2:9a:bc:54:75:72:0c:99: 8f:e4:22:91:7c:85:df:f8:65:a7:97:eb:61:42:4c:43:84:0e: 62:6d:c5:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWXC1fLuQY56GvNVQvxmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwNTEyMTgwMTAxWhcNMjYwNTEzMTgwMTAxWjAzMTEwLwYDVQQD EygxNDQ0Y2Q4OTk3OWI3ZDNjMjQwZTFkNjYwOGY2OTg2ZGFlMjI0MmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BRadzsAINyb2oF+4YbvqRjAQcGP zZX34qa0mLC6rWDkIwyyZ2GG35Vg9Od4Gvc4JdbnV3HWElHMgGTyLx4TpbTFn2RN SJXxH4IqXlFnpOJ/qevp/H30ULB5ZNtFEfifodVH1Rtz1J4mTqmHBRxQfeGSH6dU MxIhN41pCExRcR9K3qiLXg7/gDHu0Ez/s2ul8ZHW04+CizRe72GnUgacSd7/IIbI gqKSm9+NWcvyE41iWRCXot7UHNUQY1UT3pdcGW97ufyLDFjRhByww2h9nk50Kb4K ZrphcKg9pIVv/7G0EtcokPS4/PQMAUbCaqAGusUH+kjiOUuwQgvo+DAo0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBREzYmXm308JA4dZgj2mG2uIkLVMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoggbmD4c DW93J/Rtn8DwqUT8ku16LuEqdoR7ZD0tnEu2iIlKkCch0IucZJ0ClLT1WVaXdInO 0a07c4AOUkfqMCMfax4kGyMwN9QJ2Oi5U5ekc684QTivzQ1FNQc7M1RaBvSTlBzb lzf9UXABkbVRd9a7fOkbWARmtPsaNsk2jvslf3Wq/T1xGk/smZLXDHPByTyxQ//s VaslecN4/eDXjzzxpelqOWFNf0SLnvDMYkJSO1yQVtmUu4J55xcy43UzsILcJQb4 VSpmxWvcFOMEgnvyyNUp7hZbPQkK7I3bQokPA8KavFR1cgyZj+QikXyF3/hlp5fr YUJMQ4QOYm3FgQ== -----END CERTIFICATE-----Generated at Wed May 13 05:31:36 2026 by rpki-client